$ rpki-client -vvf rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft File: 822159966075595E4F7698AB063AA58F2CE6EFF6.mft (raw, json) Hash identifier: y87T+eqVSGHbUad+vpGOIdchAP+uWtmNjlFB6ZBV4DE= Subject key identifier: 2D:9B:50:EB:7C:8B:92:12:C3:85:27:D7:F2:59:61:02:C3:41:4F:FA Authority key identifier: 82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6 Certificate issuer: /CN=822159966075595E4F7698AB063AA58F2CE6EFF6 Certificate serial: 01C44549E3681EA99316A82C49A6338AC9BAD852 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:06:15 +0000 Manifest this update: Tue 02 Jun 2026 09:01:15 +0000 Manifest next update: Wed 03 Jun 2026 10:27:15 +0000 Files and hashes: 1: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: zEzn+j/oAs9F4CAyeoPk5AtHjPA5M7d6z/EhlMBHp5M=) 2: 822159966075595E4F7698AB063AA58F2CE6EFF6.crl (hash: 0vruQRX0mGwX6BOXtY33T6zHKhKRKJ/oZlUtpYT9ocI=) 3: 3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa (hash: g2Try/rsWXQysWh1yUTGg946lXBgye9fJxj3oMw4maU=) 4: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: SnoqKOK1pYK0zjgd+NMH20h/jENOjT9uDC1vLmu5Vt0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.crl rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c4:45:49:e3:68:1e:a9:93:16:a8:2c:49:a6:33:8a:c9:ba:d8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822159966075595E4F7698AB063AA58F2CE6EFF6 Validity Not Before: Jun 2 09:01:15 2026 GMT Not After : Jun 3 10:27:15 2026 GMT Subject: CN=2D9B50EB7C8B9212C38527D7F2596102C3414FFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:36:61:d0:10:21:83:0f:b8:0b:ea:ae:a0:e5: b7:79:29:08:98:7d:f5:d2:ab:7c:66:b2:04:1b:28: 72:39:34:83:82:d2:90:c1:12:5a:ba:6b:5d:1c:2f: bf:ca:ae:29:13:61:dd:3c:92:a7:a2:62:ea:4a:56: 1f:64:40:79:93:c2:33:5e:99:64:4c:f8:67:ea:d9: d0:54:68:89:57:35:8e:fc:7b:f8:e6:0a:8c:b9:a2: 36:3f:d7:a1:1c:10:ed:82:2f:87:14:10:b7:33:9b: 5c:5d:24:60:f6:71:ac:76:da:55:7f:b8:1e:d4:83: c0:9c:87:a4:63:0a:21:26:f4:0f:ea:7b:2c:76:a9: 1f:d1:a4:00:fd:23:1d:f1:f1:fb:88:d9:13:73:83: b1:22:cd:95:86:ac:30:50:d1:dd:1b:32:1e:56:3f: 37:8f:34:4f:9b:36:e3:0a:cd:57:26:57:b0:fc:99: 5a:21:30:4b:99:66:f6:3d:d1:a2:a3:e7:c5:1d:53: ab:64:db:f0:d2:b4:3c:a4:c6:44:7c:9d:60:84:d3: 32:d0:f8:65:be:6c:ce:64:28:2f:69:23:39:68:ea: c8:de:2b:d2:7e:6e:ef:8a:8b:bf:45:ea:d2:16:94: 2c:71:5f:4a:2b:77:67:8a:02:c5:09:de:d5:a9:09: d8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9B:50:EB:7C:8B:92:12:C3:85:27:D7:F2:59:61:02:C3:41:4F:FA X509v3 Authority Key Identifier: keyid:82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f5:5a:b5:05:f7:8e:29:00:e7:a2:af:dc:8a:cd:ba:85:6a: 7b:01:75:1c:7f:d4:34:62:37:e0:0c:a5:55:aa:39:a7:08:e8: cf:76:14:e4:e0:37:cb:86:6a:f5:5f:26:5b:a7:b2:0e:bc:22: 79:56:05:31:09:cf:87:ea:5c:f0:a0:0e:96:cf:d1:b4:16:02: 9c:85:4d:5b:d5:62:da:e0:0d:53:3b:b9:bd:86:94:25:87:4d: c1:3d:71:8a:10:62:08:06:bb:38:d8:bb:22:ae:1d:66:b1:98: 05:8c:8d:90:c4:06:60:de:c8:cb:a5:77:14:15:95:a7:0b:c3: ad:41:fa:25:73:c6:50:cb:bd:4c:da:96:a3:b2:ab:9d:1c:f2: 7e:c0:75:66:1d:2f:c1:14:60:0b:a2:a8:2c:35:3e:be:00:be: f7:5b:6d:13:aa:c4:7e:11:30:5d:34:c3:96:ba:91:81:71:4e: be:4a:ff:16:9e:d6:e5:82:c5:44:61:b8:d5:06:c6:80:71:c5: 2d:b5:a5:9a:41:8a:80:79:cf:d1:15:9a:75:98:2e:1d:0d:51: 95:cb:3b:64:38:01:85:5f:4d:6c:10:cc:1a:ab:c8:d8:ff:42: 7f:e3:64:54:f1:ec:28:55:47:85:96:4f:36:f8:40:37:db:8b: 75:75:81:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAcRFSeNoHqmTFqgsSaYzism62FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIyMTU5OTY2MDc1NTk1RTRGNzY5OEFCMDYzQUE1OEYy Q0U2RUZGNjAeFw0yNjA2MDIwOTAxMTVaFw0yNjA2MDMxMDI3MTVaMDMxMTAvBgNV BAMTKDJEOUI1MEVCN0M4QjkyMTJDMzg1MjdEN0YyNTk2MTAyQzM0MTRGRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxNmHQECGDD7gL6q6g5bd5KQiY ffXSq3xmsgQbKHI5NIOC0pDBElq6a10cL7/KrikTYd08kqeiYupKVh9kQHmTwjNe mWRM+Gfq2dBUaIlXNY78e/jmCoy5ojY/16EcEO2CL4cUELczm1xdJGD2cax22lV/ uB7Ug8Cch6RjCiEm9A/qeyx2qR/RpAD9Ix3x8fuI2RNzg7EizZWGrDBQ0d0bMh5W PzePNE+bNuMKzVcmV7D8mVohMEuZZvY90aKj58UdU6tk2/DStDykxkR8nWCE0zLQ +GW+bM5kKC9pIzlo6sjeK9J+bu+Ki79F6tIWlCxxX0ord2eKAsUJ3tWpCdgdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULZtQ63yLkhLDhSfX8llhAsNBT/owHwYDVR0j BBgwFoAUgiFZlmB1WV5PdpirBjqljyzm7/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY2ZDE4NWUtZDRmNC00ODIwLWI0YjYtNzk4YzMwN2FkN2U1LzAvODIyMTU5OTY2 MDc1NTk1RTRGNzY5OEFCMDYzQUE1OEYyQ0U2RUZGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjIxNTk5NjYwNzU1OTVFNEY3Njk4QUIwNjNBQTU4RjJDRTZF RkY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY2ZDE4NWUtZDRmNC00ODIwLWI0 YjYtNzk4YzMwN2FkN2U1LzAvODIyMTU5OTY2MDc1NTk1RTRGNzY5OEFCMDYzQUE1 OEYyQ0U2RUZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADP1WrUF944pAOeir9yKzbqFansBdRx/1DRi N+AMpVWqOacI6M92FOTgN8uGavVfJlunsg68InlWBTEJz4fqXPCgDpbP0bQWApyF TVvVYtrgDVM7ub2GlCWHTcE9cYoQYggGuzjYuyKuHWaxmAWMjZDEBmDeyMuldxQV lacLw61B+iVzxlDLvUzalqOyq50c8n7AdWYdL8EUYAuiqCw1Pr4AvvdbbROqxH4R MF00w5a6kYFxTr5K/xae1uWCxURhuNUGxoBxxS21pZpBioB5z9EVmnWYLh0NUZXL O2Q4AYVfTWwQzBqryNj/Qn/jZFTx7ChVR4WWTzb4QDfbi3V1gds= -----END CERTIFICATE-----Generated at Wed Jun 3 04:18:59 2026 by rpki-client