$ rpki-client -vvf rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft File: C7B88124E27943001DCBEF12B94411DF803E6864.mft (raw, json) Hash identifier: KHKbvq2dknl6DrhcC/anSOiCFbCq0rscQzQ5/ic/2ao= Subject key identifier: 97:0C:45:D1:67:FD:41:EE:84:F8:43:3E:39:19:78:B3:A3:CA:B6:BE Authority key identifier: C7:B8:81:24:E2:79:43:00:1D:CB:EF:12:B9:44:11:DF:80:3E:68:64 Certificate issuer: /CN=C7B88124E27943001DCBEF12B94411DF803E6864 Certificate serial: 22C0ECFC579AA7673EE9150EABAFCADD075A71F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 00:15:12 +0000 Manifest this update: Wed 03 Jun 2026 00:10:12 +0000 Manifest next update: Thu 04 Jun 2026 02:39:12 +0000 Files and hashes: 1: 3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (hash: VbZP5AlQJHoYGRcuhEjAa8Ztq6z5yJJSceEmBD6UPnQ=) 2: 3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (hash: nkkFu7O3K8B/AyuvsEsau+DSlTgImFo/RgKno+4L8tw=) 3: C7B88124E27943001DCBEF12B94411DF803E6864.crl (hash: yclA33HfB3onLg+ZvgqAuHZyxZaLxl0ddBkzzkOTuvc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.crl rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 02:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c0:ec:fc:57:9a:a7:67:3e:e9:15:0e:ab:af:ca:dd:07:5a:71:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7B88124E27943001DCBEF12B94411DF803E6864 Validity Not Before: Jun 3 00:10:12 2026 GMT Not After : Jun 4 02:39:12 2026 GMT Subject: CN=970C45D167FD41EE84F8433E391978B3A3CAB6BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:75:47:72:93:16:4e:46:42:8b:24:64:88:50: 88:9c:02:ee:34:87:d4:ca:39:bb:87:eb:89:f8:1a: 6f:ac:b7:21:fd:63:d8:f4:85:0f:26:8f:c1:12:08: 7c:ed:28:31:20:02:b7:51:2c:cc:18:e2:92:60:33: 73:bb:05:0a:3b:54:1c:2b:fa:17:8b:7d:48:18:b8: 6d:d9:ba:7e:72:7d:09:ed:fe:7d:a6:e3:fa:5b:77: 01:6e:c6:c5:e6:79:05:ea:fe:56:f3:75:d2:0f:3d: 33:59:4a:28:2e:00:e2:9c:3e:77:2f:13:85:d7:76: 14:ee:ec:ef:d4:fb:bb:b3:2d:2b:1f:c3:39:80:94: 51:02:02:15:f7:f7:24:14:ee:de:94:b5:22:ef:6a: d0:9d:ad:af:30:9a:43:08:51:71:5f:c2:d7:bc:9b: be:70:62:44:55:95:b7:bb:fe:b9:12:b2:a8:d3:29: 96:ed:bd:6e:2f:ad:ee:3b:41:26:ce:52:d9:7e:6b: 73:16:3b:79:7f:90:b9:e8:3e:ae:db:0e:01:73:27: b9:3a:72:20:dc:64:d5:3b:df:a8:7f:3e:c3:70:f8: 67:80:23:d3:91:5b:dd:9e:8e:71:d3:b1:34:ae:18: 9c:90:df:e2:01:7b:cf:87:24:3c:bf:8d:4c:4f:62: 7a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0C:45:D1:67:FD:41:EE:84:F8:43:3E:39:19:78:B3:A3:CA:B6:BE X509v3 Authority Key Identifier: keyid:C7:B8:81:24:E2:79:43:00:1D:CB:EF:12:B9:44:11:DF:80:3E:68:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:8c:2b:16:c2:86:1b:c9:58:64:cd:bf:7f:d4:c9:d3:5e:01: 83:79:88:0b:a5:ca:2f:41:76:13:65:7c:d0:d4:98:ba:07:9c: da:23:39:25:30:e5:e9:84:4a:98:14:d7:6b:59:ad:be:72:e6: fb:5b:5a:18:38:01:b4:8f:9f:92:3d:a4:f1:ff:be:be:7f:c9: a2:23:d7:df:1c:d9:6d:49:a9:e4:6f:af:10:dc:a6:19:4b:38: 3b:ea:de:75:dc:79:d6:b2:4c:25:2f:87:76:06:55:0d:94:94: a8:89:2a:70:76:aa:af:95:a5:a9:e2:56:2e:90:c1:f6:95:10: dc:91:df:33:c7:9f:48:8c:6a:97:66:97:ee:5f:a3:f2:76:f7: 93:76:9d:18:c9:03:9d:96:a6:ab:c6:9e:76:f6:11:0e:cd:21: 28:81:24:f7:cd:b2:e7:d4:b6:c0:27:7b:1e:1f:dd:1b:e1:99: 79:24:c3:8d:b8:78:ba:12:a3:75:bc:6b:fd:6f:22:2e:0a:b0: 61:3a:91:b9:9a:99:6a:24:24:be:a7:bb:7d:fc:9b:a3:fb:32: cd:d9:01:b5:dc:25:31:c6:36:f6:de:a1:28:0c:7d:7f:26:32: 8d:0d:ee:d8:1d:bf:35:26:60:1f:7e:89:8e:22:c3:f8:62:aa: 9a:f9:bb:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIsDs/Feap2c+6RUOq6/K3QdacfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdCODgxMjRFMjc5NDMwMDFEQ0JFRjEyQjk0NDExREY4 MDNFNjg2NDAeFw0yNjA2MDMwMDEwMTJaFw0yNjA2MDQwMjM5MTJaMDMxMTAvBgNV BAMTKDk3MEM0NUQxNjdGRDQxRUU4NEY4NDMzRTM5MTk3OEIzQTNDQUI2QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3dUdykxZORkKLJGSIUIicAu40 h9TKObuH64n4Gm+styH9Y9j0hQ8mj8ESCHztKDEgArdRLMwY4pJgM3O7BQo7VBwr +heLfUgYuG3Zun5yfQnt/n2m4/pbdwFuxsXmeQXq/lbzddIPPTNZSiguAOKcPncv E4XXdhTu7O/U+7uzLSsfwzmAlFECAhX39yQU7t6UtSLvatCdra8wmkMIUXFfwte8 m75wYkRVlbe7/rkSsqjTKZbtvW4vre47QSbOUtl+a3MWO3l/kLnoPq7bDgFzJ7k6 ciDcZNU736h/PsNw+GeAI9ORW92ejnHTsTSuGJyQ3+IBe8+HJDy/jUxPYnr1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlwxF0Wf9Qe6E+EM+ORl4s6PKtr4wHwYDVR0j BBgwFoAUx7iBJOJ5QwAdy+8SuUQR34A+aGQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJlMDZmNzItMTMyMy00ZmJkLWIyNmUtOWVkOWE5YWRkODgwLzAvQzdCODgxMjRF Mjc5NDMwMDFEQ0JFRjEyQjk0NDExREY4MDNFNjg2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0I4ODEyNEUyNzk0MzAwMURDQkVGMTJCOTQ0MTFERjgwM0U2 ODY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJlMDZmNzItMTMyMy00ZmJkLWIy NmUtOWVkOWE5YWRkODgwLzAvQzdCODgxMjRFMjc5NDMwMDFEQ0JFRjEyQjk0NDEx REY4MDNFNjg2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaMKxbChhvJWGTNv3/UydNeAYN5iAulyi9B dhNlfNDUmLoHnNojOSUw5emESpgU12tZrb5y5vtbWhg4AbSPn5I9pPH/vr5/yaIj 198c2W1JqeRvrxDcphlLODvq3nXcedayTCUvh3YGVQ2UlKiJKnB2qq+VpaniVi6Q wfaVENyR3zPHn0iMapdml+5fo/J295N2nRjJA52WpqvGnnb2EQ7NISiBJPfNsufU tsAnex4f3RvhmXkkw424eLoSo3W8a/1vIi4KsGE6kbmamWokJL6nu338m6P7Ms3Z AbXcJTHGNvbeoSgMfX8mMo0N7tgdvzUmYB9+iY4iw/hiqpr5uwM= -----END CERTIFICATE-----Generated at Wed Jun 3 04:19:41 2026 by rpki-client