$ rpki-client -vvf rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft File: DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft (raw, json) Hash identifier: ShyzqnufEJLX+sEEakgGrMAwOO0dGa6RtvGqNnNtzw8= Subject key identifier: 86:D4:A5:9F:76:5F:D3:44:8F:58:FB:19:9C:95:50:92:31:F7:7F:87 Authority key identifier: DF:BD:84:73:BE:55:16:B1:09:B5:A1:79:1D:9D:CB:DF:67:23:04:56 Certificate issuer: /CN=DFBD8473BE5516B109B5A1791D9DCBDF67230456 Certificate serial: 55035212E6A31DC27AEBAF686402E5D9AE74588D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFBD8473BE5516B109B5A1791D9DCBDF67230456.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:50:15 +0000 Manifest this update: Tue 02 Jun 2026 16:45:15 +0000 Manifest next update: Wed 03 Jun 2026 18:42:15 +0000 Files and hashes: 1: DFBD8473BE5516B109B5A1791D9DCBDF67230456.crl (hash: EIDYavBagFne5mk77fK1032/Z/S7OMzNUskDRt1z7z8=) 2: 3130332e37382e3234302e302f32342d3234203d3e20313530343836.roa (hash: /NpblNWeDyruUPm/IDhGAws5AddnYBZqkNeH/J3r+Ao=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.crl rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFBD8473BE5516B109B5A1791D9DCBDF67230456.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:03:52:12:e6:a3:1d:c2:7a:eb:af:68:64:02:e5:d9:ae:74:58:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBD8473BE5516B109B5A1791D9DCBDF67230456 Validity Not Before: Jun 2 16:45:15 2026 GMT Not After : Jun 3 18:42:15 2026 GMT Subject: CN=86D4A59F765FD3448F58FB199C95509231F77F87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2f:3f:44:12:8e:6c:12:6e:b7:e2:0a:01:11: a3:22:51:80:83:f0:a0:40:2a:45:7b:6b:f3:e4:0b: b2:8a:39:69:cb:0b:b9:70:94:21:b9:ef:33:95:2e: df:d3:db:96:28:e4:6b:09:fb:70:c7:15:39:c8:ea: cb:f4:c2:81:96:f6:a2:b0:ef:11:5d:7e:e9:d1:64: c4:9b:16:c2:61:1e:2a:f6:81:90:83:58:d0:9d:dd: 2d:a9:fc:da:01:c6:be:bf:c2:56:c9:18:33:67:2c: d7:2f:5d:3c:f5:ea:63:27:1c:16:d5:69:86:94:86: 8a:18:11:a8:bf:8e:a1:c0:07:5b:45:78:10:23:0a: e3:3a:8b:36:7b:33:09:93:0a:a8:fa:23:56:92:b2: 76:7e:00:e4:62:6d:85:c5:74:8e:77:a1:68:9c:76: 73:ee:64:3b:fe:8d:8d:33:25:e7:f9:1e:1e:c9:8b: da:8f:94:e7:d2:d9:84:28:ab:73:e7:72:c3:5d:fe: 64:2d:01:3a:2b:ba:6c:6d:06:7f:3d:15:02:0d:4b: a6:a8:3d:6e:e1:bf:d1:bf:9e:fe:c8:0e:3c:fb:59: 31:b8:82:0f:21:1e:b5:09:61:cf:9c:be:c5:ef:50: 56:a8:fb:35:da:46:4d:84:8e:12:95:e4:1b:4a:91: 5a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D4:A5:9F:76:5F:D3:44:8F:58:FB:19:9C:95:50:92:31:F7:7F:87 X509v3 Authority Key Identifier: keyid:DF:BD:84:73:BE:55:16:B1:09:B5:A1:79:1D:9D:CB:DF:67:23:04:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFBD8473BE5516B109B5A1791D9DCBDF67230456.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d6:3e:66:f1:33:b0:1c:8a:2c:eb:54:46:33:91:a8:57:93: 9c:20:4a:2d:f2:c6:68:98:8e:de:97:fa:42:55:e6:1f:86:67: 26:e7:82:38:44:31:cb:4e:3f:a7:56:7a:47:7c:ed:96:16:09: 45:66:be:cd:91:bd:50:45:b5:a3:04:92:4e:40:dc:f8:2b:63: 1f:7e:ef:fd:25:61:46:2d:dc:94:66:ef:30:dc:7f:df:33:d5: 5f:f0:65:36:27:9f:b0:fb:5d:34:d2:73:19:a2:24:c3:82:78: 6f:02:93:9c:ca:8c:8d:96:95:ac:15:01:c0:39:b3:15:24:17: 8b:2d:73:ec:05:56:27:7a:9e:3c:17:f1:56:02:15:a5:03:20: 52:9d:cb:78:2f:bc:03:ab:72:67:ba:4d:ff:6f:a2:48:d4:71: 84:aa:83:b2:7e:89:de:1b:d7:53:3b:ab:04:0c:87:ef:b5:79: 9c:c3:d4:27:10:dc:72:35:cc:46:c7:42:5b:f3:9d:33:77:a4: 7e:00:05:41:e7:44:2b:2a:a7:3b:e2:5c:e8:23:69:8a:a9:3d: 8c:ce:2e:f5:8e:b4:a5:e8:9b:96:20:e6:f6:0c:a2:14:59:83: 0f:7b:d7:09:df:3d:b2:b8:d8:35:0f:39:6d:79:8b:0a:2b:f0: 14:94:5d:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVQNSEuajHcJ6669oZALl2a50WI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCRDg0NzNCRTU1MTZCMTA5QjVBMTc5MUQ5RENCREY2 NzIzMDQ1NjAeFw0yNjA2MDIxNjQ1MTVaFw0yNjA2MDMxODQyMTVaMDMxMTAvBgNV BAMTKDg2RDRBNTlGNzY1RkQzNDQ4RjU4RkIxOTlDOTU1MDkyMzFGNzdGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Lz9EEo5sEm634goBEaMiUYCD 8KBAKkV7a/PkC7KKOWnLC7lwlCG57zOVLt/T25Yo5GsJ+3DHFTnI6sv0woGW9qKw 7xFdfunRZMSbFsJhHir2gZCDWNCd3S2p/NoBxr6/wlbJGDNnLNcvXTz16mMnHBbV aYaUhooYEai/jqHAB1tFeBAjCuM6izZ7MwmTCqj6I1aSsnZ+AORibYXFdI53oWic dnPuZDv+jY0zJef5Hh7Ji9qPlOfS2YQoq3PncsNd/mQtATorumxtBn89FQINS6ao PW7hv9G/nv7IDjz7WTG4gg8hHrUJYc+cvsXvUFao+zXaRk2EjhKV5BtKkVqzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhtSln3Zf00SPWPsZnJVQkjH3f4cwHwYDVR0j BBgwFoAU372Ec75VFrEJtaF5HZ3L32cjBFYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjNjOTczZDUtZmU5NC00MDBkLWJjYmYtZjIzM2U4YWM1NTM3LzAvREZCRDg0NzNC RTU1MTZCMTA5QjVBMTc5MUQ5RENCREY2NzIzMDQ1Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERkJEODQ3M0JFNTUxNkIxMDlCNUExNzkxRDlEQ0JERjY3MjMw NDU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjNjOTczZDUtZmU5NC00MDBkLWJj YmYtZjIzM2U4YWM1NTM3LzAvREZCRDg0NzNCRTU1MTZCMTA5QjVBMTc5MUQ5RENC REY2NzIzMDQ1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbWPmbxM7AciizrVEYzkahXk5wgSi3yxmiY jt6X+kJV5h+GZybngjhEMctOP6dWekd87ZYWCUVmvs2RvVBFtaMEkk5A3PgrYx9+ 7/0lYUYt3JRm7zDcf98z1V/wZTYnn7D7XTTScxmiJMOCeG8Ck5zKjI2WlawVAcA5 sxUkF4stc+wFVid6njwX8VYCFaUDIFKdy3gvvAOrcme6Tf9vokjUcYSqg7J+id4b 11M7qwQMh++1eZzD1CcQ3HI1zEbHQlvznTN3pH4ABUHnRCsqpzviXOgjaYqpPYzO LvWOtKXom5Yg5vYMohRZgw971wnfPbK42DUPOW15iwor8BSUXfE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:09:05 2026 by rpki-client