$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft File: A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft (raw, json) Hash identifier: +qQSELCWv9Jz/rLwm73DwAU0gflxfsnJRvQ6CuWZ0/Q= Subject key identifier: C3:5A:F2:C0:00:0A:53:B4:CD:BF:9C:D4:58:41:F5:9C:57:C1:C3:8A Authority key identifier: A9:7A:99:54:B3:22:4F:18:7A:61:8E:F2:D3:6B:91:1D:BC:A4:E0:E7 Certificate issuer: /CN=A97A9954B3224F187A618EF2D36B911DBCA4E0E7 Certificate serial: 13B3BD7858405491C7F13DC15565F117BD489C50 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 08:20:14 +0000 Manifest this update: Tue 02 Jun 2026 08:15:14 +0000 Manifest next update: Wed 03 Jun 2026 12:10:14 +0000 Files and hashes: 1: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: +bhA3UYPReYDsrbCyo3nY+2634L/BbsW+oTXhT99PgM=) 2: A97A9954B3224F187A618EF2D36B911DBCA4E0E7.crl (hash: Jy2y6xkbbfTrBNFq3h2zCtCky4iljpPMuAw6wl+tIIE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.crl rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b3:bd:78:58:40:54:91:c7:f1:3d:c1:55:65:f1:17:bd:48:9c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A97A9954B3224F187A618EF2D36B911DBCA4E0E7 Validity Not Before: Jun 2 08:15:14 2026 GMT Not After : Jun 3 12:10:14 2026 GMT Subject: CN=C35AF2C0000A53B4CDBF9CD45841F59C57C1C38A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:a3:0f:0f:8c:87:05:6f:d9:15:d2:1d:0f: e7:95:34:c2:e4:d1:3e:d5:8a:f3:ee:e2:79:f1:4c: 4e:b2:1a:0d:43:49:ff:5e:57:ed:14:31:24:66:7c: 7a:01:15:46:20:10:bc:6e:50:07:cc:bc:69:2f:50: dd:86:a5:10:f3:cb:7b:50:fa:51:d1:82:67:a1:f6: 6d:e1:7f:2d:f2:db:da:8f:c8:f3:89:2a:cf:97:cc: b2:ed:06:1c:5c:ae:89:c6:1d:61:a5:5e:df:9b:3c: 21:e6:20:66:25:61:a3:c8:87:e2:ce:00:c7:10:7e: 8a:f4:09:df:0e:f9:b0:ec:aa:7d:6a:18:34:4e:a9: 16:db:e5:cc:e4:3f:45:d4:76:21:fc:07:36:49:f6: 21:9b:8f:77:93:fa:98:24:83:c0:c5:e1:33:a2:0a: f5:a3:f3:69:db:71:61:f7:5e:99:04:0b:5e:51:f3: 5a:3e:b0:78:4f:b2:7b:43:c0:9b:25:60:bc:da:74: a0:df:f7:91:c6:d1:3d:5a:b1:fe:53:08:23:f2:13: af:46:98:cf:85:f6:90:79:e2:e8:08:99:98:cf:22: 90:c3:05:0b:3a:73:d7:30:84:2d:d4:39:b5:68:4a: b7:1b:98:c9:f6:08:96:b5:0d:b0:00:de:6c:83:66: 35:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5A:F2:C0:00:0A:53:B4:CD:BF:9C:D4:58:41:F5:9C:57:C1:C3:8A X509v3 Authority Key Identifier: keyid:A9:7A:99:54:B3:22:4F:18:7A:61:8E:F2:D3:6B:91:1D:BC:A4:E0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:64:32:2b:94:49:92:f6:98:80:af:10:0a:2e:4e:32:77:ee: c1:a4:63:86:36:d1:b5:95:51:7d:f7:31:17:7f:0c:9d:1c:03: 71:10:bf:9a:c3:30:a6:f1:d3:d3:e0:b5:75:df:03:c5:22:ea: 99:30:19:82:2d:4c:dc:7e:c8:af:05:2e:2d:f9:b1:6c:81:c5: ae:3c:73:10:d4:63:27:05:19:48:a3:2a:ac:71:b4:fc:ad:e6: 1b:f4:3a:7d:6c:34:7c:a2:fe:b2:14:35:3b:78:1a:06:83:a3: fc:b2:f2:88:5a:1c:b6:58:05:39:55:b5:fa:4e:40:7b:05:b3: 6c:ef:22:20:d0:be:c5:c6:d3:cd:22:40:0d:55:66:3d:11:6d: 5a:bb:fb:4b:b3:5b:ba:38:8e:04:12:38:7f:b7:0e:d3:60:98: 5d:f4:0e:20:f3:1f:a5:19:03:3d:1f:ab:71:65:da:21:fd:80: 27:73:db:ef:21:d3:fe:7c:6f:7f:d5:b7:aa:a7:66:d2:9c:d5: b7:85:88:b3:2a:a2:3f:c6:1e:96:08:54:89:67:77:95:bf:1e: db:b2:31:2d:ac:06:28:80:b8:1b:6b:22:2c:6e:d2:f2:f5:ac: 50:81:25:f2:29:1a:ba:a2:c8:2f:86:1c:18:44:d3:c1:6d:15: ae:4b:3a:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7O9eFhAVJHH8T3BVWXxF71InFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk3QTk5NTRCMzIyNEYxODdBNjE4RUYyRDM2QjkxMURC Q0E0RTBFNzAeFw0yNjA2MDIwODE1MTRaFw0yNjA2MDMxMjEwMTRaMDMxMTAvBgNV BAMTKEMzNUFGMkMwMDAwQTUzQjRDREJGOUNENDU4NDFGNTlDNTdDMUMzOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzMKMPD4yHBW/ZFdIdD+eVNMLk 0T7VivPu4nnxTE6yGg1DSf9eV+0UMSRmfHoBFUYgELxuUAfMvGkvUN2GpRDzy3tQ +lHRgmeh9m3hfy3y29qPyPOJKs+XzLLtBhxcronGHWGlXt+bPCHmIGYlYaPIh+LO AMcQfor0Cd8O+bDsqn1qGDROqRbb5czkP0XUdiH8BzZJ9iGbj3eT+pgkg8DF4TOi CvWj82nbcWH3XpkEC15R81o+sHhPsntDwJslYLzadKDf95HG0T1asf5TCCPyE69G mM+F9pB54ugImZjPIpDDBQs6c9cwhC3UObVoSrcbmMn2CJa1DbAA3myDZjUbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw1rywAAKU7TNv5zUWEH1nFfBw4owHwYDVR0j BBgwFoAUqXqZVLMiTxh6YY7y02uRHbyk4OcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjVhNzNkMDQtMjE0Zi00NmI4LTk3NDYtNjJjZGU4NTU4OGZhLzAvQTk3QTk5NTRC MzIyNEYxODdBNjE4RUYyRDM2QjkxMURCQ0E0RTBFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTdBOTk1NEIzMjI0RjE4N0E2MThFRjJEMzZCOTExREJDQTRF MEU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjVhNzNkMDQtMjE0Zi00NmI4LTk3 NDYtNjJjZGU4NTU4OGZhLzAvQTk3QTk5NTRCMzIyNEYxODdBNjE4RUYyRDM2Qjkx MURCQ0E0RTBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItkMiuUSZL2mICvEAouTjJ37sGkY4Y20bWV UX33MRd/DJ0cA3EQv5rDMKbx09PgtXXfA8Ui6pkwGYItTNx+yK8FLi35sWyBxa48 cxDUYycFGUijKqxxtPyt5hv0On1sNHyi/rIUNTt4GgaDo/yy8ohaHLZYBTlVtfpO QHsFs2zvIiDQvsXG080iQA1VZj0RbVq7+0uzW7o4jgQSOH+3DtNgmF30DiDzH6UZ Az0fq3Fl2iH9gCdz2+8h0/58b3/Vt6qnZtKc1beFiLMqoj/GHpYIVIlnd5W/Htuy MS2sBiiAuBtrIixu0vL1rFCBJfIpGrqiyC+GHBhE08FtFa5LOi8= -----END CERTIFICATE-----Generated at Wed Jun 3 04:19:39 2026 by rpki-client