$ rpki-client -vvf rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft File: 20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft (raw, json) Hash identifier: j0ioCUGhmE1MAR2acTYj4Fl0IO40QFiXml8ieYUg9NU= Subject key identifier: 14:69:92:13:B1:91:11:90:6C:BC:AB:67:D5:5E:0F:ED:CB:65:C8:A9 Authority key identifier: 20:84:08:77:BD:CD:CB:9E:C9:ED:6D:CA:C5:F4:C8:5F:35:07:0D:39 Certificate issuer: /CN=20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39 Certificate serial: 0447E3A1E5FCACC1986C101FE91BD7C14333377A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:17:47 +0000 Manifest this update: Tue 02 Jun 2026 10:12:47 +0000 Manifest next update: Wed 03 Jun 2026 13:57:47 +0000 Files and hashes: 1: 20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl (hash: hbehGBcnS9fncH64m0CZt1s/kKgvZIvpW3mpsPa+ibg=) 2: 3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa (hash: /+PtWpNaw+qxeLwPph3/hApvuooUAmWwP9ENPOfI0jQ=) 3: 3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (hash: 7ZieTOqY/KGyiMIehZ/2Tvd324Qe4ByAnaKXnii8UnM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 13:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:47:e3:a1:e5:fc:ac:c1:98:6c:10:1f:e9:1b:d7:c1:43:33:37:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39 Validity Not Before: Jun 2 10:12:47 2026 GMT Not After : Jun 3 13:57:47 2026 GMT Subject: CN=14699213B19111906CBCAB67D55E0FEDCB65C8A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6d:89:00:f3:07:ef:b1:b0:c9:05:9b:23:f2: a1:e9:78:a4:9b:74:53:4b:26:c0:59:30:be:77:ca: 2c:72:04:ff:5b:0c:68:2e:21:b9:91:25:2e:80:95: 61:24:00:ae:93:8b:29:8a:06:e2:ea:1a:39:27:5a: 19:b5:87:fd:96:7d:0d:4f:27:31:be:1a:6c:de:3e: 6b:dc:cf:ae:34:05:d7:a0:bd:14:d8:95:78:21:d1: 54:09:03:a6:82:6c:76:84:d6:5d:ce:f9:e2:cc:a2: 57:aa:33:a7:f8:d9:0a:f4:55:46:10:b6:35:4f:d4: 3e:1a:03:0f:05:66:54:e2:be:17:ac:93:3f:63:33: c6:d0:d4:16:61:6d:ae:44:69:d8:ab:6e:30:d8:56: 04:be:e3:bc:12:7a:b0:4c:aa:eb:9d:0d:56:98:f6: bd:6a:86:99:9c:31:b2:3d:6f:08:08:a6:0f:c4:ff: d8:05:ea:bd:c3:6e:bf:ad:72:f9:37:ec:3e:2c:a2: 7d:49:b1:87:d0:10:d0:1f:25:dc:7e:8f:2b:2e:e3: 96:7c:7d:6e:c5:ce:ed:b5:43:3f:7e:8c:f0:e2:f0: 25:12:e3:ae:28:6b:22:96:af:dd:30:c1:9f:e4:e9: e9:fa:ac:2f:01:58:bc:8e:57:f2:bd:33:d0:06:b4: c7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:69:92:13:B1:91:11:90:6C:BC:AB:67:D5:5E:0F:ED:CB:65:C8:A9 X509v3 Authority Key Identifier: keyid:20:84:08:77:BD:CD:CB:9E:C9:ED:6D:CA:C5:F4:C8:5F:35:07:0D:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:11:dd:4c:7e:c9:d4:9c:9a:20:8b:b9:e5:f3:d1:7d:4a:01: fc:7a:09:7a:a1:d5:e5:a3:48:83:7e:b3:7d:ad:f3:bc:d1:e6: c2:20:a1:0b:2e:3b:3a:18:f1:97:41:ce:f2:70:7e:4e:a4:0e: ff:72:d0:c4:7c:bf:a0:92:7e:ee:af:47:fb:2e:55:89:77:fb: ea:ea:a5:f8:d4:47:39:70:30:87:a1:77:e3:c6:30:c3:69:a9: ac:f9:4f:ea:c6:1d:4a:32:3a:a3:3a:00:2d:b5:fe:64:52:79: 61:cb:ea:74:b7:2f:c8:fa:2c:54:ca:82:3f:75:9d:73:da:a9: cc:f0:af:ee:67:8b:21:a4:81:b9:d2:99:e6:6b:10:b3:21:45: c4:50:6c:92:ca:24:0d:c6:12:12:d1:62:dd:46:15:3c:04:b4: fb:48:7f:99:b9:77:55:72:ad:f5:d4:45:e1:22:24:1f:78:a4: 8e:0f:1c:3d:72:a2:d0:1f:e4:a6:82:1e:df:9c:6b:31:68:85: 35:98:b9:89:a0:a2:04:6a:51:5e:10:9d:71:bd:11:e1:e5:7f: 0c:fe:69:93:bf:59:98:e0:ab:6e:d2:7e:5d:6d:37:a1:b3:d5: fb:b2:97:f7:5c:85:1f:b9:87:d2:15:e6:14:82:7e:f2:18:f8: 48:94:4d:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBEfjoeX8rMGYbBAf6RvXwUMzN3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4NDA4NzdCRENEQ0I5RUM5RUQ2RENBQzVGNEM4NUYz NTA3MEQzOTAeFw0yNjA2MDIxMDEyNDdaFw0yNjA2MDMxMzU3NDdaMDMxMTAvBgNV BAMTKDE0Njk5MjEzQjE5MTExOTA2Q0JDQUI2N0Q1NUUwRkVEQ0I2NUM4QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxbYkA8wfvsbDJBZsj8qHpeKSb dFNLJsBZML53yixyBP9bDGguIbmRJS6AlWEkAK6TiymKBuLqGjknWhm1h/2WfQ1P JzG+GmzePmvcz640BdegvRTYlXgh0VQJA6aCbHaE1l3O+eLMoleqM6f42Qr0VUYQ tjVP1D4aAw8FZlTivheskz9jM8bQ1BZhba5EadirbjDYVgS+47wSerBMquudDVaY 9r1qhpmcMbI9bwgIpg/E/9gF6r3Dbr+tcvk37D4son1JsYfQENAfJdx+jysu45Z8 fW7Fzu21Qz9+jPDi8CUS464oayKWr90wwZ/k6en6rC8BWLyOV/K9M9AGtMdrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFGmSE7GREZBsvKtn1V4P7ctlyKkwHwYDVR0j BBgwFoAUIIQId73Ny57J7W3KxfTIXzUHDTkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjZkODg0OTYtYjJiYS00ZDEzLTk4MjUtYWUzOGFmZjFkYTE1LzAvMjA4NDA4NzdC RENEQ0I5RUM5RUQ2RENBQzVGNEM4NUYzNTA3MEQzOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDg0MDg3N0JEQ0RDQjlFQzlFRDZEQ0FDNUY0Qzg1RjM1MDcw RDM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjZkODg0OTYtYjJiYS00ZDEzLTk4 MjUtYWUzOGFmZjFkYTE1LzAvMjA4NDA4NzdCRENEQ0I5RUM5RUQ2RENBQzVGNEM4 NUYzNTA3MEQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0R3Ux+ydScmiCLueXz0X1KAfx6CXqh1eWj SIN+s32t87zR5sIgoQsuOzoY8ZdBzvJwfk6kDv9y0MR8v6CSfu6vR/suVYl3++rq pfjURzlwMIehd+PGMMNpqaz5T+rGHUoyOqM6AC21/mRSeWHL6nS3L8j6LFTKgj91 nXPaqczwr+5niyGkgbnSmeZrELMhRcRQbJLKJA3GEhLRYt1GFTwEtPtIf5m5d1Vy rfXUReEiJB94pI4PHD1yotAf5KaCHt+cazFohTWYuYmgogRqUV4QnXG9EeHlfwz+ aZO/WZjgq27Sfl1tN6Gz1fuyl/dchR+5h9IV5hSCfvIY+EiUTd0= -----END CERTIFICATE-----Generated at Wed Jun 3 04:15:46 2026 by rpki-client