$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft File: 518CB795450041B0537FB0312901D771579DCEC4.mft (raw, json) Hash identifier: FWFxalvcF9GZAx+A1zTs/+Sbc8EG2VtgAlSw87eFtWc= Subject key identifier: 0E:EC:8B:24:6C:E8:2B:A6:9F:CE:D1:7F:F9:F8:81:82:3F:B8:61:CF Authority key identifier: 51:8C:B7:95:45:00:41:B0:53:7F:B0:31:29:01:D7:71:57:9D:CE:C4 Certificate issuer: /CN=518CB795450041B0537FB0312901D771579DCEC4 Certificate serial: 56470FD87F94CDCECA311ABDFDA5C0D01D41B243 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:05:33 +0000 Manifest this update: Tue 02 Jun 2026 21:00:33 +0000 Manifest next update: Wed 03 Jun 2026 21:36:33 +0000 Files and hashes: 1: 518CB795450041B0537FB0312901D771579DCEC4.crl (hash: wUuXmRAgYplq5Ed8tnVRhA07ek4dQYUBDJOp79+n0tM=) 2: 3130332e3139332e3136362e302f32332d3233203d3e20313530313835.roa (hash: X+iPKuq3a//oKJcRH7RCMyPd3wqSs+gr09rlg8og0vI=) 3: 3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa (hash: GypeOWXaZk/hIkKcj8p9VzDp/KvisMSO2917iwkOduU=) 4: 3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa (hash: iCJ8MTvJq5y1PpIDZMP2NlWvXH8yCPvTkvBM8kuoTNA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.crl rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:47:0f:d8:7f:94:cd:ce:ca:31:1a:bd:fd:a5:c0:d0:1d:41:b2:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=518CB795450041B0537FB0312901D771579DCEC4 Validity Not Before: Jun 2 21:00:33 2026 GMT Not After : Jun 3 21:36:33 2026 GMT Subject: CN=0EEC8B246CE82BA69FCED17FF9F881823FB861CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f9:51:4f:ce:af:88:d1:b9:63:c2:90:ed:9e: 57:4b:3c:d9:73:eb:00:e5:32:ab:12:58:32:37:a1: 03:b5:5a:9a:aa:95:7f:56:ae:40:c5:0b:e6:b9:05: a0:0a:7b:a0:2d:3c:28:97:08:3d:9e:25:34:c3:ab: 7f:f6:6d:3f:7b:e9:ef:65:b1:09:ce:0d:ef:d3:13: a3:91:30:34:6c:44:d2:a6:69:80:f7:b7:9a:e9:11: 27:82:59:fe:de:33:2f:75:37:b9:9f:b1:76:39:e5: a0:78:4f:7d:36:db:43:1b:d1:b8:e4:63:f2:55:1a: 83:26:fb:d9:bc:bd:ca:32:46:8e:dd:1e:06:94:2a: 06:b3:fe:d2:90:5d:a2:3c:1f:a3:7e:5b:1f:cd:17: 00:12:0a:86:a8:66:41:94:0c:86:0f:7c:7d:d0:d4: 5e:41:a8:b4:c7:72:7e:1d:44:da:f3:2d:f9:b8:cd: 35:05:51:4c:36:48:05:52:cf:96:06:66:a9:de:78: a5:22:89:fe:14:80:4a:09:f7:01:7d:16:52:8b:67: 05:5c:e6:2d:84:91:6e:f9:a7:34:ad:cf:27:fc:de: 79:c3:74:45:ca:e9:7b:30:ce:b4:9a:55:e3:cd:11: 04:da:aa:56:1a:07:98:53:b2:55:f7:d3:a5:0f:51: d3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EC:8B:24:6C:E8:2B:A6:9F:CE:D1:7F:F9:F8:81:82:3F:B8:61:CF X509v3 Authority Key Identifier: keyid:51:8C:B7:95:45:00:41:B0:53:7F:B0:31:29:01:D7:71:57:9D:CE:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:3d:31:2f:78:fc:d9:30:e6:39:ff:df:17:7e:e1:2c:8e:8c: 47:be:1f:4b:71:c4:78:20:31:54:50:d1:b7:3d:97:e9:72:4e: fb:b8:e5:95:52:1c:19:65:1f:a6:b1:1e:05:92:20:c9:92:22: a1:5b:40:c3:55:f5:6a:d4:fa:3c:d1:a3:42:b7:ec:c8:6d:3f: 56:49:5d:8d:81:a4:ab:b4:b7:37:e9:ca:55:a2:50:db:72:d5: f4:56:20:c9:79:d2:99:3f:fd:61:7e:a1:46:45:19:d2:d8:a1: f1:0d:6a:f7:6d:ec:e1:9d:67:14:1b:15:84:58:66:58:34:cc: 55:a6:d4:dd:ba:68:e1:45:b3:a5:72:7c:e7:72:53:fe:2f:85: ad:03:ed:cf:a2:f9:e5:0a:45:39:36:1f:e0:03:4b:08:31:68: 03:be:2a:95:b7:10:0a:27:eb:42:a7:23:ae:29:29:5f:6d:dc: 7a:ce:b7:42:11:44:90:fc:00:d2:2f:a3:8e:a4:51:99:dd:f9: 40:86:f3:61:d6:63:8c:06:8e:4d:6a:7c:1e:b6:dd:ba:86:16: 31:58:3e:ea:be:ce:3d:3e:36:8c:df:5b:d3:8f:12:e4:0e:7e: 10:41:82:ae:20:32:3b:e3:65:b0:e6:68:09:83:71:35:ae:e5: 14:81:ec:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVkcP2H+Uzc7KMRq9/aXA0B1BskMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE4Q0I3OTU0NTAwNDFCMDUzN0ZCMDMxMjkwMUQ3NzE1 NzlEQ0VDNDAeFw0yNjA2MDIyMTAwMzNaFw0yNjA2MDMyMTM2MzNaMDMxMTAvBgNV BAMTKDBFRUM4QjI0NkNFODJCQTY5RkNFRDE3RkY5Rjg4MTgyM0ZCODYxQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq+VFPzq+I0bljwpDtnldLPNlz 6wDlMqsSWDI3oQO1WpqqlX9WrkDFC+a5BaAKe6AtPCiXCD2eJTTDq3/2bT976e9l sQnODe/TE6ORMDRsRNKmaYD3t5rpESeCWf7eMy91N7mfsXY55aB4T30220Mb0bjk Y/JVGoMm+9m8vcoyRo7dHgaUKgaz/tKQXaI8H6N+Wx/NFwASCoaoZkGUDIYPfH3Q 1F5BqLTHcn4dRNrzLfm4zTUFUUw2SAVSz5YGZqneeKUiif4UgEoJ9wF9FlKLZwVc 5i2EkW75pzStzyf83nnDdEXK6XswzrSaVePNEQTaqlYaB5hTslX306UPUdMnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDuyLJGzoK6afztF/+fiBgj+4Yc8wHwYDVR0j BBgwFoAUUYy3lUUAQbBTf7AxKQHXcVedzsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjcwMzY5NzQtODEzMS00NWFmLTk0Y2UtZjQ5YjQ4MTFjMTczLzAvNTE4Q0I3OTU0 NTAwNDFCMDUzN0ZCMDMxMjkwMUQ3NzE1NzlEQ0VDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MThDQjc5NTQ1MDA0MUIwNTM3RkIwMzEyOTAxRDc3MTU3OURD RUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjcwMzY5NzQtODEzMS00NWFmLTk0 Y2UtZjQ5YjQ4MTFjMTczLzAvNTE4Q0I3OTU0NTAwNDFCMDUzN0ZCMDMxMjkwMUQ3 NzE1NzlEQ0VDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGs9MS94/Nkw5jn/3xd+4SyOjEe+H0txxHgg MVRQ0bc9l+lyTvu45ZVSHBllH6axHgWSIMmSIqFbQMNV9WrU+jzRo0K37MhtP1ZJ XY2BpKu0tzfpylWiUNty1fRWIMl50pk//WF+oUZFGdLYofENavdt7OGdZxQbFYRY Zlg0zFWm1N26aOFFs6VyfOdyU/4vha0D7c+i+eUKRTk2H+ADSwgxaAO+KpW3EAon 60KnI64pKV9t3HrOt0IRRJD8ANIvo46kUZnd+UCG82HWY4wGjk1qfB623bqGFjFY Puq+zj0+NozfW9OPEuQOfhBBgq4gMjvjZbDmaAmDcTWu5RSB7Pk= -----END CERTIFICATE-----Generated at Wed Jun 3 03:55:20 2026 by rpki-client