$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft File: D69827B97765F94998CEA76A23999571F2BDA426.mft (raw, json) Hash identifier: wrm4KMK2HN9R8DUS9OtJdyahtDcBtt9XwkfzmzObqp8= Subject key identifier: 83:36:99:17:34:58:0A:01:4D:B9:F3:CE:4D:1E:8F:3E:77:69:53:5E Authority key identifier: D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26 Certificate issuer: /CN=D69827B97765F94998CEA76A23999571F2BDA426 Certificate serial: 5BDF39C2C14429D7DA0E8D1E27A31BF22878EB1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:20:51 +0000 Manifest this update: Tue 02 Jun 2026 17:15:51 +0000 Manifest next update: Wed 03 Jun 2026 18:30:51 +0000 Files and hashes: 1: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: iLHx8gOj2lpsnRU9gP4XnWUqEugFMffYvM4rOFlrJs8=) 2: D69827B97765F94998CEA76A23999571F2BDA426.crl (hash: WS3UZFG1R4IIvpKH0TOC/GpY1fV7iQ3TIdjkbwX4bTg=) 3: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: 0y6JUWjxpl3UiTjjA3rkmhxCstrj/MfIM81XvNQIAG8=) 4: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: vm3LwDwLeRAwMnQkRWhgtW4ETHGNuBudAWSRp1ytOKg=) 5: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: TZoS498ctZpsXD1NhIQ84Q2pw5rT92BFxmYiyFfNKls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:df:39:c2:c1:44:29:d7:da:0e:8d:1e:27:a3:1b:f2:28:78:eb:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69827B97765F94998CEA76A23999571F2BDA426 Validity Not Before: Jun 2 17:15:51 2026 GMT Not After : Jun 3 18:30:51 2026 GMT Subject: CN=8336991734580A014DB9F3CE4D1E8F3E7769535E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:8a:5f:5d:16:25:83:ac:a5:b0:32:ab:ba: c9:85:ab:dd:9f:25:38:ca:b1:fb:69:0a:4d:d5:02: ba:55:2f:03:2d:71:23:db:3f:61:8b:1b:59:f7:37: 89:36:6d:9e:3f:0e:06:1f:28:e0:2b:0f:9b:6d:4d: 7d:df:c5:ea:67:e4:13:6d:0a:55:d1:f1:ea:46:61: b9:03:d0:37:58:6b:f9:64:65:62:83:2e:c7:74:ab: d8:66:0e:57:74:5f:a4:ee:72:54:5b:99:e0:f6:f4: 68:99:b9:14:a2:1c:3d:90:97:d4:e9:83:8c:eb:67: 4e:6f:5e:24:69:58:76:6d:16:cb:e6:67:75:01:04: 0f:2e:c1:1d:36:6f:06:64:b2:4a:b7:e4:98:26:df: 80:34:89:59:66:c9:49:12:38:eb:fc:f6:ff:f1:71: 70:90:af:82:45:6c:cd:fd:1a:82:e7:10:20:8c:c7: a7:89:4a:9e:c2:ca:d6:db:8f:9d:d1:de:ee:9d:a2: c0:79:ad:4e:86:04:f2:37:32:87:7e:d5:18:54:8a: a5:15:fb:f1:a8:48:ce:62:0a:81:0f:74:ac:ee:ea: d9:f6:45:c7:58:50:1f:79:0d:05:f1:40:65:bf:e7: 7a:84:45:9b:b0:d8:6c:28:29:4d:ec:21:47:f9:2e: 51:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:36:99:17:34:58:0A:01:4D:B9:F3:CE:4D:1E:8F:3E:77:69:53:5E X509v3 Authority Key Identifier: keyid:D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:e7:7b:ed:cc:b0:f7:bc:af:e8:b9:5a:5a:44:65:de:90:b0: 48:de:bb:4e:b8:8d:47:89:2f:ae:b5:41:82:9b:32:7f:8a:68: 4c:56:9b:26:47:f7:f7:ae:8f:06:d8:ad:ad:a2:2a:23:90:51: 43:22:01:b3:b4:36:7f:01:8c:ea:84:80:32:a9:fa:f8:a9:2e: c2:5c:c1:e1:1d:6b:d5:86:92:a0:28:34:f7:06:a2:8c:dd:64: d5:3b:0f:fa:53:70:c6:60:81:42:c1:4a:f2:ef:3b:72:4b:c7: 7a:cb:a6:f1:f4:68:68:49:8f:71:f0:dc:8b:42:da:a3:2a:02: d4:0c:76:6f:99:a8:53:56:00:1f:96:89:99:a5:c4:16:44:40: 78:23:3f:d5:7e:92:14:7b:0e:a8:75:0c:cb:7c:9d:da:4f:97: 95:fe:11:17:53:c3:d2:6d:ba:18:42:cf:34:48:c6:f1:47:39: d7:ea:6e:3a:fa:62:37:b9:22:d3:de:54:6f:4f:a2:3b:0c:e9: 7d:07:a0:fc:13:07:24:ba:76:16:e8:2e:ed:b4:50:af:5b:77: 52:5f:9e:e7:6d:3b:b9:70:c7:16:c1:b5:51:52:bc:87:2b:e0: bb:06:c1:ac:90:01:53:d0:11:44:1d:36:d0:98:6d:f7:76:87: 24:9c:a2:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW985wsFEKdfaDo0eJ6Mb8ih46xswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5ODI3Qjk3NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1NzFG MkJEQTQyNjAeFw0yNjA2MDIxNzE1NTFaFw0yNjA2MDMxODMwNTFaMDMxMTAvBgNV BAMTKDgzMzY5OTE3MzQ1ODBBMDE0REI5RjNDRTREMUU4RjNFNzc2OTUzNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48opfXRYlg6ylsDKrusmFq92f JTjKsftpCk3VArpVLwMtcSPbP2GLG1n3N4k2bZ4/DgYfKOArD5ttTX3fxepn5BNt ClXR8epGYbkD0DdYa/lkZWKDLsd0q9hmDld0X6TuclRbmeD29GiZuRSiHD2Ql9Tp g4zrZ05vXiRpWHZtFsvmZ3UBBA8uwR02bwZkskq35Jgm34A0iVlmyUkSOOv89v/x cXCQr4JFbM39GoLnECCMx6eJSp7Cytbbj53R3u6dosB5rU6GBPI3Mod+1RhUiqUV +/GoSM5iCoEPdKzu6tn2RcdYUB95DQXxQGW/53qERZuw2GwoKU3sIUf5LlFDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgzaZFzRYCgFNufPOTR6PPndpU14wHwYDVR0j BBgwFoAU1pgnuXdl+UmYzqdqI5mVcfK9pCYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjdiODdmNmQtMjlhNy00YjRjLTgxYzctNWI0Y2JkYjJjYjZhLzAvRDY5ODI3Qjk3 NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1NzFGMkJEQTQyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjk4MjdCOTc3NjVGOTQ5OThDRUE3NkEyMzk5OTU3MUYyQkRB NDI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvRDY5ODI3Qjk3NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1 NzFGMkJEQTQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPne+3MsPe8r+i5WlpEZd6QsEjeu064jUeJ L661QYKbMn+KaExWmyZH9/eujwbYra2iKiOQUUMiAbO0Nn8BjOqEgDKp+vipLsJc weEda9WGkqAoNPcGoozdZNU7D/pTcMZggULBSvLvO3JLx3rLpvH0aGhJj3Hw3ItC 2qMqAtQMdm+ZqFNWAB+WiZmlxBZEQHgjP9V+khR7Dqh1DMt8ndpPl5X+ERdTw9Jt uhhCzzRIxvFHOdfqbjr6Yje5ItPeVG9PojsM6X0HoPwTByS6dhboLu20UK9bd1Jf nudtO7lwxxbBtVFSvIcr4LsGwayQAVPQEUQdNtCYbfd2hyScoso= -----END CERTIFICATE-----Generated at Wed Jun 3 03:57:03 2026 by rpki-client