$ rpki-client -vvf rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft File: 7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft (raw, json) Hash identifier: ihuTKoLbCQ7AKdQS6qCQ+tw//sNkLulRedWbEklSb3s= Subject key identifier: B6:42:0B:18:6C:5E:1D:D7:83:88:0E:EF:EF:F9:71:A8:3B:E9:A0:51 Authority key identifier: 7D:C6:77:32:0E:CD:4F:9F:A6:1F:D2:17:2F:A0:FF:BF:74:4F:6A:33 Certificate issuer: /CN=7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33 Certificate serial: 3A915325548E3E3F072C84B68AC132F960A20927 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:57:54 +0000 Manifest this update: Tue 02 Jun 2026 18:52:54 +0000 Manifest next update: Wed 03 Jun 2026 21:32:54 +0000 Files and hashes: 1: 3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa (hash: baKMFekyN+9MNlrAI1yXYRuteIC69CJjTfZATjoU5so=) 2: 7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl (hash: gOdNNkzHi4OKq0HGxY3Sn7SNnturXRrDYFbaP2GoTig=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:91:53:25:54:8e:3e:3f:07:2c:84:b6:8a:c1:32:f9:60:a2:09:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33 Validity Not Before: Jun 2 18:52:54 2026 GMT Not After : Jun 3 21:32:54 2026 GMT Subject: CN=B6420B186C5E1DD783880EEFEFF971A83BE9A051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ef:b6:58:94:4b:84:8b:70:fe:55:82:b2:fe: 68:f9:a7:b4:be:86:30:35:d9:2d:a9:b8:20:d8:81: e6:32:4b:78:d5:80:c3:49:49:18:b3:82:9c:c0:83: c0:eb:ed:a1:7a:0f:87:96:71:28:ac:b1:51:51:f5: 92:c9:90:4b:7e:d4:74:60:f5:10:dc:0a:c5:15:c6: c7:50:ea:8a:19:25:1c:1c:01:da:4f:47:2a:f1:5c: 9d:bc:f8:53:e2:d7:20:8e:cf:77:13:cf:38:74:de: 8d:9f:65:fd:17:d0:c7:d4:ca:80:d0:61:f1:ff:d2: 14:c7:f4:03:15:9b:81:02:5e:3a:80:77:c9:a1:75: d0:84:8b:ff:aa:ce:b8:e6:c9:ff:b2:ac:e4:6b:d0: 82:93:c0:fc:2e:84:4a:33:f3:46:6b:04:f8:78:05: a5:78:cc:f0:ad:e0:8b:88:57:2f:5d:e5:ca:6d:69: 6b:38:bd:9b:d1:7e:82:d3:e2:4c:8d:a8:a3:92:aa: c9:b8:73:56:64:f1:5c:c3:82:26:09:61:7c:e9:93: 33:7d:c7:45:4e:f2:1a:91:ff:3c:2f:65:ff:82:dd: 18:2a:9e:11:f6:73:01:e9:22:bb:23:fc:7e:9c:1f: 99:dc:bd:b1:93:1c:62:0d:83:90:4d:d0:53:97:0c: 1c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:42:0B:18:6C:5E:1D:D7:83:88:0E:EF:EF:F9:71:A8:3B:E9:A0:51 X509v3 Authority Key Identifier: keyid:7D:C6:77:32:0E:CD:4F:9F:A6:1F:D2:17:2F:A0:FF:BF:74:4F:6A:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ff:64:54:ec:b3:7d:4e:3a:d6:e4:fc:84:1a:37:1c:51:8e: be:07:23:08:77:20:4a:90:d7:3e:6f:de:d8:33:1c:ca:8d:7f: 7a:a4:95:e8:ec:67:2c:ef:d7:c0:1f:60:06:db:f8:3e:60:ca: 8c:89:3e:84:1e:87:cf:b1:e9:38:08:55:5f:6d:92:83:31:1b: 53:f8:cc:15:ff:03:f2:f0:b4:39:22:ec:15:11:de:3c:e5:14: 2f:9d:80:fb:bb:79:49:6d:47:e5:f4:ab:28:79:24:ae:e5:5c: 8b:dd:db:a3:6b:44:e6:51:04:00:78:3b:1a:24:84:70:b6:1f: f5:47:4f:ff:b3:45:de:c4:bb:31:3b:ce:27:2d:0f:0d:7e:6e: 71:25:35:60:b8:35:41:74:66:3b:a4:48:c4:1e:d0:3e:21:96: 16:7f:56:c4:c0:06:12:a6:6e:97:53:f5:df:d3:c9:32:af:c3: 10:c1:f1:54:61:31:8a:a6:ad:0c:02:be:9e:20:fc:5e:14:36: 29:bb:c9:bc:2a:1d:38:a5:45:ac:e2:3a:d1:b9:01:64:29:12: 64:41:11:38:6b:40:0c:30:42:b2:bf:35:43:c7:02:51:77:d1: 64:44:bd:4b:e0:d8:af:2d:45:8a:77:db:7a:85:cd:f5:56:d5: 51:49:d9:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOpFTJVSOPj8HLIS2isEy+WCiCScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RDNjc3MzIwRUNENEY5RkE2MUZEMjE3MkZBMEZGQkY3 NDRGNkEzMzAeFw0yNjA2MDIxODUyNTRaFw0yNjA2MDMyMTMyNTRaMDMxMTAvBgNV BAMTKEI2NDIwQjE4NkM1RTFERDc4Mzg4MEVFRkVGRjk3MUE4M0JFOUEwNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC77ZYlEuEi3D+VYKy/mj5p7S+ hjA12S2puCDYgeYyS3jVgMNJSRizgpzAg8Dr7aF6D4eWcSissVFR9ZLJkEt+1HRg 9RDcCsUVxsdQ6ooZJRwcAdpPRyrxXJ28+FPi1yCOz3cTzzh03o2fZf0X0MfUyoDQ YfH/0hTH9AMVm4ECXjqAd8mhddCEi/+qzrjmyf+yrORr0IKTwPwuhEoz80ZrBPh4 BaV4zPCt4IuIVy9d5cptaWs4vZvRfoLT4kyNqKOSqsm4c1Zk8VzDgiYJYXzpkzN9 x0VO8hqR/zwvZf+C3RgqnhH2cwHpIrsj/H6cH5ncvbGTHGINg5BN0FOXDBwxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtkILGGxeHdeDiA7v7/lxqDvpoFEwHwYDVR0j BBgwFoAUfcZ3Mg7NT5+mH9IXL6D/v3RPajMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM1YTlkZGYtYzEwOS00ZmMxLWEzMGQtOGYwNGI4MzM4MWJlLzAvN0RDNjc3MzIw RUNENEY5RkE2MUZEMjE3MkZBMEZGQkY3NDRGNkEzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83REM2NzczMjBFQ0Q0RjlGQTYxRkQyMTcyRkEwRkZCRjc0NEY2 QTMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM1YTlkZGYtYzEwOS00ZmMxLWEz MGQtOGYwNGI4MzM4MWJlLzAvN0RDNjc3MzIwRUNENEY5RkE2MUZEMjE3MkZBMEZG QkY3NDRGNkEzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIP/ZFTss31OOtbk/IQaNxxRjr4HIwh3IEqQ 1z5v3tgzHMqNf3qklejsZyzv18AfYAbb+D5gyoyJPoQeh8+x6TgIVV9tkoMxG1P4 zBX/A/LwtDki7BUR3jzlFC+dgPu7eUltR+X0qyh5JK7lXIvd26NrROZRBAB4Oxok hHC2H/VHT/+zRd7EuzE7zictDw1+bnElNWC4NUF0ZjukSMQe0D4hlhZ/VsTABhKm bpdT9d/TyTKvwxDB8VRhMYqmrQwCvp4g/F4UNim7ybwqHTilRaziOtG5AWQpEmRB EThrQAwwQrK/NUPHAlF30WREvUvg2K8tRYp323qFzfVW1VFJ2UI= -----END CERTIFICATE-----Generated at Wed Jun 3 03:49:51 2026 by rpki-client