$ rpki-client -vvf rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.mft File: D225946751D641016A8BDC8983AB89443F4481EE.mft (raw, json) Hash identifier: 1SZ7x9xcUfIJQbB0uWAqG9pws8fPkwlmWS2nWihZOtM= Subject key identifier: 2B:0E:B6:2B:80:96:68:F7:E1:86:F3:3B:FD:3A:B4:AF:CB:B7:D5:1E Authority key identifier: D2:25:94:67:51:D6:41:01:6A:8B:DC:89:83:AB:89:44:3F:44:81:EE Certificate issuer: /CN=D225946751D641016A8BDC8983AB89443F4481EE Certificate serial: 22745818DDE574455AA69474C0E7E937DA40D669 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D225946751D641016A8BDC8983AB89443F4481EE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 20:34:57 +0000 Manifest this update: Tue 02 Jun 2026 20:29:57 +0000 Manifest next update: Wed 03 Jun 2026 21:36:57 +0000 Files and hashes: 1: D225946751D641016A8BDC8983AB89443F4481EE.crl (hash: uzgtbOIdDbbD3/7FAeq2jJeKIBc18dJz8CLRSG1YR7c=) 2: 3130332e3231352e31332e302f32342d3234203d3e203634303332.roa (hash: jbs2GDDsgo2med8aBN6Q/a3OTj8U5cq+mFVfdUXlcps=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.crl rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D225946751D641016A8BDC8983AB89443F4481EE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:74:58:18:dd:e5:74:45:5a:a6:94:74:c0:e7:e9:37:da:40:d6:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D225946751D641016A8BDC8983AB89443F4481EE Validity Not Before: Jun 2 20:29:57 2026 GMT Not After : Jun 3 21:36:57 2026 GMT Subject: CN=2B0EB62B809668F7E186F33BFD3AB4AFCBB7D51E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1b:04:8d:86:bd:5e:13:9f:ad:34:64:7e:e9: 3a:6c:43:05:86:fc:4d:5c:7b:ca:fc:b0:5f:f4:42: 82:5a:1e:ed:e0:21:99:e9:cc:24:40:b6:d3:fb:97: a3:ca:0b:1c:f1:44:ab:a9:75:6c:7b:d0:e3:1a:ef: f5:c2:88:3d:cf:08:c1:fa:36:fa:87:d9:c9:08:8a: 85:da:84:32:e2:fb:2b:c9:1d:d4:f7:88:e3:40:ff: a3:3f:7b:fa:5b:ce:04:64:96:da:8f:7f:e6:43:cd: ab:e8:0b:64:e3:fb:71:20:d2:bd:1f:25:d9:da:63: 60:00:0a:0b:1c:e9:4e:fd:99:e2:bc:3f:39:c7:0a: f5:24:28:bd:f2:91:ef:05:10:ea:3d:1f:54:f6:23: ab:32:62:6a:7e:cd:23:db:c1:6d:13:87:63:79:d5: 6b:73:f4:e3:4b:e6:65:c4:15:2a:2d:2d:e5:ca:43: 62:86:bc:ed:41:cc:36:75:0b:6e:36:56:be:7e:40: 37:6a:ba:9a:a0:e6:d4:6c:1b:ca:f4:36:08:a8:6c: aa:24:97:9f:ab:c6:c8:7b:b1:60:d3:9c:e6:18:df: ff:2a:09:ed:33:5e:52:a8:52:97:94:f4:aa:5b:c1: 75:9d:ea:e7:64:b7:c7:a5:23:72:e2:10:a8:b0:ec: e1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0E:B6:2B:80:96:68:F7:E1:86:F3:3B:FD:3A:B4:AF:CB:B7:D5:1E X509v3 Authority Key Identifier: keyid:D2:25:94:67:51:D6:41:01:6A:8B:DC:89:83:AB:89:44:3F:44:81:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D225946751D641016A8BDC8983AB89443F4481EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:bd:67:87:b0:34:c4:a6:84:31:fc:d5:63:72:06:b7:fc:90: 58:a3:cb:cc:ca:06:95:f0:36:d8:fd:69:5f:04:48:0d:93:34: d9:c7:60:0a:9b:3f:74:54:46:9d:3c:9c:3e:12:01:a2:53:6d: 9b:76:02:43:c1:6b:7b:c9:91:04:51:e3:8e:ed:68:69:5b:be: fa:0e:06:90:7d:92:9c:58:83:85:91:b9:93:f0:cf:4d:15:26: e7:5a:57:a6:79:7c:a1:fc:bf:89:50:b6:27:b7:6f:10:41:ee: c2:fb:17:2a:89:e1:bb:64:9f:0e:9e:4a:fd:3e:ee:27:fc:a4: 56:34:06:18:92:85:38:87:06:10:76:7d:3f:16:51:24:00:1d: 96:1a:00:a7:f1:22:c0:99:ac:b4:07:4b:70:84:09:8c:69:16: a4:c0:5d:e2:80:eb:16:7d:eb:c5:78:17:08:bd:be:83:eb:e3: 9f:77:03:d2:46:c0:4b:9c:43:e5:6a:52:b5:9b:10:78:8a:48: 79:48:0f:18:cc:4a:68:ef:56:f4:7e:28:43:28:ee:56:a9:75: d2:d0:29:5a:2b:f5:14:27:32:50:a9:72:49:83:e6:7c:34:42: 01:12:70:3e:ae:f1:ff:74:7e:d3:f3:b7:bb:2e:ea:d5:3e:e1: 6f:ca:8c:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUInRYGN3ldEVappR0wOfpN9pA1mkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNTk0Njc1MUQ2NDEwMTZBOEJEQzg5ODNBQjg5NDQz RjQ0ODFFRTAeFw0yNjA2MDIyMDI5NTdaFw0yNjA2MDMyMTM2NTdaMDMxMTAvBgNV BAMTKDJCMEVCNjJCODA5NjY4RjdFMTg2RjMzQkZEM0FCNEFGQ0JCN0Q1MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzGwSNhr1eE5+tNGR+6TpsQwWG /E1ce8r8sF/0QoJaHu3gIZnpzCRAttP7l6PKCxzxRKupdWx70OMa7/XCiD3PCMH6 NvqH2ckIioXahDLi+yvJHdT3iONA/6M/e/pbzgRkltqPf+ZDzavoC2Tj+3Eg0r0f JdnaY2AACgsc6U79meK8PznHCvUkKL3yke8FEOo9H1T2I6syYmp+zSPbwW0Th2N5 1Wtz9ONL5mXEFSotLeXKQ2KGvO1BzDZ1C242Vr5+QDdqupqg5tRsG8r0NgiobKok l5+rxsh7sWDTnOYY3/8qCe0zXlKoUpeU9KpbwXWd6udkt8elI3LiEKiw7OHLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKw62K4CWaPfhhvM7/Tq0r8u31R4wHwYDVR0j BBgwFoAU0iWUZ1HWQQFqi9yJg6uJRD9Ege4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ1NTY4MTUtYTQ0NS00OTg4LTlmYTgtMjQ2ODZkOTM2Zjg0LzAvRDIyNTk0Njc1 MUQ2NDEwMTZBOEJEQzg5ODNBQjg5NDQzRjQ0ODFFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjI1OTQ2NzUxRDY0MTAxNkE4QkRDODk4M0FCODk0NDNGNDQ4 MUVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ1NTY4MTUtYTQ0NS00OTg4LTlm YTgtMjQ2ODZkOTM2Zjg0LzAvRDIyNTk0Njc1MUQ2NDEwMTZBOEJEQzg5ODNBQjg5 NDQzRjQ0ODFFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJG9Z4ewNMSmhDH81WNyBrf8kFijy8zKBpXw Ntj9aV8ESA2TNNnHYAqbP3RURp08nD4SAaJTbZt2AkPBa3vJkQRR447taGlbvvoO BpB9kpxYg4WRuZPwz00VJudaV6Z5fKH8v4lQtie3bxBB7sL7FyqJ4btknw6eSv0+ 7if8pFY0BhiShTiHBhB2fT8WUSQAHZYaAKfxIsCZrLQHS3CECYxpFqTAXeKA6xZ9 68V4Fwi9voPr4593A9JGwEucQ+VqUrWbEHiKSHlIDxjMSmjvVvR+KEMo7lapddLQ KVor9RQnMlCpckmD5nw0QgEScD6u8f90ftPzt7su6tU+4W/KjBg= -----END CERTIFICATE-----Generated at Wed Jun 3 04:09:40 2026 by rpki-client