$ rpki-client -vvf rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft File: D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft (raw, json) Hash identifier: 97QZQtJ5lzzCzxKSpvn3TinMJaw32r6pwIf25jx8EFA= Subject key identifier: 4A:33:93:86:D7:0E:30:C5:05:49:13:28:68:27:AF:AD:66:D8:F8:81 Authority key identifier: D7:A0:5D:FF:98:BB:9B:3D:02:F4:B6:13:09:F4:6F:1C:93:67:08:4C Certificate issuer: /CN=D7A05DFF98BB9B3D02F4B61309F46F1C9367084C Certificate serial: 45327A98A75DFCF18F32F99F55EF9481850B0C50 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 13:26:33 +0000 Manifest this update: Tue 02 Jun 2026 13:21:33 +0000 Manifest next update: Wed 03 Jun 2026 16:14:33 +0000 Files and hashes: 1: D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.crl (hash: 44Rh12EFku1J9xIn5Uklq36ra5aUi4xTZMOYHkh7WVY=) 2: 3130332e3137392e3138302e302f32342d3234203d3e20313439333435.roa (hash: MblWuzrOZD28wkceG5+ZPQEBVsmdypcKgkkQ4DKBQmM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.crl rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:32:7a:98:a7:5d:fc:f1:8f:32:f9:9f:55:ef:94:81:85:0b:0c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7A05DFF98BB9B3D02F4B61309F46F1C9367084C Validity Not Before: Jun 2 13:21:33 2026 GMT Not After : Jun 3 16:14:33 2026 GMT Subject: CN=4A339386D70E30C5054913286827AFAD66D8F881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:77:10:68:56:3e:fe:ed:82:f7:85:b7:17:b7: 85:bd:44:1f:1c:0b:b7:91:f4:4f:c8:f8:9e:08:8d: d6:98:75:a4:07:c1:f1:8b:60:72:66:eb:8d:17:dc: 30:56:94:51:d8:43:7f:0a:37:9c:9a:15:e0:56:2f: 0d:ac:31:b2:05:2b:e5:9c:01:08:fa:29:9a:a0:d4: 3d:1d:a2:29:fc:77:3d:1d:70:ff:b1:50:97:61:fe: 1f:20:9c:76:55:42:d2:0c:69:98:ec:1e:7c:c7:89: cd:d6:43:b1:81:b2:af:e5:e4:a4:f9:64:a3:81:ae: de:a3:89:29:7f:94:85:07:c4:64:ea:f3:ab:6e:f0: ce:72:4f:b1:d7:27:97:e1:7d:d3:55:5a:7f:0c:92: 02:a3:1c:86:40:fd:1c:34:34:ab:b5:c4:97:bc:db: 36:ad:1e:45:90:31:6b:e0:ba:6f:2b:f5:7f:cd:1a: 73:98:e8:78:e6:be:9b:5f:4a:10:79:03:86:cf:d5: 7d:36:4d:26:b5:2a:87:bd:90:43:3f:17:ee:52:05: 33:59:b0:62:76:05:80:41:d5:b2:30:0c:96:b2:1d: 02:02:f6:6c:a3:a1:4a:4f:77:2e:6f:b0:94:63:46: 1b:d5:cf:42:6c:1e:82:28:88:23:c1:67:e5:e9:e4: 08:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:33:93:86:D7:0E:30:C5:05:49:13:28:68:27:AF:AD:66:D8:F8:81 X509v3 Authority Key Identifier: keyid:D7:A0:5D:FF:98:BB:9B:3D:02:F4:B6:13:09:F4:6F:1C:93:67:08:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b4:c8:39:89:20:ca:22:78:54:d0:2e:cd:92:c1:69:a3:54: 7e:68:03:56:db:cf:1a:d1:27:e1:7c:5a:99:72:64:df:d1:3a: 56:71:a5:3c:47:0e:d3:9c:53:f9:bf:33:67:06:5a:82:45:0b: c1:f3:73:37:a1:f6:02:8c:a9:95:91:13:36:e8:11:87:22:cb: 13:99:1f:16:fe:70:3a:75:5d:09:73:9c:9a:cf:b6:f6:0d:fa: dc:9e:31:40:08:df:eb:65:cf:61:c0:8e:e4:20:36:fe:90:65: 76:2e:47:60:8c:49:4d:a9:5d:67:65:d1:4c:e4:f9:58:00:ee: 66:19:74:ee:1b:7a:36:f5:be:5b:a6:9f:5c:97:55:2f:d7:73: 4a:b2:bf:b3:6c:65:a2:bb:4a:1c:2f:e5:7e:4d:eb:fe:24:ce: fc:19:c4:bf:0f:01:80:28:0a:93:7c:73:4e:01:fc:f9:af:0c: dc:44:fc:e7:10:7c:e6:29:8b:1a:1c:73:48:b3:90:48:2b:6b: 29:d9:26:cd:19:1d:5b:c7:d0:59:2b:70:bb:6d:80:9c:e5:b7: 9f:3a:e6:b4:4a:c1:db:be:7a:04:3c:29:f3:c8:13:49:d8:a7: 70:3e:20:9b:dd:5b:8b:52:39:ad:c6:a5:c2:1c:25:4c:52:4f: 5a:1f:b6:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURTJ6mKdd/PGPMvmfVe+UgYULDFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdBMDVERkY5OEJCOUIzRDAyRjRCNjEzMDlGNDZGMUM5 MzY3MDg0QzAeFw0yNjA2MDIxMzIxMzNaFw0yNjA2MDMxNjE0MzNaMDMxMTAvBgNV BAMTKDRBMzM5Mzg2RDcwRTMwQzUwNTQ5MTMyODY4MjdBRkFENjZEOEY4ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsdxBoVj7+7YL3hbcXt4W9RB8c C7eR9E/I+J4IjdaYdaQHwfGLYHJm640X3DBWlFHYQ38KN5yaFeBWLw2sMbIFK+Wc AQj6KZqg1D0doin8dz0dcP+xUJdh/h8gnHZVQtIMaZjsHnzHic3WQ7GBsq/l5KT5 ZKOBrt6jiSl/lIUHxGTq86tu8M5yT7HXJ5fhfdNVWn8MkgKjHIZA/Rw0NKu1xJe8 2zatHkWQMWvgum8r9X/NGnOY6HjmvptfShB5A4bP1X02TSa1Koe9kEM/F+5SBTNZ sGJ2BYBB1bIwDJayHQIC9myjoUpPdy5vsJRjRhvVz0JsHoIoiCPBZ+Xp5AhDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSjOThtcOMMUFSRMoaCevrWbY+IEwHwYDVR0j BBgwFoAU16Bd/5i7mz0C9LYTCfRvHJNnCEwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY5M2ZjOGYtYWZjYy00ZGVmLTgwNmYtZjQ0NDkzZDA3YTNmLzAvRDdBMDVERkY5 OEJCOUIzRDAyRjRCNjEzMDlGNDZGMUM5MzY3MDg0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0EwNURGRjk4QkI5QjNEMDJGNEI2MTMwOUY0NkYxQzkzNjcw ODRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY5M2ZjOGYtYWZjYy00ZGVmLTgw NmYtZjQ0NDkzZDA3YTNmLzAvRDdBMDVERkY5OEJCOUIzRDAyRjRCNjEzMDlGNDZG MUM5MzY3MDg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE60yDmJIMoieFTQLs2SwWmjVH5oA1bbzxrR J+F8WplyZN/ROlZxpTxHDtOcU/m/M2cGWoJFC8Hzczeh9gKMqZWREzboEYciyxOZ Hxb+cDp1XQlznJrPtvYN+tyeMUAI3+tlz2HAjuQgNv6QZXYuR2CMSU2pXWdl0Uzk +VgA7mYZdO4bejb1vlumn1yXVS/Xc0qyv7NsZaK7Shwv5X5N6/4kzvwZxL8PAYAo CpN8c04B/PmvDNxE/OcQfOYpixocc0izkEgraynZJs0ZHVvH0FkrcLttgJzlt586 5rRKwdu+egQ8KfPIE0nYp3A+IJvdW4tSOa3GpcIcJUxST1oftqM= -----END CERTIFICATE-----Generated at Wed Jun 3 03:40:03 2026 by rpki-client