$ rpki-client -vvf rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft File: 54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft (raw, json) Hash identifier: 1G1E1fLHmJ8peZdE28GjkwIhtvexjwO/TEc9yz+GTBw= Subject key identifier: 9C:7D:F1:3D:42:6A:E1:08:4B:00:14:09:67:2C:63:05:8E:D3:9C:2E Authority key identifier: 54:40:77:54:A2:4A:F2:49:F0:FE:6F:5C:9D:D6:41:EB:DC:92:9B:B7 Certificate issuer: /CN=54407754A24AF249F0FE6F5C9DD641EBDC929BB7 Certificate serial: 68FC5D0233BD07C9DADA7839C96DD63F77FF6439 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 12:10:06 +0000 Manifest this update: Tue 02 Jun 2026 12:05:06 +0000 Manifest next update: Wed 03 Jun 2026 15:06:06 +0000 Files and hashes: 1: 323430363a656230303a3a2f33322d3438203d3e20313332363533.roa (hash: wOGa5HDAD18g7s458WGuA2zw20U9eHUQmcNEuznV9cc=) 2: 3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa (hash: RX5pvrelsOfCczsPMOPyTT9EJaPRhnL4ZABJet9eUTU=) 3: 54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl (hash: ufkp33ADKTblSCLyBal8cihc53g8+OE25IsMKWlD32M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:fc:5d:02:33:bd:07:c9:da:da:78:39:c9:6d:d6:3f:77:ff:64:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54407754A24AF249F0FE6F5C9DD641EBDC929BB7 Validity Not Before: Jun 2 12:05:06 2026 GMT Not After : Jun 3 15:06:06 2026 GMT Subject: CN=9C7DF13D426AE1084B001409672C63058ED39C2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:a8:d1:cd:c5:cb:1c:1f:0b:53:60:1f:0a: 9d:83:0b:4a:80:67:cb:82:df:78:cc:55:96:56:b6: 2f:f1:5a:90:29:3f:1d:0e:79:5b:be:90:d9:c1:ac: 2e:8a:8a:b0:7f:87:e5:b9:8a:87:aa:fe:9c:7b:fd: 5c:3e:06:42:05:25:fd:95:96:72:3c:ca:5d:30:31: 96:90:d8:f1:17:7d:95:af:74:9c:43:83:69:48:f3: 43:3d:3d:03:50:c9:4e:e8:5a:04:43:b2:dc:19:10: d2:f5:6b:e5:92:0e:bc:72:60:21:c0:38:89:0d:b0: ae:4f:0f:42:7e:10:09:54:a4:cd:63:43:f9:61:ec: af:26:15:01:af:df:c8:8d:ad:99:81:34:38:e2:6b: 05:4b:df:65:eb:61:b6:10:50:b2:25:1c:72:48:df: 87:c8:b2:25:42:4d:bf:cb:8a:d9:38:95:bb:10:a5: ae:35:ff:67:3f:95:23:10:ae:c8:56:b2:03:fd:ae: 15:a6:f4:d1:58:d3:a2:23:53:89:c5:34:57:58:55: 31:a4:85:b5:80:f6:2c:66:71:b9:e7:a3:48:8e:c8: b3:15:a6:c7:d9:ec:19:e0:b1:16:c1:a2:ba:49:84: 9e:fa:75:a9:08:da:e0:2f:b3:72:98:7a:df:d4:b2: 2b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7D:F1:3D:42:6A:E1:08:4B:00:14:09:67:2C:63:05:8E:D3:9C:2E X509v3 Authority Key Identifier: keyid:54:40:77:54:A2:4A:F2:49:F0:FE:6F:5C:9D:D6:41:EB:DC:92:9B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c8:8c:8b:09:f1:56:c1:a2:f9:ad:ec:00:a0:e1:f2:ef:84: 06:16:f4:47:2d:be:f5:53:24:5f:37:85:c7:5d:fa:e6:35:b8: 1f:00:59:41:b3:cc:25:6d:44:96:ee:d0:c3:01:f0:d4:7d:c0: 7f:04:d1:71:2c:9d:c0:87:ae:6e:02:d1:35:cd:5f:82:28:e1: 38:4c:ef:fd:50:15:3a:cb:af:4f:72:5a:3b:33:c3:1f:d8:a0: 2e:18:4a:db:1b:6c:67:6c:ed:ac:97:43:f3:e4:a6:f1:1b:8e: 39:f0:a3:88:3f:73:59:99:02:8f:3a:be:b0:26:e6:3f:0d:56: 78:40:4e:57:30:1d:ff:e7:b9:70:de:28:93:37:31:ac:c9:90: 8d:4d:be:b5:fd:ee:99:75:f3:31:a3:9c:c5:37:23:5b:d3:ef: 87:f7:a9:54:a6:2e:89:9d:36:df:60:0b:99:95:87:83:7e:6b: 6d:44:b9:10:9a:09:be:d0:3b:76:0c:7e:03:c5:eb:35:fb:9d: e2:8b:7d:58:eb:bc:d1:d1:b2:18:4a:4a:4f:b3:27:94:d1:fc: d3:8c:c7:0a:aa:78:6b:74:df:17:0a:c6:06:57:1e:2f:1c:5d: 81:87:64:69:a9:a4:e2:44:85:d2:db:f0:b0:0e:22:ec:2c:6a: 51:16:05:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaPxdAjO9B8na2ng5yW3WP3f/ZDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ0MDc3NTRBMjRBRjI0OUYwRkU2RjVDOURENjQxRUJE QzkyOUJCNzAeFw0yNjA2MDIxMjA1MDZaFw0yNjA2MDMxNTA2MDZaMDMxMTAvBgNV BAMTKDlDN0RGMTNENDI2QUUxMDg0QjAwMTQwOTY3MkM2MzA1OEVEMzlDMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpUqjRzcXLHB8LU2AfCp2DC0qA Z8uC33jMVZZWti/xWpApPx0OeVu+kNnBrC6KirB/h+W5ioeq/px7/Vw+BkIFJf2V lnI8yl0wMZaQ2PEXfZWvdJxDg2lI80M9PQNQyU7oWgRDstwZENL1a+WSDrxyYCHA OIkNsK5PD0J+EAlUpM1jQ/lh7K8mFQGv38iNrZmBNDjiawVL32XrYbYQULIlHHJI 34fIsiVCTb/Litk4lbsQpa41/2c/lSMQrshWsgP9rhWm9NFY06IjU4nFNFdYVTGk hbWA9ixmcbnno0iOyLMVpsfZ7BngsRbBorpJhJ76dakI2uAvs3KYet/Usiu/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnH3xPUJq4QhLABQJZyxjBY7TnC4wHwYDVR0j BBgwFoAUVEB3VKJK8knw/m9cndZB69ySm7cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2JkMjdjMGEtOTc5Mi00Y2JjLTlhOTYtZTcxMDUwYTFkZGUwLzAvNTQ0MDc3NTRB MjRBRjI0OUYwRkU2RjVDOURENjQxRUJEQzkyOUJCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDQwNzc1NEEyNEFGMjQ5RjBGRTZGNUM5REQ2NDFFQkRDOTI5 QkI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2JkMjdjMGEtOTc5Mi00Y2JjLTlh OTYtZTcxMDUwYTFkZGUwLzAvNTQ0MDc3NTRBMjRBRjI0OUYwRkU2RjVDOURENjQx RUJEQzkyOUJCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrIjIsJ8VbBovmt7ACg4fLvhAYW9EctvvVT JF83hcdd+uY1uB8AWUGzzCVtRJbu0MMB8NR9wH8E0XEsncCHrm4C0TXNX4Io4ThM 7/1QFTrLr09yWjszwx/YoC4YStsbbGds7ayXQ/PkpvEbjjnwo4g/c1mZAo86vrAm 5j8NVnhATlcwHf/nuXDeKJM3MazJkI1NvrX97pl18zGjnMU3I1vT74f3qVSmLomd Nt9gC5mVh4N+a21EuRCaCb7QO3YMfgPF6zX7neKLfVjrvNHRshhKSk+zJ5TR/NOM xwqqeGt03xcKxgZXHi8cXYGHZGmppOJEhdLb8LAOIuwsalEWBfA= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:39 2026 by rpki-client