$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft File: A0255156E104D661F25134DFEF8EF05BD73E8C04.mft (raw, json) Hash identifier: JFKkBqnOia52U80MWKSYs0nc/KdtGM40BZ/Z3bQFfFU= Subject key identifier: FE:7E:F5:BB:01:57:70:ED:3E:D3:2A:AC:2F:7F:67:9D:E4:7F:D4:D2 Authority key identifier: A0:25:51:56:E1:04:D6:61:F2:51:34:DF:EF:8E:F0:5B:D7:3E:8C:04 Certificate issuer: /CN=A0255156E104D661F25134DFEF8EF05BD73E8C04 Certificate serial: 5E0A1CBDE4A49F05439DA13B9A3B74F6C73ECE5F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 09:42:02 +0000 Manifest this update: Tue 02 Jun 2026 09:37:02 +0000 Manifest next update: Wed 03 Jun 2026 12:57:02 +0000 Files and hashes: 1: 3130332e3136312e3139342e302f32332d3233203d3e20313431363232.roa (hash: mPG/zuyU/XUm9QM+7MhLY4PXMJXJc11dpd+ekiFfezo=) 2: 3130332e3136312e3139342e302f32342d3234203d3e20313431363232.roa (hash: OwiazASeDIe+vC4nWyzCtb4oqvt1RTV99SuTJlMtud4=) 3: A0255156E104D661F25134DFEF8EF05BD73E8C04.crl (hash: J/bIgzfoR49iAGP2ULAGXjMc7W70fuZSo8T4Jez8eI8=) 4: 3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa (hash: 00GZwg/Y9T0ZdKSWulyuB3JLDZ01RudXgy9Ju+lMmEg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.crl rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0a:1c:bd:e4:a4:9f:05:43:9d:a1:3b:9a:3b:74:f6:c7:3e:ce:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0255156E104D661F25134DFEF8EF05BD73E8C04 Validity Not Before: Jun 2 09:37:02 2026 GMT Not After : Jun 3 12:57:02 2026 GMT Subject: CN=FE7EF5BB015770ED3ED32AAC2F7F679DE47FD4D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:19:29:30:87:0e:af:00:f7:3d:13:c1:42:8b: d3:f2:fd:c2:f8:62:c5:66:1c:82:47:06:d9:33:50: 03:20:7b:3b:f2:a5:ef:a1:2f:82:a0:c9:85:81:1c: 21:68:72:1b:f5:04:04:dd:da:ac:fb:04:90:56:14: 51:5a:53:aa:8e:d0:7e:36:e0:6e:da:8f:a0:12:7f: 79:f5:6e:0e:a9:5d:00:a9:12:39:7a:af:85:59:3c: 0c:ba:0c:53:30:6a:99:b0:a4:99:52:c7:cb:57:15: b1:21:89:eb:a8:d5:c6:86:bc:ef:41:4b:dc:81:30: a6:7a:41:05:aa:b8:a7:13:2d:46:17:9b:b5:1b:b6: 15:57:74:43:91:29:11:9a:7b:2f:27:7e:f7:e7:84: 1f:7b:d0:4d:fb:d6:46:f3:b8:fc:1d:2a:4f:98:bb: 53:be:6a:b2:e8:6f:0f:78:9d:f7:5b:7f:54:ce:da: 78:a7:4f:6f:38:25:da:35:ab:40:3a:91:8b:5d:c7: 79:ea:00:70:b1:e2:d0:58:58:fa:29:21:29:1d:1c: c4:53:53:6e:e5:1e:a2:6c:f9:55:99:4b:7d:1f:9b: d4:f1:b2:97:64:04:e5:8d:54:6d:0d:e9:18:e0:6d: 08:a1:f1:45:37:3e:55:5d:0b:61:06:c4:40:2c:7f: 83:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7E:F5:BB:01:57:70:ED:3E:D3:2A:AC:2F:7F:67:9D:E4:7F:D4:D2 X509v3 Authority Key Identifier: keyid:A0:25:51:56:E1:04:D6:61:F2:51:34:DF:EF:8E:F0:5B:D7:3E:8C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:7c:3e:b0:a2:74:59:28:2a:d3:17:55:ec:8e:5b:36:45:4a: 59:78:b9:3e:b8:b1:dd:ef:46:c9:e2:4f:73:c5:c9:04:3d:b5: f6:05:fe:4f:f7:f1:9c:72:19:47:99:6a:3a:f0:be:3c:01:7e: bb:7d:91:1a:b3:14:93:81:1f:6a:c1:e8:98:9f:c8:e1:88:fb: 9d:62:98:74:0b:3e:6c:01:d3:80:18:af:83:86:ec:c1:b9:77: db:42:5a:06:77:4d:1a:3f:3b:68:4b:6b:d6:fc:50:6c:86:2a: da:36:01:b6:ed:50:e6:0e:6d:81:a7:b1:3a:5f:de:da:81:47: 23:c3:68:e7:1d:59:c5:16:b3:8a:3c:cc:1c:79:da:0b:65:9c: ae:9b:5b:ee:c3:ed:95:29:ab:40:b4:3d:90:c3:5c:7a:7f:84: 26:66:64:a6:8f:b8:c8:91:3b:3b:3a:51:01:a9:bb:f9:f1:bb: ba:7f:37:21:71:da:e7:3e:d9:f4:2a:44:d8:16:e7:20:91:58: 1b:19:89:80:f5:0c:cb:be:0f:e0:e9:d5:c4:c0:b9:5a:da:0c: 8a:50:bd:9d:87:79:99:e8:1e:2e:c9:7f:81:a5:9e:f8:50:6f: 9f:75:fd:48:e1:86:d8:38:40:65:45:d4:05:82:45:8d:ed:d5: 22:fe:c7:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXgocveSknwVDnaE7mjt09sc+zl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAyNTUxNTZFMTA0RDY2MUYyNTEzNERGRUY4RUYwNUJE NzNFOEMwNDAeFw0yNjA2MDIwOTM3MDJaFw0yNjA2MDMxMjU3MDJaMDMxMTAvBgNV BAMTKEZFN0VGNUJCMDE1NzcwRUQzRUQzMkFBQzJGN0Y2NzlERTQ3RkQ0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2GSkwhw6vAPc9E8FCi9Py/cL4 YsVmHIJHBtkzUAMgezvype+hL4KgyYWBHCFochv1BATd2qz7BJBWFFFaU6qO0H42 4G7aj6ASf3n1bg6pXQCpEjl6r4VZPAy6DFMwapmwpJlSx8tXFbEhieuo1caGvO9B S9yBMKZ6QQWquKcTLUYXm7UbthVXdEORKRGaey8nfvfnhB970E371kbzuPwdKk+Y u1O+arLobw94nfdbf1TO2ninT284Jdo1q0A6kYtdx3nqAHCx4tBYWPopISkdHMRT U27lHqJs+VWZS30fm9TxspdkBOWNVG0N6RjgbQih8UU3PlVdC2EGxEAsf4P/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/n71uwFXcO0+0yqsL39nneR/1NIwHwYDVR0j BBgwFoAUoCVRVuEE1mHyUTTf747wW9c+jAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NiZmIyMjgtZmQwNS00YWZkLTg3YmQtZWQ1ODBiNTUwMzZmLzAvQTAyNTUxNTZF MTA0RDY2MUYyNTEzNERGRUY4RUYwNUJENzNFOEMwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDI1NTE1NkUxMDRENjYxRjI1MTM0REZFRjhFRjA1QkQ3M0U4 QzA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NiZmIyMjgtZmQwNS00YWZkLTg3 YmQtZWQ1ODBiNTUwMzZmLzAvQTAyNTUxNTZFMTA0RDY2MUYyNTEzNERGRUY4RUYw NUJENzNFOEMwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIV8PrCidFkoKtMXVeyOWzZFSll4uT64sd3v RsniT3PFyQQ9tfYF/k/38ZxyGUeZajrwvjwBfrt9kRqzFJOBH2rB6JifyOGI+51i mHQLPmwB04AYr4OG7MG5d9tCWgZ3TRo/O2hLa9b8UGyGKto2AbbtUOYObYGnsTpf 3tqBRyPDaOcdWcUWs4o8zBx52gtlnK6bW+7D7ZUpq0C0PZDDXHp/hCZmZKaPuMiR Ozs6UQGpu/nxu7p/NyFx2uc+2fQqRNgW5yCRWBsZiYD1DMu+D+Dp1cTAuVraDIpQ vZ2HeZnoHi7Jf4GlnvhQb591/Ujhhtg4QGVF1AWCRY3t1SL+x1w= -----END CERTIFICATE-----Generated at Wed Jun 3 03:42:39 2026 by rpki-client