$ rpki-client -vvf rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft File: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft (raw, json) Hash identifier: RjJaFnqfZxmtGnbHFafy9wc8XF4T5wKY5IK6jDfh7R8= Subject key identifier: C6:81:68:C4:9A:12:73:29:E5:AF:3B:59:EF:54:91:67:69:93:E1:46 Authority key identifier: D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F Certificate issuer: /CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Certificate serial: 444CB94F1C2226FFA5A87FBB280C511F72BAC648 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 22:38:14 +0000 Manifest this update: Tue 02 Jun 2026 22:33:14 +0000 Manifest next update: Thu 04 Jun 2026 00:12:14 +0000 Files and hashes: 1: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: aqo6iqJhHng8SceS0GB2zDkvhHekA+jqXPQYRYjWZBA=) 2: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: 4zjQiDOO1u6032UYBIQ3bbHO8yvV/zbc51HnTLw1PKM=) 3: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: BSuw1whkNZvJE4R4/j402PtZbyO7u4uvse4a8U9c4JA=) 4: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl (hash: ctLFxVSYHSpT15/1gxm/X3R2UgcEDxOgZXIONSMrwEI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 00:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:4c:b9:4f:1c:22:26:ff:a5:a8:7f:bb:28:0c:51:1f:72:ba:c6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Validity Not Before: Jun 2 22:33:14 2026 GMT Not After : Jun 4 00:12:14 2026 GMT Subject: CN=C68168C49A127329E5AF3B59EF5491676993E146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2d:f3:c9:68:7f:f9:e2:bc:eb:48:76:03:1c: 85:ba:f0:8a:86:51:62:53:f4:b7:5e:92:24:f1:05: 67:ee:9a:12:cd:6e:85:28:8b:fd:cb:ae:e6:48:d0: 93:87:bd:17:60:29:5f:20:90:9a:aa:c1:bf:79:0f: 55:5b:e8:2c:7c:fa:c5:74:03:7e:93:d1:40:f9:05: 5e:35:df:1d:1d:01:04:93:e6:eb:77:5a:55:ba:75: ba:1c:83:0a:fe:56:01:73:6d:30:bd:4b:82:32:91: 3f:61:80:e7:a7:ff:aa:5d:98:11:cf:39:1b:74:ea: 17:e5:c9:02:28:c8:6e:4c:23:51:f1:cf:86:05:e5: da:5a:f4:11:b0:0f:c7:db:97:8f:9f:47:57:1e:39: 30:cc:22:93:f0:90:1d:d5:83:98:22:ba:fd:f0:ee: 71:32:1f:ec:2d:4c:65:f4:2d:2e:9b:25:50:25:df: d9:c6:9c:fb:47:07:93:f8:aa:16:7a:47:ad:e3:53: bc:ba:1b:c8:53:f7:88:c2:a2:d9:9c:37:ae:91:ef: 8d:2a:57:f5:7e:f1:a2:05:17:73:3d:46:bc:eb:4c: 08:4d:2e:94:2f:e8:24:08:19:1f:ea:7e:99:d0:b1: 2e:3b:fd:7b:f7:83:d6:01:33:51:06:4d:83:1e:87: f4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:81:68:C4:9A:12:73:29:E5:AF:3B:59:EF:54:91:67:69:93:E1:46 X509v3 Authority Key Identifier: keyid:D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d7:6c:26:10:31:e3:7c:45:07:d8:80:72:94:79:74:84:4a: 77:5f:fb:3d:0f:88:d3:30:76:00:ab:a5:3d:8a:31:f2:ee:2d: 4e:73:d6:87:0f:27:00:65:46:41:83:a7:0b:3d:86:79:a5:74: bc:81:a2:c6:04:4c:36:d6:01:6b:2b:e3:0a:52:1f:0a:14:a8: df:56:2b:ae:13:f0:1f:8e:b7:93:63:d2:56:f0:e6:79:00:5a: 0a:a3:b7:6d:f1:e6:de:e5:dc:81:75:7f:4c:12:b1:08:26:5a: 56:a9:c6:b4:3d:78:38:65:ed:b0:c2:25:08:99:4e:55:e5:dc: a6:00:49:cd:57:15:bc:13:d4:bf:f9:f1:c3:f6:29:1d:db:cd: cb:f4:ac:4f:f1:01:3c:3e:64:67:d3:ad:40:ec:62:27:9e:f7: d1:c6:0e:75:a6:b2:ea:a2:7c:b0:f8:76:e2:56:67:d8:db:25: 04:fd:05:03:1f:f2:6f:d5:2f:74:2a:46:fc:fb:78:39:d3:7f: 9d:b2:b4:df:36:c7:18:70:4a:0e:37:eb:f7:d7:98:99:ed:60: fe:56:80:a1:7f:a5:21:35:b8:0a:0f:36:8d:1e:78:4f:1b:3e: 9c:91:4a:73:cb:96:76:b0:71:74:61:53:4c:52:48:6f:e0:06: ea:27:e7:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUREy5TxwiJv+lqH+7KAxRH3K6xkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0 NkYyOUQ3RjAeFw0yNjA2MDIyMjMzMTRaFw0yNjA2MDQwMDEyMTRaMDMxMTAvBgNV BAMTKEM2ODE2OEM0OUExMjczMjlFNUFGM0I1OUVGNTQ5MTY3Njk5M0UxNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQLfPJaH/54rzrSHYDHIW68IqG UWJT9LdekiTxBWfumhLNboUoi/3LruZI0JOHvRdgKV8gkJqqwb95D1Vb6Cx8+sV0 A36T0UD5BV413x0dAQST5ut3WlW6dbocgwr+VgFzbTC9S4IykT9hgOen/6pdmBHP ORt06hflyQIoyG5MI1Hxz4YF5dpa9BGwD8fbl4+fR1ceOTDMIpPwkB3Vg5giuv3w 7nEyH+wtTGX0LS6bJVAl39nGnPtHB5P4qhZ6R63jU7y6G8hT94jCotmcN66R740q V/V+8aIFF3M9RrzrTAhNLpQv6CQIGR/qfpnQsS47/Xv3g9YBM1EGTYMeh/RJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxoFoxJoScynlrztZ71SRZ2mT4UYwHwYDVR0j BBgwFoAU2Mt/i1Zm4H5Xy+/AI8b2A0bynX8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM2YWIwNGQtNjhjNy00MjQ5LWIxMDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1 NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0NkYyOUQ3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOENCN0Y4QjU2NjZFMDdFNTdDQkVGQzAyM0M2RjYwMzQ2RjI5 RDdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx MDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2 MDM0NkYyOUQ3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHXbCYQMeN8RQfYgHKUeXSESndf+z0PiNMw dgCrpT2KMfLuLU5z1ocPJwBlRkGDpws9hnmldLyBosYETDbWAWsr4wpSHwoUqN9W K64T8B+Ot5Nj0lbw5nkAWgqjt23x5t7l3IF1f0wSsQgmWlapxrQ9eDhl7bDCJQiZ TlXl3KYASc1XFbwT1L/58cP2KR3bzcv0rE/xATw+ZGfTrUDsYiee99HGDnWmsuqi fLD4duJWZ9jbJQT9BQMf8m/VL3QqRvz7eDnTf52ytN82xxhwSg436/fXmJntYP5W gKF/pSE1uAoPNo0eeE8bPpyRSnPLlnawcXRhU0xSSG/gBuon5wU= -----END CERTIFICATE-----Generated at Wed Jun 3 03:53:56 2026 by rpki-client