$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft File: 10305EB1D756B8E205948FA9D96C07D30D5559C6.mft (raw, json) Hash identifier: pPejBpseU8ivqkrA6Cy6TNN9aE1dBJq4VGWdiQpxolM= Subject key identifier: 0C:2D:31:15:58:50:0C:BE:E4:F7:A0:C1:D9:50:EA:04:21:8E:DE:E4 Authority key identifier: 10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6 Certificate issuer: /CN=10305EB1D756B8E205948FA9D96C07D30D5559C6 Certificate serial: 4BBD89D3826E2E3E5039114D8B25A71AED65C694 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 02:27:46 +0000 Manifest this update: Wed 03 Jun 2026 02:22:46 +0000 Manifest next update: Thu 04 Jun 2026 05:17:46 +0000 Files and hashes: 1: 3130332e32382e3231382e302f32342d3234203d3e203538333835.roa (hash: w+xTBuxDVGZDvJln2gWD2TMLIgtp2a/JxAVQQSe/MJc=) 2: 10305EB1D756B8E205948FA9D96C07D30D5559C6.crl (hash: 1N56TO3QCunQQ9t8iZmJVV/AhT86bCoQQH2ZvKBPNzY=) 3: 3130332e32332e3131362e302f32332d3234203d3e203538333835.roa (hash: xg8S5Jz4WdUD3Z66GOwGk02Rpx5TvYnlOCLFL6/urQw=) 4: 3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa (hash: wzVp735bfnp8XDnpMDExEB2u8d/EmF9ou01fz223/d4=) 5: 3131302e39322e37342e302f32332d3234203d3e203538333835.roa (hash: G6PGQreB8GGiXWbjNuIkvOBqamEXNRruYXzWZ5ntbWM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.crl rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 04:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:bd:89:d3:82:6e:2e:3e:50:39:11:4d:8b:25:a7:1a:ed:65:c6:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10305EB1D756B8E205948FA9D96C07D30D5559C6 Validity Not Before: Jun 3 02:22:46 2026 GMT Not After : Jun 4 05:17:46 2026 GMT Subject: CN=0C2D311558500CBEE4F7A0C1D950EA04218EDEE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e6:b7:9a:ff:02:dd:7c:28:32:a1:e0:01:43: a0:76:39:13:3a:0e:47:12:c9:58:b2:9a:a1:cb:75: d1:08:c0:71:21:7e:18:a9:32:7c:11:d5:db:27:b0: 0f:14:84:bd:e5:b2:32:97:47:39:d0:17:c1:cd:69: ee:97:3c:3f:b5:34:0b:b4:3c:90:8b:79:b5:c3:ff: 37:07:23:bf:6a:a4:2f:fa:c5:af:99:8d:8e:20:a0: 74:4c:3a:42:0d:a1:00:44:3f:28:87:71:e9:b8:61: 67:b5:01:e2:86:27:bf:02:50:05:63:d7:c7:e2:9e: 89:8b:9d:4f:39:7c:2c:8c:98:c1:07:b6:56:9c:40: 24:bc:5e:ab:f6:a4:01:07:c1:f8:85:5b:36:57:20: bf:1e:21:db:c2:1d:59:b0:84:fb:4b:e1:af:a1:6b: 43:a6:e2:64:31:96:08:60:22:15:f3:86:ea:00:a9: 7c:4a:98:bf:b3:62:b1:fb:36:41:c9:b9:7c:46:16: af:b4:52:e4:b9:66:da:e4:a5:fb:1b:20:a5:f3:86: 5b:6e:ef:a2:24:d6:2a:9b:c0:e1:6a:f6:4a:e5:ae: 4f:71:3f:04:30:46:f0:6b:1e:98:00:4d:69:d2:85: ff:93:c4:41:11:39:04:a7:c5:20:a1:5c:29:cf:4b: 06:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2D:31:15:58:50:0C:BE:E4:F7:A0:C1:D9:50:EA:04:21:8E:DE:E4 X509v3 Authority Key Identifier: keyid:10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:7c:25:19:39:26:03:b8:fe:a2:6d:fe:db:66:31:2d:ef:4a: 06:bd:2e:e6:20:9e:07:ab:33:c8:1d:f6:eb:63:55:b0:2f:44: 28:e5:c9:b6:30:31:f2:fb:fb:11:5e:6f:69:c2:86:07:38:c1: 33:da:48:59:fc:e8:b4:39:bc:c9:6d:7f:14:3e:fb:dd:54:d6: b4:d8:04:92:92:2a:53:67:69:56:6e:6b:57:b3:ae:b8:2d:68: a3:c2:c1:2d:d6:b8:c1:ba:12:17:d9:82:eb:a3:df:8d:84:08: 51:66:74:28:79:63:80:ab:8d:f0:d0:fc:fc:6c:bc:78:2c:c4: 5c:bc:48:e8:8a:10:a2:be:54:e4:5e:86:83:f1:22:bd:d1:a4: a7:06:86:51:5f:be:40:99:87:1a:43:58:89:f6:7a:14:b6:b8: ff:d4:40:33:d4:41:f8:76:6a:61:1a:22:4d:26:71:c6:d1:d7: 9d:d5:a3:b6:ca:fd:4e:33:5b:31:0f:a6:90:0f:73:e0:f9:dc: 8a:87:92:8c:b5:a4:56:d7:90:01:2d:78:c7:fb:61:ec:5b:f7: 83:47:b9:6d:61:c8:73:b7:0d:a5:6f:6f:b5:8b:d0:90:2d:a2: 64:00:b1:66:53:ed:0b:54:b2:ba:35:33:f5:ee:02:27:fe:ff: 39:7b:e8:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS72J04JuLj5QORFNiyWnGu1lxpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAzMDVFQjFENzU2QjhFMjA1OTQ4RkE5RDk2QzA3RDMw RDU1NTlDNjAeFw0yNjA2MDMwMjIyNDZaFw0yNjA2MDQwNTE3NDZaMDMxMTAvBgNV BAMTKDBDMkQzMTE1NTg1MDBDQkVFNEY3QTBDMUQ5NTBFQTA0MjE4RURFRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo5rea/wLdfCgyoeABQ6B2ORM6 DkcSyViymqHLddEIwHEhfhipMnwR1dsnsA8UhL3lsjKXRznQF8HNae6XPD+1NAu0 PJCLebXD/zcHI79qpC/6xa+ZjY4goHRMOkINoQBEPyiHcem4YWe1AeKGJ78CUAVj 18finomLnU85fCyMmMEHtlacQCS8Xqv2pAEHwfiFWzZXIL8eIdvCHVmwhPtL4a+h a0Om4mQxlghgIhXzhuoAqXxKmL+zYrH7NkHJuXxGFq+0UuS5ZtrkpfsbIKXzhltu 76Ik1iqbwOFq9krlrk9xPwQwRvBrHpgATWnShf+TxEEROQSnxSChXCnPSwYDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDC0xFVhQDL7k96DB2VDqBCGO3uQwHwYDVR0j BBgwFoAUEDBesddWuOIFlI+p2WwH0w1VWcYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM5MjUzODgtMzVjNi00MWQ3LTlkYzQtZGI0ZDExOGQxMzVhLzAvMTAzMDVFQjFE NzU2QjhFMjA1OTQ4RkE5RDk2QzA3RDMwRDU1NTlDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDMwNUVCMUQ3NTZCOEUyMDU5NDhGQTlEOTZDMDdEMzBENTU1 OUM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM5MjUzODgtMzVjNi00MWQ3LTlk YzQtZGI0ZDExOGQxMzVhLzAvMTAzMDVFQjFENzU2QjhFMjA1OTQ4RkE5RDk2QzA3 RDMwRDU1NTlDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEd8JRk5JgO4/qJt/ttmMS3vSga9LuYgnger M8gd9utjVbAvRCjlybYwMfL7+xFeb2nChgc4wTPaSFn86LQ5vMltfxQ++91U1rTY BJKSKlNnaVZua1ezrrgtaKPCwS3WuMG6EhfZguuj342ECFFmdCh5Y4CrjfDQ/Pxs vHgsxFy8SOiKEKK+VORehoPxIr3RpKcGhlFfvkCZhxpDWIn2ehS2uP/UQDPUQfh2 amEaIk0mccbR153Vo7bK/U4zWzEPppAPc+D53IqHkoy1pFbXkAEteMf7Yexb94NH uW1hyHO3DaVvb7WL0JAtomQAsWZT7QtUsro1M/XuAif+/zl76D0= -----END CERTIFICATE-----Generated at Wed Jun 3 04:26:33 2026 by rpki-client