$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft File: 5935015AB8D2AA07565ACB7B918A50D49090AA26.mft (raw, json) Hash identifier: f39+Y890sCfHGIOa7uf7PUYICyn+kcOu3vnWpzI7pYM= Subject key identifier: C9:6F:15:AF:D9:08:0E:30:45:FE:B6:9D:40:FB:DC:44:A2:65:F8:A9 Authority key identifier: 59:35:01:5A:B8:D2:AA:07:56:5A:CB:7B:91:8A:50:D4:90:90:AA:26 Certificate issuer: /CN=5935015AB8D2AA07565ACB7B918A50D49090AA26 Certificate serial: 4C1B0AF0CB025CA5B066A015C73CDCBC9962011F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5935015AB8D2AA07565ACB7B918A50D49090AA26.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 13:31:39 +0000 Manifest this update: Tue 02 Jun 2026 13:26:39 +0000 Manifest next update: Wed 03 Jun 2026 17:17:39 +0000 Files and hashes: 1: 5935015AB8D2AA07565ACB7B918A50D49090AA26.crl (hash: AcaLEs/J6o1UpVEPGXsx2XNjMd7kiK/wDFgo/6QPw3k=) 2: 3130332e3233392e34312e302f32342d3234203d3e20313531353331.roa (hash: YukTsqh5CPIPhkM3TqJo0K1IkyqlUpFEdp2Xtp+n8JI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.crl rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5935015AB8D2AA07565ACB7B918A50D49090AA26.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 17:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:1b:0a:f0:cb:02:5c:a5:b0:66:a0:15:c7:3c:dc:bc:99:62:01:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5935015AB8D2AA07565ACB7B918A50D49090AA26 Validity Not Before: Jun 2 13:26:39 2026 GMT Not After : Jun 3 17:17:39 2026 GMT Subject: CN=C96F15AFD9080E3045FEB69D40FBDC44A265F8A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e6:32:ab:f3:16:fe:d9:49:4e:e6:2c:32:3a: 12:ec:60:a0:1a:2e:2a:d1:f7:4a:51:98:c0:7a:eb: a9:12:91:83:90:9d:f7:89:e5:90:2c:30:9c:8d:1e: 93:e0:fd:9e:e8:1d:fe:a3:50:c8:27:80:fd:15:f6: 87:f6:33:3b:12:fb:3a:f0:e3:3d:2d:7c:22:98:36: 83:f9:73:7c:b5:a7:bd:20:c8:0d:3e:07:42:1b:b2: 12:09:ac:b9:64:e8:83:6a:2c:0a:e8:45:cb:09:de: 11:34:ef:c9:62:f8:fa:d9:fd:9b:9c:e1:03:33:31: 49:75:b7:11:1d:34:d5:3c:79:01:9f:a8:7d:ec:75: 56:4a:4d:5a:cc:51:5a:1c:fe:f9:c5:10:e9:8c:a3: 21:96:52:7b:dc:79:a2:40:ab:71:87:4d:13:4f:45: 2b:99:77:ee:38:38:b9:83:9e:4c:9c:5b:67:9c:83: bb:1d:af:17:84:31:db:10:49:2f:e8:4c:14:c0:0d: 31:fa:8a:61:ee:a2:c2:25:e0:4f:23:42:2a:30:53: 3f:f5:f3:98:6e:80:f3:71:65:3e:cb:ae:e9:f7:8b: 1e:57:10:32:82:c3:73:02:33:92:c5:9f:23:3c:6f: 58:ec:b5:58:17:f2:b8:ad:d0:39:e9:05:6e:4f:dc: 02:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6F:15:AF:D9:08:0E:30:45:FE:B6:9D:40:FB:DC:44:A2:65:F8:A9 X509v3 Authority Key Identifier: keyid:59:35:01:5A:B8:D2:AA:07:56:5A:CB:7B:91:8A:50:D4:90:90:AA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5935015AB8D2AA07565ACB7B918A50D49090AA26.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a6:90:ca:08:3f:29:61:4f:f6:b5:0c:7e:6b:76:3f:db:50: ff:fa:8d:28:97:d4:c1:48:3b:28:b2:da:d4:b5:f2:44:e0:a6: df:cd:7e:38:a3:f3:f8:63:7d:d8:cd:c2:0f:9a:15:13:25:c3: fa:4d:1f:e9:cf:2e:be:1c:9a:93:7c:19:86:bc:a5:88:18:5b: 82:35:14:4c:e7:ef:01:a6:37:bd:d4:fd:25:b8:2b:d9:9f:2f: 66:2c:93:71:c0:cb:02:19:17:40:ab:24:d0:e4:e3:c4:52:7c: 95:66:1f:5d:57:e6:9d:cb:a2:7c:b9:e3:01:7c:93:de:58:21: e2:4e:9a:28:32:87:dc:5d:83:18:39:02:e1:ea:58:53:57:16: fa:c3:16:0f:03:18:82:f2:ce:a0:99:68:cf:58:d6:44:e6:5c: 5b:8c:6a:d9:ea:50:2c:89:8c:c4:ad:af:c0:7e:1e:f9:3e:13: 79:b1:6b:f7:8e:e0:b0:38:18:dc:f8:c8:2f:50:02:a4:4c:ba: 3b:65:5a:64:b8:c4:26:e8:10:6e:6f:20:43:35:f7:06:c5:e3: 75:c4:29:bb:55:8d:0d:4c:09:16:c9:f6:91:cd:9d:c1:3d:c1: 40:41:57:c6:3a:73:4c:23:60:eb:05:74:16:5d:59:f5:fc:28: fb:90:27:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTBsK8MsCXKWwZqAVxzzcvJliAR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTkzNTAxNUFCOEQyQUEwNzU2NUFDQjdCOTE4QTUwRDQ5 MDkwQUEyNjAeFw0yNjA2MDIxMzI2MzlaFw0yNjA2MDMxNzE3MzlaMDMxMTAvBgNV BAMTKEM5NkYxNUFGRDkwODBFMzA0NUZFQjY5RDQwRkJEQzQ0QTI2NUY4QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5jKr8xb+2UlO5iwyOhLsYKAa LirR90pRmMB666kSkYOQnfeJ5ZAsMJyNHpPg/Z7oHf6jUMgngP0V9of2MzsS+zrw 4z0tfCKYNoP5c3y1p70gyA0+B0IbshIJrLlk6INqLAroRcsJ3hE078li+PrZ/Zuc 4QMzMUl1txEdNNU8eQGfqH3sdVZKTVrMUVoc/vnFEOmMoyGWUnvceaJAq3GHTRNP RSuZd+44OLmDnkycW2ecg7sdrxeEMdsQSS/oTBTADTH6imHuosIl4E8jQiowUz/1 85hugPNxZT7Lrun3ix5XEDKCw3MCM5LFnyM8b1jstVgX8rit0DnpBW5P3AKJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyW8Vr9kIDjBF/radQPvcRKJl+KkwHwYDVR0j BBgwFoAUWTUBWrjSqgdWWst7kYpQ1JCQqiYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRiZmM1YzMtYzM5Yy00NWVkLWFlODctMzg0YTZkY2I3OTM4LzAvNTkzNTAxNUFC OEQyQUEwNzU2NUFDQjdCOTE4QTUwRDQ5MDkwQUEyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OTM1MDE1QUI4RDJBQTA3NTY1QUNCN0I5MThBNTBENDkwOTBB QTI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRiZmM1YzMtYzM5Yy00NWVkLWFl ODctMzg0YTZkY2I3OTM4LzAvNTkzNTAxNUFCOEQyQUEwNzU2NUFDQjdCOTE4QTUw RDQ5MDkwQUEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqmkMoIPylhT/a1DH5rdj/bUP/6jSiX1MFI Oyiy2tS18kTgpt/Nfjij8/hjfdjNwg+aFRMlw/pNH+nPLr4cmpN8GYa8pYgYW4I1 FEzn7wGmN73U/SW4K9mfL2Ysk3HAywIZF0CrJNDk48RSfJVmH11X5p3Lony54wF8 k95YIeJOmigyh9xdgxg5AuHqWFNXFvrDFg8DGILyzqCZaM9Y1kTmXFuMatnqUCyJ jMStr8B+Hvk+E3mxa/eO4LA4GNz4yC9QAqRMujtlWmS4xCboEG5vIEM19wbF43XE KbtVjQ1MCRbJ9pHNncE9wUBBV8Y6c0wjYOsFdBZdWfX8KPuQJ10= -----END CERTIFICATE-----Generated at Wed Jun 3 04:41:10 2026 by rpki-client