$ rpki-client -vvf rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft File: C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft (raw, json) Hash identifier: 0Q+ry9mmb6n48UVJ0U3P2yje1xx+9xdX+T004xk/Nb4= Subject key identifier: 51:93:1C:FD:1F:89:FE:57:40:2B:CB:42:D8:01:8C:33:7D:0C:94:DF Authority key identifier: C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1 Certificate issuer: /CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1 Certificate serial: 642B5063B9F2B8AD4075C1C195FBDC31D81B86C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 07:54:45 +0000 Manifest this update: Tue 02 Jun 2026 07:49:45 +0000 Manifest next update: Wed 03 Jun 2026 11:31:45 +0000 Files and hashes: 1: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: F4tUjUdEY+l3s8NALDsIE06dbqwvjW+OT7LFyFQ/yeM=) 2: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: ZPdcFv71Hcn3YAeVTYCVX3MD4vGj6utOnAFPRD2DXHY=) 3: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: 18RqwEy267Zr/RraNo+S/nzcISVxpvj1na+e3EceUks=) 4: C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl (hash: AZ+tXg9zcZGVlhHt5ldfEXYHv752Ljxp3nouacYascU=) 5: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: 2PZRw81bQ6C6T+rhPpeS2pJwxgW1qGxBfnel2RNaMVk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:2b:50:63:b9:f2:b8:ad:40:75:c1:c1:95:fb:dc:31:d8:1b:86:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1 Validity Not Before: Jun 2 07:49:45 2026 GMT Not After : Jun 3 11:31:45 2026 GMT Subject: CN=51931CFD1F89FE57402BCB42D8018C337D0C94DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:76:47:dc:59:45:e5:6f:d6:83:f2:28:83:b3: 7a:bf:dd:bb:b9:e8:39:50:d5:32:b4:68:4b:c2:78: bd:7c:2e:fa:8f:fd:df:ac:05:22:d3:cd:dc:4c:43: cc:45:dc:4d:a3:c7:79:ba:69:21:62:d2:75:e8:21: f4:63:32:2e:64:71:50:1d:62:e5:6a:22:ab:d3:ff: 28:15:a9:43:af:b9:ba:0e:71:5a:27:11:c8:cc:64: 14:2f:97:13:b5:72:40:06:e4:ae:5c:85:7e:54:ec: ce:09:e2:fc:f4:10:e4:97:9d:d6:98:c3:0f:f9:e2: 22:31:b8:5a:0c:58:9f:06:79:30:9a:78:59:13:b0: 61:78:23:1a:32:16:8b:c8:8c:95:47:f9:bf:ab:94: 16:19:cb:e7:65:84:dc:9b:d6:f3:f3:11:e9:d7:0a: 33:9a:a8:51:6b:b4:5d:df:06:b7:fb:c9:23:91:c5: e9:5f:90:d5:ab:90:81:52:63:8c:48:5f:b7:f4:29: b2:f5:89:4e:7e:af:6a:f5:e9:e5:a0:b1:7d:f4:76: 0f:84:83:f6:4b:73:e1:e4:bb:7b:78:fc:8b:3b:4c: 44:32:36:d3:cc:b9:7c:6e:95:fa:da:94:e4:2e:3b: 1e:64:c9:4d:4c:a8:f4:f1:00:df:6f:d1:7c:88:f9: 27:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:93:1C:FD:1F:89:FE:57:40:2B:CB:42:D8:01:8C:33:7D:0C:94:DF X509v3 Authority Key Identifier: keyid:C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:19:c2:1d:c2:ff:22:7c:05:54:37:c5:3e:c9:c4:da:7a:c3: 1e:5e:1a:7d:13:b7:5d:c7:f4:dc:31:fd:9d:20:04:6a:d9:34: 1f:9a:91:3e:27:8b:2e:47:62:12:47:cc:81:b1:51:8f:be:a3: b7:77:60:00:59:b7:12:03:c1:48:9a:d0:2e:1d:9a:59:4f:7d: 08:f8:3c:af:1a:89:8a:86:85:36:2d:5f:cc:cb:ec:ae:1d:35: 15:01:49:8b:b1:38:51:57:4a:e7:6e:04:19:67:6e:3d:03:e1: 08:b4:53:0b:f2:1b:25:fe:c5:2c:14:11:94:50:c1:6a:6c:7f: 30:aa:65:19:42:71:d2:6d:d1:01:27:a9:c3:75:d4:c6:83:f2: 21:31:24:a7:fc:d7:5c:35:59:9b:17:86:2a:a0:44:3f:fd:66: 47:4c:f9:6d:0a:c0:84:40:f6:87:e7:77:46:27:3f:71:e9:45: 9a:82:df:25:37:62:14:26:01:a8:84:ae:63:f5:70:8c:63:20: 57:df:45:52:4b:a0:53:1e:ad:5e:c3:6b:21:3c:e6:24:88:81: eb:5d:c7:79:76:03:b4:7d:fb:81:d2:38:93:cd:05:1c:c7:d3: f4:99:d8:26:91:ab:1b:1d:fb:9b:16:6e:25:93:d9:59:25:cf: 27:ff:5e:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZCtQY7nyuK1AdcHBlfvcMdgbhsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3NDgzRkQxOEZGMTgzOUU2MkEyNEZGOEVENjA3QTQ0 RjRBMkVGMTAeFw0yNjA2MDIwNzQ5NDVaFw0yNjA2MDMxMTMxNDVaMDMxMTAvBgNV BAMTKDUxOTMxQ0ZEMUY4OUZFNTc0MDJCQ0I0MkQ4MDE4QzMzN0QwQzk0REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRdkfcWUXlb9aD8iiDs3q/3bu5 6DlQ1TK0aEvCeL18LvqP/d+sBSLTzdxMQ8xF3E2jx3m6aSFi0nXoIfRjMi5kcVAd YuVqIqvT/ygVqUOvuboOcVonEcjMZBQvlxO1ckAG5K5chX5U7M4J4vz0EOSXndaY ww/54iIxuFoMWJ8GeTCaeFkTsGF4IxoyFovIjJVH+b+rlBYZy+dlhNyb1vPzEenX CjOaqFFrtF3fBrf7ySORxelfkNWrkIFSY4xIX7f0KbL1iU5+r2r16eWgsX30dg+E g/ZLc+Hku3t4/Is7TEQyNtPMuXxulfralOQuOx5kyU1MqPTxAN9v0XyI+ScrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUZMc/R+J/ldAK8tC2AGMM30MlN8wHwYDVR0j BBgwFoAUwHSD/Rj/GDnmKiT/jtYHpE9KLvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDY3ZmI4MzctMWIyZi00YzRlLWI5OTktNmU5OTBkZGMxNDk5LzAvQzA3NDgzRkQx OEZGMTgzOUU2MkEyNEZGOEVENjA3QTQ0RjRBMkVGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMDc0ODNGRDE4RkYxODM5RTYyQTI0RkY4RUQ2MDdBNDRGNEEy RUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzA3NDgzRkQxOEZGMTgzOUU2MkEyNEZGOEVENjA3 QTQ0RjRBMkVGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4Zwh3C/yJ8BVQ3xT7JxNp6wx5eGn0Tt13H 9Nwx/Z0gBGrZNB+akT4niy5HYhJHzIGxUY++o7d3YABZtxIDwUia0C4dmllPfQj4 PK8aiYqGhTYtX8zL7K4dNRUBSYuxOFFXSuduBBlnbj0D4Qi0UwvyGyX+xSwUEZRQ wWpsfzCqZRlCcdJt0QEnqcN11MaD8iExJKf811w1WZsXhiqgRD/9ZkdM+W0KwIRA 9ofnd0YnP3HpRZqC3yU3YhQmAaiErmP1cIxjIFffRVJLoFMerV7DayE85iSIgetd x3l2A7R9+4HSOJPNBRzH0/SZ2CaRqxsd+5sWbiWT2Vklzyf/Xho= -----END CERTIFICATE-----Generated at Wed Jun 3 03:57:34 2026 by rpki-client