$ rpki-client -vvf rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft File: B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft (raw, json) Hash identifier: OvNbjYBMUiyZYDlBa0C4juptwVO5WDDDzM75OFXkiQw= Subject key identifier: 49:6F:2E:51:BE:B6:BD:C0:CA:10:27:E5:5E:17:B4:B3:38:C0:01:61 Authority key identifier: B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC Certificate issuer: /CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC Certificate serial: 4A53704E6222D1DB9567F4CE22DF778F78BB8FBE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft Manifest number: 2C Signing time: Wed 03 Jun 2026 02:17:28 +0000 Manifest this update: Wed 03 Jun 2026 02:12:28 +0000 Manifest next update: Thu 04 Jun 2026 05:59:28 +0000 Files and hashes: 1: B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl (hash: MbB9qUmYHFlksiW31VGZ+BtIyl8GUaDOLvc8DHO7fQ4=) 2: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (hash: DOdXqvIf8YC77FzkFbP1ZhH9lDDTTUCUrQuHHws44kQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 04:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:53:70:4e:62:22:d1:db:95:67:f4:ce:22:df:77:8f:78:bb:8f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC Validity Not Before: Jun 3 02:12:28 2026 GMT Not After : Jun 4 05:59:28 2026 GMT Subject: CN=496F2E51BEB6BDC0CA1027E55E17B4B338C00161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:43:d2:40:9e:e5:5b:c3:17:54:ef:69:ea:80: 9f:33:c9:ab:2b:ff:83:c3:6c:fb:89:85:e2:65:fa: 86:86:13:b5:3e:d5:05:75:0d:18:f2:76:5b:4b:0d: ae:d2:43:3f:21:4b:41:33:a5:fd:c9:f7:66:09:b4: 88:3c:f3:72:19:2b:28:15:9e:a0:46:99:8c:0c:2e: 44:2d:31:87:5f:ee:a2:38:90:08:ee:b8:83:97:2c: bc:36:e3:1b:92:93:7d:e5:74:02:6d:cd:b3:49:d7: 54:9c:36:c6:53:cf:b7:62:a7:2f:47:12:9a:50:54: c9:0d:2a:f4:7b:c0:dd:f7:4a:3f:b5:78:7d:13:33: 89:95:58:a1:ae:35:e1:fb:8d:f0:74:1c:a7:bb:51: 6f:5e:a2:b8:92:29:76:34:48:d3:c0:8d:16:8f:f2: ad:ab:67:17:e3:a2:82:10:c0:42:51:3e:fc:44:68: 86:72:35:f4:2c:79:a5:8d:48:70:30:df:01:a5:42: 68:15:99:72:81:3a:c6:12:07:42:d1:0e:63:44:e1: 14:bd:0d:dc:6c:f9:59:2b:13:24:c0:a3:47:e0:cc: 5a:0c:5f:d9:72:df:f5:3a:c9:46:15:5a:ba:2b:3e: 83:aa:be:bb:76:a7:a4:69:36:c3:85:22:c2:11:6f: 84:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6F:2E:51:BE:B6:BD:C0:CA:10:27:E5:5E:17:B4:B3:38:C0:01:61 X509v3 Authority Key Identifier: keyid:B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:a3:b5:a9:fd:27:65:aa:e6:c9:f7:d9:80:d0:a1:4d:ea:21: 0f:6e:dc:dc:98:68:7b:76:82:3f:cb:c7:af:90:b0:11:63:0e: 68:2a:f0:2e:07:99:2e:9f:0e:11:5d:2e:a3:de:76:dc:46:c5: de:42:0d:e1:69:13:6a:a1:cf:71:2d:28:1d:e8:30:48:e6:f5: 90:ee:b0:f2:ea:ce:9a:d1:8b:92:5e:5f:c9:65:00:40:30:a8: 50:62:cf:5d:e9:46:bb:10:3b:8c:98:f8:97:93:1a:29:2f:bc: 97:80:54:7a:e8:d8:e6:4e:25:0e:e1:43:9e:fe:c3:3e:0e:7c: 8e:84:e9:57:cd:19:9e:ba:af:96:1f:5a:4c:33:32:70:53:07: d0:77:15:0a:e1:c4:b1:42:da:99:0e:0e:d1:65:0f:73:ed:1a: 53:40:b4:d2:4b:ab:45:8b:2d:e1:d5:89:aa:af:0d:4c:b5:5b: 20:c4:c0:b5:d8:1e:c3:7f:23:a8:cb:65:01:71:b0:fe:7e:d8: 89:f1:af:40:ba:51:da:d6:a3:ff:2e:7e:a3:8f:40:77:58:c3: ae:49:71:cc:86:26:f0:7b:1a:d8:e3:75:fb:eb:d7:08:c9:26: 83:b2:6a:3f:d1:f9:8d:7f:88:46:b9:b2:d6:98:28:ac:ef:94: 48:6a:c3:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSlNwTmIi0duVZ/TOIt93j3i7j74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk5MDhGNTk0RTYzMEJFQTFFRUEwRERCRjRBMzBEQzhD RjEyN0NBQzAeFw0yNjA2MDMwMjEyMjhaFw0yNjA2MDQwNTU5MjhaMDMxMTAvBgNV BAMTKDQ5NkYyRTUxQkVCNkJEQzBDQTEwMjdFNTVFMTdCNEIzMzhDMDAxNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrQ9JAnuVbwxdU72nqgJ8zyasr /4PDbPuJheJl+oaGE7U+1QV1DRjydltLDa7SQz8hS0Ezpf3J92YJtIg883IZKygV nqBGmYwMLkQtMYdf7qI4kAjuuIOXLLw24xuSk33ldAJtzbNJ11ScNsZTz7dipy9H EppQVMkNKvR7wN33Sj+1eH0TM4mVWKGuNeH7jfB0HKe7UW9eoriSKXY0SNPAjRaP 8q2rZxfjooIQwEJRPvxEaIZyNfQseaWNSHAw3wGlQmgVmXKBOsYSB0LRDmNE4RS9 Ddxs+VkrEyTAo0fgzFoMX9ly3/U6yUYVWrorPoOqvrt2p6RpNsOFIsIRb4RjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSW8uUb62vcDKECflXhe0szjAAWEwHwYDVR0j BBgwFoAUuZCPWU5jC+oe6g3b9KMNyM8SfKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZlY2M3MmEtZTk1NC00MzAyLTkyYzQtZjRmMjMwNzBiOTk3LzAvQjk5MDhGNTk0 RTYzMEJFQTFFRUEwRERCRjRBMzBEQzhDRjEyN0NBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTkwOEY1OTRFNjMwQkVBMUVFQTBEREJGNEEzMERDOENGMTI3 Q0FDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZlY2M3MmEtZTk1NC00MzAyLTky YzQtZjRmMjMwNzBiOTk3LzAvQjk5MDhGNTk0RTYzMEJFQTFFRUEwRERCRjRBMzBE QzhDRjEyN0NBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKajtan9J2Wq5sn32YDQoU3qIQ9u3NyYaHt2 gj/Lx6+QsBFjDmgq8C4HmS6fDhFdLqPedtxGxd5CDeFpE2qhz3EtKB3oMEjm9ZDu sPLqzprRi5JeX8llAEAwqFBiz13pRrsQO4yY+JeTGikvvJeAVHro2OZOJQ7hQ57+ wz4OfI6E6VfNGZ66r5YfWkwzMnBTB9B3FQrhxLFC2pkODtFlD3PtGlNAtNJLq0WL LeHViaqvDUy1WyDEwLXYHsN/I6jLZQFxsP5+2Inxr0C6UdrWo/8ufqOPQHdYw65J ccyGJvB7Gtjjdfvr1wjJJoOyaj/R+Y1/iEa5staYKKzvlEhqw0M= -----END CERTIFICATE-----Generated at Wed Jun 3 04:40:52 2026 by rpki-client