$ rpki-client -vvf rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft File: 3488252FDADC73654E2AAD815316475C9A5F94D8.mft (raw, json) Hash identifier: EN9wVbe7v0Mh6csOVNVyH0CUFj3l0HqSdMIDt+g5J8k= Subject key identifier: 9B:D2:02:E5:19:13:BD:22:19:4B:8C:8E:BE:C1:FA:82:0C:03:16:72 Authority key identifier: 34:88:25:2F:DA:DC:73:65:4E:2A:AD:81:53:16:47:5C:9A:5F:94:D8 Certificate issuer: /CN=3488252FDADC73654E2AAD815316475C9A5F94D8 Certificate serial: 5D4EA21BEB2C9EF483DBDAABC646A4612A1A8A1D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:03:00 +0000 Manifest this update: Tue 02 Jun 2026 18:58:00 +0000 Manifest next update: Wed 03 Jun 2026 20:19:00 +0000 Files and hashes: 1: 3488252FDADC73654E2AAD815316475C9A5F94D8.crl (hash: Ws3Vp8ybtGyIwxOPNJNXvVnJH56MTlO9XprFppyQ+pM=) 2: 3130332e36362e3139362e302f32322d3234203d3e20313331313131.roa (hash: jobGwFNdEOGscb8Suy+yh9BDuSyd+S9zj8PbD+vSbcU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.crl rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4e:a2:1b:eb:2c:9e:f4:83:db:da:ab:c6:46:a4:61:2a:1a:8a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3488252FDADC73654E2AAD815316475C9A5F94D8 Validity Not Before: Jun 2 18:58:00 2026 GMT Not After : Jun 3 20:19:00 2026 GMT Subject: CN=9BD202E51913BD22194B8C8EBEC1FA820C031672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:72:7b:4f:cd:e4:5f:1d:b6:f9:b9:27:6a:8f: 60:1f:2a:ff:1c:e4:e3:00:cc:f0:e4:06:7b:90:8f: 4c:b1:97:67:bf:72:95:87:38:a7:ea:1b:d5:b0:ce: d2:65:53:d9:fa:a9:92:08:58:71:c5:c6:78:ba:9e: ad:99:db:55:fe:b9:20:f2:bd:5b:c1:39:55:8d:4f: f0:0c:a1:77:6c:7b:b3:bf:b4:d5:09:aa:10:ce:35: 97:d4:dc:6a:a4:cd:ac:8c:b3:2b:6d:20:96:8d:76: 8f:62:18:25:9c:ea:df:58:02:f8:83:10:89:21:28: c1:40:d1:e1:f0:4b:6f:34:e0:8f:f3:1a:7e:89:14: 8b:3c:74:62:21:56:19:8d:5b:55:83:f6:ba:6b:5b: 01:32:8f:4b:04:47:84:55:33:83:09:5e:77:e0:38: cb:60:62:15:ad:0b:04:9e:bd:c1:41:4c:86:3d:80: a9:fe:f1:a6:08:66:19:45:3e:af:24:f5:b6:db:71: 3a:01:a5:be:74:e0:08:04:8d:7a:97:96:66:fe:dd: ea:11:4a:c3:a4:55:d4:7d:1b:54:00:a7:0f:3b:2b: c0:0c:4b:aa:b2:34:c7:9e:22:d5:52:b1:ed:22:3c: c9:af:5f:3b:a2:2f:de:2b:61:74:bd:9f:c4:38:14: 62:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D2:02:E5:19:13:BD:22:19:4B:8C:8E:BE:C1:FA:82:0C:03:16:72 X509v3 Authority Key Identifier: keyid:34:88:25:2F:DA:DC:73:65:4E:2A:AD:81:53:16:47:5C:9A:5F:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:4f:58:76:4b:f9:e6:4d:51:b7:76:c2:83:d1:36:50:4e:40: 2d:45:f2:dc:e5:2c:57:bd:83:de:1e:b2:02:9e:21:4a:23:e0: 89:e8:64:8d:db:88:e3:b1:db:eb:df:c9:ce:c1:90:b8:93:81: a9:73:28:49:da:bb:52:83:ee:8e:c3:59:5b:a5:4b:34:a6:a7: 9c:a1:86:c9:56:40:3d:21:fc:d1:70:b2:8e:7c:8f:5c:7a:86: ec:85:d7:c4:1f:f6:fd:fa:83:56:a8:61:79:63:1f:87:16:a1: a9:0d:3e:3d:bf:a7:13:58:1b:4a:b6:91:10:1d:82:2b:06:92: 78:ec:5f:7d:50:c4:e0:03:48:f5:c9:5f:a4:ab:fe:d9:f7:98: 07:df:b8:00:40:db:26:f4:5c:c0:6b:eb:e7:59:35:56:13:44: 9a:5f:2e:8b:57:2b:28:60:1d:a1:03:a9:9a:c7:2d:b5:bc:76: d4:1a:26:cc:df:d0:a1:c0:f8:ce:35:b9:11:4a:c4:4c:68:c9: 5d:0c:5a:da:eb:49:ba:a9:f1:b1:b5:df:f1:ca:67:10:e6:ad: e1:a0:2e:b1:c6:76:85:2e:b3:a5:85:be:23:22:c9:28:38:e8: fe:8d:da:4e:3d:64:69:32:17:b9:04:e6:97:c7:96:e6:ef:1b: 95:23:a5:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXU6iG+ssnvSD29qrxkakYSoaih0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ4ODI1MkZEQURDNzM2NTRFMkFBRDgxNTMxNjQ3NUM5 QTVGOTREODAeFw0yNjA2MDIxODU4MDBaFw0yNjA2MDMyMDE5MDBaMDMxMTAvBgNV BAMTKDlCRDIwMkU1MTkxM0JEMjIxOTRCOEM4RUJFQzFGQTgyMEMwMzE2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxcntPzeRfHbb5uSdqj2AfKv8c 5OMAzPDkBnuQj0yxl2e/cpWHOKfqG9WwztJlU9n6qZIIWHHFxni6nq2Z21X+uSDy vVvBOVWNT/AMoXdse7O/tNUJqhDONZfU3GqkzayMsyttIJaNdo9iGCWc6t9YAviD EIkhKMFA0eHwS2804I/zGn6JFIs8dGIhVhmNW1WD9rprWwEyj0sER4RVM4MJXnfg OMtgYhWtCwSevcFBTIY9gKn+8aYIZhlFPq8k9bbbcToBpb504AgEjXqXlmb+3eoR SsOkVdR9G1QApw87K8AMS6qyNMeeItVSse0iPMmvXzuiL94rYXS9n8Q4FGK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm9IC5RkTvSIZS4yOvsH6ggwDFnIwHwYDVR0j BBgwFoAUNIglL9rcc2VOKq2BUxZHXJpflNgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc3YTdmYWQtNTQ0Mi00YmM0LWJjMmYtMGJmOGMyMjZkOWRiLzAvMzQ4ODI1MkZE QURDNzM2NTRFMkFBRDgxNTMxNjQ3NUM5QTVGOTREOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNDg4MjUyRkRBREM3MzY1NEUyQUFEODE1MzE2NDc1QzlBNUY5 NEQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc3YTdmYWQtNTQ0Mi00YmM0LWJj MmYtMGJmOGMyMjZkOWRiLzAvMzQ4ODI1MkZEQURDNzM2NTRFMkFBRDgxNTMxNjQ3 NUM5QTVGOTREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFPWHZL+eZNUbd2woPRNlBOQC1F8tzlLFe9 g94esgKeIUoj4InoZI3biOOx2+vfyc7BkLiTgalzKEnau1KD7o7DWVulSzSmp5yh hslWQD0h/NFwso58j1x6huyF18Qf9v36g1aoYXljH4cWoakNPj2/pxNYG0q2kRAd gisGknjsX31QxOADSPXJX6Sr/tn3mAffuABA2yb0XMBr6+dZNVYTRJpfLotXKyhg HaEDqZrHLbW8dtQaJszf0KHA+M41uRFKxExoyV0MWtrrSbqp8bG13/HKZxDmreGg LrHGdoUus6WFviMiySg46P6N2k49ZGkyF7kE5pfHlubvG5UjpZg= -----END CERTIFICATE-----Generated at Wed Jun 3 04:07:48 2026 by rpki-client