$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft File: DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft (raw, json) Hash identifier: QdDaAMcbplZuoWPGOC/X4AyP/hjfx2cT4qvZ9L8OEwM= Subject key identifier: 87:2D:81:36:59:4B:A2:BB:D6:7C:6C:B3:4E:DA:80:F8:46:81:4E:B7 Authority key identifier: DF:64:8D:B0:3E:C5:64:14:81:28:C7:0F:BB:6A:0C:C8:77:3A:EF:60 Certificate issuer: /CN=DF648DB03EC564148128C70FBB6A0CC8773AEF60 Certificate serial: 376F0BB68047CDE7C2AC24AA4BE998AF94BA20A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:45:08 +0000 Manifest this update: Tue 02 Jun 2026 16:40:08 +0000 Manifest next update: Wed 03 Jun 2026 17:48:08 +0000 Files and hashes: 1: DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl (hash: 3HGqCd+ip8FWgGBuJofQsiCmoAR6Q0ZkiJKIP12dMlI=) 2: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: Sq/TPHjnHcU8BdlRhTUGNyaSgFRduqyHP60YOl+s/e4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:6f:0b:b6:80:47:cd:e7:c2:ac:24:aa:4b:e9:98:af:94:ba:20:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF648DB03EC564148128C70FBB6A0CC8773AEF60 Validity Not Before: Jun 2 16:40:08 2026 GMT Not After : Jun 3 17:48:08 2026 GMT Subject: CN=872D8136594BA2BBD67C6CB34EDA80F846814EB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:bc:45:10:1d:f5:c4:53:aa:4b:56:3d:d8:d8: 1b:8c:97:67:19:9a:e2:ae:db:bd:91:46:fa:ec:ce: f6:9e:b4:39:17:25:bd:ea:da:84:2a:88:7a:be:cc: 1a:35:0f:37:2d:89:f9:7a:37:93:38:0c:ef:93:a0: 31:84:c9:16:cc:47:59:c7:5d:3f:86:e5:3c:90:73: 14:dd:cb:ed:30:9c:fa:ef:98:a4:06:b3:69:39:9b: b5:6a:15:18:fb:05:7e:98:73:2f:df:ce:c5:d0:d3: 04:75:e3:38:58:75:23:d3:35:95:16:2f:33:3b:c2: 01:76:4e:5c:ac:92:fb:12:49:5e:76:fa:c8:3e:a7: 40:82:3f:d5:46:7c:5e:8d:b9:b6:85:05:16:cb:6a: 26:4b:0a:51:26:28:33:24:7e:07:d0:2e:bc:4d:c9: c5:f5:98:2d:36:c1:c8:d6:4b:2a:38:1c:80:44:ef: 0d:4e:56:a4:2b:3c:31:5c:a5:19:19:10:29:d5:e8: 0f:00:98:4b:61:27:20:e3:bc:6a:ac:d8:d5:55:fe: c4:6b:e1:d4:c7:03:98:ef:68:a5:9b:04:05:4e:c4: 14:66:dd:1f:ac:04:18:d8:a4:ac:fd:6b:d7:1b:5d: 38:59:1b:c8:b9:aa:00:da:32:35:8e:be:93:04:40: 57:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2D:81:36:59:4B:A2:BB:D6:7C:6C:B3:4E:DA:80:F8:46:81:4E:B7 X509v3 Authority Key Identifier: keyid:DF:64:8D:B0:3E:C5:64:14:81:28:C7:0F:BB:6A:0C:C8:77:3A:EF:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:c7:b1:93:a6:c2:a3:cc:ba:74:e3:f4:2f:07:72:11:00:16: 90:99:60:a8:8c:ae:4b:e4:3f:b8:e4:a9:8b:43:a3:ee:cc:2d: 11:d3:93:e7:95:f9:63:ea:ca:e7:aa:fd:55:14:a1:08:05:c6: 52:1c:91:2b:13:88:b1:6a:62:b8:6c:0e:01:62:f1:96:c8:e9: 87:d8:5b:1f:84:20:b3:fe:a5:9d:6e:cc:29:89:7b:43:8a:c6: 03:30:3c:99:f7:26:8d:a8:58:07:80:79:48:bf:cd:83:b8:dd: 8a:95:7f:0a:27:e9:9c:fb:f6:8b:b4:63:ab:7e:a8:d6:e7:5b: 24:de:94:33:8c:f1:11:51:da:7c:14:7a:25:bc:e3:ff:e1:14: 92:20:09:8c:53:43:1c:57:65:3c:7f:c5:1d:b4:a5:8b:ae:ae: d2:46:d3:9f:7c:22:df:65:49:21:44:24:a0:47:e6:17:26:cd: d0:29:47:0d:4b:50:84:5b:52:07:af:84:0a:45:a7:fe:5e:3c: 4d:84:4b:04:9b:c2:0c:9f:50:95:cb:4d:97:99:e9:1c:35:a8: 9e:94:e4:73:e7:d8:80:23:c4:d8:66:91:a7:1d:23:96:2a:a1: 65:66:56:66:4f:48:b6:92:88:89:b1:91:b4:cd:29:63:ea:01: c0:e2:a3:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN28LtoBHzefCrCSqS+mYr5S6IKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2NDhEQjAzRUM1NjQxNDgxMjhDNzBGQkI2QTBDQzg3 NzNBRUY2MDAeFw0yNjA2MDIxNjQwMDhaFw0yNjA2MDMxNzQ4MDhaMDMxMTAvBgNV BAMTKDg3MkQ4MTM2NTk0QkEyQkJENjdDNkNCMzRFREE4MEY4NDY4MTRFQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmvEUQHfXEU6pLVj3Y2BuMl2cZ muKu272RRvrszvaetDkXJb3q2oQqiHq+zBo1Dzctifl6N5M4DO+ToDGEyRbMR1nH XT+G5TyQcxTdy+0wnPrvmKQGs2k5m7VqFRj7BX6Ycy/fzsXQ0wR14zhYdSPTNZUW LzM7wgF2TlyskvsSSV52+sg+p0CCP9VGfF6NubaFBRbLaiZLClEmKDMkfgfQLrxN ycX1mC02wcjWSyo4HIBE7w1OVqQrPDFcpRkZECnV6A8AmEthJyDjvGqs2NVV/sRr 4dTHA5jvaKWbBAVOxBRm3R+sBBjYpKz9a9cbXThZG8i5qgDaMjWOvpMEQFezAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhy2BNllLorvWfGyzTtqA+EaBTrcwHwYDVR0j BBgwFoAU32SNsD7FZBSBKMcPu2oMyHc672AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkYjZjNGYtOWZkZi00N2Y2LWIyNGMtMDMzZmUzYTQ0ZDUwLzAvREY2NDhEQjAz RUM1NjQxNDgxMjhDNzBGQkI2QTBDQzg3NzNBRUY2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjY0OERCMDNFQzU2NDE0ODEyOEM3MEZCQjZBMENDODc3M0FF RjYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvREY2NDhEQjAzRUM1NjQxNDgxMjhDNzBGQkI2QTBD Qzg3NzNBRUY2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/HsZOmwqPMunTj9C8HchEAFpCZYKiMrkvk P7jkqYtDo+7MLRHTk+eV+WPqyueq/VUUoQgFxlIckSsTiLFqYrhsDgFi8ZbI6YfY Wx+EILP+pZ1uzCmJe0OKxgMwPJn3Jo2oWAeAeUi/zYO43YqVfwon6Zz79ou0Y6t+ qNbnWyTelDOM8RFR2nwUeiW84//hFJIgCYxTQxxXZTx/xR20pYuurtJG0598It9l SSFEJKBH5hcmzdApRw1LUIRbUgevhApFp/5ePE2ESwSbwgyfUJXLTZeZ6Rw1qJ6U 5HPn2IAjxNhmkacdI5YqoWVmVmZPSLaSiImxkbTNKWPqAcDio2A= -----END CERTIFICATE-----Generated at Wed Jun 3 03:42:51 2026 by rpki-client