$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft File: CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft (raw, json) Hash identifier: 32a0koE1hUhw6LaurFRvk7jBN92t3r20At/HGpHP26Q= Subject key identifier: 28:42:BB:17:39:6C:E2:BD:92:EA:9A:8F:2C:1E:0B:42:89:06:8B:0C Authority key identifier: CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 Certificate issuer: /CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Certificate serial: 77A52770DF909B055CE34567613B7EED97D34543 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:02:28 +0000 Manifest this update: Tue 02 Jun 2026 09:57:28 +0000 Manifest next update: Wed 03 Jun 2026 13:36:28 +0000 Files and hashes: 1: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: oj9tQCvDwCV4p4Hr9N9eWTF7U8CpjCR1vEULrbqMjA8=) 2: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: tc2Aw1xglXhbLRMp6kuTfOMbUtYtC4WfWamomx8fpaI=) 3: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: FIEaDVHIseW71OoASUCYpCwzUw7yf/gVIj4IdH47VZ0=) 4: CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl (hash: PEjYUpRJru6p/SJ1u74ewL+6vhT25TBVZO/RAUDbGaQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a5:27:70:df:90:9b:05:5c:e3:45:67:61:3b:7e:ed:97:d3:45:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Validity Not Before: Jun 2 09:57:28 2026 GMT Not After : Jun 3 13:36:28 2026 GMT Subject: CN=2842BB17396CE2BD92EA9A8F2C1E0B4289068B0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:de:2c:1d:98:a1:f1:8e:d0:d2:88:87:ac:44: 4a:d8:06:d8:2f:97:82:35:54:c8:0c:42:06:89:47: 34:13:d7:e7:10:f3:d2:27:50:6c:1c:22:8b:30:76: fc:05:ef:2d:41:37:aa:72:ed:0f:55:83:61:df:3d: fc:e2:27:4b:b8:88:bb:94:f3:58:5f:30:84:56:61: 81:25:85:dd:8f:25:92:6a:3b:0f:2c:8a:90:d5:36: e8:28:d4:83:89:57:4b:85:15:ee:7f:84:dd:cc:37: df:86:17:f1:a3:b5:dd:cf:fb:a1:40:46:aa:ec:cb: 39:d3:11:ab:28:2f:c0:32:b1:34:93:8c:d7:11:2b: 42:51:f3:14:ab:7e:db:f9:7a:d7:66:9e:76:40:39: 27:43:cf:34:bd:9d:64:da:6f:6a:bb:f7:77:c5:bf: 6e:86:42:53:4d:79:8e:1c:96:b8:d5:ee:23:1b:6a: f1:f4:08:be:85:9f:52:68:1f:0c:d5:e4:14:cd:d6: b2:d6:fc:3e:84:70:74:27:94:14:6e:a1:5e:ac:52: 38:b0:bc:c8:28:c0:9e:6c:9c:7c:94:d1:9e:7d:61: 1c:44:ab:c5:09:86:be:c2:63:2c:db:f7:10:71:43: cf:30:81:2b:9c:da:7e:30:02:f6:3d:d3:e8:6a:63: 6f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:42:BB:17:39:6C:E2:BD:92:EA:9A:8F:2C:1E:0B:42:89:06:8B:0C X509v3 Authority Key Identifier: keyid:CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:6f:17:e0:49:de:90:cd:3d:ad:5b:24:48:7e:44:35:a6:18: 95:04:f8:5b:ac:62:a2:6c:70:f8:d0:e2:fb:7f:8c:2e:49:64: 63:2d:83:21:b0:13:b5:0b:78:7c:9b:c9:03:46:4e:94:83:8b: 77:76:c5:80:91:10:70:96:e5:e2:d5:31:fe:16:5a:ac:d7:dd: f2:b6:fb:bc:f0:9c:8b:8b:e8:29:d4:76:78:41:ea:bc:6e:df: 06:31:b1:de:16:cd:f5:a2:46:b6:81:64:5f:41:42:2d:e2:50: 06:97:61:d7:a6:98:b3:e1:ca:ff:6e:92:f5:fc:ac:15:74:27: 83:8c:70:c6:63:4d:58:61:b9:d2:72:4f:2e:6b:3b:52:67:34: e6:f8:8d:36:6c:b7:ee:f9:bd:0a:7c:34:22:3a:58:94:1f:49: 29:88:7f:88:fa:98:55:ee:08:ed:13:0c:6b:d7:2d:af:ec:6f: 3e:c3:0c:29:61:7c:c3:fa:fa:2d:b8:26:00:4b:4f:dc:f3:bc: 82:0e:5c:cb:70:c3:dd:00:7c:45:e1:78:85:00:77:69:43:0e: a3:f0:f7:a5:af:ca:86:b5:1c:01:b3:79:f7:b3:78:5f:e5:3f: 66:ca:03:cf:0c:0d:78:83:c5:21:42:b0:19:6f:2e:89:a6:a1: 62:e7:8c:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd6UncN+QmwVc40VnYTt+7ZfTRUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDM0E0RjIxQkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2 N0RBNTc4NDAeFw0yNjA2MDIwOTU3MjhaFw0yNjA2MDMxMzM2MjhaMDMxMTAvBgNV BAMTKDI4NDJCQjE3Mzk2Q0UyQkQ5MkVBOUE4RjJDMUUwQjQyODkwNjhCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC03iwdmKHxjtDSiIesRErYBtgv l4I1VMgMQgaJRzQT1+cQ89InUGwcIoswdvwF7y1BN6py7Q9Vg2HfPfziJ0u4iLuU 81hfMIRWYYElhd2PJZJqOw8sipDVNugo1IOJV0uFFe5/hN3MN9+GF/Gjtd3P+6FA RqrsyznTEasoL8AysTSTjNcRK0JR8xSrftv5etdmnnZAOSdDzzS9nWTab2q793fF v26GQlNNeY4clrjV7iMbavH0CL6Fn1JoHwzV5BTN1rLW/D6EcHQnlBRuoV6sUjiw vMgowJ5snHyU0Z59YRxEq8UJhr7CYyzb9xBxQ88wgSuc2n4wAvY90+hqY2+LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKEK7Fzls4r2S6pqPLB4LQokGiwwwHwYDVR0j BBgwFoAUysOk8hvI9N+nToUVH4s+kWfaV4QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhiOTg3MjItMWNiNC00MGQ0LWFjOGItYzNiY2EyYmNhMjE3LzAvQ0FDM0E0RjIx QkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2N0RBNTc4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUMzQTRGMjFCQzhGNERGQTc0RTg1MTUxRjhCM0U5MTY3REE1 Nzg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvQ0FDM0E0RjIxQkM4RjRERkE3NEU4NTE1MUY4QjNF OTE2N0RBNTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZvF+BJ3pDNPa1bJEh+RDWmGJUE+FusYqJs cPjQ4vt/jC5JZGMtgyGwE7ULeHybyQNGTpSDi3d2xYCREHCW5eLVMf4WWqzX3fK2 +7zwnIuL6CnUdnhB6rxu3wYxsd4WzfWiRraBZF9BQi3iUAaXYdemmLPhyv9ukvX8 rBV0J4OMcMZjTVhhudJyTy5rO1JnNOb4jTZst+75vQp8NCI6WJQfSSmIf4j6mFXu CO0TDGvXLa/sbz7DDClhfMP6+i24JgBLT9zzvIIOXMtww90AfEXheIUAd2lDDqPw 96Wvyoa1HAGzefezeF/lP2bKA88MDXiDxSFCsBlvLommoWLnjAU= -----END CERTIFICATE-----Generated at Wed Jun 3 03:38:57 2026 by rpki-client