$ rpki-client -vvf rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft File: 4916565C52234EF87B2101E4B733E4674131F669.mft (raw, json) Hash identifier: 7LjWP4kt2TvQNqLe52kSLOQgDv6tlnANPYpZ0I9vDUI= Subject key identifier: 89:2E:B9:36:AE:12:A5:38:F5:44:57:1B:69:1B:DC:93:98:2E:31:AE Authority key identifier: 49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69 Certificate issuer: /CN=4916565C52234EF87B2101E4B733E4674131F669 Certificate serial: 0D0C35F12744B0ECB615558899A8ED1ABC2774CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 20:24:41 +0000 Manifest this update: Tue 02 Jun 2026 20:19:41 +0000 Manifest next update: Wed 03 Jun 2026 22:36:41 +0000 Files and hashes: 1: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: ul2O2y/d0f5tNVWkMLvre71muhXGfgnlzO8D5D2e4HI=) 2: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: UPHtghvELZ/agPcg9sdcuWcqyn+wKiYGN/LJgGlSr7U=) 3: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: mP6KDhXtXACfDnyPSe3QyvooBjz+fxsWyqqYwJxWxso=) 4: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: QHAKE8hSKoHe92BjspMHMu28iG9+nn05M8V9Gd/0zIA=) 5: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: fKsBX0OWuQw6kFhHb1Pfy7hACtoTRk+vAz87zGxbi4A=) 6: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: uPdBAyxTrORogOkXX0w6k19zP0zWzl0tjXf4OfuepRY=) 7: 4916565C52234EF87B2101E4B733E4674131F669.crl (hash: V6fbnmYKSiAkzlEPWWY0LuUAx/ii/O8VVq9FiynkKXs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 22:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:0c:35:f1:27:44:b0:ec:b6:15:55:88:99:a8:ed:1a:bc:27:74:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4916565C52234EF87B2101E4B733E4674131F669 Validity Not Before: Jun 2 20:19:41 2026 GMT Not After : Jun 3 22:36:41 2026 GMT Subject: CN=892EB936AE12A538F544571B691BDC93982E31AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7b:1b:00:7b:b9:e4:dc:24:f0:b1:2e:89:16: ae:be:9e:d1:a8:b7:7f:d0:53:45:e8:ec:0b:a7:3e: 22:40:0a:09:0e:24:89:72:aa:13:e2:12:57:99:fa: da:93:90:bb:c1:dd:26:4f:80:62:2e:f8:49:fd:97: b5:17:8d:d4:6e:ec:6c:95:0d:30:bd:b7:c4:fe:7e: 35:5d:fd:35:71:2f:48:bc:ce:ed:f8:87:86:59:01: 47:51:d5:bd:3e:f5:68:62:6f:00:bc:26:ac:8e:a1: 21:c3:25:ce:59:cc:2f:7a:8e:4c:79:84:41:a5:11: 45:b3:df:63:ae:d0:2a:8a:ea:c6:d6:50:6a:dc:b2: 6c:49:64:ed:e5:2e:c7:1a:27:0d:de:05:47:cd:c6: c7:aa:9c:18:55:4c:5d:33:db:cc:71:2c:73:e2:73: 4f:92:4c:5b:5c:9a:fa:9d:1b:67:61:ef:a5:26:dd: 09:df:20:cb:1d:e3:c9:ec:b9:5e:27:4e:8a:df:15: 95:94:72:42:c1:2f:8c:06:f8:25:ea:bd:96:1a:85: 42:91:ec:a0:ef:5f:20:88:48:ac:77:7a:07:8d:f0: fb:13:3b:d8:3c:ed:71:8b:33:71:e6:69:1b:59:0c: 61:d3:98:44:e6:bf:85:bc:82:44:7d:25:40:67:77: fe:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2E:B9:36:AE:12:A5:38:F5:44:57:1B:69:1B:DC:93:98:2E:31:AE X509v3 Authority Key Identifier: keyid:49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:91:db:bf:5d:5d:cf:9e:33:86:eb:a6:47:36:3d:26:aa:a8: f3:1d:2f:42:43:7f:d1:2d:54:51:d1:b4:f5:68:a2:ca:61:77: 51:33:db:ae:6e:03:cc:62:b5:ea:e2:0f:32:61:12:9c:5e:37: 3f:6e:3f:36:0b:fd:3e:9b:bf:b9:db:17:f5:ea:f5:4a:88:2e: f7:08:ba:20:30:80:1c:37:ae:59:87:d2:9a:65:42:c4:24:db: 40:be:64:dd:70:d3:0a:d7:a9:a1:af:4a:80:dc:48:b0:e1:57: 77:b0:90:0b:43:b2:05:59:5f:4d:b8:e1:9a:e4:c4:c4:80:92: 66:36:c4:f7:e2:95:22:c0:48:b2:0c:c9:dc:d1:f6:c4:c9:1b: 40:20:32:7f:a6:9f:71:b4:9c:c8:3e:4e:b9:4f:01:a2:34:2e: cb:b5:f0:1d:b9:11:ed:fb:2e:44:33:ac:a7:36:89:55:62:61: 0a:72:47:a1:de:fd:15:c1:f8:c5:32:2d:64:11:84:c2:a7:e4: e0:e5:d4:e7:2d:5e:4d:58:27:af:77:3d:4b:3f:0c:c0:84:a1: a2:9d:d8:1a:22:0d:f9:f8:dc:aa:f1:f0:2d:2c:a0:8f:2e:43: 67:cc:4a:d0:c3:7b:96:e1:79:8d:f3:91:fb:08:3a:47:d2:2b: b2:70:55:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQw18SdEsOy2FVWImajtGrwndM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxNjU2NUM1MjIzNEVGODdCMjEwMUU0QjczM0U0Njc0 MTMxRjY2OTAeFw0yNjA2MDIyMDE5NDFaFw0yNjA2MDMyMjM2NDFaMDMxMTAvBgNV BAMTKDg5MkVCOTM2QUUxMkE1MzhGNTQ0NTcxQjY5MUJEQzkzOTgyRTMxQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVexsAe7nk3CTwsS6JFq6+ntGo t3/QU0Xo7AunPiJACgkOJIlyqhPiEleZ+tqTkLvB3SZPgGIu+En9l7UXjdRu7GyV DTC9t8T+fjVd/TVxL0i8zu34h4ZZAUdR1b0+9WhibwC8JqyOoSHDJc5ZzC96jkx5 hEGlEUWz32Ou0CqK6sbWUGrcsmxJZO3lLscaJw3eBUfNxseqnBhVTF0z28xxLHPi c0+STFtcmvqdG2dh76Um3QnfIMsd48nsuV4nTorfFZWUckLBL4wG+CXqvZYahUKR 7KDvXyCISKx3egeN8PsTO9g87XGLM3HmaRtZDGHTmETmv4W8gkR9JUBnd/6/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiS65Nq4SpTj1RFcbaRvck5guMa4wHwYDVR0j BBgwFoAUSRZWXFIjTvh7IQHktzPkZ0Ex9mkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFkNjdkNWYtNTcxMy00MTUzLTg3MWItMWIwMDhmN2ZmZGQyLzAvNDkxNjU2NUM1 MjIzNEVGODdCMjEwMUU0QjczM0U0Njc0MTMxRjY2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTE2NTY1QzUyMjM0RUY4N0IyMTAxRTRCNzMzRTQ2NzQxMzFG NjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFkNjdkNWYtNTcxMy00MTUzLTg3 MWItMWIwMDhmN2ZmZGQyLzAvNDkxNjU2NUM1MjIzNEVGODdCMjEwMUU0QjczM0U0 Njc0MTMxRjY2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWR279dXc+eM4brpkc2PSaqqPMdL0JDf9Et VFHRtPVoosphd1Ez265uA8xiteriDzJhEpxeNz9uPzYL/T6bv7nbF/Xq9UqILvcI uiAwgBw3rlmH0pplQsQk20C+ZN1w0wrXqaGvSoDcSLDhV3ewkAtDsgVZX0244Zrk xMSAkmY2xPfilSLASLIMydzR9sTJG0AgMn+mn3G0nMg+TrlPAaI0Lsu18B25Ee37 LkQzrKc2iVViYQpyR6He/RXB+MUyLWQRhMKn5ODl1OctXk1YJ693PUs/DMCEoaKd 2BoiDfn43Krx8C0soI8uQ2fMStDDe5bheY3zkfsIOkfSK7JwVTA= -----END CERTIFICATE-----Generated at Wed Jun 3 03:54:11 2026 by rpki-client