$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft File: 725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft (raw, json) Hash identifier: M4AiK+sITa6gXrsEEyriE/eB/bRrXcdta1+xubFIdzY= Subject key identifier: 67:E3:B9:07:4C:8A:69:59:E7:3A:19:04:0C:18:90:77:81:47:3D:A5 Authority key identifier: 72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97 Certificate issuer: /CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97 Certificate serial: 76610B47D2412554E9ECC7714504ED45AE96373D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 08:50:52 +0000 Manifest this update: Tue 02 Jun 2026 08:45:52 +0000 Manifest next update: Wed 03 Jun 2026 12:05:52 +0000 Files and hashes: 1: 3130332e31382e3133322e302f32322d3234203d3e203535363933.roa (hash: Fn5PKzmC7YA1TbvzOZXs3Jzaa7OB0gZmLLWwdOBo6Sk=) 2: 3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa (hash: 2ZgfJvyLTSbmKyjhb50szLtpeLkF+krwXndUc1mrD0c=) 3: 725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl (hash: l0/kzb5TM2tfsfgwaSuBdQcLHPj7ngzqkT0qd9etuWQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:61:0b:47:d2:41:25:54:e9:ec:c7:71:45:04:ed:45:ae:96:37:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97 Validity Not Before: Jun 2 08:45:52 2026 GMT Not After : Jun 3 12:05:52 2026 GMT Subject: CN=67E3B9074C8A6959E73A19040C18907781473DA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:81:b7:a4:88:4c:a4:1e:fd:14:a6:93:de:87: 72:45:d5:01:09:b4:aa:8c:63:e7:5b:5f:c7:46:1f: 5f:01:44:21:1e:94:8c:d7:7f:29:66:ec:78:24:31: 32:d3:78:a7:0a:f3:02:14:d8:bb:cd:8b:94:4f:69: 83:cf:2c:47:9e:0b:d8:9f:ff:27:08:ac:d9:63:18: aa:e4:5a:54:b8:a4:f5:fb:ff:23:53:34:ac:7a:2d: d2:c1:75:09:8e:fd:9b:2b:f3:a0:9c:81:f4:cb:62: 3e:fd:d7:97:32:21:a2:af:33:89:31:39:15:95:54: 45:74:78:d2:88:e5:6c:40:c1:ff:cd:8e:a0:22:a6: 64:04:c7:9f:f9:b3:21:ea:ac:8f:29:ce:a6:f9:9d: 7c:0a:a7:15:20:51:9d:a6:27:4d:22:be:40:06:da: 75:2a:e5:53:b8:64:21:90:87:b2:4a:c4:37:ea:11: 04:1d:8a:8b:47:c7:28:5f:32:9c:b8:71:f4:1d:81: 6c:2f:d3:2f:8f:34:da:f9:9d:d8:8c:26:e2:d0:59: a1:b1:3e:8a:fd:bd:e0:ac:e5:ca:a5:70:5c:86:42: 7a:27:1b:c8:27:e2:46:24:3a:e8:e3:69:63:ff:0f: bf:9a:bc:10:44:0f:1b:e5:e9:92:40:e7:9e:30:4d: ae:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E3:B9:07:4C:8A:69:59:E7:3A:19:04:0C:18:90:77:81:47:3D:A5 X509v3 Authority Key Identifier: keyid:72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:30:37:15:a4:4e:76:1e:b0:91:c5:5b:64:23:07:59:8f:94: af:ce:43:b0:31:a8:9c:59:87:33:d2:96:a8:de:60:a4:bb:f5: 35:65:78:34:62:a9:f2:0a:4d:a8:b0:8b:97:a5:0f:00:60:0b: 10:16:f2:1f:63:ec:8b:dc:36:1a:53:0e:6e:30:01:26:9c:04: 38:b1:8a:ee:17:a4:e7:7d:ac:b6:a8:9d:92:a4:85:b9:73:10: e7:6a:c7:e7:4d:93:76:62:64:da:5c:dc:cc:04:8e:c8:fc:c3: b4:14:1c:0a:42:1d:c9:ab:e9:17:89:92:d8:32:94:a7:98:09: 2f:9a:97:18:25:f7:d1:32:71:fa:9c:af:59:5d:9c:90:c0:dc: 56:30:77:1b:a1:2e:f9:48:67:bd:9b:a5:b6:39:49:5d:3d:81: c7:96:fc:b0:11:68:bf:62:43:a2:b6:58:52:26:f5:68:c2:b8: d3:f5:57:27:ff:bb:f8:a0:e6:de:e5:2e:ec:6c:79:84:a8:26: 98:0c:8a:35:8c:38:81:f6:9f:d0:23:bb:cb:e9:8f:ce:6c:e9: fe:00:b1:bc:de:74:8a:d7:51:2f:34:78:cf:1b:d8:3f:d5:71: ed:0f:90:fb:39:84:34:6b:d6:9b:37:a8:11:d8:ff:4e:a4:15: 91:ad:24:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdmELR9JBJVTp7MdxRQTtRa6WNz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1MTg5REJFN0Q5NjQ0MzZBODVGQUMxRkMzM0U1QkY1 QzQ2MEE5NzAeFw0yNjA2MDIwODQ1NTJaFw0yNjA2MDMxMjA1NTJaMDMxMTAvBgNV BAMTKDY3RTNCOTA3NEM4QTY5NTlFNzNBMTkwNDBDMTg5MDc3ODE0NzNEQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/gbekiEykHv0UppPeh3JF1QEJ tKqMY+dbX8dGH18BRCEelIzXfylm7HgkMTLTeKcK8wIU2LvNi5RPaYPPLEeeC9if /ycIrNljGKrkWlS4pPX7/yNTNKx6LdLBdQmO/Zsr86CcgfTLYj7915cyIaKvM4kx ORWVVEV0eNKI5WxAwf/NjqAipmQEx5/5syHqrI8pzqb5nXwKpxUgUZ2mJ00ivkAG 2nUq5VO4ZCGQh7JKxDfqEQQdiotHxyhfMpy4cfQdgWwv0y+PNNr5ndiMJuLQWaGx Por9veCs5cqlcFyGQnonG8gn4kYkOujjaWP/D7+avBBEDxvl6ZJA554wTa4TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ+O5B0yKaVnnOhkEDBiQd4FHPaUwHwYDVR0j BBgwFoAUclGJ2+fZZENqhfrB/DPlv1xGCpcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ1NGI0ZTItMmU1OC00NjViLWFmYWEtMWM5NDY1Yzg4MmU2LzAvNzI1MTg5REJF N0Q5NjQ0MzZBODVGQUMxRkMzM0U1QkY1QzQ2MEE5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjUxODlEQkU3RDk2NDQzNkE4NUZBQzFGQzMzRTVCRjVDNDYw QTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ1NGI0ZTItMmU1OC00NjViLWFm YWEtMWM5NDY1Yzg4MmU2LzAvNzI1MTg5REJFN0Q5NjQ0MzZBODVGQUMxRkMzM0U1 QkY1QzQ2MEE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4wNxWkTnYesJHFW2QjB1mPlK/OQ7AxqJxZ hzPSlqjeYKS79TVleDRiqfIKTaiwi5elDwBgCxAW8h9j7IvcNhpTDm4wASacBDix iu4XpOd9rLaonZKkhblzEOdqx+dNk3ZiZNpc3MwEjsj8w7QUHApCHcmr6ReJktgy lKeYCS+alxgl99Eycfqcr1ldnJDA3FYwdxuhLvlIZ72bpbY5SV09gceW/LARaL9i Q6K2WFIm9WjCuNP1Vyf/u/ig5t7lLuxseYSoJpgMijWMOIH2n9Aju8vpj85s6f4A sbzedIrXUS80eM8b2D/Vce0PkPs5hDRr1ps3qBHY/06kFZGtJFo= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:34 2026 by rpki-client