$ rpki-client -vvf rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft File: DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft (raw, json) Hash identifier: mQzlCfyl7S4heiME26qcPnfbxYq10cWke+DZOG/IbyE= Subject key identifier: 47:00:F2:CD:05:76:27:68:73:3D:50:88:1A:5E:77:AB:1B:D2:91:6A Authority key identifier: DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18 Certificate issuer: /CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618 Certificate serial: 690A7CF02275FE0A5C4E435BF9CA1827223D00B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 08:25:27 +0000 Manifest this update: Tue 02 Jun 2026 08:20:27 +0000 Manifest next update: Wed 03 Jun 2026 10:18:27 +0000 Files and hashes: 1: 3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa (hash: MrbeRL/3NlCVWGAvenapRPN6GCB6X5UzgLlN8P6C5B4=) 2: 3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa (hash: J7DIB6hfPPTu3E2KzBH8yAsIGJFne3bOrj0Y9GAdcDc=) 3: DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl (hash: N9ur3MSZkgHGxsODdKkiAHG3lMVJcj3lT+5eRzsXrUU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0a:7c:f0:22:75:fe:0a:5c:4e:43:5b:f9:ca:18:27:22:3d:00:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618 Validity Not Before: Jun 2 08:20:27 2026 GMT Not After : Jun 3 10:18:27 2026 GMT Subject: CN=4700F2CD05762768733D50881A5E77AB1BD2916A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:09:b7:43:e3:4b:1c:f2:5e:21:a5:aa:3d:03: 13:5f:e2:07:b8:cb:a3:fe:18:0a:9b:26:56:a1:41: 99:e1:25:9b:5c:7a:6d:ae:ed:50:04:f1:ca:4a:a4: 62:88:ad:4b:e1:bf:51:ef:1f:51:ae:23:3e:39:06: d8:f7:fe:81:49:5f:25:95:bf:69:aa:f2:bf:08:8b: b5:8c:08:eb:f3:ec:1e:d7:b8:46:ec:d3:76:0d:3c: 5b:38:89:ca:70:26:16:5a:70:9c:59:41:0d:0b:50: d7:e6:4a:e3:01:b1:08:03:8d:72:3b:9b:5e:f3:69: 91:35:0b:da:00:c8:7d:83:7a:d5:c6:82:5e:f1:58: cd:12:7d:5c:3b:27:0a:8f:d1:b4:d1:e9:93:99:a1: b3:a7:ad:ae:26:d9:2a:5c:00:ae:82:14:1b:df:7e: 79:f3:31:23:eb:21:a2:1c:14:51:40:f1:26:48:bb: 25:90:48:2b:50:5c:c0:f0:85:ce:18:37:c7:90:a3: dc:bc:62:3e:a2:8e:b2:98:cf:96:26:fc:48:e3:4b: 32:b6:92:2f:9c:75:d7:7d:0b:18:9f:2e:f8:c0:1e: d0:96:40:09:a8:fd:8f:36:79:25:66:31:ad:c3:cf: 7b:38:8c:fd:a0:e2:3d:93:ae:5d:a8:27:e6:64:15: e4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:00:F2:CD:05:76:27:68:73:3D:50:88:1A:5E:77:AB:1B:D2:91:6A X509v3 Authority Key Identifier: keyid:DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:18:bf:26:b9:64:7c:1e:fb:56:d4:05:4d:e9:d1:4a:de:87: 31:21:2f:31:13:74:07:62:43:bc:9a:f1:f1:fc:b3:8f:35:65: 62:d3:9a:60:23:ba:6e:44:1b:f4:25:c3:3f:18:f8:11:73:69: a6:93:e1:73:13:77:a6:27:a9:4a:32:87:dc:af:6d:bf:4b:ee: c0:f4:7b:44:64:2b:5d:3b:ae:30:eb:d1:71:66:12:5f:3c:77: 21:67:c2:5f:f1:25:60:01:40:2b:7c:55:3b:15:ea:33:e9:6a: 1c:d2:a3:ca:2a:dc:88:3d:13:14:6f:8a:6c:c1:e2:50:14:b8: 69:ad:e5:b1:71:96:c0:5b:1c:e4:b5:fe:57:75:85:89:3c:1b: 18:06:77:86:6a:45:c3:ce:31:0a:8f:b0:5e:c8:17:06:4c:26: fb:14:2c:a0:7c:0d:fa:75:5b:22:b8:b0:b7:a9:a8:ec:d0:e1: e9:e5:9f:65:79:85:bb:43:1c:2c:8a:ea:8d:b5:60:b9:a8:d0: 1f:bf:f8:1b:28:b4:59:60:e8:ea:f0:d6:e5:8c:33:d1:f1:82: d3:f6:0c:37:fb:13:9b:a1:9c:af:ad:4f:89:6a:4c:35:5f:55: 9e:b3:61:c8:d7:be:52:e2:cd:58:25:1a:97:d1:2a:11:ad:3f: 0a:93:fb:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaQp88CJ1/gpcTkNb+coYJyI9ALgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGODI5MEJBQ0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZE NkE3NzYxODAeFw0yNjA2MDIwODIwMjdaFw0yNjA2MDMxMDE4MjdaMDMxMTAvBgNV BAMTKDQ3MDBGMkNEMDU3NjI3Njg3MzNENTA4ODFBNUU3N0FCMUJEMjkxNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CbdD40sc8l4hpao9AxNf4ge4 y6P+GAqbJlahQZnhJZtcem2u7VAE8cpKpGKIrUvhv1HvH1GuIz45Btj3/oFJXyWV v2mq8r8Ii7WMCOvz7B7XuEbs03YNPFs4icpwJhZacJxZQQ0LUNfmSuMBsQgDjXI7 m17zaZE1C9oAyH2DetXGgl7xWM0SfVw7JwqP0bTR6ZOZobOnra4m2SpcAK6CFBvf fnnzMSPrIaIcFFFA8SZIuyWQSCtQXMDwhc4YN8eQo9y8Yj6ijrKYz5Ym/EjjSzK2 ki+cddd9CxifLvjAHtCWQAmo/Y82eSVmMa3Dz3s4jP2g4j2Trl2oJ+ZkFeQPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURwDyzQV2J2hzPVCIGl53qxvSkWowHwYDVR0j BBgwFoAU2/gpC6zyrZbbsCQ2SMxqxtandhgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2MDA0ODYtOTc4MC00M2VlLWJiMmQtYjgxMTA5NGExNDQ1LzAvREJGODI5MEJB Q0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZENkE3NzYxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQkY4MjkwQkFDRjJBRDk2REJCMDI0MzY0OENDNkFDNkQ2QTc3 NjE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2MDA0ODYtOTc4MC00M2VlLWJi MmQtYjgxMTA5NGExNDQ1LzAvREJGODI5MEJBQ0YyQUQ5NkRCQjAyNDM2NDhDQzZB QzZENkE3NzYxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYYvya5ZHwe+1bUBU3p0UrehzEhLzETdAdi Q7ya8fH8s481ZWLTmmAjum5EG/Qlwz8Y+BFzaaaT4XMTd6YnqUoyh9yvbb9L7sD0 e0RkK107rjDr0XFmEl88dyFnwl/xJWABQCt8VTsV6jPpahzSo8oq3Ig9ExRvimzB 4lAUuGmt5bFxlsBbHOS1/ld1hYk8GxgGd4ZqRcPOMQqPsF7IFwZMJvsULKB8Dfp1 WyK4sLepqOzQ4enln2V5hbtDHCyK6o21YLmo0B+/+BsotFlg6Orw1uWMM9HxgtP2 DDf7E5uhnK+tT4lqTDVfVZ6zYcjXvlLizVglGpfRKhGtPwqT+68= -----END CERTIFICATE-----Generated at Wed Jun 3 04:04:24 2026 by rpki-client