$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft File: DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft (raw, json) Hash identifier: hbQnj3JpOPlKrVl4pAX+IjQQOV8PJ60iWDQGCVn0z8I= Subject key identifier: 45:C3:BB:61:72:37:CE:19:40:34:45:00:21:B7:B8:91:33:95:36:D0 Authority key identifier: DC:AA:50:0E:56:DF:59:B6:81:7A:DE:1D:51:B5:60:5F:52:26:4D:76 Certificate issuer: /CN=DCAA500E56DF59B6817ADE1D51B5605F52264D76 Certificate serial: 09A8E4C18F952B9FD634F04DA9FF8BC8B9125F94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:38:18 +0000 Manifest this update: Tue 02 Jun 2026 22:33:18 +0000 Manifest next update: Thu 04 Jun 2026 02:09:18 +0000 Files and hashes: 1: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: CdzPgARwHWVAiNVpWfYHHcwq4khjb1oCYEqwBbuFJZI=) 2: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: hgyoReewnJKW4nr6+Jg49Hdij/Yxck5vrTJyyAU/fpU=) 3: DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl (hash: SbVZKcx9Hoog5AYknZ2NrGnLtX2XeY+rPTicgFgJ0Ck=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 02:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a8:e4:c1:8f:95:2b:9f:d6:34:f0:4d:a9:ff:8b:c8:b9:12:5f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCAA500E56DF59B6817ADE1D51B5605F52264D76 Validity Not Before: Jun 2 22:33:18 2026 GMT Not After : Jun 4 02:09:18 2026 GMT Subject: CN=45C3BB617237CE194034450021B7B891339536D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e2:bc:ab:59:89:15:58:66:37:a3:f2:95:44: be:b8:3e:6e:a7:c7:22:09:15:32:4f:d4:5c:c6:cb: 6a:9f:f9:f3:31:60:80:fa:77:8c:32:f9:88:a3:ab: ca:77:96:d9:5a:27:b5:e3:0b:22:b4:90:0f:1a:be: 81:33:f6:c5:5b:2c:10:a7:ce:f0:cf:b4:19:99:8e: ef:90:6f:47:86:10:15:73:0d:4e:49:c9:2a:4e:57: 8f:34:59:46:25:c3:14:82:f0:35:1f:71:f8:79:51: 97:c5:c8:2f:c9:d8:ad:4b:81:58:87:0f:9f:31:e3: 2a:b0:d2:ea:f6:94:a7:88:0b:31:21:35:77:20:c7: e9:f0:89:2f:f7:69:12:9f:bd:d2:48:30:da:8b:f6: 15:f6:88:6d:56:11:1a:13:c2:79:1f:03:5b:11:9b: 52:06:e9:32:2b:a5:20:27:7d:dd:65:64:42:26:d9: c5:5b:00:24:da:92:5d:1c:a0:d5:1c:97:ed:86:69: 94:05:07:4c:a4:98:55:01:5e:51:82:84:10:8d:5a: b8:2e:a5:2d:7b:f2:dc:4b:a4:71:ea:34:3d:5e:66: d1:48:04:7e:8b:00:aa:00:a1:ce:6a:03:42:e7:c2: 2e:82:d6:2a:1b:fd:93:2f:09:2d:2c:6f:b2:ca:cc: 51:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C3:BB:61:72:37:CE:19:40:34:45:00:21:B7:B8:91:33:95:36:D0 X509v3 Authority Key Identifier: keyid:DC:AA:50:0E:56:DF:59:B6:81:7A:DE:1D:51:B5:60:5F:52:26:4D:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:1f:7d:e2:32:b9:52:95:ed:e6:7b:d6:c4:5b:b5:9c:15:75: 4a:b3:94:2e:de:ea:0d:88:ca:20:1b:0c:9a:05:36:91:fc:6e: 9c:25:bf:d2:8e:6f:d9:41:f2:5c:57:40:6d:d0:00:23:89:3f: 6e:b9:53:5c:14:a5:39:14:11:bc:86:93:97:60:ca:15:1c:0e: 4c:b4:fe:6f:cc:64:f7:40:80:a3:2d:98:71:ab:6a:43:98:f4: aa:eb:fe:f8:b3:87:e8:72:30:9d:e0:a9:81:6e:ba:d2:22:26: cd:0e:61:0e:47:f2:99:66:2b:c6:d1:04:91:42:cc:1b:eb:2e: be:dd:96:4b:d3:c0:e5:06:d7:fa:d6:fb:ba:fe:58:8b:28:a2: af:8a:30:05:ae:ef:1a:dc:15:c3:7c:db:43:82:f2:99:94:f2: eb:f6:97:3f:cb:c5:da:e0:d9:ca:e9:3b:84:ab:1d:7d:79:1d: 71:eb:28:c2:a5:52:6c:b4:da:61:00:0f:6e:b4:85:03:51:39: 9b:11:bb:b9:66:a4:c0:05:da:26:e3:58:7d:44:84:eb:93:ae: 30:fb:eb:3a:ee:20:20:e4:7e:6c:0a:22:17:5d:2a:ec:d7:6f: d8:e2:60:10:65:55:40:d5:0e:bc:b8:35:0e:12:91:73:13:9e: 51:14:a5:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCajkwY+VK5/WNPBNqf+LyLkSX5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENBQTUwMEU1NkRGNTlCNjgxN0FERTFENTFCNTYwNUY1 MjI2NEQ3NjAeFw0yNjA2MDIyMjMzMThaFw0yNjA2MDQwMjA5MThaMDMxMTAvBgNV BAMTKDQ1QzNCQjYxNzIzN0NFMTk0MDM0NDUwMDIxQjdCODkxMzM5NTM2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD04ryrWYkVWGY3o/KVRL64Pm6n xyIJFTJP1FzGy2qf+fMxYID6d4wy+Yijq8p3ltlaJ7XjCyK0kA8avoEz9sVbLBCn zvDPtBmZju+Qb0eGEBVzDU5JySpOV480WUYlwxSC8DUfcfh5UZfFyC/J2K1LgViH D58x4yqw0ur2lKeICzEhNXcgx+nwiS/3aRKfvdJIMNqL9hX2iG1WERoTwnkfA1sR m1IG6TIrpSAnfd1lZEIm2cVbACTakl0coNUcl+2GaZQFB0ykmFUBXlGChBCNWrgu pS178txLpHHqND1eZtFIBH6LAKoAoc5qA0Lnwi6C1iob/ZMvCS0sb7LKzFHJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURcO7YXI3zhlANEUAIbe4kTOVNtAwHwYDVR0j BBgwFoAU3KpQDlbfWbaBet4dUbVgX1ImTXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMyOTVkZTYtMjA1OC00NmE3LTkzNmItMDUyY2YyZmE5MjBkLzAvRENBQTUwMEU1 NkRGNTlCNjgxN0FERTFENTFCNTYwNUY1MjI2NEQ3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0FBNTAwRTU2REY1OUI2ODE3QURFMUQ1MUI1NjA1RjUyMjY0 RDc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMyOTVkZTYtMjA1OC00NmE3LTkz NmItMDUyY2YyZmE5MjBkLzAvRENBQTUwMEU1NkRGNTlCNjgxN0FERTFENTFCNTYw NUY1MjI2NEQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEffeIyuVKV7eZ71sRbtZwVdUqzlC7e6g2I yiAbDJoFNpH8bpwlv9KOb9lB8lxXQG3QACOJP265U1wUpTkUEbyGk5dgyhUcDky0 /m/MZPdAgKMtmHGrakOY9Krr/vizh+hyMJ3gqYFuutIiJs0OYQ5H8plmK8bRBJFC zBvrLr7dlkvTwOUG1/rW+7r+WIsooq+KMAWu7xrcFcN820OC8pmU8uv2lz/Lxdrg 2crpO4SrHX15HXHrKMKlUmy02mEAD260hQNROZsRu7lmpMAF2ibjWH1EhOuTrjD7 6zruICDkfmwKIhddKuzXb9jiYBBlVUDVDry4NQ4SkXMTnlEUpfA= -----END CERTIFICATE-----Generated at Wed Jun 3 03:49:52 2026 by rpki-client