$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft File: 01B748FE9E379A963DF80DAA39E554231A002AB4.mft (raw, json) Hash identifier: XXbiEBG0IA4nWPCuUwosPMw3qtYlBDPNCvhI419n30g= Subject key identifier: C7:A6:B9:5D:EC:03:13:6F:02:E4:4A:53:45:59:97:1C:4C:BA:A8:23 Authority key identifier: 01:B7:48:FE:9E:37:9A:96:3D:F8:0D:AA:39:E5:54:23:1A:00:2A:B4 Certificate issuer: /CN=01B748FE9E379A963DF80DAA39E554231A002AB4 Certificate serial: 656C6C8C5CFC33E5D106A070C3A99E234D1E8737 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 15:03:16 +0000 Manifest this update: Tue 02 Jun 2026 14:58:16 +0000 Manifest next update: Wed 03 Jun 2026 17:35:16 +0000 Files and hashes: 1: 3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa (hash: OUi2dWqVUs4mn5PgnV5FjoZyNlm2gHfbdDmeMNM+lt0=) 2: 3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa (hash: 5PA+RoFsU/KO7v+L0x7qbIvSiKy1qc9c1F5T1nVZmHM=) 3: 3130332e3137312e3138322e302f32342d3234203d3e20313432333735.roa (hash: NB4ptyBbAbjhwyj4mleVlSYym5zGdWDUdcXFOkuUENA=) 4: 01B748FE9E379A963DF80DAA39E554231A002AB4.crl (hash: eZzd/pBMLD7jNQYJw26/3OXxx0SJVgCgKikiqpcb86M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.crl rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:6c:6c:8c:5c:fc:33:e5:d1:06:a0:70:c3:a9:9e:23:4d:1e:87:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01B748FE9E379A963DF80DAA39E554231A002AB4 Validity Not Before: Jun 2 14:58:16 2026 GMT Not After : Jun 3 17:35:16 2026 GMT Subject: CN=C7A6B95DEC03136F02E44A534559971C4CBAA823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:73:d0:84:e6:d0:ae:cd:95:3d:0c:d6:16:2f: 16:08:1c:d5:22:4d:f3:c6:4f:07:54:a4:0a:fc:3f: fe:d2:2b:c5:40:15:20:0d:2b:3e:82:fc:fb:18:f6: f3:db:07:8a:90:9a:a5:c0:0e:64:1a:47:27:bb:8d: 97:9d:b3:ba:84:aa:c1:91:53:ff:67:bc:6c:d9:9b: b9:a5:a5:79:ef:70:4f:00:f4:06:ae:ae:0b:06:b2: 81:0e:cd:95:65:07:40:7a:ca:7b:ab:8d:aa:61:50: 1a:c9:cc:32:39:8d:9d:3a:bc:ca:17:c1:fa:df:32: 01:bd:79:fb:da:73:0c:ad:f1:ec:60:41:ee:4c:4b: e3:17:26:23:d1:8c:a9:15:a5:da:4f:35:ca:09:08: c0:fd:f1:b1:6d:1f:d3:6c:e5:b5:82:9d:a2:4d:97: 9f:2f:73:92:0c:a7:11:b0:32:9b:1a:b5:4c:57:ae: 48:66:bc:07:8b:d5:af:e6:4b:3c:22:44:f6:27:14: b1:05:6c:59:37:97:ad:83:ff:67:c9:dc:d3:80:e1: 16:32:4b:e8:54:33:52:7f:18:f4:cc:32:fd:40:bf: 9b:23:e9:3b:a1:a3:db:dd:95:82:b5:25:cb:5a:30: 83:2e:61:47:c8:d7:b8:c1:38:a7:81:e9:b5:35:fb: 0f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A6:B9:5D:EC:03:13:6F:02:E4:4A:53:45:59:97:1C:4C:BA:A8:23 X509v3 Authority Key Identifier: keyid:01:B7:48:FE:9E:37:9A:96:3D:F8:0D:AA:39:E5:54:23:1A:00:2A:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:08:f9:d7:62:41:a6:c9:b5:d9:84:fd:e0:2c:90:89:d1:8d: e4:03:51:a9:e3:34:a9:90:71:7f:ea:55:db:dd:0d:09:18:4d: ed:19:0f:6f:60:a6:6a:bb:cf:ca:ad:2f:05:8b:14:be:ad:ca: 35:3d:dd:14:d7:61:60:88:dc:cd:6f:6a:f5:c0:79:86:d1:1b: d3:f3:dc:16:e1:79:9d:78:6d:52:ce:f0:fa:eb:98:4d:04:78: 01:61:66:be:b2:71:30:f9:df:0d:f4:36:cc:48:15:71:e3:97: d7:aa:8c:32:69:27:02:af:7f:5a:d3:e1:0b:6c:08:45:36:38: 9b:ad:4a:00:97:7d:15:55:2f:c5:27:6b:96:5e:64:26:9e:50: 51:b7:2b:58:3c:8d:6f:10:8f:7d:8c:91:ab:f2:1d:47:15:6a: b8:b7:2b:34:e1:4f:b5:8f:0f:5d:d4:1c:88:ca:64:e0:1a:00: 1d:fc:be:68:c4:ff:32:42:fb:7a:86:22:05:91:86:59:08:d7: da:e2:ab:d3:d3:07:5e:c0:74:3e:43:31:f7:64:b3:fd:3b:01: d7:72:0f:0c:bb:f7:9c:66:de:8f:c6:3d:7c:e8:6e:a1:bb:d1: 32:62:85:5a:05:26:26:f3:67:26:68:14:3b:78:d3:5c:03:6b: e1:9b:d4:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZWxsjFz8M+XRBqBww6meI00ehzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFCNzQ4RkU5RTM3OUE5NjNERjgwREFBMzlFNTU0MjMx QTAwMkFCNDAeFw0yNjA2MDIxNDU4MTZaFw0yNjA2MDMxNzM1MTZaMDMxMTAvBgNV BAMTKEM3QTZCOTVERUMwMzEzNkYwMkU0NEE1MzQ1NTk5NzFDNENCQUE4MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKc9CE5tCuzZU9DNYWLxYIHNUi TfPGTwdUpAr8P/7SK8VAFSANKz6C/PsY9vPbB4qQmqXADmQaRye7jZeds7qEqsGR U/9nvGzZm7mlpXnvcE8A9AaurgsGsoEOzZVlB0B6ynurjaphUBrJzDI5jZ06vMoX wfrfMgG9efvacwyt8exgQe5MS+MXJiPRjKkVpdpPNcoJCMD98bFtH9Ns5bWCnaJN l58vc5IMpxGwMpsatUxXrkhmvAeL1a/mSzwiRPYnFLEFbFk3l62D/2fJ3NOA4RYy S+hUM1J/GPTMMv1Av5sj6Tuho9vdlYK1JctaMIMuYUfI17jBOKeB6bU1+w9vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx6a5XewDE28C5EpTRVmXHEy6qCMwHwYDVR0j BBgwFoAUAbdI/p43mpY9+A2qOeVUIxoAKrQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTM1MDVjYjMtYjU1ZS00MGU0LWFjNzktNjM2NTYwNmY0ZWY5LzAvMDFCNzQ4RkU5 RTM3OUE5NjNERjgwREFBMzlFNTU0MjMxQTAwMkFCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMUI3NDhGRTlFMzc5QTk2M0RGODBEQUEzOUU1NTQyMzFBMDAy QUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTM1MDVjYjMtYjU1ZS00MGU0LWFj NzktNjM2NTYwNmY0ZWY5LzAvMDFCNzQ4RkU5RTM3OUE5NjNERjgwREFBMzlFNTU0 MjMxQTAwMkFCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACoI+ddiQabJtdmE/eAskInRjeQDUanjNKmQ cX/qVdvdDQkYTe0ZD29gpmq7z8qtLwWLFL6tyjU93RTXYWCI3M1vavXAeYbRG9Pz 3BbheZ14bVLO8PrrmE0EeAFhZr6ycTD53w30NsxIFXHjl9eqjDJpJwKvf1rT4Qts CEU2OJutSgCXfRVVL8Una5ZeZCaeUFG3K1g8jW8Qj32MkavyHUcVari3KzThT7WP D13UHIjKZOAaAB38vmjE/zJC+3qGIgWRhlkI19riq9PTB17AdD5DMfdks/07Addy Dwy795xm3o/GPXzobqG70TJihVoFJibzZyZoFDt401wDa+Gb1CM= -----END CERTIFICATE-----Generated at Wed Jun 3 04:12:24 2026 by rpki-client