$ rpki-client -vvf rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft File: 986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft (raw, json) Hash identifier: i2+US2MTXoLTeb6TNmAbiDQ0AX7RYZLcEPDvuCD39eY= Subject key identifier: 2D:5C:03:53:0F:42:D1:3B:61:2F:6A:3C:1E:74:5B:4C:67:9E:57:08 Authority key identifier: 98:6A:A3:A0:6E:40:D1:71:D9:93:DC:74:DE:F4:BE:49:8C:29:ED:C5 Certificate issuer: /CN=986AA3A06E40D171D993DC74DEF4BE498C29EDC5 Certificate serial: 6123FD503BDF1B17D33797FB71A4D7695342D9CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:59:55 +0000 Manifest this update: Tue 02 Jun 2026 23:54:55 +0000 Manifest next update: Thu 04 Jun 2026 03:18:55 +0000 Files and hashes: 1: 3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa (hash: CodcG2RlcElofIyHkhWkjp7iwOM0brF/BMzNO8nhSZI=) 2: 986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl (hash: 3jnzh0O08U2+b7VY2YBfHcmavExdRKxJ9NzDeZpLPFk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:23:fd:50:3b:df:1b:17:d3:37:97:fb:71:a4:d7:69:53:42:d9:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=986AA3A06E40D171D993DC74DEF4BE498C29EDC5 Validity Not Before: Jun 2 23:54:55 2026 GMT Not After : Jun 4 03:18:55 2026 GMT Subject: CN=2D5C03530F42D13B612F6A3C1E745B4C679E5708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1a:b8:31:c9:23:3f:e6:ab:9f:81:ea:10:11: 24:47:47:75:1a:37:de:15:9d:11:50:b1:b2:46:f4: bc:40:73:72:a1:d0:8b:cf:77:86:0a:94:78:5d:18: e7:5d:01:55:ac:78:60:2c:9b:5d:5d:3d:16:2e:37: 97:31:f1:16:d3:b8:37:41:f2:04:2d:c6:a7:5d:5d: 40:d2:ba:fb:b3:10:01:9a:b5:29:b9:18:ab:dc:69: 77:fc:c6:01:d3:b1:0b:c0:22:29:c0:5d:ea:7b:19: f9:b4:85:39:2a:33:bd:de:2b:3a:c0:06:53:9e:48: fd:1c:da:eb:2e:3d:98:8c:5b:2f:12:49:18:87:a0: 35:81:97:23:c3:f6:7e:23:0a:6a:f9:67:56:61:44: 7c:79:4f:75:46:74:bb:3d:b6:f4:87:dc:ea:89:5b: 23:54:03:e2:b2:59:0e:c9:34:eb:95:82:4d:c2:74: 92:94:c1:d2:63:5d:9f:45:f2:e2:47:96:50:f2:0f: cb:e1:86:97:4b:65:4c:6d:71:60:b9:e0:7f:fd:7f: ca:b3:24:a8:a5:5f:33:d0:04:fe:44:d3:5e:23:6a: 86:8b:6f:ee:0b:7d:d6:b4:e6:b7:17:77:31:ea:5f: 45:1b:cb:0b:71:93:c1:fe:a4:22:4a:48:3c:5d:07: 77:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5C:03:53:0F:42:D1:3B:61:2F:6A:3C:1E:74:5B:4C:67:9E:57:08 X509v3 Authority Key Identifier: keyid:98:6A:A3:A0:6E:40:D1:71:D9:93:DC:74:DE:F4:BE:49:8C:29:ED:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:24:0a:32:b7:35:e6:4c:b0:26:8e:a8:88:6a:f8:60:4d:23: 6c:bc:78:02:1c:52:6c:7c:59:4f:eb:2b:63:23:21:cc:9c:d2: 7b:f9:5a:4e:05:6c:5d:4b:49:c2:49:85:74:2d:a2:cf:53:ff: 74:00:4b:32:2c:9b:c6:72:06:29:f0:6f:6e:42:6d:82:7a:2b: 2e:9f:be:ba:00:a3:05:d2:90:4f:dc:6d:ea:40:66:1e:0a:4d: 23:4f:ee:47:68:ae:8a:11:d0:6e:3d:ed:1c:c4:6e:4c:bc:a9: 01:21:16:a6:23:0f:d9:df:51:a4:18:5c:37:99:c2:b9:63:98: ab:61:74:8e:31:5d:37:51:43:f2:03:1f:b6:88:62:6f:ad:4a: 64:53:18:c8:ab:27:98:45:4e:6b:c5:bc:da:3f:63:79:ec:c5: 69:bb:ec:67:7d:71:ec:88:96:ae:1a:aa:66:a7:23:89:62:5e: c2:5f:76:e5:ce:c7:cd:4b:2c:95:ae:a4:6c:1f:f3:0f:25:a4: 04:b0:95:12:6f:f3:e4:ee:aa:a2:de:0e:05:ed:5f:5d:d8:60: 1d:2d:ac:23:78:56:0d:90:d4:09:30:d5:90:ee:b8:75:1f:0b: 4e:43:66:41:64:bc:4a:d6:13:e8:20:51:5d:c5:25:43:53:71: d6:28:34:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYSP9UDvfGxfTN5f7caTXaVNC2c8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2QUEzQTA2RTQwRDE3MUQ5OTNEQzc0REVGNEJFNDk4 QzI5RURDNTAeFw0yNjA2MDIyMzU0NTVaFw0yNjA2MDQwMzE4NTVaMDMxMTAvBgNV BAMTKDJENUMwMzUzMEY0MkQxM0I2MTJGNkEzQzFFNzQ1QjRDNjc5RTU3MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMGrgxySM/5qufgeoQESRHR3Ua N94VnRFQsbJG9LxAc3Kh0IvPd4YKlHhdGOddAVWseGAsm11dPRYuN5cx8RbTuDdB 8gQtxqddXUDSuvuzEAGatSm5GKvcaXf8xgHTsQvAIinAXep7Gfm0hTkqM73eKzrA BlOeSP0c2usuPZiMWy8SSRiHoDWBlyPD9n4jCmr5Z1ZhRHx5T3VGdLs9tvSH3OqJ WyNUA+KyWQ7JNOuVgk3CdJKUwdJjXZ9F8uJHllDyD8vhhpdLZUxtcWC54H/9f8qz JKilXzPQBP5E014jaoaLb+4Lfda05rcXdzHqX0Ubywtxk8H+pCJKSDxdB3e/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULVwDUw9C0TthL2o8HnRbTGeeVwgwHwYDVR0j BBgwFoAUmGqjoG5A0XHZk9x03vS+SYwp7cUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTRhZTU3YjMtNDZhMi00MjNkLWIyNDQtMDNmZmVlMTA1Yjc3LzAvOTg2QUEzQTA2 RTQwRDE3MUQ5OTNEQzc0REVGNEJFNDk4QzI5RURDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODZBQTNBMDZFNDBEMTcxRDk5M0RDNzRERUY0QkU0OThDMjlF REM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTRhZTU3YjMtNDZhMi00MjNkLWIy NDQtMDNmZmVlMTA1Yjc3LzAvOTg2QUEzQTA2RTQwRDE3MUQ5OTNEQzc0REVGNEJF NDk4QzI5RURDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkkCjK3NeZMsCaOqIhq+GBNI2y8eAIcUmx8 WU/rK2MjIcyc0nv5Wk4FbF1LScJJhXQtos9T/3QASzIsm8ZyBinwb25CbYJ6Ky6f vroAowXSkE/cbepAZh4KTSNP7kdorooR0G497RzEbky8qQEhFqYjD9nfUaQYXDeZ wrljmKthdI4xXTdRQ/IDH7aIYm+tSmRTGMirJ5hFTmvFvNo/Y3nsxWm77Gd9ceyI lq4aqmanI4liXsJfduXOx81LLJWupGwf8w8lpASwlRJv8+TuqqLeDgXtX13YYB0t rCN4Vg2Q1Akw1ZDuuHUfC05DZkFkvErWE+ggUV3FJUNTcdYoNDU= -----END CERTIFICATE-----Generated at Wed Jun 3 03:28:20 2026 by rpki-client