$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft File: CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft (raw, json) Hash identifier: Tyri0KfCvU8opJ4LxaJsclY59oHEcEMhpJgHLcPTum0= Subject key identifier: 61:FE:73:E0:61:C3:A2:FC:1C:E8:05:37:C3:63:9C:3C:27:66:05:00 Authority key identifier: CD:47:4E:79:16:37:1A:E6:AC:CF:87:42:2C:4E:A8:D4:E5:3D:1E:D1 Certificate issuer: /CN=CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1 Certificate serial: 05A0ABF65D7C5F8C0980FD917E9E606931FE185A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 02:07:17 +0000 Manifest this update: Wed 03 Jun 2026 02:02:17 +0000 Manifest next update: Thu 04 Jun 2026 02:50:17 +0000 Files and hashes: 1: 3130332e35342e38322e302f32342d3234203d3e20313530353132.roa (hash: wOpjCYu2B/2dvfL2/p92TM51IsDnzUPICTzMvcgVUFY=) 2: CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl (hash: FkZwYB+PGqYd2xiXeHvEaf+jxUzWa+zhv3Xom0n66gQ=) 3: 3130332e35342e38322e302f32332d3233203d3e20313530353132.roa (hash: bbQqob1JTbWw2rvNr6s3TBx3HaklMvpVDZzpBLfCECs=) 4: 3130332e35342e38332e302f32342d3234203d3e20313530353132.roa (hash: yc9l1FWLsdkyL80KmG/CENv1nMl40+rlvUGHbaIRcrU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 02:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a0:ab:f6:5d:7c:5f:8c:09:80:fd:91:7e:9e:60:69:31:fe:18:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1 Validity Not Before: Jun 3 02:02:17 2026 GMT Not After : Jun 4 02:50:17 2026 GMT Subject: CN=61FE73E061C3A2FC1CE80537C3639C3C27660500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6e:25:be:12:52:bc:bb:82:d3:ce:4c:7f:f3: 62:74:aa:90:25:24:b5:7d:7e:2a:d0:1a:8d:af:29: d1:85:29:c7:82:32:dd:bc:c2:bf:c2:24:01:4a:33: 9a:ca:c9:24:e7:f5:66:bd:00:f3:f7:2a:37:61:7f: 36:ff:22:41:29:bd:74:49:ac:f1:30:cc:30:1a:9b: e1:87:c5:a0:d5:c0:6c:fe:00:94:c1:fc:8f:89:20: fd:2d:27:e8:33:aa:0a:56:fb:83:d4:67:38:b9:0b: db:5b:2d:45:67:23:ae:ae:0d:15:b9:1a:c2:e0:67: f3:8c:16:e0:4a:df:f6:ef:8e:fa:6f:1c:bc:db:cf: 30:98:bd:03:e5:fb:14:70:d2:a6:c1:fe:62:be:47: 5a:a8:db:0c:c0:be:da:3f:ff:5b:b8:57:4b:e8:33: 0a:55:2a:f1:0d:a7:21:db:64:1d:80:76:d1:e3:50: 44:ea:60:33:7a:18:f9:35:f4:5a:02:1b:6b:73:3b: af:df:e3:64:65:85:10:c3:fa:18:8d:96:1e:9d:82: d6:33:04:b3:b4:9f:16:6f:0c:7a:b0:de:29:20:e2: 57:a8:59:93:74:ab:4f:fe:14:9c:d6:1e:94:fe:db: 62:14:5b:c9:48:1d:cd:13:63:5a:f0:a2:8c:4e:5d: 25:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FE:73:E0:61:C3:A2:FC:1C:E8:05:37:C3:63:9C:3C:27:66:05:00 X509v3 Authority Key Identifier: keyid:CD:47:4E:79:16:37:1A:E6:AC:CF:87:42:2C:4E:A8:D4:E5:3D:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6b:10:6c:f3:8d:3c:0f:7d:04:62:19:2b:72:3d:15:d0:3b: df:da:bc:45:19:47:b4:57:85:17:00:51:91:2a:27:56:12:7f: 3f:12:df:ac:01:7b:73:bf:08:5c:36:ba:c5:c1:f2:ef:5e:26: 16:88:e0:0b:9d:3e:61:c6:a0:87:c3:f0:3b:b6:dc:2b:4f:72: 58:78:55:6d:23:03:cd:e9:a0:0a:d8:02:82:81:f5:0c:77:48: b5:b3:9d:8f:8e:a3:4d:8e:68:7a:c0:bd:8d:92:b5:fd:09:2c: 60:ed:da:c1:0b:05:8f:10:54:4b:83:50:08:fb:7d:72:81:5b: c3:52:a8:f7:96:19:8c:0a:61:54:6a:11:97:0b:6f:95:f7:53: a5:69:39:91:08:35:11:9f:b1:d6:ac:69:9f:4b:02:d2:50:e2: 6d:05:28:85:94:5c:f3:5f:ca:92:f2:30:9b:e2:74:90:01:02: a4:5e:3d:10:07:2d:5b:e2:08:6b:d8:9a:27:ac:7e:d2:e0:10: 06:d9:e9:12:9a:8f:99:85:56:3a:66:c7:14:1a:a2:cd:6a:da: 7b:7d:be:c5:1e:6b:ca:a4:4d:44:28:06:fd:9f:8e:4f:a9:81: d0:00:79:86:20:8d:b4:18:d0:dd:f9:8f:c4:c7:1d:8f:eb:12: d7:19:7a:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBaCr9l18X4wJgP2Rfp5gaTH+GFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0NzRFNzkxNjM3MUFFNkFDQ0Y4NzQyMkM0RUE4RDRF NTNEMUVEMTAeFw0yNjA2MDMwMjAyMTdaFw0yNjA2MDQwMjUwMTdaMDMxMTAvBgNV BAMTKDYxRkU3M0UwNjFDM0EyRkMxQ0U4MDUzN0MzNjM5QzNDMjc2NjA1MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbbiW+ElK8u4LTzkx/82J0qpAl JLV9firQGo2vKdGFKceCMt28wr/CJAFKM5rKySTn9Wa9APP3Kjdhfzb/IkEpvXRJ rPEwzDAam+GHxaDVwGz+AJTB/I+JIP0tJ+gzqgpW+4PUZzi5C9tbLUVnI66uDRW5 GsLgZ/OMFuBK3/bvjvpvHLzbzzCYvQPl+xRw0qbB/mK+R1qo2wzAvto//1u4V0vo MwpVKvENpyHbZB2AdtHjUETqYDN6GPk19FoCG2tzO6/f42RlhRDD+hiNlh6dgtYz BLO0nxZvDHqw3ikg4leoWZN0q0/+FJzWHpT+22IUW8lIHc0TY1rwooxOXSVdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYf5z4GHDovwc6AU3w2OcPCdmBQAwHwYDVR0j BBgwFoAUzUdOeRY3Guasz4dCLE6o1OU9HtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZThkZTk0NjMtNjhhNy00NjJkLTk0MDgtYTdjMzljZTZlOGZmLzAvQ0Q0NzRFNzkx NjM3MUFFNkFDQ0Y4NzQyMkM0RUE4RDRFNTNEMUVEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDQ3NEU3OTE2MzcxQUU2QUNDRjg3NDIyQzRFQThENEU1M0Qx RUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZThkZTk0NjMtNjhhNy00NjJkLTk0 MDgtYTdjMzljZTZlOGZmLzAvQ0Q0NzRFNzkxNjM3MUFFNkFDQ0Y4NzQyMkM0RUE4 RDRFNTNEMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9rEGzzjTwPfQRiGStyPRXQO9/avEUZR7RX hRcAUZEqJ1YSfz8S36wBe3O/CFw2usXB8u9eJhaI4AudPmHGoIfD8Du23CtPclh4 VW0jA83poArYAoKB9Qx3SLWznY+Oo02OaHrAvY2Stf0JLGDt2sELBY8QVEuDUAj7 fXKBW8NSqPeWGYwKYVRqEZcLb5X3U6VpOZEINRGfsdasaZ9LAtJQ4m0FKIWUXPNf ypLyMJvidJABAqRePRAHLVviCGvYmiesftLgEAbZ6RKaj5mFVjpmxxQaos1q2nt9 vsUea8qkTUQoBv2fjk+pgdAAeYYgjbQY0N35j8THHY/rEtcZevI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:23:10 2026 by rpki-client