$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft File: 163FCF7902CF93C079C25A5BB950177736E3A53E.mft (raw, json) Hash identifier: gsYZ48O7JhrartoclACai9e3j1BRjGeZR7NHzj3kvg8= Subject key identifier: 32:C6:DC:33:DD:71:CD:E0:AD:1D:95:75:2C:03:D8:B1:4E:FD:94:1D Authority key identifier: 16:3F:CF:79:02:CF:93:C0:79:C2:5A:5B:B9:50:17:77:36:E3:A5:3E Certificate issuer: /CN=163FCF7902CF93C079C25A5BB950177736E3A53E Certificate serial: 1584300F1F952B5CC86C4C83F0BF6945A4DF2409 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 11:29:14 +0000 Manifest this update: Tue 02 Jun 2026 11:24:14 +0000 Manifest next update: Wed 03 Jun 2026 13:57:14 +0000 Files and hashes: 1: 3130332e38352e35372e302f32342d3234203d3e20313530353530.roa (hash: W7gmKmZboqX2QA7q8U+p4B9nIs2a1qUtxZ1nMh6XFbg=) 2: 3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (hash: 6RKcmzfjeDH4g7wyr++N6VgeRBt/pDFie/Fnes4qIjU=) 3: 163FCF7902CF93C079C25A5BB950177736E3A53E.crl (hash: /Lchl4grOEIuFGF7WNGgPmlMnwJPwR766BLJBiAlBGQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.crl rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:84:30:0f:1f:95:2b:5c:c8:6c:4c:83:f0:bf:69:45:a4:df:24:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=163FCF7902CF93C079C25A5BB950177736E3A53E Validity Not Before: Jun 2 11:24:14 2026 GMT Not After : Jun 3 13:57:14 2026 GMT Subject: CN=32C6DC33DD71CDE0AD1D95752C03D8B14EFD941D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:89:07:b6:e3:ef:ff:ee:64:87:54:6c:4a:5b: 8e:cd:a2:8c:71:7f:5e:8f:97:20:0b:4f:eb:f2:5f: c5:4c:1d:d0:61:31:8b:71:92:26:99:c1:28:cf:b4: 62:1c:df:d7:35:63:64:83:d9:cc:e4:48:6d:03:26: 98:96:28:cd:38:71:90:5f:50:3a:a1:a7:3e:67:06: 02:c2:a1:b0:57:c0:7d:83:88:76:c6:33:da:15:d4: 4d:96:3e:ee:41:4d:41:67:70:49:ac:20:6b:b8:0b: 93:52:89:d4:c4:f5:83:a4:d2:72:90:a2:97:82:fc: 13:63:85:e3:f6:50:34:47:22:f9:68:d1:6d:bf:bf: 79:5e:d3:3a:1a:8e:3a:71:1b:f6:20:3c:20:9c:4b: f6:29:c3:78:32:2f:d3:4f:f1:7c:08:66:49:7b:07: 73:a6:fc:d9:ea:c4:95:d2:66:66:6e:68:36:8d:bc: 17:10:7e:f0:fd:6c:28:d0:7e:4a:ef:e8:42:65:b9: 2a:3c:35:cc:82:90:72:05:4b:65:e5:fc:f4:88:45: 34:08:ec:ed:86:67:c9:65:d3:ac:7b:23:fe:31:77: 74:0d:46:4a:e6:cf:10:64:d7:c4:8b:70:9d:65:8d: ae:20:57:3a:6c:7c:09:20:4b:a4:4c:87:b1:c0:be: 0c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C6:DC:33:DD:71:CD:E0:AD:1D:95:75:2C:03:D8:B1:4E:FD:94:1D X509v3 Authority Key Identifier: keyid:16:3F:CF:79:02:CF:93:C0:79:C2:5A:5B:B9:50:17:77:36:E3:A5:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:31:0c:53:54:04:f5:47:b4:c6:09:6f:f6:d2:7f:cb:b5:e9: 94:a7:c5:32:9d:97:8d:4b:bc:92:1c:a1:7e:fc:b6:e0:3c:04: 8a:47:c7:09:bf:72:62:17:8a:8a:8f:73:1c:5f:9b:18:be:c2: 82:95:d1:ab:0b:71:7b:b2:82:02:49:73:87:83:ea:b1:7e:56: d4:37:18:17:81:db:61:de:c9:86:51:1f:43:ee:d9:ea:72:40: 69:c9:cb:9e:86:d7:af:41:0f:f2:cb:88:43:ed:66:8f:b7:0c: e1:eb:cd:cd:e0:04:f6:2e:21:5e:eb:bd:63:a6:21:cd:ba:62: f8:ec:b1:36:b1:04:0d:d1:ad:4f:6f:e4:88:7d:2e:18:34:e9: c0:e2:49:79:94:03:dc:71:73:bd:ca:1c:d9:0b:44:35:05:a8: cc:9e:23:f2:4a:87:e0:bb:5c:41:b9:73:fe:2b:ae:77:34:68: c8:6e:9d:10:1e:98:b9:58:a1:c5:63:06:74:ef:41:63:f0:c0: ab:c1:df:42:a8:0f:6c:6e:09:8a:6d:52:57:d4:2f:36:ce:3a: 4f:ad:8c:a3:bf:76:e3:e2:a7:f4:6f:57:f9:c7:06:76:32:42: 29:96:eb:2a:f3:6c:1c:8d:85:54:ac:fe:06:ac:aa:86:91:a3: 61:db:a7:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFYQwDx+VK1zIbEyD8L9pRaTfJAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzRkNGNzkwMkNGOTNDMDc5QzI1QTVCQjk1MDE3Nzcz NkUzQTUzRTAeFw0yNjA2MDIxMTI0MTRaFw0yNjA2MDMxMzU3MTRaMDMxMTAvBgNV BAMTKDMyQzZEQzMzREQ3MUNERTBBRDFEOTU3NTJDMDNEOEIxNEVGRDk0MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkiQe24+//7mSHVGxKW47Nooxx f16PlyALT+vyX8VMHdBhMYtxkiaZwSjPtGIc39c1Y2SD2czkSG0DJpiWKM04cZBf UDqhpz5nBgLCobBXwH2DiHbGM9oV1E2WPu5BTUFncEmsIGu4C5NSidTE9YOk0nKQ opeC/BNjheP2UDRHIvlo0W2/v3le0zoajjpxG/YgPCCcS/Ypw3gyL9NP8XwIZkl7 B3Om/NnqxJXSZmZuaDaNvBcQfvD9bCjQfkrv6EJluSo8NcyCkHIFS2Xl/PSIRTQI 7O2GZ8ll06x7I/4xd3QNRkrmzxBk18SLcJ1lja4gVzpsfAkgS6RMh7HAvgwNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMsbcM91xzeCtHZV1LAPYsU79lB0wHwYDVR0j BBgwFoAUFj/PeQLPk8B5wlpbuVAXdzbjpT4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE1NzYxM2ItOGIwNC00YzQ1LWJlZGYtNGFiMDYxZDRkY2Y5LzAvMTYzRkNGNzkw MkNGOTNDMDc5QzI1QTVCQjk1MDE3NzczNkUzQTUzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNjNGQ0Y3OTAyQ0Y5M0MwNzlDMjVBNUJCOTUwMTc3NzM2RTNB NTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE1NzYxM2ItOGIwNC00YzQ1LWJl ZGYtNGFiMDYxZDRkY2Y5LzAvMTYzRkNGNzkwMkNGOTNDMDc5QzI1QTVCQjk1MDE3 NzczNkUzQTUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMxDFNUBPVHtMYJb/bSf8u16ZSnxTKdl41L vJIcoX78tuA8BIpHxwm/cmIXioqPcxxfmxi+woKV0asLcXuyggJJc4eD6rF+VtQ3 GBeB22HeyYZRH0Pu2epyQGnJy56G169BD/LLiEPtZo+3DOHrzc3gBPYuIV7rvWOm Ic26YvjssTaxBA3RrU9v5Ih9Lhg06cDiSXmUA9xxc73KHNkLRDUFqMyeI/JKh+C7 XEG5c/4rrnc0aMhunRAemLlYocVjBnTvQWPwwKvB30KoD2xuCYptUlfULzbOOk+t jKO/duPip/RvV/nHBnYyQimW6yrzbByNhVSs/gasqoaRo2Hbp74= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:14 2026 by rpki-client