$ rpki-client -vvf rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft File: 828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft (raw, json) Hash identifier: Tc3aaAtHC2C3zn8xT4m8702ndlWO5PQe9ohNK9AaNiU= Subject key identifier: EC:E0:22:2D:5A:D5:5B:21:32:4B:D2:EE:DB:97:F7:64:5D:BE:B7:13 Authority key identifier: 82:8B:62:3E:9A:44:3E:8B:7E:95:D4:A5:8B:5E:29:65:A1:C4:0F:6F Certificate issuer: /CN=828B623E9A443E8B7E95D4A58B5E2965A1C40F6F Certificate serial: 1A526940C7C199B28EE29ECDE5D5D70E5FA20AD8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:13:12 +0000 Manifest this update: Tue 02 Jun 2026 19:08:12 +0000 Manifest next update: Wed 03 Jun 2026 21:46:12 +0000 Files and hashes: 1: 828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl (hash: sPiVdFcfPhjvZ4vvvjUJ+oddAqFXspacAqlva9sybg0=) 2: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (hash: dcn7JjA5cMl377hf4qH/uXB97TvgtDVrGSS8WaneiPA=) 3: 3130332e3137302e3138372e302f32342d3234203d3e20313432333635.roa (hash: sAJt4KOFRGK6/p9H5qEjBboJGlbpIE0n8tuPpLq/ACA=) 4: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (hash: J9Ppr3YgZsd8hgKwRlpPASzO8XUT6qbE4ua4z+T5rRI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:52:69:40:c7:c1:99:b2:8e:e2:9e:cd:e5:d5:d7:0e:5f:a2:0a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=828B623E9A443E8B7E95D4A58B5E2965A1C40F6F Validity Not Before: Jun 2 19:08:12 2026 GMT Not After : Jun 3 21:46:12 2026 GMT Subject: CN=ECE0222D5AD55B21324BD2EEDB97F7645DBEB713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:19:59:11:46:32:22:9b:bc:0c:03:7d:e7:6f: b3:ab:a8:bf:54:12:81:12:25:12:10:1b:c2:15:20: e9:ba:35:4a:ac:5e:7e:af:78:ef:d2:60:6b:df:37: 88:94:c7:a7:61:5d:0b:20:9b:67:c7:f1:73:fa:02: 5a:62:3b:d6:e8:54:95:6a:82:98:a2:2e:bb:e3:83: 61:75:72:32:59:ca:54:61:ca:5f:75:d5:ea:91:4f: a7:08:e4:96:2a:40:c6:a6:d1:8f:f4:fa:49:cf:05: f9:dd:02:8e:c8:63:4f:ef:78:fa:82:1a:79:6e:f2: 62:7e:49:fc:58:d7:83:55:70:ef:99:14:7d:53:92: 28:b3:2f:28:3c:51:e1:6f:e5:cc:06:c9:87:d1:a7: 14:0a:7d:23:e3:9f:c5:27:90:45:51:be:ce:8a:9d: 34:fa:b6:e1:fd:88:2e:79:b2:d7:96:b8:96:df:de: 69:e4:1a:08:43:03:b8:27:01:26:96:eb:82:9d:44: 69:0a:a5:7b:11:c9:03:47:96:28:5c:33:71:fe:37: 3e:68:4c:d0:84:46:dc:7c:63:12:14:5e:ca:fa:38: 21:50:c5:5c:5c:18:82:03:5d:95:c4:1e:65:c6:e2: f7:b1:3f:b8:cd:72:36:64:db:8d:35:23:39:9a:1d: 4e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E0:22:2D:5A:D5:5B:21:32:4B:D2:EE:DB:97:F7:64:5D:BE:B7:13 X509v3 Authority Key Identifier: keyid:82:8B:62:3E:9A:44:3E:8B:7E:95:D4:A5:8B:5E:29:65:A1:C4:0F:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:d4:43:07:45:5c:a6:e7:94:64:a3:68:e6:7b:da:ac:ee:b3: 69:84:7c:2a:05:a1:1d:9f:25:a7:03:94:51:01:12:68:52:89: 6b:23:85:20:2d:64:41:78:cf:0c:6e:a6:02:9a:06:eb:4a:91: 17:f6:c8:07:4e:fb:77:4b:ee:2e:43:20:68:9e:82:cc:c7:61: 15:a8:c0:b8:68:b8:64:ff:9f:d0:f1:c0:6e:db:24:7d:98:19: a2:cd:0d:0d:b4:2c:8d:23:d6:bb:ba:b5:a6:5d:0d:0c:51:3c: 39:77:df:f3:87:7e:b1:26:75:61:e8:0a:63:58:f3:02:d4:f0: a8:06:d9:b5:bd:f1:77:2a:9c:ff:8e:ff:ac:c4:6a:e4:7c:f8: 0f:41:33:60:9a:66:d5:af:b1:03:52:72:74:f6:3c:44:c2:a7: a3:ac:eb:f5:13:72:e6:9a:1d:db:56:35:95:fd:a3:f8:ff:40: 00:5f:11:a4:c3:9f:b6:a0:7c:6b:5e:6d:bd:bb:52:0a:19:3b: e7:dc:6d:41:60:7a:89:6c:28:90:02:0c:de:93:58:3d:e9:8c: 87:6c:80:b2:f6:c2:11:a4:b2:9d:13:7c:a3:a3:eb:aa:13:a2: 97:15:d9:3d:f9:e6:a2:e0:3d:fe:68:7e:39:bd:e3:55:63:c9: 61:85:b2:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGlJpQMfBmbKO4p7N5dXXDl+iCtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4QjYyM0U5QTQ0M0U4QjdFOTVENEE1OEI1RTI5NjVB MUM0MEY2RjAeFw0yNjA2MDIxOTA4MTJaFw0yNjA2MDMyMTQ2MTJaMDMxMTAvBgNV BAMTKEVDRTAyMjJENUFENTVCMjEzMjRCRDJFRURCOTdGNzY0NURCRUI3MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUGVkRRjIim7wMA33nb7OrqL9U EoESJRIQG8IVIOm6NUqsXn6veO/SYGvfN4iUx6dhXQsgm2fH8XP6AlpiO9boVJVq gpiiLrvjg2F1cjJZylRhyl911eqRT6cI5JYqQMam0Y/0+knPBfndAo7IY0/vePqC Gnlu8mJ+SfxY14NVcO+ZFH1TkiizLyg8UeFv5cwGyYfRpxQKfSPjn8UnkEVRvs6K nTT6tuH9iC55steWuJbf3mnkGghDA7gnASaW64KdRGkKpXsRyQNHlihcM3H+Nz5o TNCERtx8YxIUXsr6OCFQxVxcGIIDXZXEHmXG4vexP7jNcjZk2401IzmaHU73AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7OAiLVrVWyEyS9Lu25f3ZF2+txMwHwYDVR0j BBgwFoAUgotiPppEPot+ldSli14pZaHED28wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFmMGY0MjMtM2JlZC00OTM4LTlmODktMTVlNjI2OWJkZGNhLzAvODI4QjYyM0U5 QTQ0M0U4QjdFOTVENEE1OEI1RTI5NjVBMUM0MEY2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjhCNjIzRTlBNDQzRThCN0U5NUQ0QTU4QjVFMjk2NUExQzQw RjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFmMGY0MjMtM2JlZC00OTM4LTlm ODktMTVlNjI2OWJkZGNhLzAvODI4QjYyM0U5QTQ0M0U4QjdFOTVENEE1OEI1RTI5 NjVBMUM0MEY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTUQwdFXKbnlGSjaOZ72qzus2mEfCoFoR2f JacDlFEBEmhSiWsjhSAtZEF4zwxupgKaButKkRf2yAdO+3dL7i5DIGiegszHYRWo wLhouGT/n9DxwG7bJH2YGaLNDQ20LI0j1ru6taZdDQxRPDl33/OHfrEmdWHoCmNY 8wLU8KgG2bW98XcqnP+O/6zEauR8+A9BM2CaZtWvsQNScnT2PETCp6Os6/UTcuaa HdtWNZX9o/j/QABfEaTDn7agfGtebb27UgoZO+fcbUFgeolsKJACDN6TWD3pjIds gLL2whGksp0TfKOj66oTopcV2T355qLgPf5ofjm941VjyWGFsjs= -----END CERTIFICATE-----Generated at Wed Jun 3 04:04:40 2026 by rpki-client