$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.mft File: 6372758CCA381920292B5E0D338ECF89D0000FEE.mft (raw, json) Hash identifier: fsYfh8IiSH5bcWGEkLWHG02unQ73RqiZ6fvTnKFMWuQ= Subject key identifier: C6:F7:D9:38:75:5B:2B:96:75:AA:84:61:C4:85:B5:91:26:96:B9:0F Authority key identifier: 63:72:75:8C:CA:38:19:20:29:2B:5E:0D:33:8E:CF:89:D0:00:0F:EE Certificate issuer: /CN=6372758CCA381920292B5E0D338ECF89D0000FEE Certificate serial: 4F7D6B98FB7F6728678B569307D3859706FF9A52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:17:53 +0000 Manifest this update: Tue 02 Jun 2026 10:12:53 +0000 Manifest next update: Wed 03 Jun 2026 12:47:53 +0000 Files and hashes: 1: 6372758CCA381920292B5E0D338ECF89D0000FEE.crl (hash: PfVG8qJoy7EMadlYdcJt78phXSD/x2IWQGgeIuIVVIU=) 2: 323430323a323638303a3a2f33322d3438203d3e203633383733.roa (hash: qVD+Jwv4pLsFsaxaJgqqF4GhPj5gMv8oiQOKOq7eBlk=) 3: 3130332e35332e302e302f32322d3234203d3e203633383733.roa (hash: mNLYMhzy89PxQTAE+kur6oFEKDHuq9q324ipGGtSuR0=) 4: 34352e3131352e3133362e302f32322d3234203d3e203633383733.roa (hash: ZBadKIUk/3x1VD+iY8T20vrwwxnWCyDi/bgS1szA1DA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.crl rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:7d:6b:98:fb:7f:67:28:67:8b:56:93:07:d3:85:97:06:ff:9a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6372758CCA381920292B5E0D338ECF89D0000FEE Validity Not Before: Jun 2 10:12:53 2026 GMT Not After : Jun 3 12:47:53 2026 GMT Subject: CN=C6F7D938755B2B9675AA8461C485B5912696B90F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e9:ce:cf:b1:cd:be:7c:dd:a8:2a:ce:d8:8b: 9b:df:2c:40:28:07:3f:29:b2:02:04:8a:9b:08:af: bd:39:a4:35:35:ff:31:94:ff:5c:3c:4b:3e:9c:b0: 15:5d:b2:8d:4e:0c:16:f0:09:e2:31:e2:b1:1a:eb: 39:0d:d2:2e:59:37:ab:54:e9:90:91:e3:7d:ba:4a: 84:2b:25:62:bf:45:f6:70:69:1d:f6:a5:9f:a6:c8: f0:3b:9e:f3:4c:da:24:9b:f8:c4:62:e4:64:e4:ae: 83:7a:8c:1d:3d:70:51:0b:55:c9:84:30:f1:0f:8b: 94:80:9a:36:87:d5:f1:98:fd:28:bd:62:ed:39:71: 8f:e1:2e:7b:f8:75:db:86:2b:7a:ca:74:45:bd:d1: d3:10:a7:08:09:5a:88:f8:7e:59:19:96:cd:63:00: 67:31:24:2e:18:b7:c5:df:66:a8:85:b7:92:9b:01: 2d:d2:3e:9c:be:df:d5:04:04:ce:a8:ce:f6:a2:a0: 7f:63:5d:4b:35:b2:48:31:7c:fa:f9:42:3a:7e:2c: fd:ef:2f:60:67:a7:ce:9d:b3:20:f7:8c:de:5b:4c: d7:be:1d:52:40:ee:9b:f8:af:d6:a4:02:72:91:8e: 96:7d:21:68:61:f9:d9:3f:18:c3:cd:ea:12:81:91: 74:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F7:D9:38:75:5B:2B:96:75:AA:84:61:C4:85:B5:91:26:96:B9:0F X509v3 Authority Key Identifier: keyid:63:72:75:8C:CA:38:19:20:29:2B:5E:0D:33:8E:CF:89:D0:00:0F:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:58:e7:c0:53:77:4b:9b:3d:b0:0d:8f:ab:30:46:81:64:3f: e6:6b:dd:bd:9b:da:60:90:a0:f5:b5:21:0e:99:a7:3b:ad:c7: 8b:06:df:a9:d2:16:35:8e:f4:62:5e:1e:1e:25:e8:36:6c:87: 92:22:55:6e:5e:52:13:d5:11:b8:d4:51:1d:48:5a:db:e5:72: ae:a3:93:95:3a:41:de:9c:b4:dd:29:ad:52:6b:57:90:a9:fa: dd:79:b4:e7:9f:4b:3c:5f:6c:b3:c8:e4:b4:21:cc:3b:c3:16: 1e:76:db:f2:8b:b4:56:ea:ce:c8:94:71:e2:16:62:e5:9b:48: 54:8c:57:c4:30:d2:6e:64:e9:c1:d5:47:96:9e:42:94:c0:1e: b0:95:42:04:68:e1:ea:82:f3:a2:98:47:9d:c0:27:6c:d4:93: d1:67:3d:84:49:c0:16:b3:6f:6a:c2:ff:7b:56:41:8d:f2:27: ef:ad:18:96:80:f4:77:8d:36:8f:1a:e0:47:ff:69:0d:1c:37: df:f5:1d:38:15:0f:29:24:a4:61:c6:d6:22:d9:8c:85:9e:6a: 92:dc:62:4a:e7:1d:53:7f:26:f6:d9:35:1f:0e:d8:6f:2c:1d: b3:28:d8:b3:3a:a7:90:06:78:89:80:81:c8:49:61:ca:75:1e: aa:d2:1c:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT31rmPt/Zyhni1aTB9OFlwb/mlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3Mjc1OENDQTM4MTkyMDI5MkI1RTBEMzM4RUNGODlE MDAwMEZFRTAeFw0yNjA2MDIxMDEyNTNaFw0yNjA2MDMxMjQ3NTNaMDMxMTAvBgNV BAMTKEM2RjdEOTM4NzU1QjJCOTY3NUFBODQ2MUM0ODVCNTkxMjY5NkI5MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj6c7Psc2+fN2oKs7Yi5vfLEAo Bz8psgIEipsIr705pDU1/zGU/1w8Sz6csBVdso1ODBbwCeIx4rEa6zkN0i5ZN6tU 6ZCR4326SoQrJWK/RfZwaR32pZ+myPA7nvNM2iSb+MRi5GTkroN6jB09cFELVcmE MPEPi5SAmjaH1fGY/Si9Yu05cY/hLnv4dduGK3rKdEW90dMQpwgJWoj4flkZls1j AGcxJC4Yt8XfZqiFt5KbAS3SPpy+39UEBM6ozvaioH9jXUs1skgxfPr5Qjp+LP3v L2Bnp86dsyD3jN5bTNe+HVJA7pv4r9akAnKRjpZ9IWhh+dk/GMPN6hKBkXTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxvfZOHVbK5Z1qoRhxIW1kSaWuQ8wHwYDVR0j BBgwFoAUY3J1jMo4GSApK14NM47PidAAD+4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM1MWU3YWItYTYzOC00ZmEwLWJiY2MtYjBmODU2YThhMTU3LzAvNjM3Mjc1OEND QTM4MTkyMDI5MkI1RTBEMzM4RUNGODlEMDAwMEZFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzcyNzU4Q0NBMzgxOTIwMjkyQjVFMEQzMzhFQ0Y4OUQwMDAw RkVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM1MWU3YWItYTYzOC00ZmEwLWJi Y2MtYjBmODU2YThhMTU3LzAvNjM3Mjc1OENDQTM4MTkyMDI5MkI1RTBEMzM4RUNG ODlEMDAwMEZFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxY58BTd0ubPbANj6swRoFkP+Zr3b2b2mCQ oPW1IQ6Zpzutx4sG36nSFjWO9GJeHh4l6DZsh5IiVW5eUhPVEbjUUR1IWtvlcq6j k5U6Qd6ctN0prVJrV5Cp+t15tOefSzxfbLPI5LQhzDvDFh522/KLtFbqzsiUceIW YuWbSFSMV8Qw0m5k6cHVR5aeQpTAHrCVQgRo4eqC86KYR53AJ2zUk9FnPYRJwBaz b2rC/3tWQY3yJ++tGJaA9HeNNo8a4Ef/aQ0cN9/1HTgVDykkpGHG1iLZjIWeapLc YkrnHVN/JvbZNR8O2G8sHbMo2LM6p5AGeImAgchJYcp1HqrSHJ8= -----END CERTIFICATE-----Generated at Wed Jun 3 04:18:44 2026 by rpki-client