$ rpki-client -vvf rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft File: D21FEA1A58BBE03288B8857877AB42210C1B816B.mft (raw, json) Hash identifier: 2ZQ23aRXj9zYYHONyvxWZOBuKTcAbAWBhh6/GwfX3k0= Subject key identifier: C5:8B:72:8D:CC:2F:03:FA:E7:69:D8:51:BC:99:30:D3:7C:A5:FC:9C Authority key identifier: D2:1F:EA:1A:58:BB:E0:32:88:B8:85:78:77:AB:42:21:0C:1B:81:6B Certificate issuer: /CN=D21FEA1A58BBE03288B8857877AB42210C1B816B Certificate serial: 2722224C238D0331C7CC355AD4A442249E7D52A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:24:07 +0000 Manifest this update: Tue 02 Jun 2026 23:19:07 +0000 Manifest next update: Thu 04 Jun 2026 00:44:07 +0000 Files and hashes: 1: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: n/NFSto6DR1M2MbEoIzv13Er2v00d7K3BFa5q9qEbBw=) 2: D21FEA1A58BBE03288B8857877AB42210C1B816B.crl (hash: yPot4wwGSJA/XVbIgv+Ae77bIXt8cEWtaT42PhVh1ew=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.crl rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:22:22:4c:23:8d:03:31:c7:cc:35:5a:d4:a4:42:24:9e:7d:52:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21FEA1A58BBE03288B8857877AB42210C1B816B Validity Not Before: Jun 2 23:19:07 2026 GMT Not After : Jun 4 00:44:07 2026 GMT Subject: CN=C58B728DCC2F03FAE769D851BC9930D37CA5FC9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:74:88:f3:cd:c4:82:33:c3:4a:b2:b5:1e:ce: 9e:ff:79:a0:95:e8:eb:96:93:92:bd:0a:3e:d8:fc: 14:4b:82:79:5d:e7:50:e5:e4:7b:11:b0:b6:5f:3e: c5:a5:33:49:43:cd:bd:43:c9:89:86:22:db:12:4b: 72:a8:af:a2:16:05:c9:43:2b:55:7b:af:46:bf:b8: 04:2e:c5:9b:0b:86:08:37:cc:f1:76:29:25:1f:92: d6:ea:7f:10:87:28:ee:d0:c8:d0:1e:e4:37:33:7b: 6d:6f:96:44:c4:39:bf:5a:27:07:aa:38:f3:ae:12: 21:2b:3a:f4:ea:fd:e9:76:71:e5:47:99:70:47:60: f8:43:fd:66:c1:2c:40:8a:9c:19:0a:03:c5:9b:ac: aa:85:7b:0d:43:a9:e1:81:6a:8d:7e:e0:3e:4c:84: 7d:2c:a9:46:6b:08:8d:55:01:52:e8:61:2c:9b:d9: e1:4c:3e:6c:85:d6:44:b9:1b:b1:aa:ec:f9:0c:c8: a1:38:19:6a:bf:80:da:bd:b9:18:fa:87:58:a1:16: 4c:38:32:b0:83:f4:cd:7f:42:b9:86:7b:5f:3a:75: dc:63:44:5d:81:0a:03:97:b8:36:20:e4:96:1c:ff: d8:d6:ff:2b:1e:51:90:b6:5e:a7:a8:b9:88:01:ed: 91:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8B:72:8D:CC:2F:03:FA:E7:69:D8:51:BC:99:30:D3:7C:A5:FC:9C X509v3 Authority Key Identifier: keyid:D2:1F:EA:1A:58:BB:E0:32:88:B8:85:78:77:AB:42:21:0C:1B:81:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f4:74:50:1f:bd:ab:62:6f:71:a0:95:86:0d:51:05:0c:62: 2a:cc:64:2c:00:20:79:3e:e3:95:0e:49:17:0c:8a:62:3b:e4: 25:15:30:10:04:8a:5a:ee:b9:94:31:e9:d4:c3:b6:1d:6a:8e: 75:f8:ef:85:d2:e3:c7:ab:8b:fb:03:85:5b:7f:3e:f1:e9:c3: e3:80:82:7e:41:68:78:b3:e0:4c:ce:32:e0:3e:be:59:5b:f7: 2f:47:7b:b9:cb:fe:50:34:46:79:65:e3:d2:71:f1:94:18:0f: 82:0c:21:7d:63:d0:f1:98:ba:e6:27:c9:42:09:dc:5e:3a:53: 04:f6:18:39:6b:39:a5:e3:a7:b7:42:69:15:8f:be:29:4c:bf: 36:3e:76:06:a7:a1:d0:de:d3:a5:dd:a9:0a:be:78:81:aa:47: 46:9b:04:93:34:08:e1:c7:8b:c3:57:fd:80:b8:0e:4b:7b:1f: f0:05:83:5a:69:7c:fa:d2:02:e5:32:f6:d8:f9:dd:94:30:75: 48:f8:bc:91:dc:f8:62:36:d3:96:4b:42:62:87:ad:c5:54:52: d7:9a:58:18:1f:7b:90:60:0c:4f:35:ff:f5:c1:85:ef:d6:ba: 69:93:03:ae:b1:49:87:26:c5:23:ec:de:17:93:a0:7f:d4:a8: 80:0c:9e:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJyIiTCONAzHHzDVa1KRCJJ59UqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxRkVBMUE1OEJCRTAzMjg4Qjg4NTc4NzdBQjQyMjEw QzFCODE2QjAeFw0yNjA2MDIyMzE5MDdaFw0yNjA2MDQwMDQ0MDdaMDMxMTAvBgNV BAMTKEM1OEI3MjhEQ0MyRjAzRkFFNzY5RDg1MUJDOTkzMEQzN0NBNUZDOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIdIjzzcSCM8NKsrUezp7/eaCV 6OuWk5K9Cj7Y/BRLgnld51Dl5HsRsLZfPsWlM0lDzb1DyYmGItsSS3Kor6IWBclD K1V7r0a/uAQuxZsLhgg3zPF2KSUfktbqfxCHKO7QyNAe5Dcze21vlkTEOb9aJweq OPOuEiErOvTq/el2ceVHmXBHYPhD/WbBLECKnBkKA8WbrKqFew1DqeGBao1+4D5M hH0sqUZrCI1VAVLoYSyb2eFMPmyF1kS5G7Gq7PkMyKE4GWq/gNq9uRj6h1ihFkw4 MrCD9M1/QrmGe186ddxjRF2BCgOXuDYg5JYc/9jW/yseUZC2XqeouYgB7ZFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxYtyjcwvA/rnadhRvJkw03yl/JwwHwYDVR0j BBgwFoAU0h/qGli74DKIuIV4d6tCIQwbgWswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNkYWUwYTUtYjRmNi00ZTA4LThiZWItNjNlYmUwODUzZGYzLzAvRDIxRkVBMUE1 OEJCRTAzMjg4Qjg4NTc4NzdBQjQyMjEwQzFCODE2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjFGRUExQTU4QkJFMDMyODhCODg1Nzg3N0FCNDIyMTBDMUI4 MTZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNkYWUwYTUtYjRmNi00ZTA4LThi ZWItNjNlYmUwODUzZGYzLzAvRDIxRkVBMUE1OEJCRTAzMjg4Qjg4NTc4NzdBQjQy MjEwQzFCODE2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACD0dFAfvatib3GglYYNUQUMYirMZCwAIHk+ 45UOSRcMimI75CUVMBAEilruuZQx6dTDth1qjnX474XS48eri/sDhVt/PvHpw+OA gn5BaHiz4EzOMuA+vllb9y9He7nL/lA0Rnll49Jx8ZQYD4IMIX1j0PGYuuYnyUIJ 3F46UwT2GDlrOaXjp7dCaRWPvilMvzY+dganodDe06XdqQq+eIGqR0abBJM0COHH i8NX/YC4Dkt7H/AFg1ppfPrSAuUy9tj53ZQwdUj4vJHc+GI205ZLQmKHrcVUUtea WBgfe5BgDE81//XBhe/WummTA66xSYcmxSPs3heToH/UqIAMnmk= -----END CERTIFICATE-----Generated at Wed Jun 3 03:46:38 2026 by rpki-client