$ rpki-client -vvf rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft File: 657097DED993749F454B2CB2980019AC9335E3AD.mft (raw, json) Hash identifier: QrBqBAhIGv8UPKZkgFhndvzKrIjLk5ONvZzs8Viaeco= Subject key identifier: E7:AE:D1:A6:3E:A6:AF:24:93:A5:02:1C:56:64:3F:D2:CE:97:69:72 Authority key identifier: 65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD Certificate issuer: /CN=657097DED993749F454B2CB2980019AC9335E3AD Certificate serial: 57EAEB232E285FDF6BD7D2C352ED60AC558CFA5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:36:06 +0000 Manifest this update: Tue 02 Jun 2026 21:31:06 +0000 Manifest next update: Thu 04 Jun 2026 00:18:06 +0000 Files and hashes: 1: 3130332e37382e3233352e302f32342d3234203d3e203634333032.roa (hash: 0jC3KwRI9r1ivA5GrXfbobGO1Ve7iEJj8iR97yMbeBk=) 2: 323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa (hash: hHvYrx/Q2c2wL+t/Mvndx8RZ1B96+Yi4bVgwQw+Eax8=) 3: 3130332e37382e3233322e302f32322d3232203d3e203634333032.roa (hash: OIuTP91/14M0E047uX/8jj8cJw1PhQi/jIKe8uO7ED8=) 4: 657097DED993749F454B2CB2980019AC9335E3AD.crl (hash: fA3LpCtMrRQO3AC0TIvHcMUIwnzTH0r3aQ4mM5t/M+M=) 5: 3130332e37382e3233332e302f32342d3234203d3e203634333032.roa (hash: QHrcU8/Y1C7fxNPrmLufpFIhIro1O+9k0qozDOyT2no=) 6: 3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (hash: je0fW/T+7CeDw/BD58L4wbwCS+OqE/uQcMZPbWUcwBw=) 7: 3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (hash: eJ1BYbsJGJ2bGSK9jVV+Gd+vXCEbHNqHyQWyZRyuJo0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.crl rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 00:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ea:eb:23:2e:28:5f:df:6b:d7:d2:c3:52:ed:60:ac:55:8c:fa:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=657097DED993749F454B2CB2980019AC9335E3AD Validity Not Before: Jun 2 21:31:06 2026 GMT Not After : Jun 4 00:18:06 2026 GMT Subject: CN=E7AED1A63EA6AF2493A5021C56643FD2CE976972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:50:44:f8:73:37:67:b6:2c:53:34:2f:88: 49:5a:b2:ef:5e:bb:a6:cf:5a:c3:1a:da:7a:a0:78: cd:74:ba:6f:3b:a6:59:1a:11:cf:ae:1f:56:df:f1: 74:7a:05:02:cd:3a:e9:1e:55:66:b0:ed:df:72:22: 35:55:20:ef:1a:f2:1b:47:27:01:91:3d:f1:87:8b: 04:9f:f8:9b:ab:0e:58:1f:84:c8:03:4f:35:a9:69: 3a:10:6e:71:81:3e:62:72:2e:7a:f7:2c:24:51:c0: ce:8a:b7:ac:21:29:7d:49:6d:58:91:41:64:f6:f5: 40:6a:52:f6:81:0f:d0:8f:26:db:14:2d:20:1f:ae: 60:cb:8c:69:c0:ed:dd:22:f4:1d:13:3a:f2:b5:c4: 41:13:ba:23:39:24:94:d8:18:09:b6:06:94:21:fd: 34:9b:ec:f2:3c:1b:0e:e4:b5:5c:3e:5d:95:b8:88: 04:ea:ca:76:d2:25:a7:f4:d0:3d:bb:81:d9:0e:5f: ab:5d:f5:69:51:c8:1f:ac:6b:fb:77:87:d3:7a:da: 80:02:e6:89:cc:5e:1c:1a:6b:00:04:f7:ff:a8:e2: 18:22:ab:0b:32:00:9f:83:f3:91:d1:d4:2a:9c:6c: dd:8e:37:5b:df:c7:17:f3:aa:d2:de:b2:3d:75:64: ea:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AE:D1:A6:3E:A6:AF:24:93:A5:02:1C:56:64:3F:D2:CE:97:69:72 X509v3 Authority Key Identifier: keyid:65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:2a:52:16:f9:b1:94:03:f5:f4:36:a8:90:c4:b9:9e:2a:24: ed:4e:4b:89:93:16:10:91:cf:21:29:bc:0f:40:9c:bb:23:ba: c5:1f:1c:2f:5c:27:d8:eb:52:c0:d7:46:83:c8:b3:b4:74:e2: d6:66:c5:2b:d9:d2:70:73:b3:20:97:43:b8:94:9c:cb:0e:56: 27:5f:0a:85:48:b0:84:f0:06:2b:4c:c4:d8:8d:a4:be:52:34: d1:ba:28:69:39:61:86:bb:e7:7f:23:81:c5:77:d4:e4:28:ab: ad:98:67:ea:a4:15:22:52:61:40:57:c1:b5:32:f5:24:66:cc: 6f:b0:b4:e9:ac:4f:d5:9c:70:77:6d:48:b4:66:11:56:59:ec: 9f:73:bc:c9:2d:dc:92:01:e5:18:a6:76:90:dc:d6:10:49:e2: 7a:51:26:a8:0e:7a:a9:35:43:29:15:76:bc:b8:ed:f4:fd:f4: 3f:e3:50:b1:3a:8d:5d:dc:fa:f6:86:51:f8:a9:a8:5f:6c:07: 0f:18:67:01:6a:7f:90:d0:e2:97:31:44:86:f7:0a:0b:e5:5a: ae:44:c6:95:2a:04:41:cd:dc:53:e4:58:04:d1:41:6b:ff:eb: 45:47:6b:f7:83:d2:51:81:b7:5b:0f:ce:2e:42:1b:6b:4d:a1: f3:e7:f0:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV+rrIy4oX99r19LDUu1grFWM+lswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU3MDk3REVEOTkzNzQ5RjQ1NEIyQ0IyOTgwMDE5QUM5 MzM1RTNBRDAeFw0yNjA2MDIyMTMxMDZaFw0yNjA2MDQwMDE4MDZaMDMxMTAvBgNV BAMTKEU3QUVEMUE2M0VBNkFGMjQ5M0E1MDIxQzU2NjQzRkQyQ0U5NzY5NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjlBE+HM3Z7YsUzQviElasu9e u6bPWsMa2nqgeM10um87plkaEc+uH1bf8XR6BQLNOukeVWaw7d9yIjVVIO8a8htH JwGRPfGHiwSf+JurDlgfhMgDTzWpaToQbnGBPmJyLnr3LCRRwM6Kt6whKX1JbViR QWT29UBqUvaBD9CPJtsULSAfrmDLjGnA7d0i9B0TOvK1xEETuiM5JJTYGAm2BpQh /TSb7PI8Gw7ktVw+XZW4iATqynbSJaf00D27gdkOX6td9WlRyB+sa/t3h9N62oAC 5onMXhwaawAE9/+o4hgiqwsyAJ+D85HR1CqcbN2ON1vfxxfzqtLesj11ZOrbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU567Rpj6mrySTpQIcVmQ/0s6XaXIwHwYDVR0j BBgwFoAUZXCX3tmTdJ9FSyyymAAZrJM1460wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRkZThmYjgtM2E3Ny00ODdlLTlkZmMtZjQ3OWQ2YjMzODA5LzAvNjU3MDk3REVE OTkzNzQ5RjQ1NEIyQ0IyOTgwMDE5QUM5MzM1RTNBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NTcwOTdERUQ5OTM3NDlGNDU0QjJDQjI5ODAwMTlBQzkzMzVF M0FELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRkZThmYjgtM2E3Ny00ODdlLTlk ZmMtZjQ3OWQ2YjMzODA5LzAvNjU3MDk3REVEOTkzNzQ5RjQ1NEIyQ0IyOTgwMDE5 QUM5MzM1RTNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMUqUhb5sZQD9fQ2qJDEuZ4qJO1OS4mTFhCR zyEpvA9AnLsjusUfHC9cJ9jrUsDXRoPIs7R04tZmxSvZ0nBzsyCXQ7iUnMsOVidf CoVIsITwBitMxNiNpL5SNNG6KGk5YYa7538jgcV31OQoq62YZ+qkFSJSYUBXwbUy 9SRmzG+wtOmsT9WccHdtSLRmEVZZ7J9zvMkt3JIB5RimdpDc1hBJ4npRJqgOeqk1 QykVdry47fT99D/jULE6jV3c+vaGUfipqF9sBw8YZwFqf5DQ4pcxRIb3CgvlWq5E xpUqBEHN3FPkWATRQWv/60VHa/eD0lGBt1sPzi5CG2tNofPn8Hk= -----END CERTIFICATE-----Generated at Wed Jun 3 04:12:09 2026 by rpki-client