$ rpki-client -vvf rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft File: A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft (raw, json) Hash identifier: 2QT3EUqG/DgJrvCB20T8ncSvHZ2b1u4/rt96tHKaqE4= Subject key identifier: C9:A7:AD:9C:69:ED:F6:28:97:F4:DD:C2:0E:2B:D6:A4:84:24:20:43 Authority key identifier: A7:1C:6F:39:EB:BF:CC:0D:F1:0C:4D:6D:BB:72:55:E6:92:8C:5C:47 Certificate issuer: /CN=A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47 Certificate serial: 740FCF9149C2DACA1BF00E9A7FB2B200D8E2A6F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 10:02:26 +0000 Manifest this update: Tue 02 Jun 2026 09:57:26 +0000 Manifest next update: Wed 03 Jun 2026 11:28:26 +0000 Files and hashes: 1: A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl (hash: Wz5niOiaKoP7LDb+rJocp8vZgoRCeBtaJY8ZgL8fJCg=) 2: 3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa (hash: gHOFFAMzJX67LZAd50wxnRJO1gH2l+8DoQ6h8IDez6o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:0f:cf:91:49:c2:da:ca:1b:f0:0e:9a:7f:b2:b2:00:d8:e2:a6:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47 Validity Not Before: Jun 2 09:57:26 2026 GMT Not After : Jun 3 11:28:26 2026 GMT Subject: CN=C9A7AD9C69EDF62897F4DDC20E2BD6A484242043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:58:52:34:db:3d:5c:59:15:86:20:ea:ae:35: fe:55:df:5c:28:0b:2b:6c:37:ee:5a:07:c3:61:3b: cd:92:2f:08:87:08:23:2d:72:b1:eb:0e:b1:2e:54: 08:6c:fc:57:60:d5:29:e0:e7:2c:fb:49:3a:29:75: 59:b1:19:6c:ea:f1:93:5f:7d:d0:8f:d0:0d:78:3f: fd:7a:7b:1f:a5:b9:92:af:42:9d:ab:7e:2d:b6:28: 15:15:57:af:50:7a:8c:e9:c7:57:c4:c0:50:99:c1: 44:8b:d8:30:2a:c6:a1:5a:2e:1d:15:87:e2:44:b5: 90:41:0e:eb:67:9f:bd:01:c8:ae:fc:68:12:b4:ac: 80:8f:8b:61:49:a8:a0:95:c0:eb:a6:3e:47:8a:ab: 2e:c4:54:9e:1b:44:3c:5e:e9:48:44:af:4b:dc:b0: 72:5b:29:13:f3:62:66:aa:81:c3:29:58:c9:b5:71: 5e:f0:ac:e5:6d:61:a4:73:0d:d4:6b:d1:45:7f:61: a1:31:b3:23:64:b4:27:df:84:c0:52:f0:92:88:a8: 06:a0:a1:ae:86:ab:ad:87:d3:53:33:38:0e:81:0d: 38:bd:df:c6:ab:20:cc:5a:aa:7f:f1:98:08:d0:15: 95:5e:7a:3e:2f:94:80:ee:fc:0e:e0:68:3e:12:65: 1f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A7:AD:9C:69:ED:F6:28:97:F4:DD:C2:0E:2B:D6:A4:84:24:20:43 X509v3 Authority Key Identifier: keyid:A7:1C:6F:39:EB:BF:CC:0D:F1:0C:4D:6D:BB:72:55:E6:92:8C:5C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ae:80:87:cd:b9:ce:7f:0a:8c:fc:12:64:9e:a1:ee:0e:91: ec:4a:b7:e2:93:25:b2:2e:33:fd:59:cf:29:80:6a:d4:be:7d: fc:27:ee:8a:33:01:90:ad:6b:ff:b3:ed:c4:52:eb:2f:1f:cf: b1:5c:6c:4a:41:e4:9e:58:be:81:4d:52:ea:f9:f7:65:3f:1b: 71:da:b4:d4:e2:8d:b1:bd:98:82:ea:94:6f:4e:82:40:11:05: e9:9d:ee:61:75:58:18:30:9d:e4:ca:25:25:c3:83:04:a8:1d: b9:6f:4a:28:cd:54:e3:9d:2c:fa:a2:0f:a7:d8:c5:9a:69:45: de:90:c6:f6:23:2a:24:1b:55:ad:9c:81:b5:d7:5b:c5:af:1d: 64:02:23:f6:80:b1:78:34:f3:dc:12:48:40:55:f9:e0:fd:37: cf:39:b6:85:84:4a:7f:12:88:9e:cb:00:6b:f5:bf:69:e2:e5: 08:c8:2b:65:64:86:7e:9c:4e:2c:8f:9c:9d:b3:aa:0f:80:e2: dc:36:82:b8:42:3a:3c:28:5e:ca:94:89:bd:37:53:58:42:83: c5:2c:7f:96:04:86:c7:f0:5a:21:e2:2b:a1:8b:14:0c:45:ae: 44:a6:15:b0:30:e7:5d:4b:c4:36:dc:18:34:eb:19:75:d9:c4: ce:0f:75:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdA/PkUnC2sob8A6af7KyANjipvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQzZGMzlFQkJGQ0MwREYxMEM0RDZEQkI3MjU1RTY5 MjhDNUM0NzAeFw0yNjA2MDIwOTU3MjZaFw0yNjA2MDMxMTI4MjZaMDMxMTAvBgNV BAMTKEM5QTdBRDlDNjlFREY2Mjg5N0Y0RERDMjBFMkJENkE0ODQyNDIwNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKWFI02z1cWRWGIOquNf5V31wo CytsN+5aB8NhO82SLwiHCCMtcrHrDrEuVAhs/Fdg1Sng5yz7STopdVmxGWzq8ZNf fdCP0A14P/16ex+luZKvQp2rfi22KBUVV69Qeozpx1fEwFCZwUSL2DAqxqFaLh0V h+JEtZBBDutnn70ByK78aBK0rICPi2FJqKCVwOumPkeKqy7EVJ4bRDxe6UhEr0vc sHJbKRPzYmaqgcMpWMm1cV7wrOVtYaRzDdRr0UV/YaExsyNktCffhMBS8JKIqAag oa6Gq62H01MzOA6BDTi938arIMxaqn/xmAjQFZVeej4vlIDu/A7gaD4SZR8LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyaetnGnt9iiX9N3CDivWpIQkIEMwHwYDVR0j BBgwFoAUpxxvOeu/zA3xDE1tu3JV5pKMXEcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA0ZTk3ZDMtNzFjMy00ZDBhLThiMDQtNzA4OGZlMzgyYmMzLzAvQTcxQzZGMzlF QkJGQ0MwREYxMEM0RDZEQkI3MjU1RTY5MjhDNUM0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzFDNkYzOUVCQkZDQzBERjEwQzRENkRCQjcyNTVFNjkyOEM1 QzQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA0ZTk3ZDMtNzFjMy00ZDBhLThi MDQtNzA4OGZlMzgyYmMzLzAvQTcxQzZGMzlFQkJGQ0MwREYxMEM0RDZEQkI3MjU1 RTY5MjhDNUM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJiugIfNuc5/Coz8EmSeoe4OkexKt+KTJbIu M/1ZzymAatS+ffwn7oozAZCta/+z7cRS6y8fz7FcbEpB5J5YvoFNUur592U/G3Ha tNTijbG9mILqlG9OgkARBemd7mF1WBgwneTKJSXDgwSoHblvSijNVOOdLPqiD6fY xZppRd6QxvYjKiQbVa2cgbXXW8WvHWQCI/aAsXg089wSSEBV+eD9N885toWESn8S iJ7LAGv1v2ni5QjIK2Vkhn6cTiyPnJ2zqg+A4tw2grhCOjwoXsqUib03U1hCg8Us f5YEhsfwWiHiK6GLFAxFrkSmFbAw511LxDbcGDTrGXXZxM4PdUk= -----END CERTIFICATE-----Generated at Wed Jun 3 03:49:57 2026 by rpki-client