$ rpki-client -vvf rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft File: 633520AD134E7E67CBB832AE9339B6F7EB07D358.mft (raw, json) Hash identifier: tBLjrkBTlsxncw/tPYXCOkC70DHaAR2DRPFwCq1h/o4= Subject key identifier: 9D:76:73:84:28:EC:C2:68:DB:EA:CF:7B:2B:9B:F4:93:25:E4:BB:E3 Authority key identifier: 63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58 Certificate issuer: /CN=633520AD134E7E67CBB832AE9339B6F7EB07D358 Certificate serial: 288107E51D44F893202EF020C1AE73792C7D56FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:37:34 +0000 Manifest this update: Tue 02 Jun 2026 18:32:34 +0000 Manifest next update: Wed 03 Jun 2026 19:17:34 +0000 Files and hashes: 1: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: Jg32b0/22RaThrPVItjxadGotzX77G74NzWz3XkVIKw=) 2: 633520AD134E7E67CBB832AE9339B6F7EB07D358.crl (hash: Pzbgu5SDQx5gy4Dwqulm+vRrhNCH4zTWAPGDPFi3i5M=) 3: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: 5VtG2vjJ8J2at6i5HmvxthdfCCKtz2QyHtIuqxm6OBo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.crl rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:81:07:e5:1d:44:f8:93:20:2e:f0:20:c1:ae:73:79:2c:7d:56:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633520AD134E7E67CBB832AE9339B6F7EB07D358 Validity Not Before: Jun 2 18:32:34 2026 GMT Not After : Jun 3 19:17:34 2026 GMT Subject: CN=9D76738428ECC268DBEACF7B2B9BF49325E4BBE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f2:0d:84:05:67:e9:f2:ff:86:ab:0f:f0:47: 1d:0e:de:59:13:e1:6e:57:30:8b:60:18:5b:09:d0: 4b:6e:16:04:de:33:c6:e6:33:fe:0b:3f:e3:7f:41: b4:74:26:a0:c9:99:1a:a4:41:8c:b3:da:71:a8:43: 9b:2e:f3:b3:99:56:72:91:e2:69:c8:32:12:66:80: f7:86:17:fd:a4:1a:29:8e:fa:7e:28:22:f1:3d:9e: db:a0:50:14:29:e4:bf:cd:84:bf:d3:dd:a8:5b:1f: 9b:4d:85:c8:e5:b4:27:94:bd:98:3a:e8:63:53:e2: b5:f3:93:08:97:bf:88:da:5d:f3:3d:89:76:c8:da: 20:02:93:42:d0:34:fd:0d:13:bb:dd:14:f0:59:66: b0:30:f5:d3:e6:b7:e9:64:5d:e1:dd:22:01:9c:a5: 56:17:65:15:5f:96:0d:8d:4b:e6:12:ea:61:09:03: eb:d7:df:d7:e9:bb:6c:19:91:ac:ea:dd:86:e7:64: 62:a2:6a:1f:24:8d:a6:91:e3:e6:35:1f:e1:cc:a1: 0e:92:83:01:1d:28:a4:87:c2:69:c6:bb:4e:57:0d: 5b:a3:93:1a:8d:7f:06:26:47:d0:62:cc:fa:fc:36: ab:b2:a4:88:bc:49:c2:02:d2:11:26:c7:f6:f9:92: c1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:76:73:84:28:EC:C2:68:DB:EA:CF:7B:2B:9B:F4:93:25:E4:BB:E3 X509v3 Authority Key Identifier: keyid:63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:ba:9b:1c:be:82:24:a6:17:e1:25:49:74:7e:20:bf:ad:72: 08:76:3c:84:eb:f7:90:10:ac:0f:be:a3:c5:5e:c1:2c:33:62: 98:84:2c:b2:a7:0d:64:a9:20:5a:e3:cc:a2:74:3a:45:b1:c9: 42:17:02:61:41:ad:e3:78:5b:58:61:65:64:7d:76:ba:c7:32: ec:2e:4d:66:46:49:9e:fc:0b:21:09:04:0a:e4:7f:51:a6:cb: f4:ab:c7:bb:35:ad:4d:cc:5f:70:ff:38:3b:62:1b:23:a2:09: 97:13:99:6a:3f:82:ce:1e:9a:61:27:f8:78:97:ed:52:64:10: 33:e7:12:fe:43:b0:43:f7:d4:0f:8b:f2:fc:09:81:fa:af:b3: f4:58:94:91:22:ba:61:73:7b:e4:5a:7f:cd:15:29:3b:3a:00: 06:a0:de:2d:33:47:9b:53:3e:79:d7:70:38:31:c1:43:f3:5c: e5:d0:a1:4c:44:2e:58:26:83:1e:c0:4c:f5:bf:ff:a2:db:38: fa:2d:1f:fc:22:8f:e6:74:e9:e2:6e:6c:4f:69:cd:13:b0:bb: 68:14:36:28:54:fe:06:f4:e6:25:fb:da:33:27:8f:be:8e:b4: 11:6d:15:6f:26:34:2e:53:eb:ad:66:4e:cf:5b:d3:80:e5:e4: 5f:b3:20:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKIEH5R1E+JMgLvAgwa5zeSx9Vv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMzNTIwQUQxMzRFN0U2N0NCQjgzMkFFOTMzOUI2RjdF QjA3RDM1ODAeFw0yNjA2MDIxODMyMzRaFw0yNjA2MDMxOTE3MzRaMDMxMTAvBgNV BAMTKDlENzY3Mzg0MjhFQ0MyNjhEQkVBQ0Y3QjJCOUJGNDkzMjVFNEJCRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+8g2EBWfp8v+Gqw/wRx0O3lkT 4W5XMItgGFsJ0EtuFgTeM8bmM/4LP+N/QbR0JqDJmRqkQYyz2nGoQ5su87OZVnKR 4mnIMhJmgPeGF/2kGimO+n4oIvE9ntugUBQp5L/NhL/T3ahbH5tNhcjltCeUvZg6 6GNT4rXzkwiXv4jaXfM9iXbI2iACk0LQNP0NE7vdFPBZZrAw9dPmt+lkXeHdIgGc pVYXZRVflg2NS+YS6mEJA+vX39fpu2wZkazq3YbnZGKiah8kjaaR4+Y1H+HMoQ6S gwEdKKSHwmnGu05XDVujkxqNfwYmR9BizPr8NquypIi8ScIC0hEmx/b5ksFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnXZzhCjswmjb6s97K5v0kyXku+MwHwYDVR0j BBgwFoAUYzUgrRNOfmfLuDKukzm29+sH01gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE5MGMzN2UtMjY1NS00MmIxLWJhZjctNDJlYzFjZjE5MmFhLzAvNjMzNTIwQUQx MzRFN0U2N0NCQjgzMkFFOTMzOUI2RjdFQjA3RDM1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzM1MjBBRDEzNEU3RTY3Q0JCODMyQUU5MzM5QjZGN0VCMDdE MzU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE5MGMzN2UtMjY1NS00MmIxLWJh ZjctNDJlYzFjZjE5MmFhLzAvNjMzNTIwQUQxMzRFN0U2N0NCQjgzMkFFOTMzOUI2 RjdFQjA3RDM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL66mxy+giSmF+ElSXR+IL+tcgh2PITr95AQ rA++o8VewSwzYpiELLKnDWSpIFrjzKJ0OkWxyUIXAmFBreN4W1hhZWR9drrHMuwu TWZGSZ78CyEJBArkf1Gmy/Srx7s1rU3MX3D/ODtiGyOiCZcTmWo/gs4emmEn+HiX 7VJkEDPnEv5DsEP31A+L8vwJgfqvs/RYlJEiumFze+Raf80VKTs6AAag3i0zR5tT PnnXcDgxwUPzXOXQoUxELlgmgx7ATPW//6LbOPotH/wij+Z06eJubE9pzROwu2gU NihU/gb05iX72jMnj76OtBFtFW8mNC5T661mTs9b04Dl5F+zIL4= -----END CERTIFICATE-----Generated at Wed Jun 3 04:11:45 2026 by rpki-client