$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft File: D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft (raw, json) Hash identifier: sgbhTSjA81OOyqhYoCaQ7cBbp0d/txkHufwJatNbOq4= Subject key identifier: FB:95:65:98:CB:64:8A:1A:C8:98:DD:D2:7B:16:1A:D2:61:95:5C:F4 Authority key identifier: D5:48:4C:C7:34:0F:D3:8F:D1:52:B9:51:A8:12:A7:BB:0D:2D:C7:4C Certificate issuer: /CN=D5484CC7340FD38FD152B951A812A7BB0D2DC74C Certificate serial: 7A2FCD058170CF1BD1660C456945C82598131DB4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 09:31:48 +0000 Manifest this update: Tue 02 Jun 2026 09:26:48 +0000 Manifest next update: Wed 03 Jun 2026 11:08:48 +0000 Files and hashes: 1: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (hash: qJeB9IbjX5ag+QxaHUzr5lUIsrKHS9OTMwiaemsfQJ0=) 2: D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl (hash: dFPvtjFB0X6XvduizLpkqcQ13BMfuVkNJDYN+hf6o9s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:2f:cd:05:81:70:cf:1b:d1:66:0c:45:69:45:c8:25:98:13:1d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5484CC7340FD38FD152B951A812A7BB0D2DC74C Validity Not Before: Jun 2 09:26:48 2026 GMT Not After : Jun 3 11:08:48 2026 GMT Subject: CN=FB956598CB648A1AC898DDD27B161AD261955CF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:9b:99:9b:88:f3:2c:a8:86:d2:c3:48:31: fe:e5:59:d9:6f:44:1d:b3:6e:ca:bc:ea:39:34:5c: c4:16:82:fd:b9:7f:92:23:3e:7e:a5:59:82:e1:41: 09:63:26:0e:3e:7e:57:94:a6:6b:86:39:01:de:18: a3:f7:4a:7f:81:d2:ac:6c:c3:de:c8:21:76:07:c1: 11:f7:0b:fd:e5:71:43:b8:6f:c2:6a:f3:3c:95:55: f9:6c:3b:95:11:d5:40:3a:70:e8:50:13:f5:2a:38: 70:94:2e:35:bd:3f:0b:e1:e2:ca:a8:f0:d6:87:09: 6a:b8:e5:53:77:5b:d8:3b:a7:4a:6e:0a:2d:ad:b4: d0:4d:59:d5:45:7a:1e:50:62:3c:b0:94:24:73:95: 04:07:f1:c1:e1:9d:03:71:63:80:1b:fa:92:0c:d1: c4:ab:26:cc:70:0a:8f:5f:f7:6d:77:01:61:a6:45: f2:65:3f:e6:c0:5f:03:be:45:67:83:f5:14:9a:67: b5:17:18:35:98:9d:d9:65:de:e3:78:39:c5:74:64: 7b:94:6c:0b:37:1c:c1:a2:e5:e6:ea:e3:10:6b:64: 8d:4d:26:11:5e:c8:e0:44:30:5c:07:26:06:70:d7: 2f:d1:d8:bc:dd:2e:80:e5:f4:6d:e0:e9:51:29:87: bf:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:95:65:98:CB:64:8A:1A:C8:98:DD:D2:7B:16:1A:D2:61:95:5C:F4 X509v3 Authority Key Identifier: keyid:D5:48:4C:C7:34:0F:D3:8F:D1:52:B9:51:A8:12:A7:BB:0D:2D:C7:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:58:9e:6f:bf:c8:17:c6:f7:4c:61:81:d1:a3:01:d2:41:56: 93:d7:31:37:0f:4a:76:47:fc:c7:52:93:bd:c3:30:c4:df:ca: c3:37:ca:5d:a1:9e:20:a8:bc:84:57:15:7f:1c:07:fe:89:f2: e6:bf:ea:b5:74:d2:9c:11:8b:20:72:83:29:e9:08:c1:58:9f: 61:ea:34:e5:e3:31:e8:3c:a6:67:0a:a2:e6:3a:ad:52:f1:f8: d6:c3:d7:36:56:25:4c:ab:96:09:6f:f8:f6:4f:60:e8:03:5b: c1:fa:27:b5:8d:9a:1d:7b:04:41:9e:fa:48:1c:60:e0:72:d6: e9:d4:50:eb:dc:d1:c7:4e:1b:c7:5c:65:3a:b4:10:c0:7c:b1: 84:65:60:59:5e:19:99:19:5a:72:4b:5d:f6:a3:c3:c7:f9:70: 1f:58:bb:a5:9a:c7:e0:45:7f:42:c4:01:20:e4:40:cc:a8:5c: b7:24:29:52:49:66:f9:69:29:0d:c6:92:fc:86:fe:6c:fe:48: df:4d:7f:a9:6c:b3:13:b7:b9:f7:52:13:8b:a6:71:f5:2b:18: 78:b8:88:96:93:dc:bd:04:ba:20:a9:f8:6a:e6:29:06:08:74: 1c:b6:1c:14:de:60:e1:84:9b:92:0b:73:bc:77:21:da:a6:21: 0d:4b:d7:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUei/NBYFwzxvRZgxFaUXIJZgTHbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0ODRDQzczNDBGRDM4RkQxNTJCOTUxQTgxMkE3QkIw RDJEQzc0QzAeFw0yNjA2MDIwOTI2NDhaFw0yNjA2MDMxMTA4NDhaMDMxMTAvBgNV BAMTKEZCOTU2NTk4Q0I2NDhBMUFDODk4REREMjdCMTYxQUQyNjE5NTVDRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/85uZm4jzLKiG0sNIMf7lWdlv RB2zbsq86jk0XMQWgv25f5IjPn6lWYLhQQljJg4+fleUpmuGOQHeGKP3Sn+B0qxs w97IIXYHwRH3C/3lcUO4b8Jq8zyVVflsO5UR1UA6cOhQE/UqOHCULjW9Pwvh4sqo 8NaHCWq45VN3W9g7p0puCi2ttNBNWdVFeh5QYjywlCRzlQQH8cHhnQNxY4Ab+pIM 0cSrJsxwCo9f9213AWGmRfJlP+bAXwO+RWeD9RSaZ7UXGDWYndll3uN4OcV0ZHuU bAs3HMGi5ebq4xBrZI1NJhFeyOBEMFwHJgZw1y/R2LzdLoDl9G3g6VEph79FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+5VlmMtkihrImN3SexYa0mGVXPQwHwYDVR0j BBgwFoAU1UhMxzQP04/RUrlRqBKnuw0tx0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJlM2U5ODEtYmYzOS00MmUwLWEyZjYtY2Y4N2M3NTdmODI3LzAvRDU0ODRDQzcz NDBGRDM4RkQxNTJCOTUxQTgxMkE3QkIwRDJEQzc0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTQ4NENDNzM0MEZEMzhGRDE1MkI5NTFBODEyQTdCQjBEMkRD NzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJlM2U5ODEtYmYzOS00MmUwLWEy ZjYtY2Y4N2M3NTdmODI3LzAvRDU0ODRDQzczNDBGRDM4RkQxNTJCOTUxQTgxMkE3 QkIwRDJEQzc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5Ynm+/yBfG90xhgdGjAdJBVpPXMTcPSnZH /MdSk73DMMTfysM3yl2hniCovIRXFX8cB/6J8ua/6rV00pwRiyBygynpCMFYn2Hq NOXjMeg8pmcKouY6rVLx+NbD1zZWJUyrlglv+PZPYOgDW8H6J7WNmh17BEGe+kgc YOBy1unUUOvc0cdOG8dcZTq0EMB8sYRlYFleGZkZWnJLXfajw8f5cB9Yu6Wax+BF f0LEASDkQMyoXLckKVJJZvlpKQ3GkvyG/mz+SN9Nf6lssxO3ufdSE4umcfUrGHi4 iJaT3L0EuiCp+GrmKQYIdBy2HBTeYOGEm5ILc7x3IdqmIQ1L1yI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:43 2026 by rpki-client