$ rpki-client -vvf rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft File: D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft (raw, json) Hash identifier: DoD2Xk03bkFsEl1DwiRV5BYp3M4POK9wOdAyRnXG5Pk= Subject key identifier: AA:73:8A:1B:4E:E0:8D:60:52:B2:C8:14:9E:B4:6C:0E:60:FE:3E:5F Authority key identifier: D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25 Certificate issuer: /CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625 Certificate serial: 6F46BDEED6EC34B5BADDDCDE38AD088E4AB9E660 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 15:54:16 +0000 Manifest this update: Tue 02 Jun 2026 15:49:16 +0000 Manifest next update: Wed 03 Jun 2026 16:32:16 +0000 Files and hashes: 1: 3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa (hash: VU4Fqm4q9lM1qlbwtCDfQfln3xy8Zkz6BXFC8JhBhSw=) 2: 323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa (hash: 4KthRL11gBmJfq1X/84ocL39dco9wY9VllXbFEY9aPQ=) 3: D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl (hash: mPxCzZioCBBK8nfLnNFdMGqsi9hbx1OG7eA9qmkHEUg=) 4: 3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa (hash: 6zRlVB+7VhU+EM3gEBCiqmflsWcB74DY3jlrVLYDaZ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 16:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:46:bd:ee:d6:ec:34:b5:ba:dd:dc:de:38:ad:08:8e:4a:b9:e6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625 Validity Not Before: Jun 2 15:49:16 2026 GMT Not After : Jun 3 16:32:16 2026 GMT Subject: CN=AA738A1B4EE08D6052B2C8149EB46C0E60FE3E5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:25:37:74:4a:83:97:b8:c6:73:10:c8:58:d3: 53:59:75:c0:7e:86:0b:a2:a5:57:46:d4:30:f2:5b: ae:bb:3c:a1:20:a3:5a:17:db:c9:17:fa:9f:1b:63: 32:ee:2e:fd:7c:dd:85:b9:b6:50:b6:f0:3a:9a:b6: c6:18:89:f6:0b:0a:90:ab:2a:4e:07:6c:19:21:2a: ac:d1:39:84:e4:5e:a7:c8:d1:59:da:cb:76:a0:99: 2c:b1:f1:a8:86:4d:44:60:07:cb:ac:46:ff:ec:90: 57:0a:17:58:d9:d4:2a:b0:0d:ca:0d:20:b0:8a:ac: 81:2d:19:73:73:5d:80:c9:b2:d7:48:8b:9b:33:03: 17:58:76:9c:69:22:73:3d:3a:c9:3c:85:7e:53:91: 8a:1c:a5:fd:dc:ad:4d:21:7b:94:ad:f2:56:eb:18: 66:10:96:a6:03:d5:3f:f9:96:9e:4d:7e:80:e5:bb: b1:9e:8d:9c:6f:be:4e:d5:a4:28:ca:9f:96:83:c5: 42:7d:cc:13:d9:e3:4c:9d:51:f5:a9:1e:05:b2:a0: 54:ee:bb:ea:96:24:a5:7d:69:31:9d:9c:9d:d8:34: 3f:de:92:68:e2:4d:55:19:aa:ea:a9:0a:7c:3a:22: d5:10:76:da:84:0f:93:f4:e3:af:02:58:2d:26:38: 35:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:73:8A:1B:4E:E0:8D:60:52:B2:C8:14:9E:B4:6C:0E:60:FE:3E:5F X509v3 Authority Key Identifier: keyid:D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:dd:5b:26:11:ba:8f:bd:87:62:44:e3:3d:9d:ef:4a:df:04: 22:ce:5d:08:81:ad:e4:1b:a5:58:56:09:44:65:ca:09:7e:ff: 6d:c8:de:48:97:93:7c:b9:f1:86:71:01:e0:42:e0:19:15:10: 42:75:9c:41:44:ac:6b:ec:82:a5:85:09:f1:3d:e9:ad:f2:b7: a8:9d:72:47:d7:bf:b1:22:2e:1e:2a:6d:9c:7f:5d:04:86:67: bc:a4:32:95:cf:f7:b1:91:32:ca:5a:18:b0:6e:52:4a:78:f0: 70:44:03:6a:e3:07:05:a5:a5:16:61:bb:c2:dd:bc:4c:33:c9: c1:5e:d0:c0:79:26:b1:0f:20:e2:e6:b2:04:f4:31:1e:11:ec: 44:74:fd:da:7c:1c:b3:4e:f9:41:11:d9:72:c2:27:81:ca:a1: 6a:4e:3d:06:ee:c5:ec:84:49:97:f7:08:48:08:ed:f5:3e:d1: ad:01:7e:b9:d6:23:29:ea:bf:0a:ea:5f:77:b9:1c:85:e3:c5: 04:e9:d1:ff:50:06:2f:87:ad:15:c6:70:74:89:6a:9f:5f:e8: c7:c1:a6:aa:91:93:82:28:84:f4:60:d2:ea:32:c7:7a:b2:ae: 68:40:d4:5c:73:a7:62:91:07:33:59:4f:3c:d0:0b:07:13:2d: fc:6b:e8:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb0a97tbsNLW63dzeOK0Ijkq55mAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGMEM4RDE1MEZFQUVCM0IyNjJBRTI2MEVFRDZFRkE0 NkM0QzYyNTAeFw0yNjA2MDIxNTQ5MTZaFw0yNjA2MDMxNjMyMTZaMDMxMTAvBgNV BAMTKEFBNzM4QTFCNEVFMDhENjA1MkIyQzgxNDlFQjQ2QzBFNjBGRTNFNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeJTd0SoOXuMZzEMhY01NZdcB+ hguipVdG1DDyW667PKEgo1oX28kX+p8bYzLuLv183YW5tlC28DqatsYYifYLCpCr Kk4HbBkhKqzROYTkXqfI0Vnay3agmSyx8aiGTURgB8usRv/skFcKF1jZ1CqwDcoN ILCKrIEtGXNzXYDJstdIi5szAxdYdpxpInM9Osk8hX5TkYocpf3crU0he5St8lbr GGYQlqYD1T/5lp5NfoDlu7GejZxvvk7VpCjKn5aDxUJ9zBPZ40ydUfWpHgWyoFTu u+qWJKV9aTGdnJ3YND/ekmjiTVUZquqpCnw6ItUQdtqED5P0468CWC0mODU9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqnOKG07gjWBSssgUnrRsDmD+Pl8wHwYDVR0j BBgwFoAU0PDI0VD+rrOyYq4mDu1u+kbExiUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjUxZDZjOWMtZWFkNy00NWZlLWExOWEtNDIyMzVmYzUzNzgwLzAvRDBGMEM4RDE1 MEZFQUVCM0IyNjJBRTI2MEVFRDZFRkE0NkM0QzYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEYwQzhEMTUwRkVBRUIzQjI2MkFFMjYwRUVENkVGQTQ2QzRD NjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjUxZDZjOWMtZWFkNy00NWZlLWEx OWEtNDIyMzVmYzUzNzgwLzAvRDBGMEM4RDE1MEZFQUVCM0IyNjJBRTI2MEVFRDZF RkE0NkM0QzYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvdWyYRuo+9h2JE4z2d70rfBCLOXQiBreQb pVhWCURlygl+/23I3kiXk3y58YZxAeBC4BkVEEJ1nEFErGvsgqWFCfE96a3yt6id ckfXv7EiLh4qbZx/XQSGZ7ykMpXP97GRMspaGLBuUkp48HBEA2rjBwWlpRZhu8Ld vEwzycFe0MB5JrEPIOLmsgT0MR4R7ER0/dp8HLNO+UER2XLCJ4HKoWpOPQbuxeyE SZf3CEgI7fU+0a0BfrnWIynqvwrqX3e5HIXjxQTp0f9QBi+HrRXGcHSJap9f6MfB pqqRk4IohPRg0uoyx3qyrmhA1Fxzp2KRBzNZTzzQCwcTLfxr6OU= -----END CERTIFICATE-----Generated at Wed Jun 3 04:09:15 2026 by rpki-client