$ rpki-client -vvf rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/C1A495959252724BB02157535868476E3695F743.mft File: C1A495959252724BB02157535868476E3695F743.mft (raw, json) Hash identifier: ZEUTQg23WTrpvpjG4W3k5smN4H9f34REH8LK51yvVVE= Subject key identifier: 3C:8A:CC:E9:91:9D:96:95:79:F8:28:B2:AC:BB:3F:E5:8D:33:27:7C Authority key identifier: C1:A4:95:95:92:52:72:4B:B0:21:57:53:58:68:47:6E:36:95:F7:43 Certificate issuer: /CN=C1A495959252724BB02157535868476E3695F743 Certificate serial: 2F5FEB3A30DF82C7DB47FD8DD6ADCCBD28FB8C0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A495959252724BB02157535868476E3695F743.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/C1A495959252724BB02157535868476E3695F743.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:36:13 +0000 Manifest this update: Tue 02 Jun 2026 21:31:13 +0000 Manifest next update: Thu 04 Jun 2026 01:09:13 +0000 Files and hashes: 1: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: 3gMFcIdzZIFz/pQC+A0nSpKVaEMc4MfPXuLkcguXqvc=) 2: C1A495959252724BB02157535868476E3695F743.crl (hash: 6OSD0hrs6PPxHg5RLIw9b8khWUT0virWUqmPpUvR1JU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/C1A495959252724BB02157535868476E3695F743.crl rsync://rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/C1A495959252724BB02157535868476E3695F743.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A495959252724BB02157535868476E3695F743.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 01:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5f:eb:3a:30:df:82:c7:db:47:fd:8d:d6:ad:cc:bd:28:fb:8c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1A495959252724BB02157535868476E3695F743 Validity Not Before: Jun 2 21:31:13 2026 GMT Not After : Jun 4 01:09:13 2026 GMT Subject: CN=3C8ACCE9919D969579F828B2ACBB3FE58D33277C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f4:20:7e:c7:6c:25:9b:19:6e:c5:f3:05:1b: d8:55:21:b1:85:82:00:76:d9:c0:61:68:32:f4:7d: 7a:38:a7:ea:8e:f8:37:71:c7:94:16:84:ad:15:f7: 4c:f0:c3:6d:20:1c:7c:06:98:d7:77:2b:fd:07:f6: 5d:3f:ec:22:2a:bb:33:d9:cb:18:6c:89:eb:18:d9: a3:fd:83:b4:85:b4:c4:3b:a4:d7:88:d2:0b:1b:34: a2:a5:5a:4a:82:c5:08:92:a9:c3:1a:88:99:3e:dd: 49:5c:14:47:6e:c9:b8:bd:c7:31:af:0b:41:1d:33: 3c:59:1d:eb:f3:3d:2a:cc:fe:53:d4:88:54:50:5a: 7f:43:55:d7:01:97:0f:b3:aa:40:24:40:4f:77:7c: 95:c2:78:f9:87:80:be:49:aa:36:dd:f5:da:1a:03: c4:ce:aa:bc:20:1c:03:de:a1:61:d3:11:c7:cc:0d: 3e:a4:21:75:87:12:23:2c:00:01:a9:f2:e2:1b:91: 94:ad:c1:79:b0:bc:5d:f0:91:3e:eb:0c:b8:48:fa: 84:ce:58:b2:1d:45:2b:51:c8:87:97:3b:34:e8:b9: e0:a3:60:48:38:56:50:3e:b9:c8:8f:da:7d:29:6b: b6:c9:ef:f9:59:e1:be:d6:8c:06:54:88:f7:59:14: e8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8A:CC:E9:91:9D:96:95:79:F8:28:B2:AC:BB:3F:E5:8D:33:27:7C X509v3 Authority Key Identifier: keyid:C1:A4:95:95:92:52:72:4B:B0:21:57:53:58:68:47:6E:36:95:F7:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/C1A495959252724BB02157535868476E3695F743.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A495959252724BB02157535868476E3695F743.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/C1A495959252724BB02157535868476E3695F743.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:af:88:6a:5b:60:42:cd:09:48:d3:5b:c5:b4:7e:a5:31:a3: 87:44:ed:c5:92:5d:5e:0a:17:e7:11:95:8f:df:67:42:dd:7b: 54:64:98:c2:a0:61:85:1b:42:b3:12:a4:cf:02:30:36:57:ad: 49:2f:68:22:e5:8e:56:12:6f:b8:c5:6e:d9:b9:3b:6e:c9:97: 7d:11:70:7e:8f:fa:f7:2e:ea:0e:1a:1a:f3:d6:85:86:c4:d0: 2a:f0:06:18:50:83:03:e1:02:c4:7c:63:26:3e:82:14:c4:9f: 7c:ac:5d:8a:4b:4a:70:95:c9:f0:93:42:97:5b:e6:fb:7a:94: 6f:c8:4b:23:7a:a6:26:71:b0:ba:6f:27:24:04:37:8d:38:56: 62:ca:d8:bd:6e:5b:85:3c:41:71:86:7d:ae:c0:c9:ea:58:95: 7d:6a:b8:0d:b1:fc:20:7f:17:36:82:38:df:de:f0:f6:7c:26: ab:c7:85:d6:a1:1b:9f:3c:d5:24:d6:de:19:c1:15:9e:99:f1: c5:a0:f3:98:77:ce:fa:f3:a9:06:5f:e2:f7:87:2a:54:50:54: 57:9f:8b:1f:37:5f:37:39:fb:05:ce:92:ff:fe:02:5f:49:ae: c4:9a:a2:c4:6b:0d:b4:06:d0:a9:5a:f8:81:6a:e8:d2:5e:d7: 26:a7:97:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL1/rOjDfgsfbR/2N1q3MvSj7jAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFBNDk1OTU5MjUyNzI0QkIwMjE1NzUzNTg2ODQ3NkUz Njk1Rjc0MzAeFw0yNjA2MDIyMTMxMTNaFw0yNjA2MDQwMTA5MTNaMDMxMTAvBgNV BAMTKDNDOEFDQ0U5OTE5RDk2OTU3OUY4MjhCMkFDQkIzRkU1OEQzMzI3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN9CB+x2wlmxluxfMFG9hVIbGF ggB22cBhaDL0fXo4p+qO+Ddxx5QWhK0V90zww20gHHwGmNd3K/0H9l0/7CIquzPZ yxhsiesY2aP9g7SFtMQ7pNeI0gsbNKKlWkqCxQiSqcMaiJk+3UlcFEduybi9xzGv C0EdMzxZHevzPSrM/lPUiFRQWn9DVdcBlw+zqkAkQE93fJXCePmHgL5Jqjbd9doa A8TOqrwgHAPeoWHTEcfMDT6kIXWHEiMsAAGp8uIbkZStwXmwvF3wkT7rDLhI+oTO WLIdRStRyIeXOzToueCjYEg4VlA+uciP2n0pa7bJ7/lZ4b7WjAZUiPdZFOgbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPIrM6ZGdlpV5+CiyrLs/5Y0zJ3wwHwYDVR0j BBgwFoAUwaSVlZJSckuwIVdTWGhHbjaV90MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjU0ZGRjNjUtNjFjMS00OWUxLWE4OTUtM2MwM2Y1ODdhMjdiLzAvQzFBNDk1OTU5 MjUyNzI0QkIwMjE1NzUzNTg2ODQ3NkUzNjk1Rjc0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMUE0OTU5NTkyNTI3MjRCQjAyMTU3NTM1ODY4NDc2RTM2OTVG NzQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvQzFBNDk1OTU5MjUyNzI0QkIwMjE1NzUzNTg2ODQ3 NkUzNjk1Rjc0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByviGpbYELNCUjTW8W0fqUxo4dE7cWSXV4K F+cRlY/fZ0Lde1RkmMKgYYUbQrMSpM8CMDZXrUkvaCLljlYSb7jFbtm5O27Jl30R cH6P+vcu6g4aGvPWhYbE0CrwBhhQgwPhAsR8YyY+ghTEn3ysXYpLSnCVyfCTQpdb 5vt6lG/ISyN6piZxsLpvJyQEN404VmLK2L1uW4U8QXGGfa7AyepYlX1quA2x/CB/ FzaCON/e8PZ8JqvHhdahG5881STW3hnBFZ6Z8cWg85h3zvrzqQZf4veHKlRQVFef ix83Xzc5+wXOkv/+Al9JrsSaosRrDbQG0Kla+IFq6NJe1yanlxE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:13:08 2026 by rpki-client