$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft File: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft (raw, json) Hash identifier: 1AdZJCfehy0w8S+dQSXw5sPSuUkaXLr51g6ZSOk+cnQ= Subject key identifier: 84:93:AE:BD:C2:73:D4:5C:CB:CC:79:B1:D4:FC:56:98:E8:A4:A3:D4 Authority key identifier: D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF Certificate issuer: /CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Certificate serial: 128F4DC127B74BD213A41403B588A8CD3B30F5E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:57:25 +0000 Manifest this update: Tue 02 Jun 2026 09:52:25 +0000 Manifest next update: Wed 03 Jun 2026 10:21:25 +0000 Files and hashes: 1: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: g/M/W8nBgP5S2ayXN1SiAqh0ligQCCsMJq/IueYk4OY=) 2: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl (hash: 7iHIipk5BxafPkEft6cKATwRb/e4bb0RRHSrzLmty6Y=) 3: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: hKC4O+Dbys8awahI6Y0F2x8aosLXlC3tFEHhosWplhc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 09:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:8f:4d:c1:27:b7:4b:d2:13:a4:14:03:b5:88:a8:cd:3b:30:f5:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Validity Not Before: Jun 2 09:52:25 2026 GMT Not After : Jun 3 10:21:25 2026 GMT Subject: CN=8493AEBDC273D45CCBCC79B1D4FC5698E8A4A3D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d0:be:4d:67:bb:d4:85:61:aa:78:79:be:68: 53:65:81:92:d4:3e:20:f0:be:d9:d5:d6:4d:a6:46: 4f:a4:80:93:26:93:5a:01:f8:54:31:56:02:02:dc: 52:5d:0b:49:4b:94:87:66:9a:28:4c:d6:6e:d4:f0: 22:65:0a:05:4a:63:36:5d:22:86:e9:a2:9c:bf:b4: 7a:82:5f:fc:da:84:a2:7d:4a:1c:3b:4c:c0:d8:45: a9:c5:32:8a:4c:23:f8:4d:5f:7b:1e:d2:b0:fa:e3: 73:e3:ab:e7:04:d1:a7:b5:bf:d7:23:a5:4b:be:fd: e0:29:b4:6a:ab:6b:42:a2:07:8f:c1:31:f1:48:a4: 89:f3:63:29:5c:d2:79:12:5d:99:e4:4d:95:f2:5c: fc:e9:2e:76:ec:a8:42:69:9f:a5:e9:8c:c4:da:77: 3b:27:f8:3a:bd:d6:a6:55:6f:d5:70:7e:d8:98:15: b8:4a:0f:6b:35:38:5f:fc:9c:ea:5e:9d:5b:63:ab: 4a:32:79:2e:8f:f2:1a:c2:64:e5:71:72:6f:be:b2: fd:e5:ec:1f:34:1c:06:26:13:3a:ac:08:8f:a1:8b: 33:60:3f:28:a7:34:6a:2e:eb:38:79:4f:7d:37:51: 69:7f:a8:70:d7:0b:cf:dd:29:df:f8:b0:39:f5:4f: ef:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:93:AE:BD:C2:73:D4:5C:CB:CC:79:B1:D4:FC:56:98:E8:A4:A3:D4 X509v3 Authority Key Identifier: keyid:D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e9:74:6d:c1:9c:c6:7f:b0:54:59:d7:2f:5e:cd:c2:71:e8: b7:bd:3c:03:35:bd:58:91:dd:53:eb:b0:b0:28:2a:5b:a7:61: 33:92:d1:8a:bc:a8:50:c6:25:52:6f:b5:53:5c:58:39:7d:7e: 40:69:4c:9c:c4:8a:46:90:e0:fe:2e:46:d7:f8:9e:61:e2:56: 2a:1b:34:c7:7c:15:e8:35:70:57:40:43:99:ff:02:9e:0b:a0: 03:58:6b:5f:4c:33:27:f2:35:57:b4:d2:e4:42:73:ce:d5:f6: e8:cc:8b:26:af:74:2b:62:e0:d0:2e:a5:65:41:d4:b3:65:3c: 69:b7:6b:a0:b4:ea:90:0b:f1:da:01:92:1f:b7:97:91:93:ab: fe:4c:d1:e1:99:df:1c:8d:51:39:51:0e:de:db:0c:55:17:3b: fa:9c:b3:1e:30:66:07:09:18:ec:ac:77:91:28:df:27:97:96: 4f:9c:2b:c1:22:80:c3:a9:d7:d9:2c:0c:60:f7:43:2f:bc:bc: a3:bb:63:f2:48:48:be:0c:90:37:1c:34:4b:60:ae:bd:43:26: 0e:c4:a5:97:19:a0:94:8c:ea:9a:4f:73:82:4d:41:cd:b6:2e: 7f:2b:c7:e0:6e:7f:73:28:97:0d:45:34:33:e4:1b:cd:f1:5a: b6:40:d5:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEo9NwSe3S9ITpBQDtYiozTsw9eEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZD OUJEOENCRjAeFw0yNjA2MDIwOTUyMjVaFw0yNjA2MDMxMDIxMjVaMDMxMTAvBgNV BAMTKDg0OTNBRUJEQzI3M0Q0NUNDQkNDNzlCMUQ0RkM1Njk4RThBNEEzRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN0L5NZ7vUhWGqeHm+aFNlgZLU PiDwvtnV1k2mRk+kgJMmk1oB+FQxVgIC3FJdC0lLlIdmmihM1m7U8CJlCgVKYzZd Iobpopy/tHqCX/zahKJ9Shw7TMDYRanFMopMI/hNX3se0rD643Pjq+cE0ae1v9cj pUu+/eAptGqra0KiB4/BMfFIpInzYylc0nkSXZnkTZXyXPzpLnbsqEJpn6XpjMTa dzsn+Dq91qZVb9VwftiYFbhKD2s1OF/8nOpenVtjq0oyeS6P8hrCZOVxcm++sv3l 7B80HAYmEzqsCI+hizNgPyinNGou6zh5T303UWl/qHDXC8/dKd/4sDn1T++7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhJOuvcJz1FzLzHmx1PxWmOiko9QwHwYDVR0j BBgwFoAU1g+9KxtRUcP0BzSuSpUnf8m9jL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVmNWVmMTgtNmZmYS00ZDY5LThjMGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIx QjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZDOUJEOENCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENjBGQkQyQjFCNTE1MUMzRjQwNzM0QUU0QTk1Mjc3RkM5QkQ4 Q0JGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVmNWVmMTgtNmZmYS00ZDY5LThj MGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3 N0ZDOUJEOENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7pdG3BnMZ/sFRZ1y9ezcJx6Le9PAM1vViR 3VPrsLAoKlunYTOS0Yq8qFDGJVJvtVNcWDl9fkBpTJzEikaQ4P4uRtf4nmHiViob NMd8Feg1cFdAQ5n/Ap4LoANYa19MMyfyNVe00uRCc87V9ujMiyavdCti4NAupWVB 1LNlPGm3a6C06pAL8doBkh+3l5GTq/5M0eGZ3xyNUTlRDt7bDFUXO/qcsx4wZgcJ GOysd5Eo3yeXlk+cK8EigMOp19ksDGD3Qy+8vKO7Y/JISL4MkDccNEtgrr1DJg7E pZcZoJSM6ppPc4JNQc22Ln8rx+Buf3Molw1FNDPkG83xWrZA1eg= -----END CERTIFICATE-----Generated at Wed Jun 3 03:42:37 2026 by rpki-client