$ rpki-client -vvf rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft File: C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft (raw, json) Hash identifier: jrZtSM+GATFLV8vtafqIKwrpEy5Kj6Sxtt1WdqDrrCU= Subject key identifier: 7D:73:B5:86:7F:37:26:18:8D:89:8F:5E:8E:73:2D:FB:06:B8:31:FA Authority key identifier: C4:44:FB:9E:A5:E4:CA:4D:A5:FB:85:BA:13:1C:62:C0:12:40:2C:80 Certificate issuer: /CN=C444FB9EA5E4CA4DA5FB85BA131C62C012402C80 Certificate serial: 6F8A8439AA3E2663FFB5DD92085F54E27CF56F1D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:11:23 +0000 Manifest this update: Tue 02 Jun 2026 09:06:23 +0000 Manifest next update: Wed 03 Jun 2026 11:48:23 +0000 Files and hashes: 1: C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl (hash: eXXtRFUpkOlxAVcLC6SNAq7Xgi22rFMokSxtbk3J5nA=) 2: 33362e35302e3135342e302f32332d3234203d3e20313532303738.roa (hash: 8bdm59nV7JGD6nAo69wqK5zS2ZyFtuzqAXaUdVJTTG8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:8a:84:39:aa:3e:26:63:ff:b5:dd:92:08:5f:54:e2:7c:f5:6f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C444FB9EA5E4CA4DA5FB85BA131C62C012402C80 Validity Not Before: Jun 2 09:06:23 2026 GMT Not After : Jun 3 11:48:23 2026 GMT Subject: CN=7D73B5867F3726188D898F5E8E732DFB06B831FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e0:fa:bf:c6:a1:0f:6a:fa:e6:f2:4f:3e:01: af:af:36:51:2d:8f:b9:cf:ef:96:31:f3:15:1c:79: 05:bb:8d:4f:ee:f6:79:81:5a:c5:48:8c:b4:e3:43: 2e:28:94:a4:e5:82:78:c3:8d:e7:7b:f3:f6:33:70: ab:05:8a:b2:76:c3:2a:92:88:31:bb:cb:30:d0:12: cd:f9:75:eb:00:d8:bd:ee:ef:cc:19:00:e8:2f:c5: b5:c0:99:bd:80:88:dd:63:e6:0f:a6:17:14:2d:34: 10:91:b1:46:a5:92:e0:48:3b:ec:41:12:c4:87:1b: b1:31:30:bc:3e:11:a0:6a:79:4a:44:50:1d:d7:b5: 37:37:73:76:d1:ce:76:a2:88:56:0e:91:fe:2a:3f: 40:8a:e0:33:fe:97:42:cf:91:ea:55:1a:09:1b:cc: a0:f6:26:ff:e7:1f:a7:c3:d2:ef:1d:0f:03:27:9b: f8:c9:72:db:61:38:97:9e:31:7b:de:18:e5:77:33: 89:70:b3:1a:f8:6b:5a:42:7c:bc:8a:c3:5b:6a:46: 60:ac:89:dc:7d:46:c3:6b:b7:ec:f9:4a:21:6e:ee: 68:9f:16:25:9d:d9:ca:d9:fb:b7:5f:18:50:45:40: 7c:d8:3d:3f:c3:81:d5:18:fa:51:aa:ce:a8:56:71: 9f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:73:B5:86:7F:37:26:18:8D:89:8F:5E:8E:73:2D:FB:06:B8:31:FA X509v3 Authority Key Identifier: keyid:C4:44:FB:9E:A5:E4:CA:4D:A5:FB:85:BA:13:1C:62:C0:12:40:2C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5d:62:df:13:61:0e:71:f3:9a:14:eb:55:c3:46:0b:5f:29: 03:a8:99:c1:b2:83:8e:ce:b3:f6:1a:c8:15:67:7e:e5:75:85: 04:94:65:6f:7e:cc:f4:d8:98:25:66:1f:12:b0:c3:7f:21:58: 1c:44:0c:5e:f4:5d:f9:2b:f1:90:ab:39:3e:d1:21:4e:f8:ba: 16:d0:36:6a:ca:48:77:65:74:0a:f2:2a:88:06:fd:ea:59:cc: 8a:84:a2:e8:9f:8b:bb:55:89:9c:ce:6b:b9:8b:25:1c:88:f7: e1:dd:f4:5a:9e:34:6f:ba:a9:56:80:df:13:1f:50:51:df:bb: 65:ec:f9:b0:96:d0:27:b0:9e:db:c1:f3:7a:d1:3e:c1:c8:a1: ad:80:d8:b6:c5:4e:53:b7:08:f4:15:c1:2a:38:fc:69:9a:aa: 90:d1:52:4a:45:1e:06:ae:8a:75:d9:c4:8f:af:35:6a:29:e1: 33:3e:f6:fa:89:78:f8:08:cd:f6:be:74:a2:1b:84:56:4b:7d: 6c:e8:20:58:11:99:bb:1d:da:31:aa:69:f9:28:28:3d:27:97: 13:85:53:74:8f:41:aa:00:e9:51:53:47:3e:35:69:cd:3d:4d: a2:7d:3f:e3:f1:bf:be:f2:0b:f0:94:4b:94:32:ed:52:ed:cc: 17:42:8c:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb4qEOao+JmP/td2SCF9U4nz1bx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ0NEZCOUVBNUU0Q0E0REE1RkI4NUJBMTMxQzYyQzAx MjQwMkM4MDAeFw0yNjA2MDIwOTA2MjNaFw0yNjA2MDMxMTQ4MjNaMDMxMTAvBgNV BAMTKDdENzNCNTg2N0YzNzI2MTg4RDg5OEY1RThFNzMyREZCMDZCODMxRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV4Pq/xqEPavrm8k8+Aa+vNlEt j7nP75Yx8xUceQW7jU/u9nmBWsVIjLTjQy4olKTlgnjDjed78/YzcKsFirJ2wyqS iDG7yzDQEs35desA2L3u78wZAOgvxbXAmb2AiN1j5g+mFxQtNBCRsUalkuBIO+xB EsSHG7ExMLw+EaBqeUpEUB3XtTc3c3bRznaiiFYOkf4qP0CK4DP+l0LPkepVGgkb zKD2Jv/nH6fD0u8dDwMnm/jJctthOJeeMXveGOV3M4lwsxr4a1pCfLyKw1tqRmCs idx9RsNrt+z5SiFu7mifFiWd2crZ+7dfGFBFQHzYPT/DgdUY+lGqzqhWcZ+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfXO1hn83JhiNiY9ejnMt+wa4MfowHwYDVR0j BBgwFoAUxET7nqXkyk2l+4W6ExxiwBJALIAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjcwMDI5MmYtMjg2OC00N2IzLWFjMjEtNjAwYTQ2N2E3MjM3LzAvQzQ0NEZCOUVB NUU0Q0E0REE1RkI4NUJBMTMxQzYyQzAxMjQwMkM4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNDQ0RkI5RUE1RTRDQTREQTVGQjg1QkExMzFDNjJDMDEyNDAy QzgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjcwMDI5MmYtMjg2OC00N2IzLWFj MjEtNjAwYTQ2N2E3MjM3LzAvQzQ0NEZCOUVBNUU0Q0E0REE1RkI4NUJBMTMxQzYy QzAxMjQwMkM4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1dYt8TYQ5x85oU61XDRgtfKQOomcGyg47O s/YayBVnfuV1hQSUZW9+zPTYmCVmHxKww38hWBxEDF70Xfkr8ZCrOT7RIU74uhbQ NmrKSHdldAryKogG/epZzIqEouifi7tViZzOa7mLJRyI9+Hd9FqeNG+6qVaA3xMf UFHfu2Xs+bCW0CewntvB83rRPsHIoa2A2LbFTlO3CPQVwSo4/GmaqpDRUkpFHgau inXZxI+vNWop4TM+9vqJePgIzfa+dKIbhFZLfWzoIFgRmbsd2jGqafkoKD0nlxOF U3SPQaoA6VFTRz41ac09TaJ9P+Pxv77yC/CUS5Qy7VLtzBdCjOA= -----END CERTIFICATE-----Generated at Wed Jun 3 04:16:09 2026 by rpki-client