$ rpki-client -vvf rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft File: 4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft (raw, json) Hash identifier: grQPLlr0CkXXXbNXmUHs9rB4pl4RPmZQ9raBOOfiMNk= Subject key identifier: 43:DE:AB:93:99:13:57:A6:9F:18:81:22:08:E9:23:85:7F:CD:C1:3C Authority key identifier: 45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36 Certificate issuer: /CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36 Certificate serial: 2EE0B89D8AA82B27B14B40A1B64D5E6AECC1CE9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:31:03 +0000 Manifest this update: Tue 02 Jun 2026 17:26:03 +0000 Manifest next update: Wed 03 Jun 2026 19:34:03 +0000 Files and hashes: 1: 4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl (hash: cjBl9DL0SAhFivTXallWNaZM/EBu5mSrmjEyjKd2OVg=) 2: 3130332e36352e3231322e302f32322d3234203d3e20313335343439.roa (hash: P9vNVfY/gnSAC1gUwy4cPedcB+rYejwkV7mz34Jb55c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 19:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e0:b8:9d:8a:a8:2b:27:b1:4b:40:a1:b6:4d:5e:6a:ec:c1:ce:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36 Validity Not Before: Jun 2 17:26:03 2026 GMT Not After : Jun 3 19:34:03 2026 GMT Subject: CN=43DEAB93991357A69F18812208E923857FCDC13C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:33:bd:b8:9f:c7:f2:48:39:8c:27:94:86:7c: cb:08:e5:d6:e1:b6:a0:c7:31:19:b6:70:89:a7:0c: 9e:e3:a7:60:f3:f0:27:9b:6d:f7:8f:7c:af:98:7e: 35:4c:a5:ef:b3:18:36:cb:ae:23:bd:27:00:5d:e2: fc:c9:8c:a5:42:e6:72:de:df:d6:17:86:f0:54:76: c1:9f:db:bc:57:74:f4:12:9c:08:c1:25:72:fd:c7: d6:80:c7:60:c1:44:39:fb:b8:25:70:2f:f8:55:c7: 03:43:4f:bd:74:59:81:7d:88:e4:6f:32:15:36:5b: 9c:a8:2d:f4:73:fd:1e:42:55:b1:11:d1:40:3f:d4: bc:c5:2b:ca:b8:9a:e7:5c:50:62:03:9e:53:f5:76: df:df:3c:cf:95:29:b3:c2:c7:80:42:26:86:5d:66: 96:7f:f6:ee:e5:93:11:e2:91:2b:d5:08:5a:79:8f: 54:40:88:b6:0f:78:3c:42:9e:8a:45:7c:78:da:7e: 97:71:8f:17:4a:59:bd:1c:eb:d3:8f:07:a2:87:ef: 40:0a:0b:85:3d:dc:f0:35:54:c7:c1:b8:49:13:f9: 00:b8:fe:b0:71:fb:67:cc:27:cd:df:e9:0f:2a:97: df:74:ff:49:2d:ac:c9:dd:cb:bb:c2:3c:26:98:59: fa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DE:AB:93:99:13:57:A6:9F:18:81:22:08:E9:23:85:7F:CD:C1:3C X509v3 Authority Key Identifier: keyid:45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:22:d0:78:f2:f3:f7:3b:2e:9d:0c:bf:5c:eb:9b:eb:e2:7c: 2a:c3:c3:ad:af:48:1b:69:18:94:10:39:af:fe:8d:40:4e:18: f2:2f:e5:0a:3e:17:6c:64:2c:52:16:a7:e3:c1:09:14:08:e3: 3f:b3:c6:4f:72:30:26:c6:dc:08:b3:b3:50:31:7f:a4:8b:1a: a3:73:79:a6:f6:a4:a9:10:03:aa:56:48:2e:f2:cd:d2:99:cf: 3e:c7:c8:0f:05:35:45:eb:a9:28:54:a0:f7:41:5b:83:54:8f: 18:9a:aa:e9:28:9c:ee:43:c5:08:11:41:ac:5b:4b:0f:a1:a4: b1:81:40:93:63:dd:6c:90:32:32:04:d5:8a:27:78:d0:a9:ad: 5d:d2:b5:61:83:0f:ee:b0:81:57:02:70:eb:11:34:32:a2:7a: 6a:4e:78:21:2d:42:db:f2:96:b6:cd:0e:9b:38:6f:56:18:d9: 87:0e:cd:50:39:65:8c:c1:d6:f2:e4:a1:b2:71:21:b7:42:ba: 94:1a:47:65:44:93:38:95:11:ec:a8:6c:1e:79:73:c9:42:6c: 8e:9f:37:b3:e7:a6:dc:d8:07:18:e2:02:0f:08:92:a8:d2:e0: a3:0d:f4:ed:ab:cd:c2:b4:9a:3c:60:87:ba:aa:4a:83:60:28: 5a:17:af:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULuC4nYqoKyexS0Chtk1eauzBzp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzMkY4MDBBN0VCNUJDQjVEQjA1Njk5QzZEREFBN0Y5 NUZBRUMzNjAeFw0yNjA2MDIxNzI2MDNaFw0yNjA2MDMxOTM0MDNaMDMxMTAvBgNV BAMTKDQzREVBQjkzOTkxMzU3QTY5RjE4ODEyMjA4RTkyMzg1N0ZDREMxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBM724n8fySDmMJ5SGfMsI5dbh tqDHMRm2cImnDJ7jp2Dz8CebbfePfK+YfjVMpe+zGDbLriO9JwBd4vzJjKVC5nLe 39YXhvBUdsGf27xXdPQSnAjBJXL9x9aAx2DBRDn7uCVwL/hVxwNDT710WYF9iORv MhU2W5yoLfRz/R5CVbER0UA/1LzFK8q4mudcUGIDnlP1dt/fPM+VKbPCx4BCJoZd ZpZ/9u7lkxHikSvVCFp5j1RAiLYPeDxCnopFfHjafpdxjxdKWb0c69OPB6KH70AK C4U93PA1VMfBuEkT+QC4/rBx+2fMJ83f6Q8ql990/0ktrMndy7vCPCaYWfqbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ96rk5kTV6afGIEiCOkjhX/NwTwwHwYDVR0j BBgwFoAURTL4AKfrW8tdsFaZxt2qf5X67DYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg0MjNiOGEtZmUyMi00M2FkLTk1MDctMWE5OWFiYmE3ZDk0LzAvNDUzMkY4MDBB N0VCNUJDQjVEQjA1Njk5QzZEREFBN0Y5NUZBRUMzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NTMyRjgwMEE3RUI1QkNCNURCMDU2OTlDNkREQUE3Rjk1RkFF QzM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg0MjNiOGEtZmUyMi00M2FkLTk1 MDctMWE5OWFiYmE3ZDk0LzAvNDUzMkY4MDBBN0VCNUJDQjVEQjA1Njk5QzZEREFB N0Y5NUZBRUMzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMi0Hjy8/c7Lp0Mv1zrm+vifCrDw62vSBtp GJQQOa/+jUBOGPIv5Qo+F2xkLFIWp+PBCRQI4z+zxk9yMCbG3Aizs1Axf6SLGqNz eab2pKkQA6pWSC7yzdKZzz7HyA8FNUXrqShUoPdBW4NUjxiaqukonO5DxQgRQaxb Sw+hpLGBQJNj3WyQMjIE1YoneNCprV3StWGDD+6wgVcCcOsRNDKiempOeCEtQtvy lrbNDps4b1YY2YcOzVA5ZYzB1vLkobJxIbdCupQaR2VEkziVEeyobB55c8lCbI6f N7PnptzYBxjiAg8IkqjS4KMN9O2rzcK0mjxgh7qqSoNgKFoXr94= -----END CERTIFICATE-----Generated at Wed Jun 3 04:29:53 2026 by rpki-client