$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft File: AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft (raw, json) Hash identifier: RyOKD58/oKGHKl3//sYHXsYk0amhozrJQc2vvOTrLDg= Subject key identifier: EC:8E:E7:93:72:C5:5D:61:56:CC:84:58:1A:07:A8:0C:0E:2A:F9:14 Authority key identifier: AD:83:23:0D:E9:E9:D5:0A:9C:DF:6A:33:2E:03:DC:58:87:4E:90:E1 Certificate issuer: /CN=AD83230DE9E9D50A9CDF6A332E03DC58874E90E1 Certificate serial: 2259A518EFFBC0EFDAE27C4DBEC7F41983117754 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:31:03 +0000 Manifest this update: Tue 02 Jun 2026 17:26:03 +0000 Manifest next update: Wed 03 Jun 2026 21:12:03 +0000 Files and hashes: 1: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: gyHsfmW6KN8Q0altXeM0ynZaoGDZjnrHl/TgsA39vQ8=) 2: AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl (hash: RafvwWg/ZkVOvTQ4sakYIG+f+Pov7K7LfcR8twRrTY8=) 3: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: Jz250gHnK9wmceEyoEa7ZzH19MTY0j2TTvLScjld8Z4=) 4: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: ffbCXyninBGio9BOygv4p476TIGMpl53kSauEjC/roA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:59:a5:18:ef:fb:c0:ef:da:e2:7c:4d:be:c7:f4:19:83:11:77:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD83230DE9E9D50A9CDF6A332E03DC58874E90E1 Validity Not Before: Jun 2 17:26:03 2026 GMT Not After : Jun 3 21:12:03 2026 GMT Subject: CN=EC8EE79372C55D6156CC84581A07A80C0E2AF914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:19:45:03:f0:4a:1d:d4:89:20:08:5c:04:2e: cd:6b:54:52:ad:7d:2b:56:b8:bc:a6:54:c8:ec:54: 04:63:6c:bc:7c:9d:57:05:98:6d:36:fb:c9:35:90: 52:4d:3a:37:55:a2:60:61:97:31:c5:c6:64:07:a3: 0a:78:48:25:5e:87:36:69:c3:00:85:7a:5d:3c:0d: 24:85:3e:89:79:c6:49:23:5e:10:37:d3:06:13:d6: 73:f1:6e:54:6c:2b:5c:64:90:e7:15:f0:46:ec:ef: 79:3f:63:a6:ed:1e:01:b9:56:00:02:fa:2e:76:8f: 04:bb:f4:af:0e:3a:47:91:5a:05:1e:f7:a3:4f:21: 90:d0:2c:08:dc:5e:ff:67:fa:3d:2d:1c:f1:14:cc: 7f:23:c2:54:8b:20:12:19:ca:1e:f5:a6:61:f5:43: d8:02:b2:a7:e7:d0:a4:5e:c4:81:3a:e2:93:f3:37: 70:b4:cb:b7:79:c8:23:fe:da:af:c9:8c:d1:24:01: 4a:be:fd:7c:70:0f:5c:f9:1e:93:04:b8:49:ba:55: 3e:f3:0f:e0:26:98:89:ba:8a:06:01:ae:d4:7b:ce: 10:13:3d:7a:76:75:9c:01:59:0f:56:52:b4:3d:85: 19:e8:b8:c6:0d:aa:08:aa:64:e6:74:34:3c:bd:34: 52:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8E:E7:93:72:C5:5D:61:56:CC:84:58:1A:07:A8:0C:0E:2A:F9:14 X509v3 Authority Key Identifier: keyid:AD:83:23:0D:E9:E9:D5:0A:9C:DF:6A:33:2E:03:DC:58:87:4E:90:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:21:04:08:84:11:70:47:69:39:28:c1:a3:bf:6b:e2:37:1f: e9:08:79:79:16:94:a5:89:81:80:70:e4:34:93:20:e5:2a:48: 94:bc:e2:d7:cd:01:c3:d4:43:29:ef:b3:b8:5d:9d:e9:45:48: 30:e4:1f:e5:62:b3:08:63:01:d8:ba:c9:2a:5f:d1:4f:27:62: 8c:51:13:38:7d:a2:d4:63:c8:6f:7c:04:74:ed:99:ba:64:42: 8f:13:85:98:5e:81:75:ca:b6:21:41:50:c7:a5:d7:e8:34:97: 96:6d:27:3c:5a:8e:4f:ed:b7:6a:5f:3f:c6:c0:02:ba:ca:a0: bb:36:9a:4d:1c:5e:bf:fd:b9:07:e5:a1:2b:e8:43:d4:65:06: ce:50:c5:e0:31:5e:75:26:1c:ee:09:a5:00:25:85:c5:f5:50: f0:a0:d8:da:e7:d1:76:ad:32:a9:2d:f3:85:82:35:33:05:80: d2:24:68:30:12:45:f8:1d:27:76:f1:44:96:4c:da:c0:3b:24: 64:0c:24:38:b8:e8:89:20:ac:1a:93:4d:63:83:b7:35:27:0b: dc:73:26:7f:33:eb:74:a0:4c:75:0c:41:d4:b3:42:8d:e3:93: bb:be:68:e3:00:20:70:17:f3:29:84:59:59:48:4b:bb:3a:ff: e5:57:00:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIlmlGO/7wO/a4nxNvsf0GYMRd1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ4MzIzMERFOUU5RDUwQTlDREY2QTMzMkUwM0RDNTg4 NzRFOTBFMTAeFw0yNjA2MDIxNzI2MDNaFw0yNjA2MDMyMTEyMDNaMDMxMTAvBgNV BAMTKEVDOEVFNzkzNzJDNTVENjE1NkNDODQ1ODFBMDdBODBDMEUyQUY5MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcGUUD8Eod1IkgCFwELs1rVFKt fStWuLymVMjsVARjbLx8nVcFmG02+8k1kFJNOjdVomBhlzHFxmQHowp4SCVehzZp wwCFel08DSSFPol5xkkjXhA30wYT1nPxblRsK1xkkOcV8Ebs73k/Y6btHgG5VgAC +i52jwS79K8OOkeRWgUe96NPIZDQLAjcXv9n+j0tHPEUzH8jwlSLIBIZyh71pmH1 Q9gCsqfn0KRexIE64pPzN3C0y7d5yCP+2q/JjNEkAUq+/XxwD1z5HpMEuEm6VT7z D+AmmIm6igYBrtR7zhATPXp2dZwBWQ9WUrQ9hRnouMYNqgiqZOZ0NDy9NFK7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7I7nk3LFXWFWzIRYGgeoDA4q+RQwHwYDVR0j BBgwFoAUrYMjDenp1Qqc32ozLgPcWIdOkOEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjkwMDNkNmMtOTVmMS00N2E0LTlkNWQtZjdiNDhjYWFhN2Y0LzAvQUQ4MzIzMERF OUU5RDUwQTlDREY2QTMzMkUwM0RDNTg4NzRFOTBFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDgzMjMwREU5RTlENTBBOUNERjZBMzMyRTAzREM1ODg3NEU5 MEUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjkwMDNkNmMtOTVmMS00N2E0LTlk NWQtZjdiNDhjYWFhN2Y0LzAvQUQ4MzIzMERFOUU5RDUwQTlDREY2QTMzMkUwM0RD NTg4NzRFOTBFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADohBAiEEXBHaTkowaO/a+I3H+kIeXkWlKWJ gYBw5DSTIOUqSJS84tfNAcPUQynvs7hdnelFSDDkH+ViswhjAdi6ySpf0U8nYoxR Ezh9otRjyG98BHTtmbpkQo8ThZhegXXKtiFBUMel1+g0l5ZtJzxajk/tt2pfP8bA ArrKoLs2mk0cXr/9uQfloSvoQ9RlBs5QxeAxXnUmHO4JpQAlhcX1UPCg2Nrn0Xat Mqkt84WCNTMFgNIkaDASRfgdJ3bxRJZM2sA7JGQMJDi46IkgrBqTTWODtzUnC9xz Jn8z63SgTHUMQdSzQo3jk7u+aOMAIHAX8ymEWVlIS7s6/+VXAN8= -----END CERTIFICATE-----Generated at Wed Jun 3 03:54:22 2026 by rpki-client