$ rpki-client -vvf rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft File: 221D17C6CE30682D7329C49D1F803292269A742A.mft (raw, json) Hash identifier: CBePT0jiqCEzAJrF0iUpbZdENHx0mtnLchiyW3pE8so= Subject key identifier: F8:92:B2:1D:F9:AB:8A:E5:17:93:20:AB:5E:37:4C:65:1B:BC:2A:07 Authority key identifier: 22:1D:17:C6:CE:30:68:2D:73:29:C4:9D:1F:80:32:92:26:9A:74:2A Certificate issuer: /CN=221D17C6CE30682D7329C49D1F803292269A742A Certificate serial: 3D775B3588E0C2AF470BE018F157BCA56AFF124F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 09:26:43 +0000 Manifest this update: Tue 02 Jun 2026 09:21:43 +0000 Manifest next update: Wed 03 Jun 2026 10:05:43 +0000 Files and hashes: 1: 221D17C6CE30682D7329C49D1F803292269A742A.crl (hash: 9GVtFCL7B07qAD/Qts2U4Bxf234Cc8vI9oPEANXqHeA=) 2: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: BTev4pTjb1pwUkqwaS552QJVxBH0Gw6mSTMUfpMFiQ0=) 3: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: Lt2+hrkcbaTE1hrTjRZ7aEwzbnRpAkFNEq82KpPU4LQ=) 4: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: uCL8hU03zGsiNeckLg3taG50LeWxCsa9pcNoxXuQ5KM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.crl rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:77:5b:35:88:e0:c2:af:47:0b:e0:18:f1:57:bc:a5:6a:ff:12:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=221D17C6CE30682D7329C49D1F803292269A742A Validity Not Before: Jun 2 09:21:43 2026 GMT Not After : Jun 3 10:05:43 2026 GMT Subject: CN=F892B21DF9AB8AE5179320AB5E374C651BBC2A07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:98:07:74:2e:45:51:ef:3e:8e:ff:60:fa: 23:1f:d2:14:e1:b0:23:6e:a7:45:ad:ed:6b:29:88: a7:0d:df:19:29:c7:35:50:21:8d:33:d6:49:13:18: dd:6f:78:81:fd:13:fe:fd:43:0b:3c:01:d8:58:e4: 2b:f8:d6:52:1f:a8:57:b5:51:80:39:61:3f:e1:41: a3:a8:f1:21:a8:03:dc:31:6b:2f:06:ef:e4:7e:e5: 93:33:81:1c:97:5d:ea:d3:2a:e6:72:a3:b7:52:2f: 41:1b:1e:ef:f1:2d:a6:e5:97:a5:f9:47:6c:11:d5: c1:fb:6f:c9:22:45:ae:07:fd:83:1b:7e:70:2d:06: 30:c8:35:a3:8d:02:50:39:fe:e3:6e:44:65:76:f0: 80:16:3d:f3:e4:2a:60:d7:0a:17:c5:48:bb:14:ba: f1:41:8a:11:c6:ea:22:71:71:8f:1a:5d:15:73:94: d5:6b:c2:ca:ae:c4:76:66:f3:3c:bd:72:a8:c6:a2: e3:2e:27:24:79:71:84:3c:d0:c7:23:db:a6:88:69: 9b:01:62:b6:7c:6e:d9:91:a4:27:90:27:45:49:3b: fe:96:86:4e:22:ad:e4:f6:ee:1c:bf:ad:51:2d:67: 66:58:73:3e:cb:c9:a9:3a:da:14:d3:f5:c2:b4:2d: de:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:92:B2:1D:F9:AB:8A:E5:17:93:20:AB:5E:37:4C:65:1B:BC:2A:07 X509v3 Authority Key Identifier: keyid:22:1D:17:C6:CE:30:68:2D:73:29:C4:9D:1F:80:32:92:26:9A:74:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:7f:3e:d2:c0:c0:08:43:10:6c:21:74:6a:05:bd:9c:4b:bc: 36:37:de:0a:e5:3d:c8:9c:da:be:65:d8:5e:20:43:15:8f:19: fa:cc:7d:45:60:9d:44:b0:56:e7:95:0c:26:6c:04:f9:e6:08: f8:6c:8a:94:ba:cb:51:16:3c:24:86:88:ea:1a:5a:9b:71:0c: 84:8c:ce:0e:70:8d:2f:60:63:fa:57:08:ed:e0:9d:19:46:1e: f2:44:af:c4:54:d5:bb:ad:76:5b:78:14:01:a3:00:a0:2c:3f: 3b:17:f8:d6:8e:fc:f9:72:d1:1d:35:78:7e:c5:73:17:a4:75: 8e:52:a8:71:41:e8:6e:55:75:83:7a:14:bf:71:2a:06:83:d1: 0e:a0:32:de:3c:86:22:c1:ca:3b:0a:d4:9e:01:74:b3:53:d3: 35:9a:26:37:75:93:bd:db:50:ae:1f:c0:b2:2d:2a:7f:4b:5e: 0e:e4:8e:ec:99:dc:b4:72:df:85:6f:48:4b:8c:79:1d:cf:e6: 9b:27:6e:4d:08:84:79:81:0e:fd:d9:fd:b2:9e:63:d6:1a:59: 2a:f9:f0:a0:b2:9e:d9:d4:35:1b:9c:8a:a0:0c:a2:19:db:42: 7f:ca:dd:9a:4d:62:93:db:cb:cc:cb:bc:84:e4:be:06:57:a8: 0a:0a:2d:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPXdbNYjgwq9HC+AY8Ve8pWr/Ek8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIxRDE3QzZDRTMwNjgyRDczMjlDNDlEMUY4MDMyOTIy NjlBNzQyQTAeFw0yNjA2MDIwOTIxNDNaFw0yNjA2MDMxMDA1NDNaMDMxMTAvBgNV BAMTKEY4OTJCMjFERjlBQjhBRTUxNzkzMjBBQjVFMzc0QzY1MUJCQzJBMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIaJgHdC5FUe8+jv9g+iMf0hTh sCNup0Wt7WspiKcN3xkpxzVQIY0z1kkTGN1veIH9E/79Qws8AdhY5Cv41lIfqFe1 UYA5YT/hQaOo8SGoA9wxay8G7+R+5ZMzgRyXXerTKuZyo7dSL0EbHu/xLabll6X5 R2wR1cH7b8kiRa4H/YMbfnAtBjDINaONAlA5/uNuRGV28IAWPfPkKmDXChfFSLsU uvFBihHG6iJxcY8aXRVzlNVrwsquxHZm8zy9cqjGouMuJyR5cYQ80Mcj26aIaZsB YrZ8btmRpCeQJ0VJO/6Whk4ireT27hy/rVEtZ2ZYcz7Lyak62hTT9cK0Ld6/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+JKyHfmriuUXkyCrXjdMZRu8KgcwHwYDVR0j BBgwFoAUIh0Xxs4waC1zKcSdH4AykiaadCowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJlMDQwMzgtYTFiNi00MzJjLTg1NGItY2M2ZThjZjMyZTA2LzAvMjIxRDE3QzZD RTMwNjgyRDczMjlDNDlEMUY4MDMyOTIyNjlBNzQyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjFEMTdDNkNFMzA2ODJENzMyOUM0OUQxRjgwMzI5MjI2OUE3 NDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJlMDQwMzgtYTFiNi00MzJjLTg1 NGItY2M2ZThjZjMyZTA2LzAvMjIxRDE3QzZDRTMwNjgyRDczMjlDNDlEMUY4MDMy OTIyNjlBNzQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJ/PtLAwAhDEGwhdGoFvZxLvDY33grlPcic 2r5l2F4gQxWPGfrMfUVgnUSwVueVDCZsBPnmCPhsipS6y1EWPCSGiOoaWptxDISM zg5wjS9gY/pXCO3gnRlGHvJEr8RU1butdlt4FAGjAKAsPzsX+NaO/Ply0R01eH7F cxekdY5SqHFB6G5VdYN6FL9xKgaD0Q6gMt48hiLByjsK1J4BdLNT0zWaJjd1k73b UK4fwLItKn9LXg7kjuyZ3LRy34VvSEuMeR3P5psnbk0IhHmBDv3Z/bKeY9YaWSr5 8KCyntnUNRuciqAMohnbQn/K3ZpNYpPby8zLvITkvgZXqAoKLdU= -----END CERTIFICATE-----Generated at Wed Jun 3 03:40:05 2026 by rpki-client