$ rpki-client -vvf rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft File: 1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft (raw, json) Hash identifier: Wl8THzZB7q9ibZHs7S46uyGlvRC+TtH2q04CByoIoss= Subject key identifier: 36:A1:3C:86:C1:58:15:F3:44:A5:9A:66:2C:19:36:41:59:B3:05:4A Authority key identifier: 14:20:48:4B:D9:8B:F8:3C:1C:6C:5F:F6:2F:97:72:3C:B3:69:F3:CD Certificate issuer: /CN=1420484BD98BF83C1C6C5FF62F97723CB369F3CD Certificate serial: 151F625CDBA2FE2EA8D4279F45AF2C6DE250289D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 22:53:41 +0000 Manifest this update: Tue 02 Jun 2026 22:48:41 +0000 Manifest next update: Thu 04 Jun 2026 01:50:41 +0000 Files and hashes: 1: 1420484BD98BF83C1C6C5FF62F97723CB369F3CD.crl (hash: oIurf3CrOpXZGnfaJG+WD0xdAy8gYSHaDDSfihcry5s=) 2: 3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa (hash: 6AZ8JAgtI94iBZvhn289sOw/311Gf5HWF9lx3CgDg/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.crl rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 01:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:1f:62:5c:db:a2:fe:2e:a8:d4:27:9f:45:af:2c:6d:e2:50:28:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1420484BD98BF83C1C6C5FF62F97723CB369F3CD Validity Not Before: Jun 2 22:48:41 2026 GMT Not After : Jun 4 01:50:41 2026 GMT Subject: CN=36A13C86C15815F344A59A662C19364159B3054A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7c:85:b8:b8:29:a5:ba:c0:34:6f:55:ac:75: cd:c5:ae:31:f0:3c:1b:12:01:40:eb:46:92:17:e4: f3:da:dd:20:f6:0d:96:f2:e4:f7:ef:71:e6:9c:50: d1:bc:a1:00:ff:61:7d:98:72:56:b5:41:18:01:a3: ad:e2:d9:09:19:19:9e:fe:44:3a:7c:f1:2d:0d:11: 7d:21:f1:a4:4b:49:5f:6d:2d:81:02:5e:3c:96:bf: 68:7f:77:57:5f:0d:9d:23:2c:ed:eb:2a:f5:c4:c4: ff:59:87:5e:00:23:c6:7c:da:26:2a:1f:e6:6b:10: ce:32:59:0c:f4:97:2d:80:37:43:78:c5:ed:1a:f4: 3f:17:0c:fb:0a:fe:d3:53:90:12:12:f2:15:5b:94: fe:f9:b4:8e:7c:eb:95:c9:0d:58:e6:a4:94:69:d8: b4:4d:9d:e1:11:d9:69:a9:0e:03:1c:8e:26:c8:ea: d5:d2:20:97:c3:b0:b0:06:64:38:dc:6f:04:5a:af: 64:ab:64:4a:41:bd:5f:e9:3b:2d:74:66:b9:9c:8d: d0:e8:db:ed:a0:a0:d7:7a:77:9c:3c:11:b6:e2:8f: e6:eb:2e:29:d8:c3:d9:e6:39:1a:fc:e4:cf:9e:13: bc:62:f4:9d:dc:0f:34:f0:b9:fc:1c:8f:27:57:8f: d8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A1:3C:86:C1:58:15:F3:44:A5:9A:66:2C:19:36:41:59:B3:05:4A X509v3 Authority Key Identifier: keyid:14:20:48:4B:D9:8B:F8:3C:1C:6C:5F:F6:2F:97:72:3C:B3:69:F3:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:4f:80:63:c7:a3:e8:ef:58:d2:3c:49:8c:bb:10:72:b7:fb: d4:46:64:63:5f:24:4d:4d:ae:80:fa:6d:f2:af:cd:36:97:90: ce:71:02:17:20:21:4a:4b:0c:f5:84:a5:8f:a3:7b:9d:d6:fc: 18:cd:9e:dc:e1:0b:a8:51:7e:08:e0:4e:28:7f:1c:96:f0:0a: db:0a:cb:d6:51:19:04:f5:61:6c:1e:e0:7a:d4:cf:2e:a4:30: 83:1d:e5:ce:e5:d8:76:cb:4b:45:9e:7b:6b:a2:90:e4:87:64: 28:5a:f9:bb:2d:1d:d0:9a:ee:cc:02:cd:28:fa:3c:93:4c:86: 0c:14:03:73:f0:95:9a:ac:4f:c1:1e:1b:61:a8:cc:ac:aa:8e: 61:cd:51:f0:6c:e5:30:66:eb:a0:e0:ae:9e:64:a8:42:a6:81: 9c:60:20:dc:68:36:4d:74:1e:6b:dc:d8:82:93:19:a6:0f:11: dc:85:dd:27:de:bd:c9:b6:33:5e:bb:ea:fc:f5:b8:24:c7:96: 75:e4:ef:5b:94:8f:af:91:08:24:c3:e8:71:d3:f6:d2:3e:25: 73:1d:4c:51:da:c1:30:fe:ba:08:c6:24:30:80:23:df:8b:ad: a1:c1:69:57:6b:bd:89:e1:59:29:33:7e:7f:16:2c:ea:7b:56: 49:0e:2e:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFR9iXNui/i6o1CefRa8sbeJQKJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQyMDQ4NEJEOThCRjgzQzFDNkM1RkY2MkY5NzcyM0NC MzY5RjNDRDAeFw0yNjA2MDIyMjQ4NDFaFw0yNjA2MDQwMTUwNDFaMDMxMTAvBgNV BAMTKDM2QTEzQzg2QzE1ODE1RjM0NEE1OUE2NjJDMTkzNjQxNTlCMzA1NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNfIW4uCmlusA0b1Wsdc3FrjHw PBsSAUDrRpIX5PPa3SD2DZby5PfvceacUNG8oQD/YX2Ycla1QRgBo63i2QkZGZ7+ RDp88S0NEX0h8aRLSV9tLYECXjyWv2h/d1dfDZ0jLO3rKvXExP9Zh14AI8Z82iYq H+ZrEM4yWQz0ly2AN0N4xe0a9D8XDPsK/tNTkBIS8hVblP75tI5865XJDVjmpJRp 2LRNneER2WmpDgMcjibI6tXSIJfDsLAGZDjcbwRar2SrZEpBvV/pOy10ZrmcjdDo 2+2goNd6d5w8Ebbij+brLinYw9nmORr85M+eE7xi9J3cDzTwufwcjydXj9hbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNqE8hsFYFfNEpZpmLBk2QVmzBUowHwYDVR0j BBgwFoAUFCBIS9mL+DwcbF/2L5dyPLNp880wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJlMTVlNmYtMDY4OS00NzEzLWIwZmMtOTQzMDYyYWM1OTJlLzAvMTQyMDQ4NEJE OThCRjgzQzFDNkM1RkY2MkY5NzcyM0NCMzY5RjNDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDIwNDg0QkQ5OEJGODNDMUM2QzVGRjYyRjk3NzIzQ0IzNjlG M0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJlMTVlNmYtMDY4OS00NzEzLWIw ZmMtOTQzMDYyYWM1OTJlLzAvMTQyMDQ4NEJEOThCRjgzQzFDNkM1RkY2MkY5Nzcy M0NCMzY5RjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJPgGPHo+jvWNI8SYy7EHK3+9RGZGNfJE1N roD6bfKvzTaXkM5xAhcgIUpLDPWEpY+je53W/BjNntzhC6hRfgjgTih/HJbwCtsK y9ZRGQT1YWwe4HrUzy6kMIMd5c7l2HbLS0Wee2uikOSHZCha+bstHdCa7swCzSj6 PJNMhgwUA3PwlZqsT8EeG2GozKyqjmHNUfBs5TBm66Dgrp5kqEKmgZxgINxoNk10 Hmvc2IKTGaYPEdyF3Sfevcm2M1676vz1uCTHlnXk71uUj6+RCCTD6HHT9tI+JXMd TFHawTD+ugjGJDCAI9+LraHBaVdrvYnhWSkzfn8WLOp7VkkOLu8= -----END CERTIFICATE-----Generated at Wed Jun 3 04:24:04 2026 by rpki-client