$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft File: 814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft (raw, json) Hash identifier: gOHICzNanayHF+nFfewQy1YFg8mD5DQaeVqwYKqgQWY= Subject key identifier: 05:77:AA:2D:57:A8:0B:1A:45:A2:26:B8:1D:96:3A:1B:4E:9B:9D:D7 Authority key identifier: 81:4D:7C:A8:F5:A8:62:88:56:D4:3D:1E:20:1A:31:49:2D:12:C1:C3 Certificate issuer: /CN=814D7CA8F5A8628856D43D1E201A31492D12C1C3 Certificate serial: 6FA7D5507DCD1AD3B255E3F448330ED148D635EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 14:37:54 +0000 Manifest this update: Tue 02 Jun 2026 14:32:54 +0000 Manifest next update: Wed 03 Jun 2026 18:26:54 +0000 Files and hashes: 1: 814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl (hash: siHSeaWlYgKXg8fasS2Fzc3vzwRDb8Y8JA1KHop7sIs=) 2: 3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa (hash: 2pXek6gWnmZ3X1sQ40jRh2qfPg290PWebfx41xborSQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a7:d5:50:7d:cd:1a:d3:b2:55:e3:f4:48:33:0e:d1:48:d6:35:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=814D7CA8F5A8628856D43D1E201A31492D12C1C3 Validity Not Before: Jun 2 14:32:54 2026 GMT Not After : Jun 3 18:26:54 2026 GMT Subject: CN=0577AA2D57A80B1A45A226B81D963A1B4E9B9DD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:65:c7:86:a4:3b:45:0b:3a:3b:8f:e8:08:bd: 17:f6:5a:b4:8b:c2:c5:77:7c:84:76:1e:5f:0c:79: 11:0c:c4:80:ad:be:59:43:2e:4b:d6:6e:25:4d:95: cd:48:17:6b:d9:ce:7d:58:8c:06:e1:d6:9c:d9:76: 54:70:5b:ff:95:cd:f5:4a:01:29:91:50:88:50:00: 05:b4:73:f2:07:e4:46:b1:69:29:0f:04:86:3f:9f: 9f:06:a4:a4:7a:bc:2a:0d:47:a9:9c:a5:82:45:fd: ba:55:57:dc:40:ab:06:59:91:41:b3:aa:f9:da:00: 22:73:91:95:7f:eb:63:26:b1:81:5d:3e:2b:c6:9c: f2:c0:ee:87:4c:16:8d:ae:f8:71:0a:85:96:9a:bd: 02:af:91:97:46:bf:93:7b:47:ac:06:e1:98:fd:20: 14:5d:77:21:23:e7:2a:71:04:c7:5e:2a:81:f1:e3: 3b:0b:d2:a1:3f:4b:05:1e:98:13:7a:f8:d1:db:7b: de:6d:db:ab:4d:a8:cc:1e:6e:5f:67:27:59:cd:8d: 47:5a:0b:36:e1:70:d1:c3:1b:43:81:a6:04:2a:46: 11:99:e5:ea:c9:3c:89:bd:33:cc:65:4f:68:2e:04: 2c:2a:53:38:9c:73:ec:7b:80:24:72:3a:b3:3d:72: 2e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:77:AA:2D:57:A8:0B:1A:45:A2:26:B8:1D:96:3A:1B:4E:9B:9D:D7 X509v3 Authority Key Identifier: keyid:81:4D:7C:A8:F5:A8:62:88:56:D4:3D:1E:20:1A:31:49:2D:12:C1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:38:4e:b8:4e:bf:ae:41:3d:9a:cb:d6:5c:0f:7f:19:99:4d: 91:50:ee:e9:d9:e8:6a:9f:77:81:f9:1a:c1:cf:7c:e7:f7:bc: 6b:3f:76:c0:5b:a6:8e:6d:5c:36:f0:90:8b:b0:c2:fb:f7:01: 6f:38:15:97:37:66:70:b7:d0:9a:b6:46:58:82:c7:71:3c:7e: ee:ad:c2:04:42:a4:f0:07:9e:89:0a:f8:67:44:cc:e7:49:55: 71:c5:30:d2:b9:97:ef:04:c4:36:9d:83:15:06:82:2f:a2:3a: e3:ab:98:16:85:1b:ee:5a:1f:b6:c6:fc:73:06:6d:9d:19:bb: 27:72:3c:dc:28:1f:d9:1e:2c:e6:44:dd:29:d0:51:cc:91:99: 8b:24:cb:14:16:c5:2b:75:29:32:1b:1a:cc:7e:a4:0b:9b:c4: 15:78:36:81:68:a7:d5:aa:c6:c8:fc:91:5a:4d:76:93:8f:48: 28:b7:f6:df:d8:12:15:9b:57:c6:22:d8:75:d1:8d:d4:7d:a0: b1:ae:0b:98:39:da:cb:99:bc:77:29:58:7a:c0:45:49:15:a1: d7:af:f0:f6:fa:b5:2f:8f:c1:d4:d9:5d:4d:22:12:86:65:26: 12:c9:e9:c5:27:60:6f:f4:be:83:c3:7c:41:57:81:a6:f9:44: 92:7d:42:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb6fVUH3NGtOyVeP0SDMO0UjWNe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE0RDdDQThGNUE4NjI4ODU2RDQzRDFFMjAxQTMxNDky RDEyQzFDMzAeFw0yNjA2MDIxNDMyNTRaFw0yNjA2MDMxODI2NTRaMDMxMTAvBgNV BAMTKDA1NzdBQTJENTdBODBCMUE0NUEyMjZCODFEOTYzQTFCNEU5QjlERDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbZceGpDtFCzo7j+gIvRf2WrSL wsV3fIR2Hl8MeREMxICtvllDLkvWbiVNlc1IF2vZzn1YjAbh1pzZdlRwW/+VzfVK ASmRUIhQAAW0c/IH5EaxaSkPBIY/n58GpKR6vCoNR6mcpYJF/bpVV9xAqwZZkUGz qvnaACJzkZV/62MmsYFdPivGnPLA7odMFo2u+HEKhZaavQKvkZdGv5N7R6wG4Zj9 IBRddyEj5ypxBMdeKoHx4zsL0qE/SwUemBN6+NHbe95t26tNqMwebl9nJ1nNjUda CzbhcNHDG0OBpgQqRhGZ5erJPIm9M8xlT2guBCwqUzicc+x7gCRyOrM9ci6NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBXeqLVeoCxpFoia4HZY6G06bndcwHwYDVR0j BBgwFoAUgU18qPWoYohW1D0eIBoxSS0SwcMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY1ZGQwYWEtZmE3YS00ZGE0LWExYzctMWRiYzg4YjJjMTY5LzAvODE0RDdDQThG NUE4NjI4ODU2RDQzRDFFMjAxQTMxNDkyRDEyQzFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTREN0NBOEY1QTg2Mjg4NTZENDNEMUUyMDFBMzE0OTJEMTJD MUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY1ZGQwYWEtZmE3YS00ZGE0LWEx YzctMWRiYzg4YjJjMTY5LzAvODE0RDdDQThGNUE4NjI4ODU2RDQzRDFFMjAxQTMx NDkyRDEyQzFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOQ4TrhOv65BPZrL1lwPfxmZTZFQ7unZ6Gqf d4H5GsHPfOf3vGs/dsBbpo5tXDbwkIuwwvv3AW84FZc3ZnC30Jq2RliCx3E8fu6t wgRCpPAHnokK+GdEzOdJVXHFMNK5l+8ExDadgxUGgi+iOuOrmBaFG+5aH7bG/HMG bZ0ZuydyPNwoH9keLOZE3SnQUcyRmYskyxQWxSt1KTIbGsx+pAubxBV4NoFop9Wq xsj8kVpNdpOPSCi39t/YEhWbV8Yi2HXRjdR9oLGuC5g52suZvHcpWHrARUkVodev 8Pb6tS+PwdTZXU0iEoZlJhLJ6cUnYG/0voPDfEFXgab5RJJ9Qqk= -----END CERTIFICATE-----Generated at Wed Jun 3 04:22:37 2026 by rpki-client