$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft File: 548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft (raw, json) Hash identifier: zsB7IEbET/QoPl9fgPSWU7Uq5Ay3+SGh8AcJEuW2/GU= Subject key identifier: C4:2B:C3:3C:C2:11:B0:9C:6C:79:97:D2:52:B5:80:69:00:EE:86:9C Authority key identifier: 54:8D:1B:6B:6B:A9:A1:65:E7:7A:DE:EF:E2:84:24:87:04:2C:32:5E Certificate issuer: /CN=548D1B6B6BA9A165E77ADEEFE2842487042C325E Certificate serial: 39B290B87EB10DB61B421126EAD245EE4E257048 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft Manifest number: 2C Signing time: Tue 02 Jun 2026 16:24:49 +0000 Manifest this update: Tue 02 Jun 2026 16:19:49 +0000 Manifest next update: Wed 03 Jun 2026 19:58:49 +0000 Files and hashes: 1: 34352e3132332e3134312e302f32342d3234203d3e20313532303439.roa (hash: z7b5wYvP0ol8wMsB+eUBC4JsGZJCfnyyWM+aWZV2US0=) 2: 34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa (hash: WXJAvvrLyVsCEeqVhO/3ROtMMzsfMOa0TSLjg89eRJQ=) 3: 548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl (hash: dy4iDj9dAA3Be6uNP5pK0lS5wLFo/hL1+xOQYCpnkHg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 19:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:b2:90:b8:7e:b1:0d:b6:1b:42:11:26:ea:d2:45:ee:4e:25:70:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=548D1B6B6BA9A165E77ADEEFE2842487042C325E Validity Not Before: Jun 2 16:19:49 2026 GMT Not After : Jun 3 19:58:49 2026 GMT Subject: CN=C42BC33CC211B09C6C7997D252B5806900EE869C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f5:33:63:af:9c:49:bd:45:f3:38:b7:f2:b6: 2c:00:84:07:eb:bc:85:5f:ff:bd:d3:02:e4:5b:8a: f8:75:d9:45:fb:4c:7e:d5:18:55:49:37:30:1e:76: 21:4c:3c:62:5e:56:cc:ef:be:be:86:22:d1:88:a6: 79:87:19:4e:c5:d0:5c:28:0d:4a:0e:6e:47:e0:94: ca:c7:de:63:80:83:85:13:37:48:cd:79:f5:cd:a2: 31:b9:98:63:72:2d:b4:cc:17:22:5b:86:e4:dc:f9: 5e:28:74:97:73:0e:50:83:29:44:59:bd:22:d6:28: 86:e5:dc:73:b9:93:0c:5e:29:aa:d0:93:ba:7b:aa: 8e:ee:6d:c1:81:49:95:e5:c8:99:34:ee:84:2a:a5: 73:61:f2:74:fe:90:01:c7:1f:74:d2:b9:55:10:be: 58:9c:61:83:d5:d6:4a:5b:89:96:7d:a4:c5:b8:60: 0d:9b:15:10:ee:54:8e:56:36:4e:07:9f:b3:e3:e5: b6:9c:ac:7d:ec:7f:44:ad:0b:75:99:62:d2:f9:09: 0d:88:4a:47:ff:3d:44:e5:bc:48:a9:83:48:51:46: d8:94:0e:a1:c3:59:f7:20:80:7f:f2:b0:3d:bc:8d: 60:d7:fe:59:7e:85:56:be:66:fc:bd:45:f7:66:6e: 75:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2B:C3:3C:C2:11:B0:9C:6C:79:97:D2:52:B5:80:69:00:EE:86:9C X509v3 Authority Key Identifier: keyid:54:8D:1B:6B:6B:A9:A1:65:E7:7A:DE:EF:E2:84:24:87:04:2C:32:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:4d:70:7c:ed:4b:9e:6b:35:45:c0:e5:a1:b4:80:40:44:34: c5:da:10:0c:f1:96:e4:df:cb:ec:a1:7a:c9:67:65:74:8f:76: 4c:71:77:02:a4:dc:e0:7d:80:5c:62:2f:6f:4b:ec:7b:d2:61: d9:82:2e:79:bb:97:16:c1:eb:43:1e:21:a7:90:d8:ea:b3:b8: 0a:69:6b:d4:3b:c5:ea:99:49:5f:d0:5c:70:bd:71:9f:42:ba: b4:18:bb:fa:1f:26:4f:ce:a3:0d:ed:75:dd:78:67:76:7f:10: 23:21:b6:60:16:d0:2b:be:1b:54:14:d2:1a:6b:5a:6e:73:98: bf:73:01:ac:62:42:27:87:8f:74:77:4d:a7:5f:39:ea:e5:9b: 5e:62:74:1a:66:5c:b1:10:94:e1:a9:94:0a:b1:6f:cf:39:7a: 5b:98:b1:5e:e0:eb:6a:7c:d1:ca:87:4f:6b:83:4c:5a:09:bb: 35:1e:c8:54:2b:31:ea:e4:f5:10:c6:56:93:43:d3:90:2f:48: af:60:2a:9d:80:31:7a:7c:d0:5a:82:51:7d:95:68:63:ff:3b: bf:ae:8c:ab:44:5c:4b:81:1c:1b:bf:c0:b1:77:fb:0b:0e:7e: ef:41:74:9f:6b:24:8c:12:d0:e5:27:12:0f:ab:43:3c:b3:6f: 55:e2:34:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUObKQuH6xDbYbQhEm6tJF7k4lcEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ4RDFCNkI2QkE5QTE2NUU3N0FERUVGRTI4NDI0ODcw NDJDMzI1RTAeFw0yNjA2MDIxNjE5NDlaFw0yNjA2MDMxOTU4NDlaMDMxMTAvBgNV BAMTKEM0MkJDMzNDQzIxMUIwOUM2Qzc5OTdEMjUyQjU4MDY5MDBFRTg2OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW9TNjr5xJvUXzOLfytiwAhAfr vIVf/73TAuRbivh12UX7TH7VGFVJNzAediFMPGJeVszvvr6GItGIpnmHGU7F0Fwo DUoObkfglMrH3mOAg4UTN0jNefXNojG5mGNyLbTMFyJbhuTc+V4odJdzDlCDKURZ vSLWKIbl3HO5kwxeKarQk7p7qo7ubcGBSZXlyJk07oQqpXNh8nT+kAHHH3TSuVUQ vlicYYPV1kpbiZZ9pMW4YA2bFRDuVI5WNk4Hn7Pj5bacrH3sf0StC3WZYtL5CQ2I Skf/PUTlvEipg0hRRtiUDqHDWfcggH/ysD28jWDX/ll+hVa+Zvy9RfdmbnVLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxCvDPMIRsJxseZfSUrWAaQDuhpwwHwYDVR0j BBgwFoAUVI0ba2upoWXnet7v4oQkhwQsMl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY3YTdkOTgtMjMzOC00ZDc3LTk2NjItZjMzZWE2OGM4NmYyLzAvNTQ4RDFCNkI2 QkE5QTE2NUU3N0FERUVGRTI4NDI0ODcwNDJDMzI1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDhEMUI2QjZCQTlBMTY1RTc3QURFRUZFMjg0MjQ4NzA0MkMz MjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY3YTdkOTgtMjMzOC00ZDc3LTk2 NjItZjMzZWE2OGM4NmYyLzAvNTQ4RDFCNkI2QkE5QTE2NUU3N0FERUVGRTI4NDI0 ODcwNDJDMzI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpNcHztS55rNUXA5aG0gEBENMXaEAzxluTf y+yheslnZXSPdkxxdwKk3OB9gFxiL29L7HvSYdmCLnm7lxbB60MeIaeQ2OqzuApp a9Q7xeqZSV/QXHC9cZ9CurQYu/ofJk/Oow3tdd14Z3Z/ECMhtmAW0Cu+G1QU0hpr Wm5zmL9zAaxiQieHj3R3TadfOerlm15idBpmXLEQlOGplAqxb885eluYsV7g62p8 0cqHT2uDTFoJuzUeyFQrMerk9RDGVpND05AvSK9gKp2AMXp80FqCUX2VaGP/O7+u jKtEXEuBHBu/wLF3+wsOfu9BdJ9rJIwS0OUnEg+rQzyzb1XiNII= -----END CERTIFICATE-----Generated at Wed Jun 3 04:37:53 2026 by rpki-client