$ rpki-client -vvf rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft File: D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft (raw, json) Hash identifier: 5c2BHxuVKC85P4YBk/gvQwF4O0FuPxJsugjF28w7raQ= Subject key identifier: 51:15:8F:F1:62:26:09:B0:DA:0D:12:E2:FC:C0:A0:2D:8C:80:C3:B5 Authority key identifier: D8:5F:97:EC:28:98:23:A0:FE:C5:9A:16:FE:DF:A0:9F:72:EB:C8:35 Certificate issuer: /CN=D85F97EC289823A0FEC59A16FEDFA09F72EBC835 Certificate serial: 47DBDCEB6868D5C2654EBA39666D480C2DC0866E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft Manifest number: 2C Signing time: Wed 03 Jun 2026 14:36:56 +0000 Manifest this update: Wed 03 Jun 2026 14:31:56 +0000 Manifest next update: Thu 04 Jun 2026 18:11:56 +0000 Files and hashes: 1: 33362e35302e34362e302f32332d3233203d3e20313338383838.roa (hash: /7DADKxkcEneVChkCCyUD/ZC0G20xDnhNSvZJoeZ1RA=) 2: D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl (hash: UXOcK/z0TPXlXnpQG1zZdqm783pkqN8zFJ92GJd/UUk=) 3: 33362e35302e34362e302f32342d3234203d3e20313338383838.roa (hash: Nvdk0iQE3TVdSwCANLKWH60xsOqyH90GO9904bD5/jk=) 4: 33362e35302e34372e302f32342d3234203d3e20313338383838.roa (hash: i4qKsTrQYXXhXKXalOlOEUcc525wPy7zaNFMk5Bgx/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 17:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:db:dc:eb:68:68:d5:c2:65:4e:ba:39:66:6d:48:0c:2d:c0:86:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85F97EC289823A0FEC59A16FEDFA09F72EBC835 Validity Not Before: Jun 3 14:31:56 2026 GMT Not After : Jun 4 18:11:56 2026 GMT Subject: CN=51158FF1622609B0DA0D12E2FCC0A02D8C80C3B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fb:4c:01:ea:7e:f7:6c:f9:d0:43:2c:05:da: 4f:17:01:bb:a1:ef:63:3b:71:31:f4:08:42:df:6a: b5:c8:52:f1:27:c1:1d:6e:3f:46:06:02:54:84:12: 3b:d2:ad:a2:93:2f:c3:7b:72:c6:bd:35:34:ec:17: 19:5f:fc:11:c4:ed:2a:63:41:ec:6e:5c:a1:c1:37: 13:b9:97:25:70:7e:54:a7:60:49:6a:39:b2:39:b0: 13:5a:7e:e9:4b:3b:c5:c7:2d:89:c4:b2:0c:97:2a: 95:18:2a:67:73:f8:4e:fd:07:d8:48:00:bd:55:ad: 38:73:aa:9e:87:91:d3:81:84:3e:ae:0e:58:66:96: dd:eb:dd:ff:84:5c:30:df:7b:9d:e3:9e:15:fd:dd: 5f:97:97:05:8a:64:cc:29:97:e0:9b:64:09:5e:35: a3:82:d0:f5:14:e5:88:3a:84:6b:f8:47:78:d8:f9: 32:0b:c1:85:38:7a:85:5d:a6:93:30:c9:f6:a2:e7: b6:ed:e6:29:80:c1:04:50:8e:0c:ec:6b:55:76:d0: 7f:99:53:18:fb:e3:a5:23:de:d7:40:07:c2:47:c9: eb:3e:58:70:13:3c:bc:59:ec:10:25:79:bb:85:ac: 67:b4:08:92:a6:96:8b:c6:77:75:09:d2:af:b5:7a: 9e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:15:8F:F1:62:26:09:B0:DA:0D:12:E2:FC:C0:A0:2D:8C:80:C3:B5 X509v3 Authority Key Identifier: keyid:D8:5F:97:EC:28:98:23:A0:FE:C5:9A:16:FE:DF:A0:9F:72:EB:C8:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:e0:ff:86:a5:2b:81:1e:f9:3a:cf:67:a5:40:48:3c:b4:61: a0:c0:3b:60:b7:c6:ec:93:ee:3b:f4:42:63:92:d2:ec:a3:89: 00:c1:b0:5f:6e:46:0e:da:42:4d:63:cf:c3:ab:bf:c1:b7:d5: f8:83:74:ec:26:6c:11:1b:35:4c:c1:c4:81:f6:4f:2a:17:fd: 86:2d:70:e9:71:84:79:f4:e7:a1:f4:7f:f4:65:33:98:6c:0f: 49:6f:57:c6:bd:7f:30:32:ba:13:21:3d:52:ba:76:a9:be:cd: f7:48:f5:b2:3c:4a:dc:97:c3:88:68:c3:ee:0e:89:d1:08:9e: 6e:84:1a:b3:97:3b:fa:e8:1c:6a:b1:63:26:f8:89:8d:5e:83: 8b:f0:5d:fe:d5:80:77:4f:31:e4:8d:d0:5d:8d:58:04:b1:e9: 61:ce:ce:4a:42:ec:dc:ed:55:ff:b6:a1:e8:29:f3:d8:7f:ee: d9:74:93:39:04:03:61:d9:56:19:74:ab:f3:5f:7a:9f:11:b1: 78:ef:c9:90:58:9c:09:89:e5:24:2b:f9:9a:de:c9:10:1c:f3: 7b:6c:e4:63:c7:33:8c:fd:83:bb:6a:bd:9f:70:5f:e6:df:f2: 06:fb:ef:3a:46:37:1e:e5:09:f9:51:a4:84:13:01:db:06:36: a9:73:f6:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR9vc62ho1cJlTro5Zm1IDC3Ahm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1Rjk3RUMyODk4MjNBMEZFQzU5QTE2RkVERkEwOUY3 MkVCQzgzNTAeFw0yNjA2MDMxNDMxNTZaFw0yNjA2MDQxODExNTZaMDMxMTAvBgNV BAMTKDUxMTU4RkYxNjIyNjA5QjBEQTBEMTJFMkZDQzBBMDJEOEM4MEMzQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL+0wB6n73bPnQQywF2k8XAbuh 72M7cTH0CELfarXIUvEnwR1uP0YGAlSEEjvSraKTL8N7csa9NTTsFxlf/BHE7Spj QexuXKHBNxO5lyVwflSnYElqObI5sBNafulLO8XHLYnEsgyXKpUYKmdz+E79B9hI AL1VrThzqp6HkdOBhD6uDlhmlt3r3f+EXDDfe53jnhX93V+XlwWKZMwpl+CbZAle NaOC0PUU5Yg6hGv4R3jY+TILwYU4eoVdppMwyfai57bt5imAwQRQjgzsa1V20H+Z Uxj746Uj3tdAB8JHyes+WHATPLxZ7BAlebuFrGe0CJKmlovGd3UJ0q+1ep6VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUURWP8WImCbDaDRLi/MCgLYyAw7UwHwYDVR0j BBgwFoAU2F+X7CiYI6D+xZoW/t+gn3LryDUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI2ODQ2MmUtYmZhNS00MzM3LTkxNTMtYzU1NmQ5ZDc3MWZhLzAvRDg1Rjk3RUMy ODk4MjNBMEZFQzU5QTE2RkVERkEwOUY3MkVCQzgzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVGOTdFQzI4OTgyM0EwRkVDNTlBMTZGRURGQTA5RjcyRUJD ODM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI2ODQ2MmUtYmZhNS00MzM3LTkx NTMtYzU1NmQ5ZDc3MWZhLzAvRDg1Rjk3RUMyODk4MjNBMEZFQzU5QTE2RkVERkEw OUY3MkVCQzgzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTg/4alK4Ee+TrPZ6VASDy0YaDAO2C3xuyT 7jv0QmOS0uyjiQDBsF9uRg7aQk1jz8Orv8G31fiDdOwmbBEbNUzBxIH2TyoX/YYt cOlxhHn056H0f/RlM5hsD0lvV8a9fzAyuhMhPVK6dqm+zfdI9bI8StyXw4how+4O idEInm6EGrOXO/roHGqxYyb4iY1eg4vwXf7VgHdPMeSN0F2NWASx6WHOzkpC7Nzt Vf+2oegp89h/7tl0kzkEA2HZVhl0q/Nfep8RsXjvyZBYnAmJ5SQr+ZreyRAc83ts 5GPHM4z9g7tqvZ9wX+bf8gb77zpGNx7lCflRpIQTAdsGNqlz9pU= -----END CERTIFICATE-----Generated at Thu Jun 4 04:13:12 2026 by rpki-client