$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft File: 766F922EBE6693B4C229A00631F97A88C3ED7E42.mft (raw, json) Hash identifier: ukOcZ2/rU2X2OB9J0418jSxGV9f0C7PlY2rsvRwJ2AU= Subject key identifier: 0E:35:EE:D9:90:3D:EB:F0:F9:EC:61:4E:33:CC:79:35:68:CF:79:EE Authority key identifier: 76:6F:92:2E:BE:66:93:B4:C2:29:A0:06:31:F9:7A:88:C3:ED:7E:42 Certificate issuer: /CN=766F922EBE6693B4C229A00631F97A88C3ED7E42 Certificate serial: 083C0BD86257BF80B28866946EFABAD9C3831641 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:43:57 +0000 Manifest this update: Tue 02 Jun 2026 19:38:57 +0000 Manifest next update: Wed 03 Jun 2026 20:01:57 +0000 Files and hashes: 1: 3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa (hash: TPWfaDGF6n/Mep4wo2U4Mey+BVeKel6FmH9UjXBlRwE=) 2: 766F922EBE6693B4C229A00631F97A88C3ED7E42.crl (hash: eyIL38oLSa2XVFI+glB2HUrQp8aFn388aFpMhLn7ij4=) 3: 3130332e3235322e35302e302f32342d3234203d3e203539313334.roa (hash: CcTYmyX7VKsqrze+tnxJ2xXPrQIZB/9bxrpZpXXFkew=) 4: 3130332e3235322e35312e302f32342d3234203d3e203539313334.roa (hash: jV9xZ4rWaJsfRT1YZup0w1zHla32pmpYrsEdtDLU9Uk=) 5: 3130332e37332e3132352e302f32342d3234203d3e203539313334.roa (hash: bC6bKRWDg0Wg0P6AUiYBKd/mAgFiPv8qaxAU9zI3St0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.crl rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:3c:0b:d8:62:57:bf:80:b2:88:66:94:6e:fa:ba:d9:c3:83:16:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=766F922EBE6693B4C229A00631F97A88C3ED7E42 Validity Not Before: Jun 2 19:38:57 2026 GMT Not After : Jun 3 20:01:57 2026 GMT Subject: CN=0E35EED9903DEBF0F9EC614E33CC793568CF79EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b8:32:44:82:26:e5:da:3e:90:bf:45:cf:93: 6c:8a:54:5e:ec:92:23:15:a1:b6:36:09:86:7e:d2: a5:8e:19:31:07:d0:e5:3f:24:cd:02:91:b1:e8:9f: f5:51:ec:d9:85:ec:5f:0c:c6:7e:92:05:e3:7e:02: 5d:54:49:72:26:36:82:65:a7:cf:b1:a7:75:f7:66: 71:ee:ac:9d:72:ae:dd:34:56:b4:90:01:42:ab:24: 9e:ee:e3:0b:28:19:33:2f:26:7a:93:bd:5c:6c:43: 7c:ec:9d:1d:00:db:9c:4e:ac:ee:19:4a:e5:9e:b5: 12:fe:fb:b6:29:f0:6d:0a:5f:26:cf:f0:ea:ee:69: c2:1f:77:72:75:dc:3d:d2:2a:65:02:5b:7d:5e:df: 59:2b:ab:b1:74:89:78:20:f6:d0:ce:6b:4d:ab:35: 05:4e:1e:2a:92:47:61:26:8a:26:fc:ef:1b:7e:9f: 2d:d7:3c:d3:f1:fe:8c:2b:2b:9d:35:4e:fb:8a:a5: 45:40:65:82:79:ed:93:75:b2:fc:b1:31:eb:e4:7b: ff:de:ff:a3:df:83:01:97:13:6f:e0:bc:43:ff:22: 05:78:bc:83:68:95:8d:12:60:2e:97:08:5f:db:e4: f0:cf:0a:4f:34:96:b1:d3:16:41:db:5c:5e:db:d8: c0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:35:EE:D9:90:3D:EB:F0:F9:EC:61:4E:33:CC:79:35:68:CF:79:EE X509v3 Authority Key Identifier: keyid:76:6F:92:2E:BE:66:93:B4:C2:29:A0:06:31:F9:7A:88:C3:ED:7E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:c9:06:33:dc:bd:a0:a8:ff:ae:0f:24:52:2d:01:6e:16:31: 9a:4e:3a:58:ce:92:98:d8:95:02:b2:b8:d3:90:1c:a6:70:06: d0:48:88:2f:83:0b:3a:60:37:85:2f:96:8a:28:86:f3:d0:ff: 8f:1b:6c:cb:74:19:ec:d5:59:00:e7:fa:2c:80:0c:b5:58:47: f2:b2:a1:93:f5:6f:fd:47:d0:50:6b:63:be:80:73:67:2b:d6: 88:ef:0a:04:24:e6:5c:90:57:8c:e5:95:a0:44:f0:52:0a:1a: d5:c5:6d:44:1c:b2:8f:ec:96:1f:4c:ad:1f:77:b5:76:cf:bd: af:ee:2a:8c:50:c8:1c:1e:1e:1e:d8:81:72:bb:5b:f3:eb:be: da:3b:c5:fd:a3:62:86:45:e7:f8:ff:c6:5f:b3:73:de:24:8f: 8b:ab:24:2f:17:d1:aa:21:0a:a7:d4:49:4e:ac:5d:76:48:36: 4c:85:63:e7:8c:a3:f2:bc:1b:13:13:74:46:03:53:b1:79:70: f0:59:91:0e:44:d1:75:a0:b7:53:a0:d7:31:06:75:4b:82:97: 86:d3:93:4f:da:3d:54:71:70:cf:30:83:e2:6e:56:c7:9a:2c: 21:b2:c2:f7:69:3d:32:f5:4d:17:d0:25:e4:50:76:7e:0f:d0: 08:31:86:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCDwL2GJXv4CyiGaUbvq62cODFkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY2RjkyMkVCRTY2OTNCNEMyMjlBMDA2MzFGOTdBODhD M0VEN0U0MjAeFw0yNjA2MDIxOTM4NTdaFw0yNjA2MDMyMDAxNTdaMDMxMTAvBgNV BAMTKDBFMzVFRUQ5OTAzREVCRjBGOUVDNjE0RTMzQ0M3OTM1NjhDRjc5RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1uDJEgibl2j6Qv0XPk2yKVF7s kiMVobY2CYZ+0qWOGTEH0OU/JM0CkbHon/VR7NmF7F8Mxn6SBeN+Al1USXImNoJl p8+xp3X3ZnHurJ1yrt00VrSQAUKrJJ7u4wsoGTMvJnqTvVxsQ3zsnR0A25xOrO4Z SuWetRL++7Yp8G0KXybP8OruacIfd3J13D3SKmUCW31e31krq7F0iXgg9tDOa02r NQVOHiqSR2Emiib87xt+ny3XPNPx/owrK501TvuKpUVAZYJ57ZN1svyxMevke//e /6PfgwGXE2/gvEP/IgV4vINolY0SYC6XCF/b5PDPCk80lrHTFkHbXF7b2MDTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDjXu2ZA96/D57GFOM8x5NWjPee4wHwYDVR0j BBgwFoAUdm+SLr5mk7TCKaAGMfl6iMPtfkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE3ODhiNGEtZDQ1MS00OWZiLWI3Y2QtNzE5ODEwODcwZjFhLzAvNzY2RjkyMkVC RTY2OTNCNEMyMjlBMDA2MzFGOTdBODhDM0VEN0U0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NjZGOTIyRUJFNjY5M0I0QzIyOUEwMDYzMUY5N0E4OEMzRUQ3 RTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE3ODhiNGEtZDQ1MS00OWZiLWI3 Y2QtNzE5ODEwODcwZjFhLzAvNzY2RjkyMkVCRTY2OTNCNEMyMjlBMDA2MzFGOTdB ODhDM0VEN0U0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbJBjPcvaCo/64PJFItAW4WMZpOOljOkpjY lQKyuNOQHKZwBtBIiC+DCzpgN4UvlooohvPQ/48bbMt0GezVWQDn+iyADLVYR/Ky oZP1b/1H0FBrY76Ac2cr1ojvCgQk5lyQV4zllaBE8FIKGtXFbUQcso/slh9MrR93 tXbPva/uKoxQyBweHh7YgXK7W/Prvto7xf2jYoZF5/j/xl+zc94kj4urJC8X0aoh CqfUSU6sXXZINkyFY+eMo/K8GxMTdEYDU7F5cPBZkQ5E0XWgt1Og1zEGdUuCl4bT k0/aPVRxcM8wg+JuVseaLCGywvdpPTL1TRfQJeRQdn4P0AgxhmI= -----END CERTIFICATE-----Generated at Tue Jun 2 21:36:04 2026 by rpki-client