$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft File: 8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft (raw, json) Hash identifier: tICGn1QdX0F7B/Xc0KoyZ+czchvxaktpBbivQ5LDtvA= Subject key identifier: D6:ED:5C:6F:0E:8A:1F:A5:9D:3B:1E:21:DB:03:3E:9C:26:FD:03:96 Authority key identifier: 80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6 Certificate issuer: /CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6 Certificate serial: 3E7BCB05C636496B4572AC9870B6126FB1F52186 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 08:50:51 +0000 Manifest this update: Tue 02 Jun 2026 08:45:51 +0000 Manifest next update: Wed 03 Jun 2026 08:50:51 +0000 Files and hashes: 1: 8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl (hash: T9kCCob7TubwVPdL0AO6TD5n8Zdlvnav2N42ShOVCYs=) 2: AS139994.roa (hash: yvMW+tHCsBkuY1gG/yGlJ6JOSC3lCz//Xfli/4HGudE=) 3: AS24203.roa (hash: elsc0fS7A3LxkWGHoyme7eZUKOvhFf04i/z5CF+hz8c=) 4: AS17885.roa (hash: QDIkXwtnGbligvAEMFVpJlik2NMuLqD9yutNqqC9tvo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 08:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:7b:cb:05:c6:36:49:6b:45:72:ac:98:70:b6:12:6f:b1:f5:21:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6 Validity Not Before: Jun 2 08:45:51 2026 GMT Not After : Jun 3 08:50:51 2026 GMT Subject: CN=D6ED5C6F0E8A1FA59D3B1E21DB033E9C26FD0396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5a:43:04:c3:4c:e5:70:3d:fd:98:2b:80:83: 23:2e:56:07:c6:0e:ed:73:a7:d2:c9:94:ee:d7:35: 1d:38:50:b4:e6:15:fb:b4:bb:9e:36:24:b4:ec:d1: 7d:9e:c8:9a:64:0c:d1:9f:6e:73:fc:39:26:fd:4c: b5:52:65:61:ec:fa:02:86:cd:ee:21:83:d3:b4:0d: aa:f2:93:7f:3d:19:99:41:8a:21:59:f4:c1:51:4e: 00:61:6f:03:d7:22:2f:b9:e3:2a:4d:b9:a0:c1:93: 4f:22:0b:be:a9:06:39:5c:b2:8e:ad:40:76:89:9f: 98:08:ae:0d:ea:f5:35:a6:c6:ee:26:4b:51:91:89: 41:c5:df:ea:e5:5a:77:98:b1:4f:11:f7:d7:c0:8d: a5:fe:a5:ed:60:1d:e8:df:7e:b5:9a:96:3f:59:16: 3e:bd:fa:65:9d:72:e6:76:d6:98:8b:50:4f:03:44: 6c:b9:18:af:47:0e:47:fc:8e:5f:56:82:6f:6b:55: f8:4b:a4:2e:e1:e8:06:90:12:01:54:2b:5e:b3:40: b4:bf:eb:25:05:25:66:2c:ec:a0:7d:cb:36:64:ee: 0a:67:c1:98:d5:79:b3:09:b3:08:88:76:0e:90:fd: 33:f9:05:c3:18:74:40:af:aa:5b:bb:66:d9:74:89: 29:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:ED:5C:6F:0E:8A:1F:A5:9D:3B:1E:21:DB:03:3E:9C:26:FD:03:96 X509v3 Authority Key Identifier: keyid:80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:5d:5e:b6:64:d3:00:e9:63:2c:7d:be:46:e9:5a:a1:a7:a4: 1a:1b:d8:5c:0e:d5:0b:01:27:5a:ce:85:4b:a9:63:9e:73:19: 2a:cf:75:c7:5d:2d:0f:58:4e:70:e2:bb:af:f3:5f:de:20:f1: 21:38:91:6c:9d:48:44:3a:0f:d2:cf:ab:d9:34:99:7b:f1:b5: 9e:b5:ce:e9:b5:b6:4b:92:34:44:40:09:fb:1d:f6:97:17:fa: 90:ea:b5:b6:cf:e4:75:0d:4f:e1:e5:08:1e:1a:0e:b6:21:ab: 6d:75:2f:0b:08:74:70:ef:d5:26:13:b2:39:ad:32:6b:a7:e0: 2c:fb:95:40:1d:6f:44:50:b5:e1:53:ac:61:6a:46:9f:f3:08: 46:b1:9d:e0:2a:c8:2f:30:5f:ec:90:9b:09:fe:39:a3:fd:90: c4:6c:75:8c:7a:ba:84:be:db:99:46:fa:87:4a:77:30:8e:10: c7:0f:c5:57:52:96:f2:b6:f6:a3:6d:aa:24:e4:77:d6:ef:2f: 74:9f:9d:68:2a:5a:cb:e4:6e:c6:e2:3a:bc:82:1e:23:1b:88: 12:98:ba:77:28:05:9f:43:c0:91:19:02:37:0c:5a:88:d4:3a: de:37:95:7c:5c:f9:ce:68:b4:a8:8f:00:22:d1:95:d6:46:10: d3:5f:d2:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPnvLBcY2SWtFcqyYcLYSb7H1IYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA3NkM1NjQ3N0I4RkQ1NDYwNkU4RjdCQjk1QzFCQ0Q5 NTMyOTZBNjAeFw0yNjA2MDIwODQ1NTFaFw0yNjA2MDMwODUwNTFaMDMxMTAvBgNV BAMTKEQ2RUQ1QzZGMEU4QTFGQTU5RDNCMUUyMURCMDMzRTlDMjZGRDAzOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFWkMEw0zlcD39mCuAgyMuVgfG Du1zp9LJlO7XNR04ULTmFfu0u542JLTs0X2eyJpkDNGfbnP8OSb9TLVSZWHs+gKG ze4hg9O0Daryk389GZlBiiFZ9MFRTgBhbwPXIi+54ypNuaDBk08iC76pBjlcso6t QHaJn5gIrg3q9TWmxu4mS1GRiUHF3+rlWneYsU8R99fAjaX+pe1gHejffrWalj9Z Fj69+mWdcuZ21piLUE8DRGy5GK9HDkf8jl9Wgm9rVfhLpC7h6AaQEgFUK16zQLS/ 6yUFJWYs7KB9yzZk7gpnwZjVebMJswiIdg6Q/TP5BcMYdECvqlu7Ztl0iSkdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1u1cbw6KH6WdOx4h2wM+nCb9A5YwHwYDVR0j BBgwFoAUgHbFZHe4/VRgbo97uVwbzZUylqYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzEvODA3NkM1NjQ3 N0I4RkQ1NDYwNkU4RjdCQjk1QzFCQ0Q5NTMyOTZBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MDc2QzU2NDc3QjhGRDU0NjA2RThGN0JCOTVDMUJDRDk1MzI5 NkE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvODA3NkM1NjQ3N0I4RkQ1NDYwNkU4RjdCQjk1QzFC Q0Q5NTMyOTZBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZdXrZk0wDpYyx9vkbpWqGnpBob2FwO1QsB J1rOhUupY55zGSrPdcddLQ9YTnDiu6/zX94g8SE4kWydSEQ6D9LPq9k0mXvxtZ61 zum1tkuSNERACfsd9pcX+pDqtbbP5HUNT+HlCB4aDrYhq211LwsIdHDv1SYTsjmt Mmun4Cz7lUAdb0RQteFTrGFqRp/zCEaxneAqyC8wX+yQmwn+OaP9kMRsdYx6uoS+ 25lG+odKdzCOEMcPxVdSlvK29qNtqiTkd9bvL3SfnWgqWsvkbsbiOryCHiMbiBKY uncoBZ9DwJEZAjcMWojUOt43lXxc+c5otKiPACLRldZGENNf0jM= -----END CERTIFICATE-----Generated at Tue Jun 2 22:08:03 2026 by rpki-client