$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft File: 2479BECD79D87972D2E64A75818044EA49B2F7AB.mft (raw, json) Hash identifier: FeqBdQrAc5velEWLuJ5uS0y2q1PHeUBvnWM90GJCLgw= Subject key identifier: E4:6E:A8:42:18:14:F7:4B:7D:D4:40:41:90:82:76:DD:BB:0B:2B:E4 Authority key identifier: 24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB Certificate issuer: /CN=2479BECD79D87972D2E64A75818044EA49B2F7AB Certificate serial: 093DD935EA3DE1AD4F1DF82FB2D3BBDAC6A1ECF9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 15:13:26 +0000 Manifest this update: Tue 02 Jun 2026 15:08:26 +0000 Manifest next update: Wed 03 Jun 2026 15:47:26 +0000 Files and hashes: 1: 2479BECD79D87972D2E64A75818044EA49B2F7AB.crl (hash: OgUlQRI9QejNCgEayuqmfhPt6//95PtQ+4RLVrqSLYU=) 2: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: W/8+xRtFQTktxO0fuk7MAz6L6AHwxOnMCS8RTW7dGss=) 3: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: aop58br7cTbLrX5Ig76Wb88/Xv5ZLtq0WiG+kxtdBWw=) 4: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: /gZ4/45D54iPNl3rFwLqcXjfv+fGeCZ/kGOEYCstAaw=) 5: 3130332e3131322e3134342e302f32332d3233203d3e20313534343130.roa (hash: EBSYxoW+DLXOqCY+Bl9yoeDsBygUGPhlM9cqjS/xpGk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:3d:d9:35:ea:3d:e1:ad:4f:1d:f8:2f:b2:d3:bb:da:c6:a1:ec:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2479BECD79D87972D2E64A75818044EA49B2F7AB Validity Not Before: Jun 2 15:08:26 2026 GMT Not After : Jun 3 15:47:26 2026 GMT Subject: CN=E46EA8421814F74B7DD44041908276DDBB0B2BE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:5d:dc:6c:e3:44:ce:6c:77:c7:7f:c9:fd: 7a:9e:85:73:25:5e:80:63:78:1b:54:87:18:af:04: 4c:ca:1b:5f:18:27:99:f9:64:f8:84:fb:25:77:fd: 23:0d:3a:63:08:4b:3d:e5:3b:c7:fa:74:ef:50:cd: e8:6c:b5:2c:b6:81:fb:ea:bf:09:6f:59:21:8a:71: 14:95:14:fd:65:97:99:f1:c6:62:e3:37:41:c2:61: 6b:c2:9a:98:fe:b0:2e:bd:af:46:8b:03:4c:4f:af: 58:af:da:67:57:38:f8:a2:c1:6d:70:b0:fc:b3:1d: be:77:58:ed:5a:59:27:e9:3e:33:f0:7e:23:d2:e4: f7:0d:4e:b7:8f:ef:83:f2:29:1a:ce:b4:75:59:9e: 1e:6a:61:8e:96:97:f7:0d:2c:7f:cf:2d:c9:30:ae: 09:54:5f:db:9c:a6:ff:3e:55:0a:7a:b2:7d:0c:3a: ca:ca:de:74:47:43:37:b4:1f:29:e5:87:ee:9f:39: 21:98:4b:23:6c:ae:f8:63:7b:ab:ab:77:fb:0d:65: e0:8c:73:fb:2b:f3:26:c7:08:29:e0:e2:92:8f:4e: 9a:87:ce:c4:1e:9e:09:d0:ff:0b:f3:66:ce:40:75: 9b:9b:4f:ea:99:16:f4:ab:fa:43:16:54:c6:f8:8f: 98:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6E:A8:42:18:14:F7:4B:7D:D4:40:41:90:82:76:DD:BB:0B:2B:E4 X509v3 Authority Key Identifier: keyid:24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:82:d0:0b:e6:58:fb:89:c9:b6:c0:88:db:b5:14:60:6f:77: 07:0e:ae:18:00:47:0a:98:92:e1:73:93:44:c9:53:76:94:88: 5e:05:8f:24:d8:d6:68:b0:f1:95:a3:ec:19:17:36:f6:c1:72: 74:60:fb:09:99:18:be:8b:bb:8f:97:10:9e:b6:1f:4b:45:9f: e7:55:07:03:5a:2c:ea:5a:c3:95:d9:c2:01:4b:98:db:4e:01: 5e:71:23:be:a8:ff:76:3c:c1:ad:15:95:5b:7c:36:b1:3a:59: 46:c0:2f:3b:4a:05:9c:56:9a:50:4b:a2:69:1e:e0:df:a9:bf: 68:3a:21:aa:cb:c3:10:a7:88:4b:cc:5e:a0:6c:96:21:ba:10: 6d:ac:e8:d0:03:60:e1:f6:c3:8b:e9:e8:8e:d2:fb:db:ca:ee: 4a:52:a7:a1:93:7c:b8:ba:f6:1b:3f:13:5a:7b:99:dc:11:18: ca:28:75:32:9c:eb:35:65:1f:cd:73:51:0d:e3:3d:f8:f9:cd: c9:d9:05:69:6d:65:ad:5a:35:9d:26:bc:fd:e0:38:9b:99:1b: c4:a7:6a:5b:ea:4d:28:7c:0a:de:98:09:29:96:56:15:d0:0a: 91:bb:dc:3e:27:35:32:6f:66:c1:f8:92:d4:20:eb:07:d5:7f: 0f:fe:17:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCT3ZNeo94a1PHfgvstO72sah7PkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3OUJFQ0Q3OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0RUE0 OUIyRjdBQjAeFw0yNjA2MDIxNTA4MjZaFw0yNjA2MDMxNTQ3MjZaMDMxMTAvBgNV BAMTKEU0NkVBODQyMTgxNEY3NEI3REQ0NDA0MTkwODI3NkREQkIwQjJCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzqV3cbONEzmx3x3/J/XqehXMl XoBjeBtUhxivBEzKG18YJ5n5ZPiE+yV3/SMNOmMISz3lO8f6dO9QzehstSy2gfvq vwlvWSGKcRSVFP1ll5nxxmLjN0HCYWvCmpj+sC69r0aLA0xPr1iv2mdXOPiiwW1w sPyzHb53WO1aWSfpPjPwfiPS5PcNTreP74PyKRrOtHVZnh5qYY6Wl/cNLH/PLckw rglUX9ucpv8+VQp6sn0MOsrK3nRHQze0Hynlh+6fOSGYSyNsrvhje6urd/sNZeCM c/sr8ybHCCng4pKPTpqHzsQengnQ/wvzZs5AdZubT+qZFvSr+kMWVMb4j5inAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5G6oQhgU90t91EBBkIJ23bsLK+QwHwYDVR0j BBgwFoAUJHm+zXnYeXLS5kp1gYBE6kmy96swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNkMDhlYjMtOTM3ZC00MzA0LTkxNjctNDYzZDdjNThkNWU0LzAvMjQ3OUJFQ0Q3 OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0RUE0OUIyRjdBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDc5QkVDRDc5RDg3OTcyRDJFNjRBNzU4MTgwNDRFQTQ5QjJG N0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGNkMDhlYjMtOTM3ZC00MzA0LTkx NjctNDYzZDdjNThkNWU0LzAvMjQ3OUJFQ0Q3OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0 RUE0OUIyRjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL6C0AvmWPuJybbAiNu1FGBvdwcOrhgARwqY kuFzk0TJU3aUiF4FjyTY1miw8ZWj7BkXNvbBcnRg+wmZGL6Lu4+XEJ62H0tFn+dV BwNaLOpaw5XZwgFLmNtOAV5xI76o/3Y8wa0VlVt8NrE6WUbALztKBZxWmlBLomke 4N+pv2g6IarLwxCniEvMXqBsliG6EG2s6NADYOH2w4vp6I7S+9vK7kpSp6GTfLi6 9hs/E1p7mdwRGMoodTKc6zVlH81zUQ3jPfj5zcnZBWltZa1aNZ0mvP3gOJuZG8Sn alvqTSh8Ct6YCSmWVhXQCpG73D4nNTJvZsH4ktQg6wfVfw/+FyM= -----END CERTIFICATE-----Generated at Tue Jun 2 21:43:22 2026 by rpki-client