$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft File: C855F0A07BFEA69901C5345D79932B70E2991F5E.mft (raw, json) Hash identifier: swFMm7nCQWtrrPKlqomCr4JR2Df17nZnGo4dcf/ymQU= Subject key identifier: 34:72:6B:E2:F0:1B:20:FA:16:A1:46:14:95:DC:26:DC:B3:9E:EC:5E Authority key identifier: C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E Certificate issuer: /CN=C855F0A07BFEA69901C5345D79932B70E2991F5E Certificate serial: 234B6C86475B8B5AAEC4A2172F5120E41F88F3DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 03:44:37 +0000 Manifest this update: Tue 02 Jun 2026 03:39:37 +0000 Manifest next update: Wed 03 Jun 2026 04:14:37 +0000 Files and hashes: 1: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (hash: 6IFvIlwM6aIx7tnOnE1+rdakVYbeL0dKrUmRNu3aOIc=) 2: 3130332e3136392e3134332e302f32342d3234203d3e20323135373237.roa (hash: HMvuZA5GEygwEQ/A4E++UiWHcNENuOx/DwxIrFLrduA=) 3: C855F0A07BFEA69901C5345D79932B70E2991F5E.crl (hash: 4AZbanZnuosjX4+i6Ol3oREo/E9Dzo5oxtfAjZBv6AM=) 4: 3130332e3136392e3134332e302f32342d3234203d3e20313534343130.roa (hash: 8F99VevvPnC2SR7w+F2wdLh67GSWSbbQHmOucM9JJac=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.crl rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 04:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4b:6c:86:47:5b:8b:5a:ae:c4:a2:17:2f:51:20:e4:1f:88:f3:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C855F0A07BFEA69901C5345D79932B70E2991F5E Validity Not Before: Jun 2 03:39:37 2026 GMT Not After : Jun 3 04:14:37 2026 GMT Subject: CN=34726BE2F01B20FA16A1461495DC26DCB39EEC5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5f:9b:ac:03:a4:60:76:d5:17:81:5f:25:9c: 91:2c:fd:a5:af:84:12:ab:6c:aa:9b:5a:ed:9c:39: 13:a3:c0:f1:24:25:ee:df:7a:03:b5:99:22:02:a8: c1:97:57:93:5b:7d:12:70:3e:6a:f2:c9:e6:5f:45: cb:8f:63:ff:0b:5c:f1:78:e5:8e:3d:10:91:ca:df: 91:d0:dd:b3:05:e7:ca:1c:8c:eb:86:bc:63:b1:12: 3a:0b:b1:a3:14:04:60:6e:b4:b0:8f:7f:ab:1a:56: 64:ea:20:8e:dd:a3:0c:9a:42:00:ef:65:10:50:01: f1:ad:49:68:d5:0c:f3:38:3d:59:93:22:43:c0:f9: 1d:17:6e:19:7c:af:97:71:a4:7c:15:c6:8d:54:6e: 9d:57:e9:27:5d:dd:b5:7f:f8:9b:84:4f:a0:81:1f: 97:d3:5e:b3:d7:dd:6f:e2:95:d8:0e:e5:36:7b:57: 5c:2f:17:a1:6d:fc:96:0d:21:84:44:e2:a6:0a:f6: 33:d1:de:22:07:e0:fd:a6:82:f9:2b:ef:0a:1c:d1: 7d:cd:e7:31:63:dd:92:b6:c5:4a:a5:b7:8c:22:72: 08:55:4b:f3:d1:92:4b:37:33:70:97:b3:a3:78:09: 6d:cb:2b:25:2f:2a:d8:61:3e:3f:29:43:b6:0d:be: 63:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:72:6B:E2:F0:1B:20:FA:16:A1:46:14:95:DC:26:DC:B3:9E:EC:5E X509v3 Authority Key Identifier: keyid:C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d4:e0:6f:3d:54:ca:a2:f9:7a:8e:64:92:da:fe:26:77:1b: dc:a8:fe:55:43:08:be:4f:e1:60:13:58:d6:c8:1e:59:82:4a: 69:e2:e3:c1:6f:42:4a:cf:be:43:58:2e:c2:93:3f:eb:f2:73: 43:b0:71:73:47:85:ff:e2:41:2f:c5:9b:8f:1a:25:e7:21:e4: 49:a7:9f:55:d2:b0:33:77:78:f4:2a:6c:b4:75:de:57:c6:12: 39:dd:aa:67:8b:6c:f3:35:9c:de:e0:80:3d:87:e0:c8:e2:ca: 92:6e:15:90:93:b4:3c:f0:62:33:a6:0c:39:3a:5a:da:6c:b0: 39:dd:bb:fc:29:af:a2:32:80:d8:18:4b:04:77:55:ac:61:e1: c2:4d:be:ff:87:82:cd:80:a0:f0:0b:c8:97:69:71:58:82:ff: 19:4a:22:68:4e:74:a2:b0:b0:e1:84:03:4e:3d:7b:1b:50:8f: 3d:d9:79:95:ed:48:cb:6f:8d:4d:77:99:12:fa:ea:a7:41:c3: 48:17:43:43:f1:27:ec:76:c5:ee:78:c7:33:ce:32:5d:5a:44: 17:f7:43:bd:1e:c5:bd:5d:f3:1d:bc:94:23:a5:49:61:39:7f: 04:de:c6:07:4d:ad:80:8f:5c:51:bf:22:0d:3c:af:5d:80:92: f6:10:d5:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI0tshkdbi1quxKIXL1Eg5B+I89swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1NUYwQTA3QkZFQTY5OTAxQzUzNDVENzk5MzJCNzBF Mjk5MUY1RTAeFw0yNjA2MDIwMzM5MzdaFw0yNjA2MDMwNDE0MzdaMDMxMTAvBgNV BAMTKDM0NzI2QkUyRjAxQjIwRkExNkExNDYxNDk1REMyNkRDQjM5RUVDNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3X5usA6RgdtUXgV8lnJEs/aWv hBKrbKqbWu2cOROjwPEkJe7fegO1mSICqMGXV5NbfRJwPmryyeZfRcuPY/8LXPF4 5Y49EJHK35HQ3bMF58ocjOuGvGOxEjoLsaMUBGButLCPf6saVmTqII7dowyaQgDv ZRBQAfGtSWjVDPM4PVmTIkPA+R0Xbhl8r5dxpHwVxo1Ubp1X6Sdd3bV/+JuET6CB H5fTXrPX3W/ildgO5TZ7V1wvF6Ft/JYNIYRE4qYK9jPR3iIH4P2mgvkr7woc0X3N 5zFj3ZK2xUqlt4wicghVS/PRkks3M3CXs6N4CW3LKyUvKthhPj8pQ7YNvmN/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNHJr4vAbIPoWoUYUldwm3LOe7F4wHwYDVR0j BBgwFoAUyFXwoHv+ppkBxTRdeZMrcOKZH14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZkZTFhOGUtYzJiOC00OTk2LTk0OTItNmY5MmMyZGZlYzdhLzAvQzg1NUYwQTA3 QkZFQTY5OTAxQzUzNDVENzk5MzJCNzBFMjk5MUY1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODU1RjBBMDdCRkVBNjk5MDFDNTM0NUQ3OTkzMkI3MEUyOTkx RjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZkZTFhOGUtYzJiOC00OTk2LTk0 OTItNmY5MmMyZGZlYzdhLzAvQzg1NUYwQTA3QkZFQTY5OTAxQzUzNDVENzk5MzJC NzBFMjk5MUY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHU4G89VMqi+XqOZJLa/iZ3G9yo/lVDCL5P 4WATWNbIHlmCSmni48FvQkrPvkNYLsKTP+vyc0OwcXNHhf/iQS/Fm48aJech5Emn n1XSsDN3ePQqbLR13lfGEjndqmeLbPM1nN7ggD2H4MjiypJuFZCTtDzwYjOmDDk6 WtpssDndu/wpr6IygNgYSwR3Vaxh4cJNvv+Hgs2AoPALyJdpcViC/xlKImhOdKKw sOGEA049extQjz3ZeZXtSMtvjU13mRL66qdBw0gXQ0PxJ+x2xe54xzPOMl1aRBf3 Q70exb1d8x28lCOlSWE5fwTexgdNrYCPXFG/Ig08r12AkvYQ1V8= -----END CERTIFICATE-----Generated at Tue Jun 2 21:43:22 2026 by rpki-client