$ rpki-client -vvf rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft File: 1859662B11A1F7335B5E5F6093D493B45F785BCF.mft (raw, json) Hash identifier: X3HzDOzWepCx9oHBcKUOBU52SOvmxpJ6kLV6Z4VUrH4= Subject key identifier: DE:E7:60:A0:46:75:79:60:C1:C5:C9:50:DD:15:46:E5:36:11:08:94 Authority key identifier: 18:59:66:2B:11:A1:F7:33:5B:5E:5F:60:93:D4:93:B4:5F:78:5B:CF Certificate issuer: /CN=1859662B11A1F7335B5E5F6093D493B45F785BCF Certificate serial: 10DF2320E9DA5113D9CFB22388A20628D150220C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 00:05:10 +0000 Manifest this update: Tue 02 Jun 2026 00:00:10 +0000 Manifest next update: Wed 03 Jun 2026 03:51:10 +0000 Files and hashes: 1: 3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (hash: FjXRjyTIW7jBUwedjN45SmsENn+GAhcicAGgdt3Asa8=) 2: 1859662B11A1F7335B5E5F6093D493B45F785BCF.crl (hash: diyGU19ugRmN08PUr4qioG6e6tL/p1fC8+ri/SB3wzI=) 3: 3130332e3136362e3137382e302f32342d3234203d3e20313534343130.roa (hash: U9buHNsi2jDfo5KH+0Kih4bcNzBuDuVWdR/10Uc4Q3A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.crl rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 03:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:df:23:20:e9:da:51:13:d9:cf:b2:23:88:a2:06:28:d1:50:22:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1859662B11A1F7335B5E5F6093D493B45F785BCF Validity Not Before: Jun 2 00:00:10 2026 GMT Not After : Jun 3 03:51:10 2026 GMT Subject: CN=DEE760A046757960C1C5C950DD1546E536110894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9f:ee:30:70:bf:82:e2:9d:c7:84:48:7d:81: e9:c8:15:fd:7e:34:77:6b:2e:ae:0d:1b:ca:12:fe: 90:f7:74:ee:d2:b8:1a:95:bb:de:02:57:70:5e:13: 19:36:5b:a5:7b:2e:87:a7:94:91:4a:d8:28:d7:9d: 2a:f7:ca:35:14:12:5b:4a:63:0b:42:cc:2e:b0:17: 50:12:4c:b8:86:8e:cc:fb:6d:36:1b:5c:6e:a3:8b: 4a:c3:c1:76:7c:a8:fe:9d:82:f5:ae:df:79:99:99: 7c:76:4d:0b:8d:4a:97:0c:e3:bd:f5:93:8b:88:bd: bc:f8:fd:0a:60:72:77:04:d5:e0:f9:e0:73:f2:53: d4:2e:b4:f1:b4:ba:fc:5e:44:88:ab:a5:c5:7c:67: 3e:25:0e:39:12:e0:1d:95:0e:c6:2b:50:97:25:92: 75:48:8f:8a:f1:92:86:4d:90:04:49:be:8a:f4:34: 37:48:90:f8:64:62:84:be:4a:df:b7:60:f5:af:d2: ae:74:89:4a:85:58:90:93:6b:60:c6:aa:06:52:b3: 5e:f4:fe:cf:4d:37:9a:eb:59:63:3c:6a:cc:52:06: e6:4f:01:03:36:78:2e:4b:82:a2:62:6a:42:d0:b0: 83:b8:27:25:9b:a3:9f:f7:d3:31:32:65:04:7a:0d: 47:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E7:60:A0:46:75:79:60:C1:C5:C9:50:DD:15:46:E5:36:11:08:94 X509v3 Authority Key Identifier: keyid:18:59:66:2B:11:A1:F7:33:5B:5E:5F:60:93:D4:93:B4:5F:78:5B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:8b:39:09:b6:14:39:b8:5d:64:3d:54:6e:af:df:2e:93:74: ad:3d:83:84:19:06:c9:5e:3c:44:1e:86:39:dd:f2:a3:a1:31: b1:59:b3:34:6b:62:37:70:6c:88:5f:53:d9:e3:6d:69:5b:b2: 76:85:47:fe:d5:dd:af:73:ec:98:80:d7:02:c8:3a:e6:c7:4e: 55:79:2d:ca:cd:e3:c6:d6:0a:39:cd:1e:f5:62:ad:1f:1e:68: b8:53:70:f7:5c:90:60:bd:37:72:34:98:3a:79:c6:e4:0d:77: 71:18:2d:f7:a6:97:8b:c9:3c:54:70:03:8a:3e:5a:f0:41:83: 3f:a5:9e:4e:b0:84:81:fe:d5:a5:5f:a5:97:e7:b7:ab:b3:03: c3:61:d3:e5:36:92:a0:95:4c:f2:76:50:45:c1:33:e8:ad:f3: 4d:01:49:77:9b:a4:dc:e2:63:b6:74:e4:6d:06:36:82:68:ca: 40:3c:7e:07:5c:b2:99:37:ed:a8:21:b0:11:97:b2:86:5b:cd: 72:ea:13:05:61:e9:71:6a:b1:9f:4b:c2:7d:d4:71:e1:dd:0d: 8c:d3:fd:ea:78:51:fe:cc:01:1e:68:f5:60:4c:29:22:40:16: 83:32:8c:d9:4a:6f:12:45:6f:5e:58:e4:96:0f:34:45:fd:c5: 89:0a:ac:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEN8jIOnaURPZz7IjiKIGKNFQIgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1OTY2MkIxMUExRjczMzVCNUU1RjYwOTNENDkzQjQ1 Rjc4NUJDRjAeFw0yNjA2MDIwMDAwMTBaFw0yNjA2MDMwMzUxMTBaMDMxMTAvBgNV BAMTKERFRTc2MEEwNDY3NTc5NjBDMUM1Qzk1MEREMTU0NkU1MzYxMTA4OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIn+4wcL+C4p3HhEh9genIFf1+ NHdrLq4NG8oS/pD3dO7SuBqVu94CV3BeExk2W6V7LoenlJFK2CjXnSr3yjUUEltK YwtCzC6wF1ASTLiGjsz7bTYbXG6ji0rDwXZ8qP6dgvWu33mZmXx2TQuNSpcM4731 k4uIvbz4/QpgcncE1eD54HPyU9QutPG0uvxeRIirpcV8Zz4lDjkS4B2VDsYrUJcl knVIj4rxkoZNkARJvor0NDdIkPhkYoS+St+3YPWv0q50iUqFWJCTa2DGqgZSs170 /s9NN5rrWWM8asxSBuZPAQM2eC5LgqJiakLQsIO4JyWbo5/30zEyZQR6DUflAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3udgoEZ1eWDBxclQ3RVG5TYRCJQwHwYDVR0j BBgwFoAUGFlmKxGh9zNbXl9gk9STtF94W88wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkwYWM1Y2EtMzVkZi00NjA3LTk0MDUtMzk3YjdhYWRiMmE3LzAvMTg1OTY2MkIx MUExRjczMzVCNUU1RjYwOTNENDkzQjQ1Rjc4NUJDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xODU5NjYyQjExQTFGNzMzNUI1RTVGNjA5M0Q0OTNCNDVGNzg1 QkNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTg1OTY2MkIxMUExRjczMzVCNUU1RjYwOTNENDkz QjQ1Rjc4NUJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaLOQm2FDm4XWQ9VG6v3y6TdK09g4QZBsle PEQehjnd8qOhMbFZszRrYjdwbIhfU9njbWlbsnaFR/7V3a9z7JiA1wLIOubHTlV5 LcrN48bWCjnNHvVirR8eaLhTcPdckGC9N3I0mDp5xuQNd3EYLfeml4vJPFRwA4o+ WvBBgz+lnk6whIH+1aVfpZfnt6uzA8Nh0+U2kqCVTPJ2UEXBM+it800BSXebpNzi Y7Z05G0GNoJoykA8fgdcspk37aghsBGXsoZbzXLqEwVh6XFqsZ9Lwn3UceHdDYzT /ep4Uf7MAR5o9WBMKSJAFoMyjNlKbxJFb15Y5JYPNEX9xYkKrKA= -----END CERTIFICATE-----Generated at Tue Jun 2 21:32:10 2026 by rpki-client