$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft File: 0D2802EC43905EEA387602B994B8B579041C8507.mft (raw, json) Hash identifier: 2w01AemHflUO5NVCYIoOgNUtJYzwzod9k/StJ1qhIZY= Subject key identifier: D1:23:4B:34:2A:78:56:95:D1:07:B4:18:4D:DF:1D:AB:89:C5:D2:6A Authority key identifier: 0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07 Certificate issuer: /CN=0D2802EC43905EEA387602B994B8B579041C8507 Certificate serial: 36350579D0CF59F57F1B4B2677381C000523B303 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 16:14:39 +0000 Manifest this update: Tue 02 Jun 2026 16:09:39 +0000 Manifest next update: Wed 03 Jun 2026 17:19:39 +0000 Files and hashes: 1: 323430343a613463303a3a2f33322d3438203d3e20313338383232.roa (hash: reeIiuxuHqr4MgHpxEsClw20lXN/gmt1yXdlXdiGltI=) 2: 3130332e3133372e33382e302f32332d3233203d3e20313534343130.roa (hash: vSt0O12iEjIfejoamLvxd1FSHE5umSqpwwku+iFtKN4=) 3: 323430343a613463303a666163653a3a2f34382d3438203d3e20313338383232.roa (hash: qd7L3Ietl/ythiF1v/evymxuReB0q3gMulxwNnwRr60=) 4: 0D2802EC43905EEA387602B994B8B579041C8507.crl (hash: OfYY7aSsDM8X/SZQPIJWWy/DLfdxK+ab9nKdVoVMpBo=) 5: 3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa (hash: cszw5piIkmysL+SZS8lElBtByo5QIz3Wp1PoZt/A7vY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:35:05:79:d0:cf:59:f5:7f:1b:4b:26:77:38:1c:00:05:23:b3:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D2802EC43905EEA387602B994B8B579041C8507 Validity Not Before: Jun 2 16:09:39 2026 GMT Not After : Jun 3 17:19:39 2026 GMT Subject: CN=D1234B342A785695D107B4184DDF1DAB89C5D26A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a3:31:d0:9a:6b:45:1c:36:8b:73:d8:45:b2: 2c:8c:b8:b4:e7:4f:cd:ff:eb:e7:b8:df:25:a6:ea: d6:c1:2b:09:8b:74:4f:1a:97:0d:df:06:11:e3:9a: 23:a5:58:95:50:b2:c4:a7:e6:c6:57:b1:90:e9:bd: 15:f6:de:7b:8c:6f:cf:bc:63:e9:6e:cd:ce:a1:25: 88:7e:82:c1:84:19:95:55:ba:02:82:67:d4:1b:64: 73:b8:b5:ae:3c:4e:ac:df:ab:5a:49:a4:2d:59:77: f1:67:cc:9f:c7:03:3f:67:e9:2d:44:a1:e4:dd:30: 32:78:63:56:35:2e:63:a2:c3:6e:ed:bb:46:9b:91: 9c:fc:67:4c:8a:0b:40:d2:04:e3:44:39:63:d4:84: 4f:85:3a:ad:aa:ab:f3:94:f9:50:df:d7:d6:f6:bc: c8:db:1e:12:b7:1a:a8:b1:aa:c8:f0:f4:9a:46:82: e2:3b:96:47:c4:c6:2f:73:e7:9d:4c:38:e8:42:c4: 52:79:65:dc:db:f2:c9:1d:ed:5c:a5:c7:c6:e1:df: 4f:88:c3:da:f9:63:25:b1:dc:97:67:18:fa:2a:a1: a8:11:18:c4:2e:d6:1e:3c:7d:7f:f6:19:4c:cc:ba: a4:c5:de:92:b5:53:b6:17:f4:81:c1:ee:fe:a9:a2: e2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:23:4B:34:2A:78:56:95:D1:07:B4:18:4D:DF:1D:AB:89:C5:D2:6A X509v3 Authority Key Identifier: keyid:0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:61:dc:eb:73:e7:08:f2:a4:ab:9e:5f:bf:03:0b:5d:93:a1: c7:95:eb:c2:24:2e:4c:23:26:1c:55:80:a6:ea:09:20:af:6a: 61:aa:54:bc:03:c1:93:5e:e6:d3:b5:0f:23:40:a4:8e:10:b4: c5:88:4e:67:f3:25:28:2f:7f:5c:5b:ec:4e:82:e0:54:c2:63: 65:60:68:02:99:0d:c4:3c:aa:2a:8b:77:67:36:01:a1:46:5a: 5c:0b:4c:d6:57:34:9c:c0:9f:06:44:87:9c:d3:21:46:2e:3e: ca:ad:a3:0b:d7:0f:f6:56:7f:c6:05:5f:2b:2e:17:5e:4c:99: ed:43:a1:47:ae:69:5f:95:3f:63:f9:34:ff:62:75:c1:00:c9: 25:90:1a:a8:1a:50:cf:fa:73:7c:90:ec:ad:5c:94:cd:ae:44: a4:40:43:ae:e3:6d:13:7f:10:e4:f7:df:b3:95:ca:df:f1:77: 3c:58:a1:09:f3:05:4b:60:ae:95:1c:ca:2c:0c:15:79:d2:4a: c0:fd:cb:a4:66:b1:46:62:8a:18:14:45:b4:93:2d:34:26:c8: 73:99:10:e5:2e:4a:65:f0:3d:e4:71:3f:03:89:32:36:b3:ee: 67:c3:e5:db:f0:04:07:64:37:0a:1f:46:f5:1c:45:90:68:68: 01:f6:08:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNjUFedDPWfV/G0smdzgcAAUjswMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQyODAyRUM0MzkwNUVFQTM4NzYwMkI5OTRCOEI1Nzkw NDFDODUwNzAeFw0yNjA2MDIxNjA5MzlaFw0yNjA2MDMxNzE5MzlaMDMxMTAvBgNV BAMTKEQxMjM0QjM0MkE3ODU2OTVEMTA3QjQxODREREYxREFCODlDNUQyNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCozHQmmtFHDaLc9hFsiyMuLTn T83/6+e43yWm6tbBKwmLdE8alw3fBhHjmiOlWJVQssSn5sZXsZDpvRX23nuMb8+8 Y+luzc6hJYh+gsGEGZVVugKCZ9QbZHO4ta48Tqzfq1pJpC1Zd/FnzJ/HAz9n6S1E oeTdMDJ4Y1Y1LmOiw27tu0abkZz8Z0yKC0DSBONEOWPUhE+FOq2qq/OU+VDf19b2 vMjbHhK3Gqixqsjw9JpGguI7lkfExi9z551MOOhCxFJ5Zdzb8skd7Vylx8bh30+I w9r5YyWx3JdnGPoqoagRGMQu1h48fX/2GUzMuqTF3pK1U7YX9IHB7v6pouK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0SNLNCp4VpXRB7QYTd8dq4nF0mowHwYDVR0j BBgwFoAUDSgC7EOQXuo4dgK5lLi1eQQchQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTNiYmYxZGEtZTMxNy00OGVmLWFkNmQtZmU4YThiZjA4NDAwLzAvMEQyODAyRUM0 MzkwNUVFQTM4NzYwMkI5OTRCOEI1NzkwNDFDODUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRDI4MDJFQzQzOTA1RUVBMzg3NjAyQjk5NEI4QjU3OTA0MUM4 NTA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTNiYmYxZGEtZTMxNy00OGVmLWFk NmQtZmU4YThiZjA4NDAwLzAvMEQyODAyRUM0MzkwNUVFQTM4NzYwMkI5OTRCOEI1 NzkwNDFDODUwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVh3Otz5wjypKueX78DC12ToceV68IkLkwj JhxVgKbqCSCvamGqVLwDwZNe5tO1DyNApI4QtMWITmfzJSgvf1xb7E6C4FTCY2Vg aAKZDcQ8qiqLd2c2AaFGWlwLTNZXNJzAnwZEh5zTIUYuPsqtowvXD/ZWf8YFXysu F15Mme1DoUeuaV+VP2P5NP9idcEAySWQGqgaUM/6c3yQ7K1clM2uRKRAQ67jbRN/ EOT337OVyt/xdzxYoQnzBUtgrpUcyiwMFXnSSsD9y6RmsUZiihgURbSTLTQmyHOZ EOUuSmXwPeRxPwOJMjaz7mfD5dvwBAdkNwofRvUcRZBoaAH2CME= -----END CERTIFICATE-----Generated at Tue Jun 2 21:32:01 2026 by rpki-client