$ rpki-client -vvf rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft File: B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft (raw, json) Hash identifier: apm2P/mBdfSKDA7II1Fc0g8V2IMGNY4HujvEcBVvWvg= Subject key identifier: 98:4E:51:22:4D:3F:17:FB:22:5B:47:09:04:EA:5D:6F:C4:B8:BE:1F Authority key identifier: B5:CF:A0:20:DD:4B:BF:D4:98:C5:E4:D8:4A:8D:63:09:73:87:49:CC Certificate issuer: /CN=B5CFA020DD4BBFD498C5E4D84A8D6309738749CC Certificate serial: 22021464A8D1AC83BF2E4EC651A12553BE5404D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:16:45 +0000 Manifest this update: Wed 17 Jun 2026 03:11:45 +0000 Manifest next update: Thu 18 Jun 2026 03:48:45 +0000 Files and hashes: 1: B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl (hash: IMbQjC3grcxeWYw+o9rFLdqE1czGjPxLZsl2KB73R0w=) 2: 3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa (hash: KOBMUeuuJtkuzoTiB4FBFCyBVV1+45BqlCrbct7wq3M=) 3: 3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa (hash: xB0/WgkgeQpbT+DgIUgkpcHnnIC1tIl18yTmoTUITOQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:02:14:64:a8:d1:ac:83:bf:2e:4e:c6:51:a1:25:53:be:54:04:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5CFA020DD4BBFD498C5E4D84A8D6309738749CC Validity Not Before: Jun 17 03:11:45 2026 GMT Not After : Jun 18 03:48:45 2026 GMT Subject: CN=984E51224D3F17FB225B470904EA5D6FC4B8BE1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:15:01:b8:8e:dc:30:07:95:56:62:19:da:29: d0:6f:b6:cf:2b:4d:57:91:be:a3:f6:29:7b:72:ee: b2:75:cc:97:2d:cc:88:77:56:12:ff:3c:96:cf:bd: de:81:ee:e6:68:31:7b:53:ff:fb:2a:48:99:a8:2d: 19:ef:4a:cb:45:8d:9d:a2:6b:06:18:a6:37:af:a4: 9a:88:1c:b1:55:d9:80:5e:20:54:c7:10:fd:da:81: 78:f4:27:d7:eb:4d:83:2e:d6:66:8e:97:a9:7f:93: 24:cf:f1:0f:f0:a9:ac:68:64:e9:49:d7:71:e8:0b: e1:5c:ee:fa:cf:b5:35:58:5b:17:3d:14:3b:cd:9e: 02:b0:04:a3:73:fb:92:e2:ef:76:f2:04:46:c1:57: e7:2f:b1:25:d9:8f:b0:28:0e:18:21:82:bb:cd:15: ed:d5:28:64:35:00:50:69:71:15:3a:33:d9:38:01: 94:bd:89:05:41:3f:f4:50:16:f5:ed:6f:16:72:97: 2a:ce:a4:c0:e0:21:a0:15:db:fb:ab:50:b2:e0:01: 6c:c7:63:ea:82:bb:d7:e3:0d:9d:5a:0a:ce:71:30: 52:22:4c:ec:9a:9e:6c:c3:a1:c5:ef:71:4e:b7:6d: 21:87:e9:25:f8:29:42:1e:16:34:b2:f9:bc:cb:05: 00:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4E:51:22:4D:3F:17:FB:22:5B:47:09:04:EA:5D:6F:C4:B8:BE:1F X509v3 Authority Key Identifier: keyid:B5:CF:A0:20:DD:4B:BF:D4:98:C5:E4:D8:4A:8D:63:09:73:87:49:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:08:b4:2a:be:71:9e:b8:77:83:48:7c:7a:00:93:41:c4:b8: 1c:72:3f:49:e2:8d:6c:3c:d2:e1:3f:71:5f:23:35:55:39:1d: f6:1f:a3:dd:2b:98:54:91:cb:43:74:8b:cb:03:f0:77:d5:dd: 97:be:64:c6:72:c2:a1:d4:65:62:58:4c:89:7c:99:3d:bf:5a: 1d:e6:ac:8a:ee:34:57:08:5b:5e:ed:7f:d5:fb:e8:d7:ac:7d: a5:bc:ce:df:82:5c:bc:7a:50:9c:ab:65:b1:1c:c9:d1:a2:6c: 91:6d:17:14:96:2d:91:cd:c2:a2:18:3d:29:85:80:fd:4b:ed: ec:8a:5c:fd:b3:86:24:b8:25:34:9f:1a:31:8a:11:f7:6f:de: 8c:82:04:66:ec:b6:76:f1:de:f2:e9:45:65:97:6a:b2:61:14: b4:54:bd:97:f4:e9:53:28:f2:fd:5c:53:a1:4a:81:12:2b:d9: 03:42:8b:ff:af:9c:30:24:83:54:e5:12:73:44:58:d4:f5:bd: 1c:e5:d7:2c:45:8b:6a:3b:bf:1b:07:bd:76:5c:79:32:62:df: 2f:fa:ea:ea:6c:ef:26:fa:18:03:fc:2d:a4:5d:37:7b:61:a6: 9a:91:60:8c:3c:ec:dd:9c:22:d4:b4:29:dc:dc:15:49:97:4e: 3c:96:e6:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIgIUZKjRrIO/Lk7GUaElU75UBNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVDRkEwMjBERDRCQkZENDk4QzVFNEQ4NEE4RDYzMDk3 Mzg3NDlDQzAeFw0yNjA2MTcwMzExNDVaFw0yNjA2MTgwMzQ4NDVaMDMxMTAvBgNV BAMTKDk4NEU1MTIyNEQzRjE3RkIyMjVCNDcwOTA0RUE1RDZGQzRCOEJFMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmFQG4jtwwB5VWYhnaKdBvts8r TVeRvqP2KXty7rJ1zJctzIh3VhL/PJbPvd6B7uZoMXtT//sqSJmoLRnvSstFjZ2i awYYpjevpJqIHLFV2YBeIFTHEP3agXj0J9frTYMu1maOl6l/kyTP8Q/wqaxoZOlJ 13HoC+Fc7vrPtTVYWxc9FDvNngKwBKNz+5Li73byBEbBV+cvsSXZj7AoDhghgrvN Fe3VKGQ1AFBpcRU6M9k4AZS9iQVBP/RQFvXtbxZylyrOpMDgIaAV2/urULLgAWzH Y+qCu9fjDZ1aCs5xMFIiTOyanmzDocXvcU63bSGH6SX4KUIeFjSy+bzLBQA9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmE5RIk0/F/siW0cJBOpdb8S4vh8wHwYDVR0j BBgwFoAUtc+gIN1Lv9SYxeTYSo1jCXOHScwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGEwZmJiNTUtMWRkOC00ZjhiLWI4OTAtNGEyYzBhMDExMWRiLzAvQjVDRkEwMjBE RDRCQkZENDk4QzVFNEQ4NEE4RDYzMDk3Mzg3NDlDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNUNGQTAyMERENEJCRkQ0OThDNUU0RDg0QThENjMwOTczODc0 OUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGEwZmJiNTUtMWRkOC00ZjhiLWI4 OTAtNGEyYzBhMDExMWRiLzAvQjVDRkEwMjBERDRCQkZENDk4QzVFNEQ4NEE4RDYz MDk3Mzg3NDlDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQItCq+cZ64d4NIfHoAk0HEuBxyP0nijWw8 0uE/cV8jNVU5HfYfo90rmFSRy0N0i8sD8HfV3Ze+ZMZywqHUZWJYTIl8mT2/Wh3m rIruNFcIW17tf9X76NesfaW8zt+CXLx6UJyrZbEcydGibJFtFxSWLZHNwqIYPSmF gP1L7eyKXP2zhiS4JTSfGjGKEfdv3oyCBGbstnbx3vLpRWWXarJhFLRUvZf06VMo 8v1cU6FKgRIr2QNCi/+vnDAkg1TlEnNEWNT1vRzl1yxFi2o7vxsHvXZceTJi3y/6 6ups7yb6GAP8LaRdN3thppqRYIw87N2cItS0KdzcFUmXTjyW5sA= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:16 2026 by rpki-client