$ rpki-client -vvf rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft File: 2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft (raw, json) Hash identifier: O58JmsTU21KXW9Q0bz5B7uGgbfOmNv60FFVdtbBGMuA= Subject key identifier: 13:C1:69:E8:45:F4:54:D4:02:91:C6:18:32:C7:B8:C7:B4:B5:C8:73 Authority key identifier: 2E:1A:4B:EC:A1:A3:FE:AE:F0:C7:92:4E:EE:B4:50:3F:88:5A:87:7C Certificate issuer: /CN=2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C Certificate serial: 678BCA6F083B4B12AF8F0F947E24AD8ED302E2DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 03:32:07 +0000 Manifest this update: Wed 17 Jun 2026 03:27:07 +0000 Manifest next update: Thu 18 Jun 2026 06:25:07 +0000 Files and hashes: 1: 2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl (hash: L5D0xvunh8Yb8PPUAZBaLQuEFQxSssQN7ZSPImOO484=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:8b:ca:6f:08:3b:4b:12:af:8f:0f:94:7e:24:ad:8e:d3:02:e2:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C Validity Not Before: Jun 17 03:27:07 2026 GMT Not After : Jun 18 06:25:07 2026 GMT Subject: CN=13C169E845F454D40291C61832C7B8C7B4B5C873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b2:83:ba:a4:d2:1e:f7:78:9f:80:a0:6c:c7: d8:f4:0f:43:59:04:15:92:a7:c7:68:94:76:32:d8: c4:f9:2b:11:1d:a3:87:43:38:82:68:43:02:58:d5: 21:d8:7b:f7:68:75:4e:11:25:a4:a6:79:f1:99:cc: 81:9f:3a:87:10:58:80:6e:66:1c:d1:29:33:3a:b0: cb:3d:1c:b7:39:81:0b:3a:18:34:2a:6f:61:dd:84: 6d:7e:8f:7c:33:b3:a2:cc:6c:92:a6:f1:f5:79:22: a1:db:6a:4d:28:5f:61:79:65:54:53:28:b9:a5:e4: aa:b5:96:1b:91:1a:5f:0a:98:49:90:68:bd:79:6f: e1:d3:bf:41:bc:b3:87:46:02:5a:09:bd:91:80:f4: 51:01:6a:7f:fb:ff:56:82:25:ce:09:f1:3c:5a:c6: ed:c4:83:96:42:2f:40:e5:af:87:7c:42:dd:8d:80: 8e:f4:22:91:46:ed:8b:8c:42:95:8a:b6:72:6e:1f: 96:66:e4:29:57:7f:e6:a2:59:84:af:9d:e7:6c:c4: a7:e4:88:7d:97:0f:93:df:f1:f0:ae:96:55:25:f9: 88:f5:3c:36:70:51:3e:df:31:ef:d5:7c:4f:7f:a1: 6d:65:11:36:a0:b2:17:8f:14:43:c4:ec:45:99:b4: f5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C1:69:E8:45:F4:54:D4:02:91:C6:18:32:C7:B8:C7:B4:B5:C8:73 X509v3 Authority Key Identifier: keyid:2E:1A:4B:EC:A1:A3:FE:AE:F0:C7:92:4E:EE:B4:50:3F:88:5A:87:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:d1:2e:36:f9:0c:97:1e:9c:1d:dc:3a:e4:e2:26:9c:ce:5d: f6:fe:d2:e3:9b:72:06:f4:6f:a5:70:39:bd:b9:24:e9:98:7c: 8d:54:30:8d:cf:35:c3:a6:7e:8e:8a:0b:52:91:3b:f7:c7:db: 91:84:7a:e6:52:4f:68:d8:ae:2e:66:49:96:20:83:1e:74:a1: c2:09:f3:20:0f:b5:ec:7b:89:2f:86:16:94:4a:64:02:97:26: 82:d1:06:a3:e3:1a:20:87:2d:7b:df:10:ba:f3:42:73:fa:97: 36:1b:d9:3b:62:4a:bd:32:c7:b2:4b:f9:e3:a5:4f:66:fe:0e: 82:af:65:04:36:6b:9d:54:e3:7d:ca:ba:05:36:59:b1:76:9e: e9:cc:a9:44:f5:30:1c:f2:7f:c6:6e:d4:ea:0b:bd:93:12:95: 15:71:ef:ad:26:5f:93:43:46:02:b3:26:43:3d:31:0e:01:0d: 54:57:78:d8:3a:e7:0e:8a:41:67:3d:97:73:b6:2f:bc:12:37: 99:16:38:34:9e:6d:41:09:a8:84:56:b9:49:9c:0a:19:c1:08: b0:70:2d:fa:f5:02:45:c7:1a:72:87:1d:95:8e:b7:3b:b2:0e: c5:c2:c7:ab:b4:9a:6b:2b:6a:10:03:b4:38:26:be:10:9d:75: 29:30:2c:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ4vKbwg7SxKvjw+UfiStjtMC4towDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxQTRCRUNBMUEzRkVBRUYwQzc5MjRFRUVCNDUwM0Y4 ODVBODc3QzAeFw0yNjA2MTcwMzI3MDdaFw0yNjA2MTgwNjI1MDdaMDMxMTAvBgNV BAMTKDEzQzE2OUU4NDVGNDU0RDQwMjkxQzYxODMyQzdCOEM3QjRCNUM4NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYsoO6pNIe93ifgKBsx9j0D0NZ BBWSp8dolHYy2MT5KxEdo4dDOIJoQwJY1SHYe/dodU4RJaSmefGZzIGfOocQWIBu ZhzRKTM6sMs9HLc5gQs6GDQqb2HdhG1+j3wzs6LMbJKm8fV5IqHbak0oX2F5ZVRT KLml5Kq1lhuRGl8KmEmQaL15b+HTv0G8s4dGAloJvZGA9FEBan/7/1aCJc4J8Txa xu3Eg5ZCL0Dlr4d8Qt2NgI70IpFG7YuMQpWKtnJuH5Zm5ClXf+aiWYSvnedsxKfk iH2XD5Pf8fCullUl+Yj1PDZwUT7fMe/VfE9/oW1lETagshePFEPE7EWZtPU1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE8Fp6EX0VNQCkcYYMse4x7S1yHMwHwYDVR0j BBgwFoAULhpL7KGj/q7wx5JO7rRQP4hah3wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDEzNjhhZTMtZGQxMi00YWEzLTg5NDgtNTQ2ZGUwNGM1MWU0LzAvMkUxQTRCRUNB MUEzRkVBRUYwQzc5MjRFRUVCNDUwM0Y4ODVBODc3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yRTFBNEJFQ0ExQTNGRUFFRjBDNzkyNEVFRUI0NTAzRjg4NUE4 NzdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDEzNjhhZTMtZGQxMi00YWEzLTg5 NDgtNTQ2ZGUwNGM1MWU0LzAvMkUxQTRCRUNBMUEzRkVBRUYwQzc5MjRFRUVCNDUw M0Y4ODVBODc3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDRLjb5DJcenB3cOuTiJpzOXfb+0uObcgb0 b6VwOb25JOmYfI1UMI3PNcOmfo6KC1KRO/fH25GEeuZST2jYri5mSZYggx50ocIJ 8yAPtex7iS+GFpRKZAKXJoLRBqPjGiCHLXvfELrzQnP6lzYb2TtiSr0yx7JL+eOl T2b+DoKvZQQ2a51U433KugU2WbF2nunMqUT1MBzyf8Zu1OoLvZMSlRVx760mX5ND RgKzJkM9MQ4BDVRXeNg65w6KQWc9l3O2L7wSN5kWODSebUEJqIRWuUmcChnBCLBw Lfr1AkXHGnKHHZWOtzuyDsXCx6u0mmsrahADtDgmvhCddSkwLG8= -----END CERTIFICATE-----Generated at Wed Jun 17 10:44:09 2026 by rpki-client