$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft File: 2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft (raw, json) Hash identifier: 6Oo2XVIV9evw3eQiGmACSI1lfMLsgGKInVuwME8CR+A= Subject key identifier: 94:9E:28:0D:3A:E2:F3:0E:BA:D0:6D:A5:1B:9F:48:22:F7:DE:99:F7 Authority key identifier: 2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5 Certificate issuer: /CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5 Certificate serial: 74BC061564B2BF3200B1DA140BB8429CA207DBD2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 20:08:36 +0000 Manifest this update: Tue 16 Jun 2026 20:03:36 +0000 Manifest next update: Wed 17 Jun 2026 23:42:36 +0000 Files and hashes: 1: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: K2AeuLRVAE8BPE4wuWW8WhZGZyYvk9GHwxpL0SCIDfk=) 2: 2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl (hash: JN3ALIwdEPGeOJCIVqXoQW+q/MHijuogKdJDiyCdhCY=) 3: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: 8wKUF9NYC7pRZOxvlEf5LxZ2nZECYvwr1BSS5u1G+4Y=) 4: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: 8N1ryLqGS1Ck4AODHf8NX/rVMxyMRb5QCwGLiIIXGg8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:bc:06:15:64:b2:bf:32:00:b1:da:14:0b:b8:42:9c:a2:07:db:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5 Validity Not Before: Jun 16 20:03:36 2026 GMT Not After : Jun 17 23:42:36 2026 GMT Subject: CN=949E280D3AE2F30EBAD06DA51B9F4822F7DE99F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b4:0d:38:11:61:47:4f:dd:d8:41:28:4e:bf: 15:c5:41:8d:0c:76:8b:1d:e8:3b:66:a7:bb:48:05: 0d:7a:20:c5:7a:01:7e:d4:44:67:cd:8a:14:84:73: 4e:34:34:ef:3a:d7:1b:01:83:4f:be:52:8e:98:28: 45:32:c1:23:d0:8f:e2:db:4f:1c:b5:52:c7:1e:2b: 52:a4:ec:af:44:01:d7:b2:03:80:77:18:31:8c:df: 42:40:35:58:ab:c2:84:b2:4e:60:8d:4b:4c:ad:a8: d7:54:b3:4e:75:30:27:07:02:0f:db:74:a8:d3:a7: b2:ef:c5:57:95:f7:f8:d1:d9:9f:f6:c8:a4:16:2b: bc:4f:a2:33:04:fa:70:6c:9b:fe:a0:a9:0d:8d:c8: bd:36:7f:c7:24:4a:89:66:4f:aa:0d:88:b1:61:7f: 6b:46:25:65:4d:fc:b9:03:79:7a:32:63:c4:77:34: 68:80:88:3f:45:8b:ce:0d:0d:0d:63:5a:d9:d6:56: 04:cf:c2:88:9f:b6:70:3f:49:ea:75:e5:fc:56:43: 1b:f2:68:d0:27:d5:17:9a:43:a5:56:5f:a3:a1:72: f2:cd:0a:3f:67:3a:58:60:f2:41:f9:8a:09:ac:3d: 81:8e:c3:de:dd:f8:9a:4b:8a:f1:5e:e1:d8:34:29: 88:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9E:28:0D:3A:E2:F3:0E:BA:D0:6D:A5:1B:9F:48:22:F7:DE:99:F7 X509v3 Authority Key Identifier: keyid:2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:ad:cb:74:2e:8b:1b:26:8f:03:55:fa:7c:98:74:25:e7:6f: 5e:23:e8:d7:90:b0:21:c8:6f:4f:10:8c:81:29:c0:ec:f0:25: 2b:26:c5:e7:bd:d2:90:d1:92:b7:a3:b0:e6:ea:e2:28:6b:b6: 50:c8:9a:ab:c4:0b:21:f2:a1:08:5d:d3:21:51:cc:2d:52:90: 16:d3:01:d0:0f:49:cf:ea:db:a7:49:91:4e:23:f4:3e:17:42: 5d:83:2a:85:86:6a:49:19:a8:6f:29:36:38:e5:f6:33:9e:bc: 35:40:4f:f6:b1:b3:6a:c1:11:ce:53:b5:ef:16:da:aa:08:ce: 0d:14:c3:2d:3d:c9:b2:2f:9d:0d:d4:39:7b:00:95:75:07:50: 45:18:3e:80:57:73:c8:2f:a6:fc:56:0b:af:43:83:0b:43:20: 19:63:bd:9a:af:0a:57:a7:71:9a:95:2f:d3:6e:ef:79:a9:7d: 31:8d:bb:d9:1e:4f:8d:69:13:38:0d:2b:85:ae:06:be:9a:2b: 46:b1:55:3e:55:c6:6f:a5:99:6f:3f:87:a2:ba:cb:81:25:3a: 13:a2:15:bd:3c:9c:0b:5f:9d:24:5e:12:d7:42:86:02:d1:df: d0:e2:1a:59:c4:a9:38:33:ff:bc:59:97:3a:89:f7:ff:a4:cf: 68:42:05:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdLwGFWSyvzIAsdoUC7hCnKIH29IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFFMTQzM0JCODJGMjc3MTZERjUyNkRBRENDQzRDMkIz NzU4OUNBNTAeFw0yNjA2MTYyMDAzMzZaFw0yNjA2MTcyMzQyMzZaMDMxMTAvBgNV BAMTKDk0OUUyODBEM0FFMkYzMEVCQUQwNkRBNTFCOUY0ODIyRjdERTk5RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGtA04EWFHT93YQShOvxXFQY0M dosd6Dtmp7tIBQ16IMV6AX7URGfNihSEc040NO861xsBg0++Uo6YKEUywSPQj+Lb Txy1UsceK1Kk7K9EAdeyA4B3GDGM30JANVirwoSyTmCNS0ytqNdUs051MCcHAg/b dKjTp7LvxVeV9/jR2Z/2yKQWK7xPojME+nBsm/6gqQ2NyL02f8ckSolmT6oNiLFh f2tGJWVN/LkDeXoyY8R3NGiAiD9Fi84NDQ1jWtnWVgTPwoiftnA/Sep15fxWQxvy aNAn1ReaQ6VWX6OhcvLNCj9nOlhg8kH5igmsPYGOw97d+JpLivFe4dg0KYhvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlJ4oDTri8w660G2lG59IIvfemfcwHwYDVR0j BBgwFoAUKuFDO7gvJ3Ft9Sba3MxMKzdYnKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQwMTFhMWMtYTBhZC00ZDkzLTg2YWYtM2YwYWFkZDk2ODRmLzAvMkFFMTQzM0JC ODJGMjc3MTZERjUyNkRBRENDQzRDMkIzNzU4OUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yQUUxNDMzQkI4MkYyNzcxNkRGNTI2REFEQ0NDNEMyQjM3NTg5 Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvMkFFMTQzM0JCODJGMjc3MTZERjUyNkRBRENDQzRD MkIzNzU4OUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALity3QuixsmjwNV+nyYdCXnb14j6NeQsCHI b08QjIEpwOzwJSsmxee90pDRkrejsObq4ihrtlDImqvECyHyoQhd0yFRzC1SkBbT AdAPSc/q26dJkU4j9D4XQl2DKoWGakkZqG8pNjjl9jOevDVAT/axs2rBEc5Tte8W 2qoIzg0Uwy09ybIvnQ3UOXsAlXUHUEUYPoBXc8gvpvxWC69DgwtDIBljvZqvClen cZqVL9Nu73mpfTGNu9keT41pEzgNK4WuBr6aK0axVT5Vxm+lmW8/h6K6y4ElOhOi Fb08nAtfnSReEtdChgLR39DiGlnEqTgz/7xZlzqJ9/+kz2hCBcM= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:12 2026 by rpki-client