$ rpki-client -vvf rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft File: 2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft (raw, json) Hash identifier: 2kwNJ7XAOWdJa+vpjT3aVwYEC40fuhYKc0MNsL7LfvQ= Subject key identifier: 4D:ED:EA:B9:CB:22:DE:46:B1:B4:02:7A:67:68:B9:98:12:D5:CF:2F Authority key identifier: 2C:7A:30:2B:26:8D:C5:40:59:CE:B8:8F:7A:C2:19:8D:98:52:CB:D3 Certificate issuer: /CN=2C7A302B268DC54059CEB88F7AC2198D9852CBD3 Certificate serial: 2C2549100E76F86FF467BA9332BC07440E6BD5FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:16:40 +0000 Manifest this update: Wed 17 Jun 2026 07:11:40 +0000 Manifest next update: Thu 18 Jun 2026 10:02:40 +0000 Files and hashes: 1: 2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl (hash: 1IiwLb5HDNPRGXwSCCUmLR/Y24azUhM8ndtnd2vVlo8=) 2: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: bJqqtyMrUB6ove5aksmXoGy9PsBIFYzerBlsfdZy7oQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:25:49:10:0e:76:f8:6f:f4:67:ba:93:32:bc:07:44:0e:6b:d5:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C7A302B268DC54059CEB88F7AC2198D9852CBD3 Validity Not Before: Jun 17 07:11:40 2026 GMT Not After : Jun 18 10:02:40 2026 GMT Subject: CN=4DEDEAB9CB22DE46B1B4027A6768B99812D5CF2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b7:2a:a1:ba:1b:d6:ef:fa:d8:bf:10:58:33: 5b:93:7d:37:31:3d:9c:e2:07:9d:f0:43:0c:d9:7b: 09:70:eb:14:db:ad:77:19:cb:0b:d8:f7:79:11:5b: c2:ee:06:67:7a:5c:ab:36:04:23:ad:f0:c6:ae:10: 0f:08:bb:eb:12:3c:33:cf:8e:90:0f:11:3f:85:5d: 8b:b2:d9:81:73:07:47:b2:60:48:93:10:38:85:51: c0:b7:4b:44:59:78:86:a6:e4:b9:0e:3a:69:d9:1d: 9f:a7:f4:4b:da:09:67:65:18:4f:e6:2e:8d:39:dc: 17:99:d7:5b:08:1f:a1:b5:56:03:31:72:0e:f8:10: 7a:8f:fd:d8:57:2c:d3:35:20:7f:34:25:57:94:db: b6:ae:1d:e7:d3:ab:57:d0:cf:9a:ed:78:23:f8:a3: 57:66:60:9c:6a:8d:94:b3:74:a8:41:70:89:57:e5: 49:18:f7:0c:e7:a8:c6:9d:25:39:98:97:f2:22:bf: bf:09:15:5a:2d:45:ec:f2:4f:cb:68:fc:b3:47:1c: 50:f3:0a:e5:b7:f8:97:e4:2b:56:70:d0:fa:fb:c7: e2:0b:08:31:b1:92:57:14:35:6e:db:38:6f:7a:c6: 5a:c0:4f:35:2b:c3:55:1c:b3:a4:48:ba:d6:75:58: 47:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:ED:EA:B9:CB:22:DE:46:B1:B4:02:7A:67:68:B9:98:12:D5:CF:2F X509v3 Authority Key Identifier: keyid:2C:7A:30:2B:26:8D:C5:40:59:CE:B8:8F:7A:C2:19:8D:98:52:CB:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:3d:d6:4a:be:f8:5c:8f:fa:47:64:f0:c7:3d:19:54:7e:ae: a7:ba:0d:c8:6c:47:9f:5d:5a:5b:47:a5:69:76:83:33:af:92: d5:b2:56:28:82:1c:4a:28:a0:62:5b:98:3b:16:80:ea:fe:d3: d5:94:9b:ca:26:ad:1f:62:5f:39:7b:6e:9b:1f:85:5e:0e:22: ff:19:6a:a8:9b:47:26:9b:12:6f:97:d6:e6:d8:64:41:02:f4: c7:ca:5e:e9:00:9b:1d:ce:1c:8c:20:6d:72:70:cd:24:6f:5b: 30:a1:5d:d8:7f:ca:09:f5:eb:02:52:f5:c8:f6:a4:61:4c:22: 8b:f7:c9:b6:89:68:09:d6:13:65:03:05:43:0e:0f:8f:d6:61: d2:08:75:72:70:26:e1:03:ee:57:92:7a:1b:1c:e7:4e:b6:7c: b3:39:10:6f:d9:59:62:03:00:b1:c3:07:3b:37:e0:83:dc:be: 6a:6d:51:7c:02:81:87:22:fa:6e:55:7c:02:6a:d6:b8:54:9d: d6:7c:5c:da:5e:13:95:5e:0d:c5:02:ce:68:7a:3e:3d:fa:98: 04:cd:da:7d:6d:7a:6c:88:0a:f7:9e:3c:47:2f:a6:41:6d:df: 17:0a:3b:08:00:3b:26:f5:1a:b0:ce:d3:2a:81:1e:78:49:81: 37:4f:8c:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULCVJEA52+G/0Z7qTMrwHRA5r1f0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM3QTMwMkIyNjhEQzU0MDU5Q0VCODhGN0FDMjE5OEQ5 ODUyQ0JEMzAeFw0yNjA2MTcwNzExNDBaFw0yNjA2MTgxMDAyNDBaMDMxMTAvBgNV BAMTKDRERURFQUI5Q0IyMkRFNDZCMUI0MDI3QTY3NjhCOTk4MTJENUNGMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRtyqhuhvW7/rYvxBYM1uTfTcx PZziB53wQwzZewlw6xTbrXcZywvY93kRW8LuBmd6XKs2BCOt8MauEA8Iu+sSPDPP jpAPET+FXYuy2YFzB0eyYEiTEDiFUcC3S0RZeIam5LkOOmnZHZ+n9EvaCWdlGE/m Lo053BeZ11sIH6G1VgMxcg74EHqP/dhXLNM1IH80JVeU27auHefTq1fQz5rteCP4 o1dmYJxqjZSzdKhBcIlX5UkY9wznqMadJTmYl/Iiv78JFVotRezyT8to/LNHHFDz CuW3+JfkK1Zw0Pr7x+ILCDGxklcUNW7bOG96xlrATzUrw1Ucs6RIutZ1WEebAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTe3qucsi3kaxtAJ6Z2i5mBLVzy8wHwYDVR0j BBgwFoAULHowKyaNxUBZzriPesIZjZhSy9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA1YWY4MjItYmVhOS00OGYzLWFhMTItYjI3MzcxNjJmYzQyLzAvMkM3QTMwMkIy NjhEQzU0MDU5Q0VCODhGN0FDMjE5OEQ5ODUyQ0JEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQzdBMzAyQjI2OERDNTQwNTlDRUI4OEY3QUMyMTk4RDk4NTJD QkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA1YWY4MjItYmVhOS00OGYzLWFh MTItYjI3MzcxNjJmYzQyLzAvMkM3QTMwMkIyNjhEQzU0MDU5Q0VCODhGN0FDMjE5 OEQ5ODUyQ0JEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGw91kq++FyP+kdk8Mc9GVR+rqe6DchsR59d WltHpWl2gzOvktWyViiCHEoooGJbmDsWgOr+09WUm8omrR9iXzl7bpsfhV4OIv8Z aqibRyabEm+X1ubYZEEC9MfKXukAmx3OHIwgbXJwzSRvWzChXdh/ygn16wJS9cj2 pGFMIov3ybaJaAnWE2UDBUMOD4/WYdIIdXJwJuED7leSehsc5062fLM5EG/ZWWID ALHDBzs34IPcvmptUXwCgYci+m5VfAJq1rhUndZ8XNpeE5VeDcUCzmh6Pj36mATN 2n1temyICveePEcvpkFt3xcKOwgAOyb1GrDO0yqBHnhJgTdPjC0= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:28 2026 by rpki-client