$ rpki-client -vvf rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft File: 2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft (raw, json) Hash identifier: qs1lYpcgj5eCrOtWNLui3wqjurBKiOhiJQLLfIHYp5s= Subject key identifier: 83:CF:CD:75:BA:4D:3C:F4:63:C9:BB:B4:41:33:F7:C7:61:BD:71:DC Authority key identifier: 2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14 Certificate issuer: /CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714 Certificate serial: 74D7CC49D387C52659FD938B8D166F8357DF9CC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:43:51 +0000 Manifest this update: Wed 17 Jun 2026 00:38:51 +0000 Manifest next update: Thu 18 Jun 2026 02:27:51 +0000 Files and hashes: 1: 2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl (hash: NCpDC4B5EMmjjU/dUOlW+IGpeYc32zaFsdk6+x8v53A=) 2: 3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (hash: ib7HPEQ/1sTUx6nXpMyLf2LdpmFve2tZtQrzXQVTi5I=) 3: 3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa (hash: hq7t6IGdrToWC5Y/u0/ln3majWig7C7xPRHwOMHho0s=) 4: 3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (hash: HyudSDnKB8bCiy0S2RrKH+D8dZ2RY7de+E6PViymOWI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d7:cc:49:d3:87:c5:26:59:fd:93:8b:8d:16:6f:83:57:df:9c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714 Validity Not Before: Jun 17 00:38:51 2026 GMT Not After : Jun 18 02:27:51 2026 GMT Subject: CN=83CFCD75BA4D3CF463C9BBB44133F7C761BD71DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f7:25:a9:60:64:37:16:06:90:4a:87:70:2d: 9b:57:ad:be:82:90:8a:be:a2:cd:a8:b7:17:c6:05: 8b:8e:1b:35:60:6b:b4:0b:1f:2d:1a:09:23:a5:a1: 73:8c:af:71:fd:2c:65:85:a1:f8:d0:15:b4:bd:4c: 99:87:2e:c0:34:4f:05:49:f4:6a:aa:01:2a:39:13: 39:db:0b:89:4d:e2:ef:23:66:ab:e4:f2:e4:24:19: b8:bf:0f:f2:0f:fe:4f:2e:5a:c2:5f:ea:81:3e:f5: 91:e7:6f:0d:88:bc:38:4e:9c:5c:b9:73:a7:f2:f6: be:bb:83:f1:05:0e:c3:0f:53:38:d4:66:2c:e6:6b: 5d:db:e8:2a:44:5e:a3:42:75:81:a8:86:36:59:83: 53:97:1f:1d:2c:19:d3:57:5b:1b:de:58:1e:8f:9e: 82:6e:69:2d:1e:f8:a9:e9:a2:e1:b6:9f:0f:76:e1: c6:e0:5f:e2:09:d0:90:f5:7e:01:33:6e:91:1d:2c: cd:04:13:4e:22:25:cd:50:b0:5d:e9:ab:64:17:0b: 05:44:8d:7e:3a:bb:84:89:4e:a4:c2:00:c4:fc:67: 2b:ec:a2:2d:78:1d:9e:e1:1d:4b:91:42:3a:f5:9f: 53:59:83:31:6b:00:bb:7a:53:ae:f0:0e:27:99:c6: 41:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CF:CD:75:BA:4D:3C:F4:63:C9:BB:B4:41:33:F7:C7:61:BD:71:DC X509v3 Authority Key Identifier: keyid:2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:33:0b:9a:a5:14:e8:ed:f7:b6:18:5c:16:dd:8c:04:b5:d9: d8:39:57:fe:f6:0a:71:e3:5d:c6:3d:4f:56:d7:38:b2:95:b5: 34:e6:f2:af:88:aa:5b:86:83:96:b0:a7:2d:42:a8:3a:f9:ca: c7:e7:58:48:54:f8:7a:86:7b:32:2e:34:af:d3:2d:17:61:8a: 75:63:6f:f0:29:52:f8:5e:45:2e:28:40:44:c8:0b:54:91:d8: ff:e6:9a:fb:4d:24:ad:ad:0b:70:e1:ba:cb:9b:b8:3f:52:6e: b5:c1:3b:88:a7:f1:e5:d6:ac:8f:d8:49:6b:a3:75:a0:e4:cf: d5:b1:eb:93:b1:17:94:29:84:55:d1:ee:83:fe:9c:02:c0:16: ed:85:ca:e6:40:92:52:63:4e:78:e4:df:42:c4:25:77:2a:39: 14:d9:2b:64:10:3c:98:9e:3e:d0:06:19:a9:33:cb:16:43:54: 39:da:88:a3:40:30:9f:6f:16:11:de:17:49:1c:b6:5f:e3:d0: 3c:d4:3f:98:94:d0:74:63:39:cb:12:d0:0c:3e:04:bd:fb:77: 1d:58:9f:57:72:1d:10:1d:8e:48:83:9b:cf:63:52:d6:10:d7: a1:c7:98:11:37:51:2e:37:4f:df:bd:a1:39:92:18:a3:4d:da: ab:0d:48:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdNfMSdOHxSZZ/ZOLjRZvg1ffnMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRBRkMyNTAzMDUwOUFENzEyNkJCRDkzQUJDQ0I5NUU3 QTE4NjcxNDAeFw0yNjA2MTcwMDM4NTFaFw0yNjA2MTgwMjI3NTFaMDMxMTAvBgNV BAMTKDgzQ0ZDRDc1QkE0RDNDRjQ2M0M5QkJCNDQxMzNGN0M3NjFCRDcxREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC9yWpYGQ3FgaQSodwLZtXrb6C kIq+os2otxfGBYuOGzVga7QLHy0aCSOloXOMr3H9LGWFofjQFbS9TJmHLsA0TwVJ 9GqqASo5EznbC4lN4u8jZqvk8uQkGbi/D/IP/k8uWsJf6oE+9ZHnbw2IvDhOnFy5 c6fy9r67g/EFDsMPUzjUZizma13b6CpEXqNCdYGohjZZg1OXHx0sGdNXWxveWB6P noJuaS0e+KnpouG2nw924cbgX+IJ0JD1fgEzbpEdLM0EE04iJc1QsF3pq2QXCwVE jX46u4SJTqTCAMT8Zyvsoi14HZ7hHUuRQjr1n1NZgzFrALt6U67wDieZxkFlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg8/NdbpNPPRjybu0QTP3x2G9cdwwHwYDVR0j BBgwFoAULa/CUDBQmtcSa72Tq8y5XnoYZxQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0YmI0YzgtNmZjZi00ZmZmLWJkY2MtZmUxZmNjZWUxMDQ1LzAvMkRBRkMyNTAz MDUwOUFENzEyNkJCRDkzQUJDQ0I5NUU3QTE4NjcxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREFGQzI1MDMwNTA5QUQ3MTI2QkJEOTNBQkNDQjk1RTdBMTg2 NzE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0YmI0YzgtNmZjZi00ZmZmLWJk Y2MtZmUxZmNjZWUxMDQ1LzAvMkRBRkMyNTAzMDUwOUFENzEyNkJCRDkzQUJDQ0I5 NUU3QTE4NjcxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAzC5qlFOjt97YYXBbdjAS12dg5V/72CnHj XcY9T1bXOLKVtTTm8q+IqluGg5awpy1CqDr5ysfnWEhU+HqGezIuNK/TLRdhinVj b/ApUvheRS4oQETIC1SR2P/mmvtNJK2tC3DhusubuD9SbrXBO4in8eXWrI/YSWuj daDkz9Wx65OxF5QphFXR7oP+nALAFu2FyuZAklJjTnjk30LEJXcqORTZK2QQPJie PtAGGakzyxZDVDnaiKNAMJ9vFhHeF0kctl/j0DzUP5iU0HRjOcsS0Aw+BL37dx1Y n1dyHRAdjkiDm89jUtYQ16HHmBE3US43T9+9oTmSGKNN2qsNSM8= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:17 2026 by rpki-client