$ rpki-client -vvf rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft File: 2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft (raw, json) Hash identifier: mqFm9yFN5sG8hHAVe1fvTsCjWx8jZfaunJ2Pjyk5vdg= Subject key identifier: 2A:CF:DE:90:2B:C5:43:1C:F4:7A:D2:AC:C9:8B:8B:5C:72:40:0E:76 Authority key identifier: 2D:88:AC:79:1B:0C:C1:B7:D9:21:EC:E6:60:CD:E0:CF:2E:E8:ED:72 Certificate issuer: /CN=2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72 Certificate serial: 6FDCFEBD7BE199B626E4DD583BD87129CEC90D24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:44:47 +0000 Manifest this update: Wed 17 Jun 2026 05:39:47 +0000 Manifest next update: Thu 18 Jun 2026 09:22:47 +0000 Files and hashes: 1: 3130332e3136322e3234302e302f32332d3234203d3e20313431363731.roa (hash: 4S3CjwY52E8pJFph27PsS9L2iHBVLGusILVU9iKtoiI=) 2: 2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl (hash: BZx++kjV/nxpisvvqmZgiA7Iian3rQ6uG5ipjh3D54U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:dc:fe:bd:7b:e1:99:b6:26:e4:dd:58:3b:d8:71:29:ce:c9:0d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72 Validity Not Before: Jun 17 05:39:47 2026 GMT Not After : Jun 18 09:22:47 2026 GMT Subject: CN=2ACFDE902BC5431CF47AD2ACC98B8B5C72400E76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:28:f4:02:85:78:16:32:40:43:0b:07:43: 09:05:7c:3c:72:e7:1e:fa:2b:0a:00:3f:17:fd:a5: 95:bf:b3:36:d4:73:3c:fc:aa:1b:0f:08:37:43:57: f6:fd:fb:06:0a:d4:c6:b1:72:c3:3e:df:37:da:ec: cc:6f:9f:d4:8b:a4:83:41:3d:17:23:f5:dc:fa:98: d9:55:af:8a:83:e4:7f:10:2b:c7:66:71:a3:73:9c: 3f:1e:46:26:88:db:aa:e9:35:0c:f4:00:0c:03:a4: 75:a8:5a:7a:5a:29:58:47:4e:46:a1:dd:a5:7a:b6: 5d:0c:96:49:f8:11:05:02:93:25:92:f5:55:e8:a9: c1:1d:c8:57:32:b0:a5:92:0f:b3:d7:90:c3:cc:1e: 58:71:bc:66:c0:89:ed:fb:17:2d:a2:f8:17:54:ea: fb:1c:ac:4f:c7:e9:12:93:73:c0:17:28:bb:3a:f1: 42:5f:ef:88:a7:30:0e:96:71:62:e9:a8:a6:27:8e: 94:4f:cc:53:88:ff:ce:a5:08:9a:02:70:5d:0e:3a: 0e:43:d9:a3:10:93:46:f6:de:1f:c7:f3:97:e1:b3: a6:30:38:11:d0:e8:8d:91:ca:e1:3f:64:29:13:6a: c1:dd:9f:62:bb:38:ab:18:6c:ba:d2:97:88:57:44: d2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CF:DE:90:2B:C5:43:1C:F4:7A:D2:AC:C9:8B:8B:5C:72:40:0E:76 X509v3 Authority Key Identifier: keyid:2D:88:AC:79:1B:0C:C1:B7:D9:21:EC:E6:60:CD:E0:CF:2E:E8:ED:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:e9:3c:1a:3b:a8:3e:c7:2f:e8:83:8c:ef:46:f4:b3:3d:d1: dc:c9:58:c4:c8:04:ca:e4:15:e0:a6:4b:2c:79:8f:d7:88:4f: 54:b6:a0:0b:c5:37:fa:ca:ae:0e:ae:b7:7d:d3:a0:2b:93:63: 0c:85:b1:dc:57:57:ec:09:0e:e6:7a:3a:12:ca:3a:5c:a3:15: c9:46:42:09:d1:5c:cd:48:4a:6b:45:19:23:0c:31:93:22:3e: 15:6b:af:49:38:46:e3:35:26:8a:ec:50:cb:e4:d0:1f:cb:eb: 8b:77:61:36:7e:a1:b5:e5:62:72:5a:6f:ef:94:d9:fd:59:85: 1b:4d:43:0d:58:81:eb:70:e6:aa:e7:f3:e7:3f:f8:44:df:01: 0b:fa:02:3c:df:a0:7f:f2:88:ec:81:80:9f:53:58:05:21:f7: 49:b7:e4:91:93:16:c4:f8:88:38:4c:d9:75:3d:c1:bb:ca:6e: 29:f9:aa:ea:3c:27:82:75:3f:a6:15:ad:f0:fd:0e:8c:19:2a: 6c:32:83:b1:63:4b:71:b8:55:79:d6:d8:8f:3e:f9:51:28:07: 0b:41:cd:15:aa:14:48:31:26:03:a4:78:bd:95:f6:76:46:68: fb:46:96:e9:f5:21:f9:08:ba:81:f0:31:86:87:9b:7a:78:c4: 2b:a4:70:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb9z+vXvhmbYm5N1YO9hxKc7JDSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ4OEFDNzkxQjBDQzFCN0Q5MjFFQ0U2NjBDREUwQ0Yy RUU4RUQ3MjAeFw0yNjA2MTcwNTM5NDdaFw0yNjA2MTgwOTIyNDdaMDMxMTAvBgNV BAMTKDJBQ0ZERTkwMkJDNTQzMUNGNDdBRDJBQ0M5OEI4QjVDNzI0MDBFNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Bij0AoV4FjJAQwsHQwkFfDxy 5x76KwoAPxf9pZW/szbUczz8qhsPCDdDV/b9+wYK1MaxcsM+3zfa7Mxvn9SLpINB PRcj9dz6mNlVr4qD5H8QK8dmcaNznD8eRiaI26rpNQz0AAwDpHWoWnpaKVhHTkah 3aV6tl0Mlkn4EQUCkyWS9VXoqcEdyFcysKWSD7PXkMPMHlhxvGbAie37Fy2i+BdU 6vscrE/H6RKTc8AXKLs68UJf74inMA6WcWLpqKYnjpRPzFOI/86lCJoCcF0OOg5D 2aMQk0b23h/H85fhs6YwOBHQ6I2RyuE/ZCkTasHdn2K7OKsYbLrSl4hXRNLBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKs/ekCvFQxz0etKsyYuLXHJADnYwHwYDVR0j BBgwFoAULYiseRsMwbfZIezmYM3gzy7o7XIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjMwMjRkMjQtOWZhYS00YWIwLThmYTQtMGNlNjA4YzZkMGEzLzAvMkQ4OEFDNzkx QjBDQzFCN0Q5MjFFQ0U2NjBDREUwQ0YyRUU4RUQ3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDg4QUM3OTFCMENDMUI3RDkyMUVDRTY2MENERTBDRjJFRThF RDcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjMwMjRkMjQtOWZhYS00YWIwLThm YTQtMGNlNjA4YzZkMGEzLzAvMkQ4OEFDNzkxQjBDQzFCN0Q5MjFFQ0U2NjBDREUw Q0YyRUU4RUQ3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPpPBo7qD7HL+iDjO9G9LM90dzJWMTIBMrk FeCmSyx5j9eIT1S2oAvFN/rKrg6ut33ToCuTYwyFsdxXV+wJDuZ6OhLKOlyjFclG QgnRXM1ISmtFGSMMMZMiPhVrr0k4RuM1JorsUMvk0B/L64t3YTZ+obXlYnJab++U 2f1ZhRtNQw1Ygetw5qrn8+c/+ETfAQv6AjzfoH/yiOyBgJ9TWAUh90m35JGTFsT4 iDhM2XU9wbvKbin5quo8J4J1P6YVrfD9DowZKmwyg7FjS3G4VXnW2I8++VEoBwtB zRWqFEgxJgOkeL2V9nZGaPtGlun1IfkIuoHwMYaHm3p4xCukcI8= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:06 2026 by rpki-client