$ rpki-client -vvf rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft File: B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft (raw, json) Hash identifier: CdicWwRk6R1VgvxEkwGc6M+eDhcK7P3hiH7KIrq/lms= Subject key identifier: 27:E4:24:CB:BF:F1:1C:C8:96:AC:1A:10:82:65:3E:DC:AF:BF:78:9B Authority key identifier: B2:E9:14:D7:D4:03:B4:5C:4B:BC:28:E3:66:84:78:58:87:AC:ED:BC Certificate issuer: /CN=B2E914D7D403B45C4BBC28E36684785887ACEDBC Certificate serial: 3D2072ABFD805363A70E12DA0EC76C68C8D477A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:31:29 +0000 Manifest this update: Tue 16 Jun 2026 22:26:29 +0000 Manifest next update: Thu 18 Jun 2026 00:42:29 +0000 Files and hashes: 1: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (hash: c6pFiJSk1UQhVnz9HO0WDm1mZbg2xnGEy69Z/hHQfrI=) 2: B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl (hash: TSzEUMM0wfwF8Vo1E8lSOKUrOLD+qTiRKdzn8F/YnjA=) 3: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (hash: lh47cqtqX+UfhZbQx7DPwZTGhdNBwMPbLmUFIaoV1ag=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:20:72:ab:fd:80:53:63:a7:0e:12:da:0e:c7:6c:68:c8:d4:77:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2E914D7D403B45C4BBC28E36684785887ACEDBC Validity Not Before: Jun 16 22:26:29 2026 GMT Not After : Jun 18 00:42:29 2026 GMT Subject: CN=27E424CBBFF11CC896AC1A1082653EDCAFBF789B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ed:be:ce:96:12:50:d1:0f:83:e8:07:72:96: 73:f9:e4:d9:b8:1e:20:6c:42:85:c4:da:0e:66:85: b6:1e:43:cb:8a:47:40:bb:34:c7:12:db:79:16:19: 0d:03:dd:cd:16:e8:1f:e7:34:27:85:1e:df:8b:fc: b3:7c:24:83:db:ce:c4:fb:f1:87:18:fd:9e:74:54: ba:12:98:96:8f:3c:06:f5:e3:5c:b0:01:ff:98:07: 3c:8e:58:88:f0:70:7d:38:12:fb:70:df:d9:bc:a2: a6:39:8c:b2:a7:2f:7f:0b:93:a7:fe:32:ad:6f:6c: 11:55:20:24:0f:36:f6:3f:81:64:cd:9b:9e:3e:57: 54:52:1e:23:17:be:7c:98:b2:bd:82:0d:c2:29:4a: df:ea:25:f7:06:79:fd:3c:eb:9b:4a:82:2c:d8:ec: 65:2d:6d:ba:e9:19:d0:a2:7a:bb:ef:2c:58:db:fa: f6:41:d0:2a:a0:a6:3b:81:02:4d:46:e8:89:1b:02: 0a:de:d0:b2:f1:ba:88:64:45:44:a3:36:94:b0:23: fa:e1:50:d2:c2:48:5e:7a:28:ba:c7:c2:6a:e0:15: a4:59:4c:ed:bf:98:96:66:7e:3d:df:0c:b3:87:92: 3d:38:62:11:0e:4a:be:6c:d1:1a:2a:e4:65:4e:40: d3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E4:24:CB:BF:F1:1C:C8:96:AC:1A:10:82:65:3E:DC:AF:BF:78:9B X509v3 Authority Key Identifier: keyid:B2:E9:14:D7:D4:03:B4:5C:4B:BC:28:E3:66:84:78:58:87:AC:ED:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:cd:f0:2b:f7:93:28:ac:ff:70:33:c8:f2:05:0f:74:17:79: 8a:bc:71:72:e0:0c:da:28:bd:e9:b0:bb:1d:5e:94:c6:22:03: ea:f7:cb:aa:ae:77:b0:c3:22:75:8d:a6:c8:af:ba:cb:0a:cc: 8f:76:b8:00:b8:8b:70:21:cb:b6:33:ce:69:d4:4c:ff:92:33: e7:cd:07:c9:b9:60:ef:11:ca:da:33:30:53:bf:15:87:2c:60: ae:c7:cf:50:5c:55:85:54:89:79:03:0a:1b:0a:7f:4a:d6:78: 81:b1:e7:91:3b:c5:cd:14:8c:da:2a:53:d4:de:dc:04:07:d3: a8:e8:65:5f:eb:d2:fd:53:a7:4c:48:45:1d:37:b2:2f:ef:fc: b5:b4:4f:e6:3c:04:9f:59:69:28:7b:87:b3:cb:a5:1f:e1:5c: 6c:b0:36:9b:a9:40:3f:56:ce:17:36:07:86:9f:7f:a5:71:64: 8f:a2:62:a2:e0:85:bb:57:34:1c:93:5e:f4:a5:7a:4b:43:85: 62:bf:52:17:ab:4c:02:60:16:ff:6e:c1:15:43:c9:47:27:a9: da:29:09:76:80:9d:21:40:ef:45:fc:20:97:83:39:28:eb:aa: c3:87:bc:33:29:7b:35:09:4a:c8:8a:2e:ff:f1:39:9c:27:ee: 23:af:39:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSByq/2AU2OnDhLaDsdsaMjUd6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJFOTE0RDdENDAzQjQ1QzRCQkMyOEUzNjY4NDc4NTg4 N0FDRURCQzAeFw0yNjA2MTYyMjI2MjlaFw0yNjA2MTgwMDQyMjlaMDMxMTAvBgNV BAMTKDI3RTQyNENCQkZGMTFDQzg5NkFDMUExMDgyNjUzRURDQUZCRjc4OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS7b7OlhJQ0Q+D6AdylnP55Nm4 HiBsQoXE2g5mhbYeQ8uKR0C7NMcS23kWGQ0D3c0W6B/nNCeFHt+L/LN8JIPbzsT7 8YcY/Z50VLoSmJaPPAb141ywAf+YBzyOWIjwcH04Evtw39m8oqY5jLKnL38Lk6f+ Mq1vbBFVICQPNvY/gWTNm54+V1RSHiMXvnyYsr2CDcIpSt/qJfcGef0865tKgizY 7GUtbbrpGdCiervvLFjb+vZB0CqgpjuBAk1G6IkbAgre0LLxuohkRUSjNpSwI/rh UNLCSF56KLrHwmrgFaRZTO2/mJZmfj3fDLOHkj04YhEOSr5s0Roq5GVOQNN1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ+Qky7/xHMiWrBoQgmU+3K+/eJswHwYDVR0j BBgwFoAUsukU19QDtFxLvCjjZoR4WIes7bwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjVlMjQxNWMtN2Q0Zi00NDI3LTgzMmQtNTliNGM3OWFhZTVhLzAvQjJFOTE0RDdE NDAzQjQ1QzRCQkMyOEUzNjY4NDc4NTg4N0FDRURCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkU5MTREN0Q0MDNCNDVDNEJCQzI4RTM2Njg0Nzg1ODg3QUNF REJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjVlMjQxNWMtN2Q0Zi00NDI3LTgz MmQtNTliNGM3OWFhZTVhLzAvQjJFOTE0RDdENDAzQjQ1QzRCQkMyOEUzNjY4NDc4 NTg4N0FDRURCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHN8Cv3kyis/3AzyPIFD3QXeYq8cXLgDNoo vemwux1elMYiA+r3y6qud7DDInWNpsivussKzI92uAC4i3Ahy7YzzmnUTP+SM+fN B8m5YO8RytozMFO/FYcsYK7Hz1BcVYVUiXkDChsKf0rWeIGx55E7xc0UjNoqU9Te 3AQH06joZV/r0v1Tp0xIRR03si/v/LW0T+Y8BJ9ZaSh7h7PLpR/hXGywNpupQD9W zhc2B4aff6VxZI+iYqLghbtXNByTXvSlektDhWK/UherTAJgFv9uwRVDyUcnqdop CXaAnSFA70X8IJeDOSjrqsOHvDMpezUJSsiKLv/xOZwn7iOvORM= -----END CERTIFICATE-----Generated at Wed Jun 17 12:50:48 2026 by rpki-client