$ rpki-client -vvf rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft File: 2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft (raw, json) Hash identifier: CxCoanulmqsUwUiHGtHzC5m9aJgRRw94p1743Dk1NYY= Subject key identifier: 2C:C8:59:1D:E1:CE:E5:D8:70:52:31:D1:69:0C:4C:7B:8F:1E:B3:75 Authority key identifier: 2F:F2:8E:C3:1F:A9:59:5D:4C:93:72:E0:37:8B:12:7B:FC:07:D5:43 Certificate issuer: /CN=2FF28EC31FA9595D4C9372E0378B127BFC07D543 Certificate serial: 794E7044833DBBA8D69807B0196C749C6B5F5312 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 01:50:00 +0000 Manifest this update: Wed 17 Jun 2026 01:45:00 +0000 Manifest next update: Thu 18 Jun 2026 04:13:00 +0000 Files and hashes: 1: 2FF28EC31FA9595D4C9372E0378B127BFC07D543.crl (hash: bMQPAIJoF9ywAjG5lufxN9bBulC2LFfq7k8JxFTR2KM=) 2: 3130332e37382e3135382e302f32342d3234203d3e20313530323438.roa (hash: WBevjDBrr8T3lRgtMCROWKCPpKkw27Bp5qV284oO8bo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.crl rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:4e:70:44:83:3d:bb:a8:d6:98:07:b0:19:6c:74:9c:6b:5f:53:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FF28EC31FA9595D4C9372E0378B127BFC07D543 Validity Not Before: Jun 17 01:45:00 2026 GMT Not After : Jun 18 04:13:00 2026 GMT Subject: CN=2CC8591DE1CEE5D8705231D1690C4C7B8F1EB375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dc:1b:81:0a:11:ea:6d:c1:b2:02:16:dc:d3: aa:8e:23:be:fc:1d:cc:42:de:16:43:ec:24:c8:64: c8:51:ed:70:78:1a:2e:cf:0d:be:4f:db:1e:9f:66: b4:67:f7:d6:d9:9e:5c:c9:0d:e6:e7:21:d7:b8:cf: 8f:16:30:c5:89:2f:66:38:31:af:0f:d0:b7:4c:6b: 4e:07:66:74:42:39:0c:f9:1b:de:7f:6f:53:21:cf: c2:bc:d2:d4:f8:19:19:40:5c:ce:b9:c6:68:83:2c: 64:da:64:4d:f2:75:b6:c1:96:3d:17:9a:89:3f:6f: da:b6:e0:fa:fe:2c:0b:de:7f:0e:35:4c:f5:6d:d4: 38:6a:71:db:95:96:b0:74:89:1f:f9:81:39:30:09: 79:bc:29:e1:4b:b2:10:66:76:ec:5f:ff:cb:75:85: 85:02:0b:c0:33:6f:be:43:91:bc:0c:45:ac:11:2f: 23:51:26:5a:44:9a:04:54:91:37:41:5f:bb:40:91: c5:37:d5:7e:e5:56:e9:55:4f:48:1e:e6:ed:39:9a: 81:8e:5d:a8:7a:79:3f:cf:80:e6:f6:61:5f:44:a0: 17:1e:06:d2:20:ab:6b:e6:fc:be:27:91:3d:d4:b1: 8b:2d:df:51:a2:1c:32:47:c0:91:f4:16:ba:e4:10: 91:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C8:59:1D:E1:CE:E5:D8:70:52:31:D1:69:0C:4C:7B:8F:1E:B3:75 X509v3 Authority Key Identifier: keyid:2F:F2:8E:C3:1F:A9:59:5D:4C:93:72:E0:37:8B:12:7B:FC:07:D5:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:d5:cc:00:24:35:62:b4:7b:fb:46:bd:3f:ff:39:9d:85:ce: af:95:d7:88:c5:50:74:25:c0:10:09:6f:86:e1:20:ee:76:92: 1b:f4:13:d3:35:dd:fd:36:67:43:84:dc:d2:8b:2f:44:8d:1d: bf:58:45:57:74:e1:da:b8:ae:75:c9:cd:87:f6:3d:7e:f9:3c: b9:89:c7:53:97:9d:02:79:8a:f6:a3:fa:d9:be:03:81:ae:bd: 9c:98:de:96:15:24:d3:89:79:98:b7:df:4e:c8:44:58:2f:d3: 9e:70:dc:a2:2d:45:68:b0:c8:66:03:93:d2:15:7d:07:af:5b: 61:c6:de:12:f6:aa:18:a3:db:d2:7c:72:49:34:cf:72:6c:7a: 8b:d7:23:52:1c:a7:e5:d6:e8:6d:6c:47:4f:14:a6:24:08:7c: a4:27:e5:12:0f:5d:fe:8c:75:5a:49:ef:00:f3:21:33:e2:66: 48:6d:0f:2d:44:ae:5c:34:51:d3:f1:30:e3:80:c2:4b:1d:e7: 9a:0b:bf:5b:bf:9d:29:05:53:55:8e:d0:56:56:f4:89:24:62: 39:60:46:b9:f2:97:38:ed:df:5b:b2:ba:7c:25:47:9e:58:17: 50:82:88:1a:b6:9a:91:9c:b1:73:31:15:01:3c:59:0d:b7:67: 3f:40:64:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeU5wRIM9u6jWmAewGWx0nGtfUxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZGMjhFQzMxRkE5NTk1RDRDOTM3MkUwMzc4QjEyN0JG QzA3RDU0MzAeFw0yNjA2MTcwMTQ1MDBaFw0yNjA2MTgwNDEzMDBaMDMxMTAvBgNV BAMTKDJDQzg1OTFERTFDRUU1RDg3MDUyMzFEMTY5MEM0QzdCOEYxRUIzNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR3BuBChHqbcGyAhbc06qOI778 HcxC3hZD7CTIZMhR7XB4Gi7PDb5P2x6fZrRn99bZnlzJDebnIde4z48WMMWJL2Y4 Ma8P0LdMa04HZnRCOQz5G95/b1Mhz8K80tT4GRlAXM65xmiDLGTaZE3ydbbBlj0X mok/b9q24Pr+LAvefw41TPVt1DhqcduVlrB0iR/5gTkwCXm8KeFLshBmduxf/8t1 hYUCC8Azb75DkbwMRawRLyNRJlpEmgRUkTdBX7tAkcU31X7lVulVT0ge5u05moGO Xah6eT/PgOb2YV9EoBceBtIgq2vm/L4nkT3UsYst31GiHDJHwJH0FrrkEJElAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULMhZHeHO5dhwUjHRaQxMe48es3UwHwYDVR0j BBgwFoAUL/KOwx+pWV1Mk3LgN4sSe/wH1UMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjZjMDYwZmItZTkzNi00YTIzLWJiZTItOTQ0NTdiZjcwOWJmLzAvMkZGMjhFQzMx RkE5NTk1RDRDOTM3MkUwMzc4QjEyN0JGQzA3RDU0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkYyOEVDMzFGQTk1OTVENEM5MzcyRTAzNzhCMTI3QkZDMDdE NTQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjZjMDYwZmItZTkzNi00YTIzLWJi ZTItOTQ0NTdiZjcwOWJmLzAvMkZGMjhFQzMxRkE5NTk1RDRDOTM3MkUwMzc4QjEy N0JGQzA3RDU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATVzAAkNWK0e/tGvT//OZ2Fzq+V14jFUHQl wBAJb4bhIO52khv0E9M13f02Z0OE3NKLL0SNHb9YRVd04dq4rnXJzYf2PX75PLmJ x1OXnQJ5ivaj+tm+A4GuvZyY3pYVJNOJeZi3307IRFgv055w3KItRWiwyGYDk9IV fQevW2HG3hL2qhij29J8ckk0z3JseovXI1Icp+XW6G1sR08UpiQIfKQn5RIPXf6M dVpJ7wDzITPiZkhtDy1Erlw0UdPxMOOAwksd55oLv1u/nSkFU1WO0FZW9IkkYjlg Rrnylzjt31uyunwlR55YF1CCiBq2mpGcsXMxFQE8WQ23Zz9AZKE= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:00 2026 by rpki-client