$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft File: C2F21005CDD8F19E492720297D0BA5C66395653F.mft (raw, json) Hash identifier: bn3UIGIbANTaPg1veLpWkDPawwtL5BH0ZJdNjy2lc3c= Subject key identifier: 58:81:1F:B2:CC:D1:86:AF:47:D8:62:8A:70:36:F5:8F:9E:02:AB:DA Authority key identifier: C2:F2:10:05:CD:D8:F1:9E:49:27:20:29:7D:0B:A5:C6:63:95:65:3F Certificate issuer: /CN=C2F21005CDD8F19E492720297D0BA5C66395653F Certificate serial: 099D1A2DD34AF6E257A3339E80E1B2F58AD204BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 00:13:17 +0000 Manifest this update: Wed 17 Jun 2026 00:08:17 +0000 Manifest next update: Thu 18 Jun 2026 03:41:17 +0000 Files and hashes: 1: C2F21005CDD8F19E492720297D0BA5C66395653F.crl (hash: Ylc8WdBkpNKW/OSX+vsTNd5SFXgLVNsnse8BkGRjjVI=) 2: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: 4WF38lDugkx4g5GWHdzVk5hRBqpGlU+mntDxAYWnRfU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.crl rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:9d:1a:2d:d3:4a:f6:e2:57:a3:33:9e:80:e1:b2:f5:8a:d2:04:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2F21005CDD8F19E492720297D0BA5C66395653F Validity Not Before: Jun 17 00:08:17 2026 GMT Not After : Jun 18 03:41:17 2026 GMT Subject: CN=58811FB2CCD186AF47D8628A7036F58F9E02ABDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:34:df:9b:c5:56:3e:48:58:cf:81:30:87:3f: 2b:a4:1c:b9:c4:ab:eb:2a:fc:5b:d7:73:50:71:d2: 45:f5:d7:dd:65:09:b6:aa:62:37:16:73:0c:06:b6: b1:d4:69:c5:17:98:02:d4:cd:47:a0:84:bd:d4:a6: ff:97:87:8b:34:27:da:83:b9:f3:db:f6:67:69:ea: ce:97:06:48:cb:bc:d8:44:c6:14:6b:e4:20:53:0b: 9b:40:d5:84:b3:a7:10:0c:ef:ee:22:e4:22:83:d4: ff:3f:37:66:e6:35:e2:68:a6:39:7d:2d:bc:f6:64: 3d:3d:a5:74:a6:f2:98:f4:8d:7d:20:88:60:1b:12: d1:03:04:46:15:8c:e7:56:f7:90:7b:f7:ea:e6:06: c6:ca:b2:13:e0:80:82:04:da:7f:d1:36:62:a8:8c: 19:c7:aa:3e:b6:8c:00:a8:9b:a5:78:d9:9c:69:08: 58:c5:88:0a:4a:31:46:30:83:d8:d2:bd:fb:e1:4f: ad:79:d5:04:64:d2:d1:40:8b:9b:30:30:68:c8:90: b6:ff:f8:fd:2f:88:34:03:d3:eb:34:e8:53:c4:95: b2:7b:b1:78:9a:55:69:f3:11:1a:1f:5c:2a:8c:3d: ff:e9:d3:92:89:51:ef:e1:63:49:29:52:6d:cb:d4: e4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:81:1F:B2:CC:D1:86:AF:47:D8:62:8A:70:36:F5:8F:9E:02:AB:DA X509v3 Authority Key Identifier: keyid:C2:F2:10:05:CD:D8:F1:9E:49:27:20:29:7D:0B:A5:C6:63:95:65:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:70:8e:02:43:bb:9f:d8:de:fe:83:77:51:69:f9:60:81:34: 78:03:22:3d:9c:32:86:0c:1f:c8:5e:ea:f7:65:e3:d5:c1:6f: 9a:af:3d:65:ee:fc:04:a2:fa:a2:45:f6:4d:ed:8c:06:84:fa: 74:99:ea:fc:d5:74:f7:a2:96:3d:db:7e:7c:c5:15:be:c3:ad: 33:24:47:2e:86:7b:1b:d2:21:77:dd:3b:d0:d9:51:bd:ec:81: 09:ee:c0:a1:23:74:0b:51:1b:d5:83:51:50:64:ff:44:63:5b: 2e:8b:0e:3b:ea:f7:49:29:77:27:7b:ef:12:c1:2b:22:a0:70: b4:f3:e2:24:8b:ea:19:dd:e4:09:bb:d6:9c:36:99:79:44:02: 34:d5:2b:c1:13:07:76:79:7f:d4:77:7f:10:87:a0:e8:83:48: 5e:2f:e2:42:80:ac:b6:30:ff:3e:32:83:5d:86:0a:e2:3e:c3: cf:88:16:af:e0:b0:25:51:40:6d:ed:48:23:9a:e8:ce:76:ae: 66:15:7c:41:46:88:4d:9a:8f:89:6e:dd:0e:5f:8a:96:a6:67: 23:cc:e0:a2:aa:2e:54:22:b6:38:f4:4c:6f:ad:4f:65:35:45: 6b:d7:bd:9f:2e:d0:f6:ce:43:29:b6:23:d1:ed:b8:55:ed:eb: 8a:b2:97:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCZ0aLdNK9uJXozOegOGy9YrSBL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJGMjEwMDVDREQ4RjE5RTQ5MjcyMDI5N0QwQkE1QzY2 Mzk1NjUzRjAeFw0yNjA2MTcwMDA4MTdaFw0yNjA2MTgwMzQxMTdaMDMxMTAvBgNV BAMTKDU4ODExRkIyQ0NEMTg2QUY0N0Q4NjI4QTcwMzZGNThGOUUwMkFCREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeNN+bxVY+SFjPgTCHPyukHLnE q+sq/FvXc1Bx0kX1191lCbaqYjcWcwwGtrHUacUXmALUzUeghL3Upv+Xh4s0J9qD ufPb9mdp6s6XBkjLvNhExhRr5CBTC5tA1YSzpxAM7+4i5CKD1P8/N2bmNeJopjl9 Lbz2ZD09pXSm8pj0jX0giGAbEtEDBEYVjOdW95B79+rmBsbKshPggIIE2n/RNmKo jBnHqj62jACom6V42ZxpCFjFiApKMUYwg9jSvfvhT6151QRk0tFAi5swMGjIkLb/ +P0viDQD0+s06FPElbJ7sXiaVWnzERofXCqMPf/p05KJUe/hY0kpUm3L1OR1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWIEfsszRhq9H2GKKcDb1j54Cq9owHwYDVR0j BBgwFoAUwvIQBc3Y8Z5JJyApfQulxmOVZT8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZmYmFmNzEtMmQ1Ny00ZTRhLTkxZDAtY2FjOGFiMGFjZWZlLzAvQzJGMjEwMDVD REQ4RjE5RTQ5MjcyMDI5N0QwQkE1QzY2Mzk1NjUzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkYyMTAwNUNERDhGMTlFNDkyNzIwMjk3RDBCQTVDNjYzOTU2 NTNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvQzJGMjEwMDVDREQ4RjE5RTQ5MjcyMDI5N0QwQkE1 QzY2Mzk1NjUzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtwjgJDu5/Y3v6Dd1Fp+WCBNHgDIj2cMoYM H8he6vdl49XBb5qvPWXu/ASi+qJF9k3tjAaE+nSZ6vzVdPeilj3bfnzFFb7DrTMk Ry6GexvSIXfdO9DZUb3sgQnuwKEjdAtRG9WDUVBk/0RjWy6LDjvq90kpdyd77xLB KyKgcLTz4iSL6hnd5Am71pw2mXlEAjTVK8ETB3Z5f9R3fxCHoOiDSF4v4kKArLYw /z4yg12GCuI+w8+IFq/gsCVRQG3tSCOa6M52rmYVfEFGiE2aj4lu3Q5fipamZyPM 4KKqLlQitjj0TG+tT2U1RWvXvZ8u0PbOQym2I9HtuFXt64qyl+k= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:22 2026 by rpki-client