$ rpki-client -vvf rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft File: 2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft (raw, json) Hash identifier: ZsFnDNl4Y0koItpDA9EkTF4AIncWCErgcqfhqAsteZs= Subject key identifier: 8E:80:DE:7B:41:ED:13:B1:89:02:A9:28:D5:87:10:1B:02:DC:00:E0 Authority key identifier: 2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63 Certificate issuer: /CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463 Certificate serial: 18D6AF3C9F5101796E99024355F32B2CD9065197 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 10:32:10 +0000 Manifest this update: Sat 13 Jun 2026 10:27:10 +0000 Manifest next update: Sun 14 Jun 2026 11:03:10 +0000 Files and hashes: 1: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: 6oOlCIxGneY8XQmzJaSA+rXwKrW4Xz1wcUf44XfKjgk=) 2: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: iJm4NhgPbIn9ZoK9MCrx0LzGYq+XRWtI9oNHEB41bTw=) 3: 2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl (hash: Nc9zc9Y8a6vx/1ltb6ulriy6x6wprdnSAVTX0F6DYvM=) 4: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: i83P/tWxpN7+zDb3L4rKQFgIev7DrUCxoADIDDyJE9U=) 5: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: 6lFtnPCNARkQq8uMVyUcH9X2yfQ7BRCjGYYqyfiHjKo=) 6: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: JbxVAMh0l8cOOEqUdkvkAwk1Vty1kRSyKXbV2pl/yFg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 11:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d6:af:3c:9f:51:01:79:6e:99:02:43:55:f3:2b:2c:d9:06:51:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463 Validity Not Before: Jun 13 10:27:10 2026 GMT Not After : Jun 14 11:03:10 2026 GMT Subject: CN=8E80DE7B41ED13B18902A928D587101B02DC00E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1e:4f:e4:1c:20:af:23:3f:8a:c3:bf:8e:cb: c5:09:c2:38:2b:ba:39:27:2a:cd:85:92:66:d1:45: 5e:91:b8:de:3f:fd:79:0e:ca:9f:51:c0:a6:66:b5: eb:cd:56:82:08:dd:5c:d5:cf:bc:51:c2:66:a5:6d: 44:91:04:1e:b4:09:80:74:eb:01:36:0b:9b:54:fe: ed:fb:da:0d:ed:b0:5c:9a:23:1c:82:53:f9:72:09: b2:2c:ff:5e:eb:dd:47:8d:0a:07:95:ef:5f:0f:58: 4a:d4:7d:b7:ec:e1:4f:e9:a1:86:e4:21:9c:ce:a3: 2a:10:f5:d1:5d:8e:9c:e3:81:de:7e:d9:cd:86:62: e1:07:03:22:41:b1:65:d5:60:56:5d:a1:ff:e5:e9: 94:79:34:35:e9:4c:27:5b:bd:6a:2f:67:6c:2c:07: a2:8a:7c:0b:8d:e7:46:4a:f6:4b:80:44:dd:35:c2: 54:49:ad:b4:08:d6:7d:64:1c:3a:64:f4:36:2e:07: 3c:55:69:0d:b8:73:4f:92:e8:91:97:2a:27:ad:b2: 94:48:e1:45:02:e1:d7:bc:7e:cc:d2:26:65:6f:37: ae:eb:26:d3:b3:e5:d9:fc:a6:ae:31:32:0e:f2:a5: 19:d3:2a:18:9d:ff:21:27:71:d9:74:76:24:5d:61: 7e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:80:DE:7B:41:ED:13:B1:89:02:A9:28:D5:87:10:1B:02:DC:00:E0 X509v3 Authority Key Identifier: keyid:2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:08:e6:e0:ac:57:47:ba:29:f0:38:6d:5e:ac:96:84:d4:7a: 1b:b3:93:be:8b:dd:85:c2:85:35:9b:1a:5d:58:76:22:4f:94: b1:b4:65:04:d4:5f:ab:bf:a9:fd:91:d1:26:c8:18:78:01:21: aa:fb:d7:5f:20:50:f5:f0:a8:b4:1b:1c:bd:16:7e:8f:4a:fe: 6a:c3:27:a5:ae:cf:96:c1:87:a6:c0:58:ac:be:ab:14:bb:d3: ad:fe:6f:e6:cc:7d:6a:2d:00:bd:4c:22:25:61:8e:f8:cd:84: 3b:4a:8a:41:f2:7e:8b:47:e4:43:f2:28:63:65:55:4b:91:ff: a2:f8:8f:cf:f0:a7:e3:12:2c:4f:11:4e:19:3e:25:e6:b0:d6: 38:21:c6:8c:06:80:2c:e4:6b:00:0a:c2:e0:3c:26:7c:69:d0: c9:46:ab:55:b1:5d:c8:75:88:57:50:9a:6f:1a:e1:15:e9:6f: 28:c9:38:c8:c4:bc:ad:42:bc:91:20:d4:57:02:32:56:ed:02: b4:c0:5a:f4:4a:2f:95:5f:53:32:b2:d0:52:e2:7b:9e:41:24: 13:24:f8:4c:50:16:84:81:d0:00:7d:3d:c8:34:82:0d:71:16: 27:e2:de:b0:87:35:79:df:5c:06:ff:39:69:84:51:47:12:fe: 7d:0f:fe:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGNavPJ9RAXlumQJDVfMrLNkGUZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzMTM3RUVGNzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3 MkUyQzQ2MzAeFw0yNjA2MTMxMDI3MTBaFw0yNjA2MTQxMTAzMTBaMDMxMTAvBgNV BAMTKDhFODBERTdCNDFFRDEzQjE4OTAyQTkyOEQ1ODcxMDFCMDJEQzAwRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiHk/kHCCvIz+Kw7+Oy8UJwjgr ujknKs2FkmbRRV6RuN4//XkOyp9RwKZmtevNVoII3VzVz7xRwmalbUSRBB60CYB0 6wE2C5tU/u372g3tsFyaIxyCU/lyCbIs/17r3UeNCgeV718PWErUfbfs4U/poYbk IZzOoyoQ9dFdjpzjgd5+2c2GYuEHAyJBsWXVYFZdof/l6ZR5NDXpTCdbvWovZ2ws B6KKfAuN50ZK9kuARN01wlRJrbQI1n1kHDpk9DYuBzxVaQ24c0+S6JGXKietspRI 4UUC4de8fszSJmVvN67rJtOz5dn8pq4xMg7ypRnTKhid/yEncdl0diRdYX7PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjoDee0HtE7GJAqko1YcQGwLcAOAwHwYDVR0j BBgwFoAUKjE37vd/GvFvehLdbTaUTHLixGMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI4ZWVjNWItNTMyNC00NDIyLWEzMmYtOWIxZGNlZDM3NTlmLzAvMkEzMTM3RUVG NzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3MkUyQzQ2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTMxMzdFRUY3N0YxQUYxNkY3QTEyREQ2RDM2OTQ0QzcyRTJD NDYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMkEzMTM3RUVGNzdGMUFGMTZGN0ExMkRENkQzNjk0 NEM3MkUyQzQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkI5uCsV0e6KfA4bV6sloTUehuzk76L3YXC hTWbGl1YdiJPlLG0ZQTUX6u/qf2R0SbIGHgBIar7118gUPXwqLQbHL0Wfo9K/mrD J6Wuz5bBh6bAWKy+qxS7063+b+bMfWotAL1MIiVhjvjNhDtKikHyfotH5EPyKGNl VUuR/6L4j8/wp+MSLE8RThk+Jeaw1jghxowGgCzkawAKwuA8Jnxp0MlGq1WxXch1 iFdQmm8a4RXpbyjJOMjEvK1CvJEg1FcCMlbtArTAWvRKL5VfUzKy0FLie55BJBMk +ExQFoSB0AB9Pcg0gg1xFifi3rCHNXnfXAb/OWmEUUcS/n0P/r8= -----END CERTIFICATE-----Generated at Sun Jun 14 02:22:51 2026 by rpki-client