$ rpki-client -vvf rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft File: 2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft (raw, json) Hash identifier: /9neO67e8wgY4aBScxcwtkCi+QdZV0AhTjVpl+m0NuA= Subject key identifier: 47:9A:26:46:EE:F9:DC:76:15:CE:F2:FE:D2:DE:A0:28:81:62:C1:18 Authority key identifier: 2A:0F:66:41:16:FB:E2:E0:71:7E:83:DF:D4:F2:B6:ED:EB:09:E1:7E Certificate issuer: /CN=2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E Certificate serial: 08BB15DB25AAA53C5B2B9D2356BB389290233295 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 17:15:03 +0000 Manifest this update: Tue 16 Jun 2026 17:10:03 +0000 Manifest next update: Wed 17 Jun 2026 18:01:03 +0000 Files and hashes: 1: 3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (hash: /Da4Pm0aCGjoevGiiRcx0Xt7whtWvoaG8WYvVgD2NtQ=) 2: 2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl (hash: 3+LrDtpAN+uoWqBe756LnWyBW7opGnNB5zSZYtmkKL0=) 3: 3130332e36372e39302e302f32342d3234203d3e20313532303035.roa (hash: D74+LFtaiM6p1bNo+g/DP+Bfx1wgVTvyGuc6jRnjUKM=) 4: 323030313a6466333a316363303a3a2f34382d3438203d3e20313532303035.roa (hash: 6lgQliV3qWJWSqE96iH08yO2bxxIknhiUKxtAeSrcOo=) 5: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (hash: MDqOFg62hmCAUHW4Muj3krYCTsgPpqhMHNl5EdSS1rQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:bb:15:db:25:aa:a5:3c:5b:2b:9d:23:56:bb:38:92:90:23:32:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E Validity Not Before: Jun 16 17:10:03 2026 GMT Not After : Jun 17 18:01:03 2026 GMT Subject: CN=479A2646EEF9DC7615CEF2FED2DEA0288162C118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f8:92:f7:7f:23:9f:8f:df:25:d7:80:ff:0c: 61:79:bc:70:c3:4b:55:c8:65:c0:f7:3b:f7:64:d5: c2:69:93:bf:09:af:fa:2a:a7:6b:82:86:72:23:19: f8:ca:c7:87:4b:43:5e:51:f6:20:18:42:7b:ac:90: 2e:15:3d:69:9e:3d:a8:f2:ee:e6:c5:eb:bb:25:78: 81:08:d5:dc:98:f8:92:4d:db:19:92:60:53:c9:43: b9:c5:93:88:eb:b0:53:f2:e6:73:04:0c:fc:4c:e8: fd:2c:5c:1e:67:e5:dd:b3:07:3b:95:49:87:17:af: c3:c4:79:49:5b:c6:e8:eb:b6:c0:86:0f:07:e7:5e: 39:f2:38:a1:a0:09:1b:cc:25:34:4e:25:79:e1:11: 72:8d:63:8a:59:31:8e:ba:e3:9f:b8:52:91:77:ea: 03:e9:c3:10:29:ba:07:a1:05:7e:81:51:45:0c:7a: ac:64:a3:91:8c:25:72:77:52:0e:c4:6f:a1:ae:82: 70:e2:10:b0:a8:a2:7e:e1:19:18:22:8f:7a:57:77: e2:8f:3e:16:fc:96:db:dc:5e:33:6e:f8:4b:0d:53: 01:bd:3f:a7:7c:84:c9:ca:e5:67:b2:12:8a:88:24: 48:3d:c8:e0:75:97:b7:3a:0e:d4:eb:4d:13:63:a2: 6e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9A:26:46:EE:F9:DC:76:15:CE:F2:FE:D2:DE:A0:28:81:62:C1:18 X509v3 Authority Key Identifier: keyid:2A:0F:66:41:16:FB:E2:E0:71:7E:83:DF:D4:F2:B6:ED:EB:09:E1:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:90:5e:b5:8e:ba:a6:1c:a0:2f:5a:2b:3e:b4:e8:5b:58:e1: 5b:cb:71:16:b4:6b:24:50:d5:22:4b:73:a1:e0:62:c1:59:18: 7d:bb:24:83:cd:a4:2f:33:07:ee:7f:12:ed:52:18:c8:ba:c8: 8e:17:f9:e7:4e:73:57:4f:09:52:a4:38:b6:a6:12:37:11:bc: 6d:1c:cf:8a:d0:6e:98:4b:a3:c8:e8:44:9a:ab:6e:36:5d:30: 81:56:11:d1:62:0e:fd:41:d6:8d:e7:1c:e3:59:63:2a:ee:d6: a9:9d:dd:91:c8:55:85:25:ec:01:4c:64:33:ec:e5:6e:ba:99: 94:f8:cb:d1:be:56:9a:f8:a0:a1:8b:ce:03:d1:8c:07:5d:c7: 4d:47:fc:01:7a:58:4e:24:2c:86:d4:39:85:93:2a:27:5f:47: 73:6a:11:54:ba:cf:bb:54:55:5e:ac:f2:d8:88:21:d0:77:45: fb:1f:53:be:ad:58:a0:7f:de:c3:83:de:2a:d9:a7:ce:2f:f5: 1f:52:85:ba:79:8e:5c:a4:cb:f1:b8:ed:e8:c2:ba:e4:c3:91: 17:8a:6f:d8:20:5a:a8:61:be:f3:8c:00:92:c5:0c:e4:ce:5b: 22:4d:7d:8a:fd:47:b5:d1:b6:fc:fc:d0:b6:7d:27:de:d1:6a: ad:fe:4d:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCLsV2yWqpTxbK50jVrs4kpAjMpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwRjY2NDExNkZCRTJFMDcxN0U4M0RGRDRGMkI2RURF QjA5RTE3RTAeFw0yNjA2MTYxNzEwMDNaFw0yNjA2MTcxODAxMDNaMDMxMTAvBgNV BAMTKDQ3OUEyNjQ2RUVGOURDNzYxNUNFRjJGRUQyREVBMDI4ODE2MkMxMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+JL3fyOfj98l14D/DGF5vHDD S1XIZcD3O/dk1cJpk78Jr/oqp2uChnIjGfjKx4dLQ15R9iAYQnuskC4VPWmePajy 7ubF67sleIEI1dyY+JJN2xmSYFPJQ7nFk4jrsFPy5nMEDPxM6P0sXB5n5d2zBzuV SYcXr8PEeUlbxujrtsCGDwfnXjnyOKGgCRvMJTROJXnhEXKNY4pZMY6645+4UpF3 6gPpwxApugehBX6BUUUMeqxko5GMJXJ3Ug7Eb6GugnDiELCoon7hGRgij3pXd+KP Phb8ltvcXjNu+EsNUwG9P6d8hMnK5WeyEoqIJEg9yOB1l7c6DtTrTRNjom4jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR5omRu753HYVzvL+0t6gKIFiwRgwHwYDVR0j BBgwFoAUKg9mQRb74uBxfoPf1PK27esJ4X4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg0ODg1MTktOGYwNC00NGY1LTgzMTItOGQ5ZDM2MTZkMGQ5LzAvMkEwRjY2NDEx NkZCRTJFMDcxN0U4M0RGRDRGMkI2RURFQjA5RTE3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTBGNjY0MTE2RkJFMkUwNzE3RTgzREZENEYyQjZFREVCMDlF MTdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg0ODg1MTktOGYwNC00NGY1LTgz MTItOGQ5ZDM2MTZkMGQ5LzAvMkEwRjY2NDExNkZCRTJFMDcxN0U4M0RGRDRGMkI2 RURFQjA5RTE3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaQXrWOuqYcoC9aKz606FtY4VvLcRa0ayRQ 1SJLc6HgYsFZGH27JIPNpC8zB+5/Eu1SGMi6yI4X+edOc1dPCVKkOLamEjcRvG0c z4rQbphLo8joRJqrbjZdMIFWEdFiDv1B1o3nHONZYyru1qmd3ZHIVYUl7AFMZDPs 5W66mZT4y9G+Vpr4oKGLzgPRjAddx01H/AF6WE4kLIbUOYWTKidfR3NqEVS6z7tU VV6s8tiIIdB3RfsfU76tWKB/3sOD3irZp84v9R9Shbp5jlyky/G47ejCuuTDkReK b9ggWqhhvvOMAJLFDOTOWyJNfYr9R7XRtvz80LZ9J97Raq3+TU8= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:39 2026 by rpki-client