$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft File: 2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft (raw, json) Hash identifier: fnvUPRi00fpRhcoyPx93xlBuRYGOHo69zak/Vt26ETc= Subject key identifier: 5B:78:5E:51:BE:F1:6D:6B:01:3B:05:7F:6D:EB:06:0A:EE:E8:6A:36 Authority key identifier: 2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74 Certificate issuer: /CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274 Certificate serial: 0FC06F0695613AD576F4F789E4DB79F64BDEAFDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 06:37:00 +0000 Manifest this update: Sat 13 Jun 2026 06:32:00 +0000 Manifest next update: Sun 14 Jun 2026 09:24:00 +0000 Files and hashes: 1: 2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl (hash: wy9JUQjYercsaPGpEdJZpi43SEiW1sFbCLsgaKGiBEM=) 2: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: V2s2v2zyv88cwsslpUJdds/b+6l6rcgW5NHb7V5SYWY=) 3: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: 1IjnkMC3ga8KbKp+1i4junuLJGtmG26jgGjukZ4rmxk=) 4: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: iezQTzMxWp3Coix5fz9eGS/c/h2ulbbwObi3kCUHkW4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 09:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c0:6f:06:95:61:3a:d5:76:f4:f7:89:e4:db:79:f6:4b:de:af:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274 Validity Not Before: Jun 13 06:32:00 2026 GMT Not After : Jun 14 09:24:00 2026 GMT Subject: CN=5B785E51BEF16D6B013B057F6DEB060AEEE86A36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:72:a4:e8:86:96:d1:35:87:8d:35:b2:f2:31: 63:82:88:d5:0f:4a:37:52:cd:08:78:52:1b:47:83: 07:e1:31:d5:ae:7e:3d:25:c4:e1:b4:65:6b:06:f2: 04:36:fb:ce:62:60:39:bc:9e:bb:42:12:a1:1d:c5: 2c:13:a2:1a:be:7a:88:6d:45:dc:cb:77:29:a0:3e: 0a:cd:c1:15:24:56:4f:38:81:7a:00:0c:5b:8f:fb: 7b:c6:15:fc:a7:69:8f:24:5b:ba:96:f5:02:60:bf: c4:f4:36:d5:73:2c:a5:0b:82:55:01:07:d4:ea:61: 03:0b:57:4d:51:aa:98:9c:49:9b:8f:c1:75:b7:66: 03:66:c3:d9:c8:aa:a3:be:ad:c8:1a:5b:60:0c:9f: 94:2c:44:54:a8:13:be:95:bd:a0:61:5e:74:88:a1: 5c:5e:4a:f9:56:a5:e9:83:c9:a6:64:a7:66:2a:d9: 7c:74:bb:cb:c3:d7:2b:51:4a:97:29:c6:d0:23:2c: a8:17:42:c7:ce:01:89:76:f7:d7:56:1f:b1:48:fd: 5a:ae:93:2f:aa:8a:85:04:84:37:b1:23:43:12:d6: 2d:d3:81:5c:a0:f1:3e:53:c2:58:c4:d6:54:83:b9: 15:cd:bc:c5:0a:00:8e:9e:73:18:6c:35:7c:e9:f7: d4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:78:5E:51:BE:F1:6D:6B:01:3B:05:7F:6D:EB:06:0A:EE:E8:6A:36 X509v3 Authority Key Identifier: keyid:2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a9:60:97:68:a4:95:81:ab:ea:c9:5f:59:1c:ba:85:60:0c: b5:ca:60:ec:df:e2:56:fb:53:94:19:dd:64:6c:08:b1:2f:46: 46:0a:21:a5:36:51:e7:b9:0d:51:80:8d:e2:36:6b:74:2b:86: 2a:e8:c7:bb:f9:84:4e:c3:71:3c:34:a0:e6:cc:75:c6:82:6a: 3f:bc:c6:84:ca:6b:7d:f6:83:bd:42:89:07:cc:7e:fb:8c:fb: 1a:42:a2:7b:0e:32:58:39:ae:8b:fb:e2:9c:b0:c8:79:87:bf: e1:73:7b:bf:63:6a:30:94:fc:04:8a:f2:8b:b3:0d:dc:87:65: 07:75:79:68:56:61:e2:dd:04:e4:ad:2e:c0:b9:47:15:9d:50: 02:0d:5d:5e:a0:7a:c2:57:50:18:1f:42:ee:7e:0d:cb:85:d2: 5e:ce:93:4f:a6:56:88:7d:c4:f1:4b:7f:ac:19:21:12:ea:4f: b4:16:4f:3d:74:33:07:84:9d:a7:a2:7c:99:4f:51:b5:02:bc: 16:49:ab:dc:f2:56:cd:1b:40:2e:07:93:b6:4c:20:75:6b:23: 53:4e:83:68:64:49:85:d0:d8:c6:81:77:ca:36:7c:7f:06:25: 7e:d8:d0:2f:53:95:86:ab:ff:3a:f7:d5:d8:50:71:8b:e5:0d: a9:8c:db:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD8BvBpVhOtV29PeJ5Nt59kver94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2RjE2RTgwQkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0QjBE N0Q5QzI3NDAeFw0yNjA2MTMwNjMyMDBaFw0yNjA2MTQwOTI0MDBaMDMxMTAvBgNV BAMTKDVCNzg1RTUxQkVGMTZENkIwMTNCMDU3RjZERUIwNjBBRUVFODZBMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIcqTohpbRNYeNNbLyMWOCiNUP SjdSzQh4UhtHgwfhMdWufj0lxOG0ZWsG8gQ2+85iYDm8nrtCEqEdxSwTohq+eoht RdzLdymgPgrNwRUkVk84gXoADFuP+3vGFfynaY8kW7qW9QJgv8T0NtVzLKULglUB B9TqYQMLV01RqpicSZuPwXW3ZgNmw9nIqqO+rcgaW2AMn5QsRFSoE76VvaBhXnSI oVxeSvlWpemDyaZkp2Yq2Xx0u8vD1ytRSpcpxtAjLKgXQsfOAYl299dWH7FI/Vqu ky+qioUEhDexI0MS1i3TgVyg8T5TwljE1lSDuRXNvMUKAI6ecxhsNXzp99S/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW3heUb7xbWsBOwV/besGCu7oajYwHwYDVR0j BBgwFoAUKm8W6Av9x7TWeXcm+4/UsNfZwnQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E0NjM2MGQtNjYyYi00ZjdkLWJiMTctZDg2MDgyMTUyNDcxLzAvMkE2RjE2RTgw QkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0QjBEN0Q5QzI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTZGMTZFODBCRkRDN0I0RDY3OTc3MjZGQjhGRDRCMEQ3RDlD Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvMkE2RjE2RTgwQkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0 QjBEN0Q5QzI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmpYJdopJWBq+rJX1kcuoVgDLXKYOzf4lb7 U5QZ3WRsCLEvRkYKIaU2Uee5DVGAjeI2a3Qrhirox7v5hE7DcTw0oObMdcaCaj+8 xoTKa332g71CiQfMfvuM+xpConsOMlg5rov74pywyHmHv+Fze79jajCU/ASK8ouz DdyHZQd1eWhWYeLdBOStLsC5RxWdUAINXV6gesJXUBgfQu5+DcuF0l7Ok0+mVoh9 xPFLf6wZIRLqT7QWTz10MweEnaeifJlPUbUCvBZJq9zyVs0bQC4Hk7ZMIHVrI1NO g2hkSYXQ2MaBd8o2fH8GJX7Y0C9TlYar/zr31dhQcYvlDamM22U= -----END CERTIFICATE-----Generated at Sun Jun 14 01:59:57 2026 by rpki-client