$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft File: 2E714C194A9AD07684B017C191F12805054E1FC8.mft (raw, json) Hash identifier: 6lnITaw5iLUaL0xCnHjko24gFla7Zq4N5268DOLUgyw= Subject key identifier: A9:4B:C6:A9:B4:73:F5:5F:9F:0B:0C:EC:A2:F4:67:1D:54:F6:12:82 Authority key identifier: 2E:71:4C:19:4A:9A:D0:76:84:B0:17:C1:91:F1:28:05:05:4E:1F:C8 Certificate issuer: /CN=2E714C194A9AD07684B017C191F12805054E1FC8 Certificate serial: 17C94123E09B55BC08FBEE8E9BBE91B57D163BE6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 18:00:59 +0000 Manifest this update: Tue 16 Jun 2026 17:55:59 +0000 Manifest next update: Wed 17 Jun 2026 18:19:59 +0000 Files and hashes: 1: 2E714C194A9AD07684B017C191F12805054E1FC8.crl (hash: q2JksiI/IzZNdpfEI6fic/fTQcpHHxR6xyusiiUMj1s=) 2: 3130332e3136302e3139332e302f32342d3234203d3e20313530353433.roa (hash: pi7opShYJXpPoFXhyGT9aMrMLC59BMPBUsNaZoHvFnY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.crl rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c9:41:23:e0:9b:55:bc:08:fb:ee:8e:9b:be:91:b5:7d:16:3b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E714C194A9AD07684B017C191F12805054E1FC8 Validity Not Before: Jun 16 17:55:59 2026 GMT Not After : Jun 17 18:19:59 2026 GMT Subject: CN=A94BC6A9B473F55F9F0B0CECA2F4671D54F61282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:66:4f:b3:be:5e:70:01:8a:89:c2:26:34:ba: 20:b3:4c:60:bf:01:d8:c6:af:c2:58:40:50:6c:86: 2a:00:10:e5:1b:fc:82:51:c0:5a:5c:1b:c3:e5:74: a3:f4:d2:99:9e:ea:5e:1c:42:17:06:09:75:5d:10: 94:f1:d4:d2:fe:60:9b:4e:ff:7f:38:d3:51:af:3a: e1:8b:b3:75:42:2e:59:aa:55:7c:6c:11:0a:78:42: b2:37:2a:9f:2b:f8:ad:00:d9:30:d2:83:f8:06:31: 7e:ab:20:eb:3b:a8:8e:ce:82:dd:68:0f:2a:55:d5: cc:0d:23:52:13:91:45:29:48:86:29:e0:8d:03:f9: e6:a7:3d:a4:b3:2e:49:3b:80:1e:08:fe:83:c6:eb: 52:d0:8e:51:fc:0f:3e:b9:1c:22:c0:24:4d:e1:95: 91:25:7b:f6:c4:f5:b8:af:82:2b:04:0e:5a:c8:13: 46:14:95:13:ab:6c:ef:a8:aa:14:5d:c4:1e:36:f1: e7:ee:de:57:05:99:78:68:fd:64:ba:7a:4b:20:0e: b6:5f:61:7f:e1:fe:5b:8d:1f:b2:43:a7:37:d7:6c: 67:62:23:22:5b:8b:f0:9d:7c:52:31:dd:07:fb:24: d7:86:1f:1c:e0:bf:db:f8:c2:ae:13:b2:66:c2:f7: 26:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4B:C6:A9:B4:73:F5:5F:9F:0B:0C:EC:A2:F4:67:1D:54:F6:12:82 X509v3 Authority Key Identifier: keyid:2E:71:4C:19:4A:9A:D0:76:84:B0:17:C1:91:F1:28:05:05:4E:1F:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:76:65:07:07:18:70:cd:be:d5:54:e0:6f:93:51:e4:28:46: 8a:86:87:d9:72:ed:aa:f3:6d:06:a8:b8:a3:47:27:5f:62:5b: 26:ba:3a:28:77:e3:01:16:eb:3c:12:b5:2f:f4:e8:a5:95:a7: 82:f5:a6:a1:ef:b8:dd:04:69:25:ad:32:4d:bd:7a:0f:cd:6b: d6:57:6a:50:27:c7:47:7e:d9:60:8e:8b:f7:2a:d2:5a:95:fe: 98:e8:68:b9:ff:91:63:5a:ee:64:8b:77:13:01:85:3d:61:7d: 77:21:2a:89:85:7a:c4:43:a1:0a:e4:8e:14:54:9a:9a:a1:a4: d3:72:bf:24:5f:5f:7c:7d:e6:bb:ac:2d:eb:bd:75:b2:88:e4: 86:a7:12:ff:7c:97:68:5c:a5:59:ef:aa:be:4b:5c:4d:6b:b0: dd:46:ba:75:09:28:21:ec:09:94:77:7d:95:ca:99:2f:02:50: c1:30:3d:de:9b:62:4b:c4:a9:94:ad:85:15:5d:ae:8d:40:0a: c0:24:cd:d1:9c:4d:4a:93:63:09:5e:0a:73:07:58:97:98:c6: e1:8b:54:c4:4a:05:24:48:f1:d7:9c:7d:a0:44:64:d1:24:22: b1:e5:df:61:8b:58:9d:fc:7b:eb:01:25:15:03:a5:5a:62:a2: 52:e9:3c:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF8lBI+CbVbwI++6Om76RtX0WO+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU3MTRDMTk0QTlBRDA3Njg0QjAxN0MxOTFGMTI4MDUw NTRFMUZDODAeFw0yNjA2MTYxNzU1NTlaFw0yNjA2MTcxODE5NTlaMDMxMTAvBgNV BAMTKEE5NEJDNkE5QjQ3M0Y1NUY5RjBCMENFQ0EyRjQ2NzFENTRGNjEyODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Zk+zvl5wAYqJwiY0uiCzTGC/ AdjGr8JYQFBshioAEOUb/IJRwFpcG8PldKP00pme6l4cQhcGCXVdEJTx1NL+YJtO /38401GvOuGLs3VCLlmqVXxsEQp4QrI3Kp8r+K0A2TDSg/gGMX6rIOs7qI7Ogt1o DypV1cwNI1ITkUUpSIYp4I0D+eanPaSzLkk7gB4I/oPG61LQjlH8Dz65HCLAJE3h lZEle/bE9bivgisEDlrIE0YUlROrbO+oqhRdxB428efu3lcFmXho/WS6eksgDrZf YX/h/luNH7JDpzfXbGdiIyJbi/CdfFIx3Qf7JNeGHxzgv9v4wq4TsmbC9yZdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqUvGqbRz9V+fCwzsovRnHVT2EoIwHwYDVR0j BBgwFoAULnFMGUqa0HaEsBfBkfEoBQVOH8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NiM2IwMGItYWQ3Yi00ODQ5LWIwYjItZTI0OWEyZmE2MDRhLzAvMkU3MTRDMTk0 QTlBRDA3Njg0QjAxN0MxOTFGMTI4MDUwNTRFMUZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTcxNEMxOTRBOUFEMDc2ODRCMDE3QzE5MUYxMjgwNTA1NEUx RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NiM2IwMGItYWQ3Yi00ODQ5LWIw YjItZTI0OWEyZmE2MDRhLzAvMkU3MTRDMTk0QTlBRDA3Njg0QjAxN0MxOTFGMTI4 MDUwNTRFMUZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIN2ZQcHGHDNvtVU4G+TUeQoRoqGh9ly7arz bQaouKNHJ19iWya6Oih34wEW6zwStS/06KWVp4L1pqHvuN0EaSWtMk29eg/Na9ZX alAnx0d+2WCOi/cq0lqV/pjoaLn/kWNa7mSLdxMBhT1hfXchKomFesRDoQrkjhRU mpqhpNNyvyRfX3x95rusLeu9dbKI5IanEv98l2hcpVnvqr5LXE1rsN1GunUJKCHs CZR3fZXKmS8CUMEwPd6bYkvEqZSthRVdro1ACsAkzdGcTUqTYwleCnMHWJeYxuGL VMRKBSRI8decfaBEZNEkIrHl32GLWJ38e+sBJRUDpVpiolLpPMg= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:26 2026 by rpki-client