$ rpki-client -vvf rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft File: 2DFA9ABE82F079690092186CFE591462760D0F8A.mft (raw, json) Hash identifier: wEcimWjaHZ4ACP20qxP1iT+znP2fVgGr/c1jybQ0qck= Subject key identifier: 87:B7:1F:67:98:49:57:C7:97:35:8F:13:FD:59:CC:24:FD:34:F0:DE Authority key identifier: 2D:FA:9A:BE:82:F0:79:69:00:92:18:6C:FE:59:14:62:76:0D:0F:8A Certificate issuer: /CN=2DFA9ABE82F079690092186CFE591462760D0F8A Certificate serial: 7C47E2E52ECACDE54A0E2B33E818620AB909BDC4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 12:09:18 +0000 Manifest this update: Sat 13 Jun 2026 12:04:18 +0000 Manifest next update: Sun 14 Jun 2026 12:45:18 +0000 Files and hashes: 1: 2DFA9ABE82F079690092186CFE591462760D0F8A.crl (hash: 5LnxVj/VRHRLjHh6/TX61hpNtZGtrBl8oNeXqvdl/TU=) 2: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: W/hw+IjAyZrPFulBFkYLnFPX3SzGksOOsryB2xI+HDo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.crl rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:47:e2:e5:2e:ca:cd:e5:4a:0e:2b:33:e8:18:62:0a:b9:09:bd:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFA9ABE82F079690092186CFE591462760D0F8A Validity Not Before: Jun 13 12:04:18 2026 GMT Not After : Jun 14 12:45:18 2026 GMT Subject: CN=87B71F67984957C797358F13FD59CC24FD34F0DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:98:4e:37:6f:88:91:99:5d:0a:af:99:be:40: b5:24:17:80:f1:99:db:9c:fc:d9:6c:15:20:a8:51: 6e:2e:39:4d:b5:d2:c0:1b:bf:c9:d3:2f:63:76:67: 4e:10:b4:d5:b7:53:a1:aa:d2:b0:23:f3:08:9f:95: 78:ab:13:09:a3:e7:2d:bf:dd:8a:c2:e0:78:46:5f: e0:1e:79:08:47:ee:b7:2f:1f:6b:e7:ef:a1:67:51: 7e:5a:c9:c5:13:50:c0:ab:20:07:88:f3:c4:34:9d: ba:26:55:d3:36:92:1a:0f:3b:35:df:75:75:87:31: 0f:86:59:76:a5:03:7a:88:e1:20:ac:c7:57:de:7a: 4b:47:68:32:81:e7:d9:5f:be:b1:8d:54:f4:e7:6b: a1:d5:46:17:ef:a3:f2:8f:f4:67:48:58:82:0c:8b: 93:8b:1d:f3:b2:fc:ec:96:c2:4c:d7:67:91:6a:8a: 76:2f:2d:45:75:06:0a:2d:1a:d2:d5:21:1d:7f:fe: d0:0a:f9:f0:c0:76:6e:16:ed:f7:52:f9:bb:55:52: c3:16:a3:25:41:68:90:7b:c5:2a:5c:ac:59:c8:55: 6f:f0:56:89:29:57:57:98:eb:2d:ee:c5:19:7b:e0: 22:3f:54:15:ea:0d:d6:10:d2:fd:19:9d:f6:8e:59: 77:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B7:1F:67:98:49:57:C7:97:35:8F:13:FD:59:CC:24:FD:34:F0:DE X509v3 Authority Key Identifier: keyid:2D:FA:9A:BE:82:F0:79:69:00:92:18:6C:FE:59:14:62:76:0D:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b5:01:a1:3f:9a:6d:d0:11:66:76:2e:b7:59:4b:6f:e2:e4: 31:df:db:32:52:5a:a6:8d:e2:ee:94:f3:c8:b1:e2:b7:c6:e7: 87:be:23:bf:e8:4b:3e:0c:2a:b8:e1:b7:be:98:bb:a4:56:ce: 04:a5:1a:4b:ba:2b:07:45:26:45:dc:cc:f0:0c:82:1f:fb:b2: 98:ff:42:ac:37:10:cf:de:6b:c2:6e:9f:f0:bf:5f:af:c1:b7: c2:2f:d0:94:fd:3f:8d:4a:e2:f8:24:79:c5:b3:89:d2:8b:2b: b6:4c:0d:39:34:c3:d7:1a:3b:82:99:9d:c1:e8:9e:3a:45:90: 97:7e:11:1b:09:55:b3:ac:7b:84:3d:f0:3f:96:39:ce:3d:3b: 1a:e4:11:58:01:de:94:87:b9:62:67:0a:3f:0e:66:04:ec:66: 08:ea:e9:7d:13:61:b2:fd:b7:58:06:11:ab:b8:fd:82:87:be: cb:a7:42:34:0a:70:87:87:a2:5c:b1:f7:24:45:f3:c9:e6:17: c9:f6:18:b3:f3:c4:e1:9b:96:81:87:68:fe:54:07:c2:c5:e5: 22:15:a7:3e:13:43:85:40:70:0c:97:04:5f:b5:29:48:2b:a5: 56:df:0b:25:14:7a:fc:ee:53:ab:0e:9e:0a:86:30:79:0c:09: b1:2c:c2:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfEfi5S7KzeVKDisz6BhiCrkJvcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQTlBQkU4MkYwNzk2OTAwOTIxODZDRkU1OTE0NjI3 NjBEMEY4QTAeFw0yNjA2MTMxMjA0MThaFw0yNjA2MTQxMjQ1MThaMDMxMTAvBgNV BAMTKDg3QjcxRjY3OTg0OTU3Qzc5NzM1OEYxM0ZENTlDQzI0RkQzNEYwREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhmE43b4iRmV0Kr5m+QLUkF4Dx mduc/NlsFSCoUW4uOU210sAbv8nTL2N2Z04QtNW3U6Gq0rAj8wiflXirEwmj5y2/ 3YrC4HhGX+AeeQhH7rcvH2vn76FnUX5aycUTUMCrIAeI88Q0nbomVdM2khoPOzXf dXWHMQ+GWXalA3qI4SCsx1feektHaDKB59lfvrGNVPTna6HVRhfvo/KP9GdIWIIM i5OLHfOy/OyWwkzXZ5FqinYvLUV1BgotGtLVIR1//tAK+fDAdm4W7fdS+btVUsMW oyVBaJB7xSpcrFnIVW/wVokpV1eY6y3uxRl74CI/VBXqDdYQ0v0ZnfaOWXfbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh7cfZ5hJV8eXNY8T/VnMJP008N4wHwYDVR0j BBgwFoAULfqavoLweWkAkhhs/lkUYnYND4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGNjYzJhZjQtYTYyZC00NzA4LWI2ODgtMTg5MjU5NGJhOTg5LzAvMkRGQTlBQkU4 MkYwNzk2OTAwOTIxODZDRkU1OTE0NjI3NjBEMEY4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREZBOUFCRTgyRjA3OTY5MDA5MjE4NkNGRTU5MTQ2Mjc2MEQw RjhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvMkRGQTlBQkU4MkYwNzk2OTAwOTIxODZDRkU1OTE0 NjI3NjBEMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIu1AaE/mm3QEWZ2LrdZS2/i5DHf2zJSWqaN 4u6U88ix4rfG54e+I7/oSz4MKrjht76Yu6RWzgSlGku6KwdFJkXczPAMgh/7spj/ Qqw3EM/ea8Jun/C/X6/Bt8Iv0JT9P41K4vgkecWzidKLK7ZMDTk0w9caO4KZncHo njpFkJd+ERsJVbOse4Q98D+WOc49OxrkEVgB3pSHuWJnCj8OZgTsZgjq6X0TYbL9 t1gGEau4/YKHvsunQjQKcIeHolyx9yRF88nmF8n2GLPzxOGbloGHaP5UB8LF5SIV pz4TQ4VAcAyXBF+1KUgrpVbfCyUUevzuU6sOngqGMHkMCbEswpA= -----END CERTIFICATE-----Generated at Sun Jun 14 04:46:20 2026 by rpki-client