$ rpki-client -vvf rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft File: 2C1233B548C07507C6EF58E2A03DD8309F820753.mft (raw, json) Hash identifier: Avpr4om6uJIhU1ykit4qzMdw3dG9kXswffUJ9G4vN54= Subject key identifier: 71:2B:83:9C:94:20:A5:55:0C:7E:52:06:52:EB:C5:A8:CE:29:35:6B Authority key identifier: 2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53 Certificate issuer: /CN=2C1233B548C07507C6EF58E2A03DD8309F820753 Certificate serial: 225D1F69A47C79F7A32A3A52732F6048623CA3C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft Manifest number: 3B Signing time: Sun 14 Jun 2026 09:44:31 +0000 Manifest this update: Sun 14 Jun 2026 09:39:31 +0000 Manifest next update: Mon 15 Jun 2026 12:48:31 +0000 Files and hashes: 1: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 0GUMhzS+5NIthW1wvl37lL5c5ztTRVnrHP+oCvOX4MA=) 2: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: bvFzrT6armN3+NSh25eEAeVsS6vGdsFIsCLC0MUnl3s=) 3: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: /6iiyBTTzA+gJYo5W8sFnueJYX/K6dQcso0XDUc2u/0=) 4: 2C1233B548C07507C6EF58E2A03DD8309F820753.crl (hash: O422WQU7SvJ1EdYw0a0G+38svWab6hdXX7fIUe4rHSY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 07:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:5d:1f:69:a4:7c:79:f7:a3:2a:3a:52:73:2f:60:48:62:3c:a3:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C1233B548C07507C6EF58E2A03DD8309F820753 Validity Not Before: Jun 14 09:39:31 2026 GMT Not After : Jun 15 12:48:31 2026 GMT Subject: CN=712B839C9420A5550C7E520652EBC5A8CE29356B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3e:44:de:c7:a4:eb:40:41:65:fa:d9:fe:bc: 9e:f0:d4:c6:b6:dc:2e:66:20:24:86:14:ac:1b:50: 5e:eb:49:87:d0:ce:ad:53:e4:3b:dd:d2:01:dd:59: 14:e2:79:5b:68:2f:c2:72:39:7a:0b:8f:de:19:1c: a4:9f:be:bf:0a:f0:9d:9f:d4:22:33:71:67:cf:2e: 93:f1:b6:a2:e8:e1:1b:3f:c7:fc:e5:25:30:8d:62: 16:22:08:57:2f:f0:59:78:3b:46:34:7c:1b:17:14: df:cf:77:aa:a3:e7:0a:47:57:d5:b9:6f:dd:fb:3e: 95:4f:9a:d3:8d:36:47:5c:8e:dd:c8:7c:0c:86:dc: 1a:cf:aa:15:31:fe:a4:da:7a:f8:60:8d:ab:c9:b0: 3c:e8:3d:1a:fd:06:fa:07:8b:ba:4d:69:34:57:41: 43:91:94:3e:d7:88:19:bd:72:7f:b8:18:69:87:9f: 67:1c:ba:62:9f:52:07:5f:d1:0e:68:79:16:5f:37: 58:eb:ed:53:f2:58:39:ca:f6:9f:19:74:d6:99:55: 7e:12:91:5f:ff:ba:8c:1f:61:7f:8c:eb:29:db:11: 3a:f9:ad:68:dd:d7:a5:f6:62:54:be:07:b9:31:c2: 5e:ec:eb:12:e8:97:14:23:0e:35:10:f3:3f:f2:77: a7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2B:83:9C:94:20:A5:55:0C:7E:52:06:52:EB:C5:A8:CE:29:35:6B X509v3 Authority Key Identifier: keyid:2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:5a:a2:07:58:1e:10:a7:b4:14:8a:8d:07:2b:dc:b9:ca:60: 60:f1:3b:70:af:8f:0d:fd:05:14:44:42:b1:44:f6:09:bb:5e: 0f:49:4c:64:ac:3f:ad:48:e4:78:04:55:63:6c:79:88:d7:32: 3f:05:d3:75:fc:49:e8:89:93:f7:d1:77:f2:92:25:dc:2d:64: 0a:08:6c:56:12:ac:31:24:99:8b:6a:bb:cd:ae:ad:b4:33:7d: b5:bd:89:b3:5d:90:8a:87:bd:41:65:20:cf:1e:59:6f:a5:b1: a6:1c:d1:cf:d3:a5:16:98:c8:79:c4:a4:71:80:e9:62:17:65: d4:fb:0c:a7:30:ef:ec:ef:42:0c:f8:70:59:5a:43:26:e9:aa: 5c:40:b7:7a:bd:89:d3:3b:ea:cb:1a:b8:66:f6:e2:47:81:a6: 42:37:1a:be:db:f7:bf:31:30:bc:56:a4:06:5d:81:b3:7f:c3: 8a:f8:43:cf:56:0a:b7:09:63:ac:c8:4f:42:51:ec:94:f8:ee: 12:77:d2:f1:8e:fb:a8:5e:b7:c6:b4:6e:93:61:36:88:3a:03: 76:22:e6:1a:f6:72:70:2e:78:83:a7:3b:b8:18:2a:38:6c:b1: 7f:2f:47:a8:a0:65:55:9e:17:d9:2e:c9:03:3f:f7:88:9c:22: 6d:42:0f:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIl0faaR8efejKjpScy9gSGI8o8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMxMjMzQjU0OEMwNzUwN0M2RUY1OEUyQTAzREQ4MzA5 RjgyMDc1MzAeFw0yNjA2MTQwOTM5MzFaFw0yNjA2MTUxMjQ4MzFaMDMxMTAvBgNV BAMTKDcxMkI4MzlDOTQyMEE1NTUwQzdFNTIwNjUyRUJDNUE4Q0UyOTM1NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPkTex6TrQEFl+tn+vJ7w1Ma2 3C5mICSGFKwbUF7rSYfQzq1T5Dvd0gHdWRTieVtoL8JyOXoLj94ZHKSfvr8K8J2f 1CIzcWfPLpPxtqLo4Rs/x/zlJTCNYhYiCFcv8Fl4O0Y0fBsXFN/Pd6qj5wpHV9W5 b937PpVPmtONNkdcjt3IfAyG3BrPqhUx/qTaevhgjavJsDzoPRr9BvoHi7pNaTRX QUORlD7XiBm9cn+4GGmHn2ccumKfUgdf0Q5oeRZfN1jr7VPyWDnK9p8ZdNaZVX4S kV//uowfYX+M6ynbETr5rWjd16X2YlS+B7kxwl7s6xLolxQjDjUQ8z/yd6dpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcSuDnJQgpVUMflIGUuvFqM4pNWswHwYDVR0j BBgwFoAULBIztUjAdQfG71jioD3YMJ+CB1MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTFlOTQyNDMtODdmMC00MjZmLWE5Y2EtNGMxOWVkYjA2YjQyLzAvMkMxMjMzQjU0 OEMwNzUwN0M2RUY1OEUyQTAzREQ4MzA5RjgyMDc1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQzEyMzNCNTQ4QzA3NTA3QzZFRjU4RTJBMDNERDgzMDlGODIw NzUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5 Y2EtNGMxOWVkYjA2YjQyLzAvMkMxMjMzQjU0OEMwNzUwN0M2RUY1OEUyQTAzREQ4 MzA5RjgyMDc1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZaogdYHhCntBSKjQcr3LnKYGDxO3Cvjw39 BRREQrFE9gm7Xg9JTGSsP61I5HgEVWNseYjXMj8F03X8SeiJk/fRd/KSJdwtZAoI bFYSrDEkmYtqu82urbQzfbW9ibNdkIqHvUFlIM8eWW+lsaYc0c/TpRaYyHnEpHGA 6WIXZdT7DKcw7+zvQgz4cFlaQybpqlxAt3q9idM76ssauGb24keBpkI3Gr7b978x MLxWpAZdgbN/w4r4Q89WCrcJY6zIT0JR7JT47hJ30vGO+6het8a0bpNhNog6A3Yi 5hr2cnAueIOnO7gYKjhssX8vR6igZVWeF9kuyQM/94icIm1CD4g= -----END CERTIFICATE-----Generated at Sun Jun 14 12:16:54 2026 by rpki-client