$ rpki-client -vvf rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft File: 2DFC13D85715AA04782C2A3D86F83844385F896D.mft (raw, json) Hash identifier: hGoZwaPnt64dBfNZtoNZYZb7LfrLRTvy5spwbOfLcyI= Subject key identifier: A8:21:1A:83:79:C7:78:15:0F:4B:AE:B7:0C:80:EC:F7:F7:57:B0:C4 Authority key identifier: 2D:FC:13:D8:57:15:AA:04:78:2C:2A:3D:86:F8:38:44:38:5F:89:6D Certificate issuer: /CN=2DFC13D85715AA04782C2A3D86F83844385F896D Certificate serial: 720C2D51DBF4619C6DD9B5DA328779480A7304E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:56:21 +0000 Manifest this update: Wed 17 Jun 2026 02:51:21 +0000 Manifest next update: Thu 18 Jun 2026 05:00:21 +0000 Files and hashes: 1: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: 2yToa31P3viNdlJSz6LX8aSdNJBJoeEJaRZoiY3wK8c=) 2: 2DFC13D85715AA04782C2A3D86F83844385F896D.crl (hash: 4Mn34Ve83gg0OfO+zNLJDrCZQ5qlBOHS3+7na7fMbT0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.crl rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:0c:2d:51:db:f4:61:9c:6d:d9:b5:da:32:87:79:48:0a:73:04:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFC13D85715AA04782C2A3D86F83844385F896D Validity Not Before: Jun 17 02:51:21 2026 GMT Not After : Jun 18 05:00:21 2026 GMT Subject: CN=A8211A8379C778150F4BAEB70C80ECF7F757B0C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0e:f6:25:f1:c3:d1:98:b7:30:86:c9:54:7a: 7a:d9:12:63:dc:86:7e:72:7f:42:43:72:2a:0c:9a: 97:af:80:31:6e:a8:b4:5c:4f:85:39:dc:56:1d:8f: 25:4c:4d:a3:de:93:1f:bb:20:10:04:c1:c7:b5:4f: 08:21:2c:b1:04:b1:b6:4e:26:6a:2e:99:82:86:d8: 3d:3e:ac:6a:6e:d8:6d:0d:04:99:71:0d:f4:ff:dd: 3a:ca:5b:f2:69:1e:08:36:fe:54:83:cc:b0:49:3e: fd:89:a0:ea:c4:a2:ea:bc:59:31:46:51:e3:99:19: d6:61:3f:b7:f3:f5:50:43:24:8c:05:9e:ab:33:21: a3:25:bf:d9:27:77:76:45:26:ad:f3:75:e8:57:35: 94:a5:01:fe:13:d7:d3:62:a9:e3:fb:45:84:c6:1d: ad:f2:41:9a:87:0c:06:b3:b8:09:dd:5d:18:07:b3: 13:4e:6f:26:ff:4b:f3:ad:3d:2a:24:1c:e2:2a:d2: 20:39:aa:58:31:ff:39:3a:45:a6:b0:3c:be:54:ce: e7:16:3e:4f:c3:8b:0f:3c:a8:5d:8c:14:87:67:ef: ea:f2:57:93:23:27:45:d8:07:ff:c6:f2:e9:c6:26: a3:55:33:8c:ac:cc:50:5b:eb:85:2c:e9:53:d8:28: d4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:21:1A:83:79:C7:78:15:0F:4B:AE:B7:0C:80:EC:F7:F7:57:B0:C4 X509v3 Authority Key Identifier: keyid:2D:FC:13:D8:57:15:AA:04:78:2C:2A:3D:86:F8:38:44:38:5F:89:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:f0:6a:7a:43:dc:89:59:de:62:16:9b:5e:23:27:d2:65:71: 03:b5:ec:5b:e4:4d:b4:2e:cd:7e:32:4e:9a:7e:77:ce:40:d4: 98:c6:53:5a:58:63:d7:4d:6f:16:62:29:b0:4d:b2:f9:24:c5: 22:81:2f:0b:e5:41:08:aa:32:37:ae:d0:49:78:76:74:4a:52: 1a:78:0c:8e:72:58:46:d3:c5:d8:0c:4f:12:df:27:2f:c7:89: f1:d9:5f:be:6a:8f:99:a7:3e:ed:13:a1:f2:a9:bc:f6:9e:dc: 31:7c:df:c4:4d:ef:6c:80:46:5e:82:c8:ab:c2:3b:33:bb:d4: db:7f:a8:97:61:ec:e0:72:99:e9:a5:69:da:dd:84:54:4a:e4: 39:0b:63:c3:1c:9c:3b:77:e5:49:e9:9b:54:99:50:42:d7:a8: 81:73:0a:04:c1:a5:db:e5:78:20:bf:55:f1:8d:a4:26:8f:e3: bf:f0:cf:a1:fd:a3:d6:99:70:be:2e:aa:63:66:c6:b3:06:10: 8e:2c:15:fd:fc:36:b6:b4:6f:91:de:78:cd:54:78:d8:90:a4: 0e:11:e9:62:31:fe:70:5e:df:78:b8:c6:8b:6a:f4:ca:35:9c: d5:f0:d4:3b:ba:78:85:60:67:0a:64:a6:c4:81:cc:f4:0b:29: c9:85:42:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcgwtUdv0YZxt2bXaMod5SApzBOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQzEzRDg1NzE1QUEwNDc4MkMyQTNEODZGODM4NDQz ODVGODk2RDAeFw0yNjA2MTcwMjUxMjFaFw0yNjA2MTgwNTAwMjFaMDMxMTAvBgNV BAMTKEE4MjExQTgzNzlDNzc4MTUwRjRCQUVCNzBDODBFQ0Y3Rjc1N0IwQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZDvYl8cPRmLcwhslUenrZEmPc hn5yf0JDcioMmpevgDFuqLRcT4U53FYdjyVMTaPekx+7IBAEwce1TwghLLEEsbZO JmoumYKG2D0+rGpu2G0NBJlxDfT/3TrKW/JpHgg2/lSDzLBJPv2JoOrEouq8WTFG UeOZGdZhP7fz9VBDJIwFnqszIaMlv9knd3ZFJq3zdehXNZSlAf4T19NiqeP7RYTG Ha3yQZqHDAazuAndXRgHsxNObyb/S/OtPSokHOIq0iA5qlgx/zk6RaawPL5UzucW Pk/Diw88qF2MFIdn7+ryV5MjJ0XYB//G8unGJqNVM4yszFBb64Us6VPYKNSLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqCEag3nHeBUPS663DIDs9/dXsMQwHwYDVR0j BBgwFoAULfwT2FcVqgR4LCo9hvg4RDhfiW0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTliMDdhOWUtNjJkZi00ODA4LTlkMmEtYTZlNjg4NGJjYmJiLzAvMkRGQzEzRDg1 NzE1QUEwNDc4MkMyQTNEODZGODM4NDQzODVGODk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yREZDMTNEODU3MTVBQTA0NzgyQzJBM0Q4NkY4Mzg0NDM4NUY4 OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvMkRGQzEzRDg1NzE1QUEwNDc4MkMyQTNEODZGODM4 NDQzODVGODk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDwanpD3IlZ3mIWm14jJ9JlcQO17FvkTbQu zX4yTpp+d85A1JjGU1pYY9dNbxZiKbBNsvkkxSKBLwvlQQiqMjeu0El4dnRKUhp4 DI5yWEbTxdgMTxLfJy/HifHZX75qj5mnPu0TofKpvPae3DF838RN72yARl6CyKvC OzO71Nt/qJdh7OBymemladrdhFRK5DkLY8McnDt35Unpm1SZUELXqIFzCgTBpdvl eCC/VfGNpCaP47/wz6H9o9aZcL4uqmNmxrMGEI4sFf38Nra0b5HeeM1UeNiQpA4R 6WIx/nBe33i4xotq9Mo1nNXw1Du6eIVgZwpkpsSBzPQLKcmFQis= -----END CERTIFICATE-----Generated at Wed Jun 17 09:11:13 2026 by rpki-client