$ rpki-client -vvf rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft File: 2BF94227A09D96F51AE8819B28CA3696003CBC60.mft (raw, json) Hash identifier: oNtgelnZa4XcXtYeglrFQkL8KszrtonFml/wnPTSF+U= Subject key identifier: 8F:DD:C5:BF:B4:A4:76:15:78:BE:4E:C5:62:19:F0:4F:10:0A:7B:22 Authority key identifier: 2B:F9:42:27:A0:9D:96:F5:1A:E8:81:9B:28:CA:36:96:00:3C:BC:60 Certificate issuer: /CN=2BF94227A09D96F51AE8819B28CA3696003CBC60 Certificate serial: 0298BF08E69C106B2F27FF179EE55F85AE3929F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 22:31:28 +0000 Manifest this update: Tue 16 Jun 2026 22:26:28 +0000 Manifest next update: Thu 18 Jun 2026 01:20:28 +0000 Files and hashes: 1: 2BF94227A09D96F51AE8819B28CA3696003CBC60.crl (hash: QqUkn1J8GUKo6ui9ZJLnI1fiFakLCIXngEdOfzZMEBY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.crl rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:98:bf:08:e6:9c:10:6b:2f:27:ff:17:9e:e5:5f:85:ae:39:29:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BF94227A09D96F51AE8819B28CA3696003CBC60 Validity Not Before: Jun 16 22:26:28 2026 GMT Not After : Jun 18 01:20:28 2026 GMT Subject: CN=8FDDC5BFB4A4761578BE4EC56219F04F100A7B22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b1:f9:d9:6d:71:3e:cc:3f:de:8b:c5:06:75: d2:d4:b9:7c:12:8e:c0:38:28:37:a1:32:09:13:43: f6:20:a5:b3:86:dd:6e:5b:16:b9:42:28:df:29:58: 28:f4:06:65:8a:9a:c8:34:49:3f:dd:73:9d:80:f1: 53:59:e2:03:d4:39:3f:08:91:cf:bb:c7:42:a1:79: cb:bf:53:6a:85:e1:3b:df:13:f2:e5:64:62:45:18: 96:d4:1d:00:4c:de:91:ca:46:13:ef:ec:32:4f:e5: 03:36:eb:c0:a6:d3:e8:2b:84:7d:a1:7e:4b:94:8b: e2:5f:7f:0c:b3:49:54:e6:84:40:43:93:fe:a7:b7: b5:cb:40:34:0d:9f:e2:e9:94:0a:2c:61:71:bd:36: 71:b3:bb:4b:3e:a4:81:91:db:6e:33:ef:a1:24:98: 99:cb:7a:ed:4c:02:43:55:6e:91:9b:bf:61:53:6d: 61:32:51:a6:24:68:a1:12:bb:48:13:bc:85:c5:ef: 38:3f:e5:81:dc:d6:a3:c9:ff:15:ff:d5:f9:82:df: e6:94:c7:e6:32:88:33:62:54:fa:32:a0:3f:fb:54: 9f:ec:47:00:3a:26:15:87:3f:6d:3e:fa:5e:87:7c: 3b:b4:d5:77:d6:3f:8e:eb:a3:95:fb:25:2b:8b:7b: 1a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DD:C5:BF:B4:A4:76:15:78:BE:4E:C5:62:19:F0:4F:10:0A:7B:22 X509v3 Authority Key Identifier: keyid:2B:F9:42:27:A0:9D:96:F5:1A:E8:81:9B:28:CA:36:96:00:3C:BC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:79:f3:b3:50:0e:45:5a:e2:0c:72:36:2e:19:78:cb:fb:fc: 7f:d9:ce:8e:84:6f:7b:62:d3:98:dc:db:a2:50:95:7e:b8:3b: 9b:04:d6:c3:4b:47:a7:df:04:46:25:6c:fb:d7:74:e1:d1:68: e3:b4:a6:f9:8c:5f:68:fc:f3:e5:5a:32:52:d1:89:93:88:4d: 15:c2:b1:29:e5:42:13:69:0c:52:1b:b9:58:3d:e1:59:75:85: d5:b1:06:cc:9e:92:a7:73:12:7c:98:5a:94:2d:59:bc:d7:cd: 22:08:b5:61:58:76:5a:6a:18:18:f0:a3:60:1c:b3:1e:29:ce: e7:ca:e7:6a:54:7a:1a:0a:b6:ca:06:f8:08:2f:63:e6:da:7a: d7:3c:f5:18:79:c9:75:6b:f4:4b:40:59:a0:90:9e:cf:96:78: 1a:61:c2:87:93:61:ec:cc:f6:ce:96:a1:07:06:2d:5b:b9:d5: 8d:8a:3f:12:18:0f:2e:39:1e:68:71:15:37:48:22:ba:9b:9c: fb:89:25:be:77:e4:71:f7:c4:79:9a:10:c9:4d:7b:0f:1a:c3: 42:4f:d9:d7:ff:d0:49:8e:db:bb:17:e8:23:dd:16:79:d8:ff: 96:af:de:2e:25:b2:87:e7:16:75:5a:05:85:61:c4:31:3a:1b: 3a:37:f9:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUApi/COacEGsvJ/8XnuVfha45KfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJGOTQyMjdBMDlEOTZGNTFBRTg4MTlCMjhDQTM2OTYw MDNDQkM2MDAeFw0yNjA2MTYyMjI2MjhaFw0yNjA2MTgwMTIwMjhaMDMxMTAvBgNV BAMTKDhGRERDNUJGQjRBNDc2MTU3OEJFNEVDNTYyMTlGMDRGMTAwQTdCMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsfnZbXE+zD/ei8UGddLUuXwS jsA4KDehMgkTQ/YgpbOG3W5bFrlCKN8pWCj0BmWKmsg0ST/dc52A8VNZ4gPUOT8I kc+7x0Khecu/U2qF4TvfE/LlZGJFGJbUHQBM3pHKRhPv7DJP5QM268Cm0+grhH2h fkuUi+JffwyzSVTmhEBDk/6nt7XLQDQNn+LplAosYXG9NnGzu0s+pIGR224z76Ek mJnLeu1MAkNVbpGbv2FTbWEyUaYkaKESu0gTvIXF7zg/5YHc1qPJ/xX/1fmC3+aU x+YyiDNiVPoyoD/7VJ/sRwA6JhWHP20++l6HfDu01XfWP47ro5X7JSuLexpxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj93Fv7SkdhV4vk7FYhnwTxAKeyIwHwYDVR0j BBgwFoAUK/lCJ6CdlvUa6IGbKMo2lgA8vGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmFkZmNiNDQtYWU3YS00NDIzLWFlN2QtMDg2NDhiZjFkZWIxLzAvMkJGOTQyMjdB MDlEOTZGNTFBRTg4MTlCMjhDQTM2OTYwMDNDQkM2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQkY5NDIyN0EwOUQ5NkY1MUFFODgxOUIyOENBMzY5NjAwM0NC QzYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmFkZmNiNDQtYWU3YS00NDIzLWFl N2QtMDg2NDhiZjFkZWIxLzAvMkJGOTQyMjdBMDlEOTZGNTFBRTg4MTlCMjhDQTM2 OTYwMDNDQkM2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEF587NQDkVa4gxyNi4ZeMv7/H/Zzo6Eb3ti 05jc26JQlX64O5sE1sNLR6ffBEYlbPvXdOHRaOO0pvmMX2j88+VaMlLRiZOITRXC sSnlQhNpDFIbuVg94Vl1hdWxBsyekqdzEnyYWpQtWbzXzSIItWFYdlpqGBjwo2Ac sx4pzufK52pUehoKtsoG+AgvY+baetc89Rh5yXVr9EtAWaCQns+WeBphwoeTYezM 9s6WoQcGLVu51Y2KPxIYDy45HmhxFTdIIrqbnPuJJb535HH3xHmaEMlNew8aw0JP 2df/0EmO27sX6CPdFnnY/5av3i4lsofnFnVaBYVhxDE6Gzo3+bE= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:00 2026 by rpki-client