$ rpki-client -vvf rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft File: 2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft (raw, json) Hash identifier: xBKS6GgxvjwALIu7xWNBPx+fU/rUPDYVureeEemWzEk= Subject key identifier: E0:6A:84:58:CE:D3:8A:E1:F7:91:1D:5C:BD:83:62:7E:4C:BF:DC:5D Authority key identifier: 2D:FC:5C:3D:38:82:FE:6E:7F:9A:9E:FE:2F:6B:96:55:5F:F5:2D:D7 Certificate issuer: /CN=2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7 Certificate serial: 70BC211381090E5F77FF5CA0C55F8F7A409DE4D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 14:32:09 +0000 Manifest this update: Sat 13 Jun 2026 14:27:09 +0000 Manifest next update: Sun 14 Jun 2026 16:48:09 +0000 Files and hashes: 1: 2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl (hash: BR3y2QG8bL5B5Setd4Chh2eRkbpvlobEUsXyr4ZCymg=) 2: 3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (hash: KyTDN/npdCxMnf6sB8d1UiCU7Ow9yE5T+dZIKGap4fI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:bc:21:13:81:09:0e:5f:77:ff:5c:a0:c5:5f:8f:7a:40:9d:e4:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7 Validity Not Before: Jun 13 14:27:09 2026 GMT Not After : Jun 14 16:48:09 2026 GMT Subject: CN=E06A8458CED38AE1F7911D5CBD83627E4CBFDC5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b4:05:86:34:f1:c3:1b:bc:0a:3c:b2:fc:04: be:5b:30:7e:55:a3:0b:a5:33:f0:a4:cf:69:55:ea: 29:9c:1b:ab:89:db:50:0b:31:c9:02:87:fd:f1:b0: 71:d9:46:0e:df:8b:ac:7b:d9:ef:e8:ff:13:87:d7: c3:8a:19:23:b0:1c:bf:88:85:ab:9c:31:c1:64:a0: 5a:01:77:31:a0:ea:8c:4d:f7:d3:fe:73:10:a0:2f: b5:7b:60:f9:39:78:ef:8c:c6:af:2f:7b:66:4f:14: f2:58:aa:b4:44:6f:dc:c2:e6:1e:50:66:4a:a4:f5: 97:dc:86:75:66:b2:e4:35:2a:bc:5d:68:60:69:86: c1:bf:68:e2:d7:21:fb:ef:f7:cb:67:03:1e:21:15: 6e:06:20:61:14:38:b3:4e:42:81:8d:6e:44:d4:76: 6c:f0:80:68:cf:92:54:ee:a8:5f:13:ed:f4:0a:c6: aa:b6:e5:59:02:49:26:08:22:f6:28:f4:0c:cb:a2: 5d:58:44:c5:2f:aa:27:e2:b0:8d:04:ec:92:a4:7e: d3:8c:d3:83:9b:7f:f2:e7:a1:d3:36:6b:d4:01:4b: fc:0b:8b:bf:9d:11:9b:dd:07:6c:d0:40:b0:a1:55: fb:e1:48:6a:71:72:65:13:b8:9d:4f:c1:27:0c:fd: b2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6A:84:58:CE:D3:8A:E1:F7:91:1D:5C:BD:83:62:7E:4C:BF:DC:5D X509v3 Authority Key Identifier: keyid:2D:FC:5C:3D:38:82:FE:6E:7F:9A:9E:FE:2F:6B:96:55:5F:F5:2D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:86:3e:81:82:3c:36:4d:8b:bf:ff:8c:fe:80:25:c1:05:2b: 81:49:b1:33:04:bf:8b:48:d7:07:1e:eb:2e:2d:db:0f:66:79: 71:16:1f:6d:11:c9:dc:fe:ec:51:d4:06:3d:96:df:90:66:2b: 33:80:60:d4:4e:12:2e:ac:4c:57:fb:90:29:ce:15:a7:2a:09: d9:29:ef:63:fe:82:d9:3d:1b:ca:2c:e5:5c:47:c3:3f:6f:49: ce:6e:3a:82:be:99:65:8c:98:51:43:78:cd:7e:f5:d0:d6:95: 0e:7b:79:13:d0:d1:5c:0d:20:4d:89:18:24:8f:1c:67:8a:30: 42:8c:c3:a9:77:ed:64:b0:3d:a0:62:51:d3:f4:7d:9b:5e:2f: b2:b5:db:7e:f3:f4:ed:b9:78:38:78:10:cc:4f:de:c9:bb:ed: 96:ce:ef:c6:ce:f3:41:e6:be:74:1c:2d:47:f7:3c:83:b4:89: 94:1b:e2:35:e0:bb:f5:af:af:41:e5:ad:fb:2f:05:82:f1:fa: 34:b0:33:81:ba:42:35:40:6a:17:05:a1:db:e5:d5:95:3b:d7: 6a:ee:50:3e:44:6f:76:3f:14:d3:a0:fd:53:d2:76:61:95:03: e5:48:2a:21:0f:49:89:6d:69:9f:68:de:65:55:d4:7b:14:96: b3:0e:20:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLwhE4EJDl93/1ygxV+PekCd5NYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQzVDM0QzODgyRkU2RTdGOUE5RUZFMkY2Qjk2NTU1 RkY1MkRENzAeFw0yNjA2MTMxNDI3MDlaFw0yNjA2MTQxNjQ4MDlaMDMxMTAvBgNV BAMTKEUwNkE4NDU4Q0VEMzhBRTFGNzkxMUQ1Q0JEODM2MjdFNENCRkRDNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDltAWGNPHDG7wKPLL8BL5bMH5V owulM/Ckz2lV6imcG6uJ21ALMckCh/3xsHHZRg7fi6x72e/o/xOH18OKGSOwHL+I haucMcFkoFoBdzGg6oxN99P+cxCgL7V7YPk5eO+Mxq8ve2ZPFPJYqrREb9zC5h5Q Zkqk9ZfchnVmsuQ1KrxdaGBphsG/aOLXIfvv98tnAx4hFW4GIGEUOLNOQoGNbkTU dmzwgGjPklTuqF8T7fQKxqq25VkCSSYIIvYo9AzLol1YRMUvqifisI0E7JKkftOM 04Obf/LnodM2a9QBS/wLi7+dEZvdB2zQQLChVfvhSGpxcmUTuJ1PwScM/bLbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4GqEWM7TiuH3kR1cvYNifky/3F0wHwYDVR0j BBgwFoAULfxcPTiC/m5/mp7+L2uWVV/1LdcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVmMDAxM2ItNTlhNi00NzMzLTg5ZjgtMjhmYTNkODg1NzlmLzAvMkRGQzVDM0Qz ODgyRkU2RTdGOUE5RUZFMkY2Qjk2NTU1RkY1MkRENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREZDNUMzRDM4ODJGRTZFN0Y5QTlFRkUyRjZCOTY1NTVGRjUy REQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmVmMDAxM2ItNTlhNi00NzMzLTg5 ZjgtMjhmYTNkODg1NzlmLzAvMkRGQzVDM0QzODgyRkU2RTdGOUE5RUZFMkY2Qjk2 NTU1RkY1MkRENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGGPoGCPDZNi7//jP6AJcEFK4FJsTMEv4tI 1wce6y4t2w9meXEWH20Rydz+7FHUBj2W35BmKzOAYNROEi6sTFf7kCnOFacqCdkp 72P+gtk9G8os5VxHwz9vSc5uOoK+mWWMmFFDeM1+9dDWlQ57eRPQ0VwNIE2JGCSP HGeKMEKMw6l37WSwPaBiUdP0fZteL7K1237z9O25eDh4EMxP3sm77ZbO78bO80Hm vnQcLUf3PIO0iZQb4jXgu/Wvr0HlrfsvBYLx+jSwM4G6QjVAahcFodvl1ZU712ru UD5Eb3Y/FNOg/VPSdmGVA+VIKiEPSYltaZ9o3mVV1HsUlrMOIMo= -----END CERTIFICATE-----Generated at Sat Jun 13 23:52:39 2026 by rpki-client