$ rpki-client -vvf rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft File: 2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft (raw, json) Hash identifier: gGoZKiFtMPow/JBKA6bn0p7nzie6sgvNlzrpYL7Lz2k= Subject key identifier: AC:9C:18:0A:79:32:E3:80:41:98:A2:84:53:25:AB:B2:15:F5:9E:D8 Authority key identifier: 2D:81:47:AB:32:AE:34:FE:05:99:30:1C:39:9B:A4:31:CB:D9:6A:E2 Certificate issuer: /CN=2D8147AB32AE34FE0599301C399BA431CBD96AE2 Certificate serial: 0333DEED6675A3159EF5B1C372B2F12FB0CD1E0D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:04:05 +0000 Manifest this update: Wed 17 Jun 2026 04:59:05 +0000 Manifest next update: Thu 18 Jun 2026 07:28:05 +0000 Files and hashes: 1: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: YTcLxO+mbdwk1sv6hkGjyOE34UWEs5shSWT+DleZD5E=) 2: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: RnobRsvxkM1MTdlV59E6oBUzJE/tUaI5t4eU9X2Ihxg=) 3: 2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl (hash: KSE2gJgX35JRTD2gOvLxR0F+nJ3o8k8sk48DOCem8W4=) 4: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: OX/hSObmRCzkD1qVckzfWkKuBPC5Pdod9YDgySPz4C8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:33:de:ed:66:75:a3:15:9e:f5:b1:c3:72:b2:f1:2f:b0:cd:1e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D8147AB32AE34FE0599301C399BA431CBD96AE2 Validity Not Before: Jun 17 04:59:05 2026 GMT Not After : Jun 18 07:28:05 2026 GMT Subject: CN=AC9C180A7932E3804198A2845325ABB215F59ED8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:b7:1c:2e:8a:56:92:64:69:c4:cd:9a:29: ea:9a:f1:50:10:fa:40:cb:45:62:9e:28:ec:c3:0c: 31:50:cc:ed:6f:55:c0:1f:c7:16:b9:c3:97:9d:b3: 03:1d:fa:e6:fb:56:35:ff:5e:66:aa:03:2e:f4:5b: 5b:f7:e4:a0:33:93:02:fc:de:db:9d:96:67:24:67: a6:7a:1e:a7:e6:67:24:65:93:43:02:74:e1:21:1e: 1e:67:ab:d1:84:23:7c:3c:bb:45:94:23:29:f1:96: 5b:7c:21:62:03:a6:cf:0d:80:c7:79:eb:5e:35:c3: 70:eb:0c:76:3f:b4:84:f6:0a:26:b1:5b:69:57:95: a8:21:20:91:ff:c6:23:bc:76:01:42:b1:c9:7d:59: 4d:0d:cd:8c:cd:67:7f:1b:a6:50:1c:e4:1d:6c:61: cb:ae:23:fa:dd:0c:17:66:ed:2b:cd:c3:87:1b:2e: 1b:a3:7f:65:a5:92:16:80:42:d9:39:b6:11:28:ef: c6:8f:0e:6e:2d:25:f0:41:b0:4d:2a:75:cb:bb:9d: f8:ad:4f:13:c9:cd:1d:1d:1a:0c:b4:28:0b:a8:a7: d2:72:e3:63:fa:2d:f7:a3:fa:46:ac:ec:d1:de:02: a4:ed:df:c6:7d:ba:6a:ad:a2:51:31:3e:2a:fa:af: bc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9C:18:0A:79:32:E3:80:41:98:A2:84:53:25:AB:B2:15:F5:9E:D8 X509v3 Authority Key Identifier: keyid:2D:81:47:AB:32:AE:34:FE:05:99:30:1C:39:9B:A4:31:CB:D9:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:08:f4:41:0e:82:4b:9f:21:a2:26:49:9d:0a:5d:f5:55:36: cc:69:1e:c6:78:33:54:a9:48:5b:ee:a4:2b:10:46:03:c7:16: 20:74:d8:e4:1e:11:35:e8:11:3e:de:d3:65:71:6f:2d:ea:6e: 50:c6:1f:f1:39:cf:f9:7c:0b:1c:e4:6c:4c:6d:b3:cb:4f:98: 3d:4a:f9:0d:25:bb:a8:dc:67:e8:ad:87:5f:91:f2:94:84:a8: 0c:f1:01:2e:2c:e8:d2:f6:3f:10:49:eb:6e:0b:93:53:4e:a4: 5b:79:69:f0:fd:42:a6:b2:01:68:d1:56:db:bf:e6:23:6b:89: c4:2a:e2:f8:5a:6c:bf:ff:ac:f0:b7:50:ad:8e:f8:25:da:f3: 72:d5:5d:4c:37:73:50:6f:f9:79:84:af:67:a2:da:a0:54:31: b7:70:bf:04:31:12:9a:90:80:08:1a:07:32:8b:dc:3f:02:ad: 20:bd:22:f5:2d:a5:45:9e:e0:bd:c4:bf:45:1e:22:d5:12:6d: a9:58:a3:8c:28:d7:f9:f3:1c:05:44:76:6c:2c:81:3b:98:03: 65:5b:84:a8:00:d9:c0:bc:f2:38:d2:5a:ea:07:1e:8a:74:8f: 3b:8a:a6:bb:00:12:e7:04:f1:eb:51:c5:09:d4:92:59:aa:54: 69:e1:55:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAzPe7WZ1oxWe9bHDcrLxL7DNHg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ4MTQ3QUIzMkFFMzRGRTA1OTkzMDFDMzk5QkE0MzFD QkQ5NkFFMjAeFw0yNjA2MTcwNDU5MDVaFw0yNjA2MTgwNzI4MDVaMDMxMTAvBgNV BAMTKEFDOUMxODBBNzkzMkUzODA0MTk4QTI4NDUzMjVBQkIyMTVGNTlFRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwYbccLopWkmRpxM2aKeqa8VAQ +kDLRWKeKOzDDDFQzO1vVcAfxxa5w5edswMd+ub7VjX/XmaqAy70W1v35KAzkwL8 3tudlmckZ6Z6HqfmZyRlk0MCdOEhHh5nq9GEI3w8u0WUIynxllt8IWIDps8NgMd5 6141w3DrDHY/tIT2CiaxW2lXlaghIJH/xiO8dgFCscl9WU0NzYzNZ38bplAc5B1s YcuuI/rdDBdm7SvNw4cbLhujf2WlkhaAQtk5thEo78aPDm4tJfBBsE0qdcu7nfit TxPJzR0dGgy0KAuop9Jy42P6Lfej+kas7NHeAqTt38Z9umqtolExPir6r7yNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrJwYCnky44BBmKKEUyWrshX1ntgwHwYDVR0j BBgwFoAULYFHqzKuNP4FmTAcOZukMcvZauIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFkYTIzZTktODRiZS00YTU0LWJjYTAtZTlhMGNhZmQxNmZlLzAvMkQ4MTQ3QUIz MkFFMzRGRTA1OTkzMDFDMzk5QkE0MzFDQkQ5NkFFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yRDgxNDdBQjMyQUUzNEZFMDU5OTMwMUMzOTlCQTQzMUNCRDk2 QUUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFkYTIzZTktODRiZS00YTU0LWJj YTAtZTlhMGNhZmQxNmZlLzAvMkQ4MTQ3QUIzMkFFMzRGRTA1OTkzMDFDMzk5QkE0 MzFDQkQ5NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoI9EEOgkufIaImSZ0KXfVVNsxpHsZ4M1Sp SFvupCsQRgPHFiB02OQeETXoET7e02Vxby3qblDGH/E5z/l8CxzkbExts8tPmD1K +Q0lu6jcZ+ith1+R8pSEqAzxAS4s6NL2PxBJ624Lk1NOpFt5afD9QqayAWjRVtu/ 5iNricQq4vhabL//rPC3UK2O+CXa83LVXUw3c1Bv+XmEr2ei2qBUMbdwvwQxEpqQ gAgaBzKL3D8CrSC9IvUtpUWe4L3Ev0UeItUSbalYo4wo1/nzHAVEdmwsgTuYA2Vb hKgA2cC88jjSWuoHHop0jzuKprsAEucE8etRxQnUklmqVGnhVT8= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:13 2026 by rpki-client