$ rpki-client -vvf rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft File: 2CE9A084598867F6677FDE09C272DA8D05C480FC.mft (raw, json) Hash identifier: Xv0rVQbvrxpagqFY27sZvcjxE1GZTtgrU0OX41T451c= Subject key identifier: A8:E3:F9:8B:A2:3C:64:2C:D2:DB:20:76:61:48:2A:77:77:40:6E:EE Authority key identifier: 2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC Certificate issuer: /CN=2CE9A084598867F6677FDE09C272DA8D05C480FC Certificate serial: 63BBAD07FA61C4808ABAF9140ACD83609BF4E3EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 12:34:29 +0000 Manifest this update: Tue 16 Jun 2026 12:29:29 +0000 Manifest next update: Wed 17 Jun 2026 16:07:29 +0000 Files and hashes: 1: 2CE9A084598867F6677FDE09C272DA8D05C480FC.crl (hash: /TNLjIuLOqopNT5AqEyLXrRRTZu0LzPX6AA3+Yj4gXk=) 2: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: 7nMz4s5YYhUtNRJIR+ORKIg42vTypWbintD4uEN6yZw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 16:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:bb:ad:07:fa:61:c4:80:8a:ba:f9:14:0a:cd:83:60:9b:f4:e3:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CE9A084598867F6677FDE09C272DA8D05C480FC Validity Not Before: Jun 16 12:29:29 2026 GMT Not After : Jun 17 16:07:29 2026 GMT Subject: CN=A8E3F98BA23C642CD2DB207661482A7777406EEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d3:60:c9:ca:be:75:ab:4b:f7:8e:18:3c:10: b2:ba:fa:ea:d0:2b:6c:61:e9:ad:97:20:47:12:8a: 2b:5e:d1:2f:f1:5f:38:ea:46:67:2f:c9:f3:46:48: ce:bb:fb:7a:b8:c0:71:06:e8:34:a0:07:ee:00:1d: 72:30:b0:44:9d:c5:e7:e0:4c:06:dd:d0:4d:d9:dc: c3:65:24:fd:6e:d3:9f:37:75:87:fc:9c:0a:f8:09: 9d:a1:be:80:0e:2a:d9:39:b7:91:83:84:8b:49:d5: 59:4c:3e:14:68:d8:b7:55:b9:54:70:21:92:30:9c: cf:52:c3:29:b5:77:4f:d3:60:98:4d:07:e6:42:d7: fd:38:1f:20:4d:e4:55:43:b6:ca:7d:32:e9:70:63: 7b:83:2f:cd:1b:de:54:72:25:98:bb:ec:77:f3:98: 8c:3f:ea:67:73:94:a4:71:fa:78:39:df:09:1a:15: 06:bd:64:25:e5:00:36:5d:61:71:db:40:eb:7f:17: 0a:a5:3b:2a:18:db:0f:73:07:cd:a9:12:34:fc:58: 7c:8a:7d:20:05:83:48:80:06:cf:f7:19:ea:6b:bd: 17:56:67:6c:d2:37:28:cd:b9:73:3c:4d:20:48:9f: a9:e4:89:04:08:31:5a:d4:b8:42:92:e6:b5:af:9d: 6d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E3:F9:8B:A2:3C:64:2C:D2:DB:20:76:61:48:2A:77:77:40:6E:EE X509v3 Authority Key Identifier: keyid:2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8b:2f:e7:1f:21:97:a3:32:5f:ae:b1:7b:0e:ce:ac:fb:3f: cb:80:cd:d9:df:97:ee:d6:b2:c6:cf:b8:14:61:7f:3b:de:f7: 6b:e6:ee:8f:3e:d2:8b:dd:e6:18:62:b9:67:a4:76:3a:5c:ed: ce:02:62:19:00:54:55:ba:c0:10:f5:37:40:a5:38:cd:f2:4a: a6:24:ef:e7:d0:1e:92:f9:09:ef:19:5b:ce:32:a6:7e:67:a8: bf:2c:30:cc:13:a0:93:8f:fb:6f:02:7f:70:b0:98:cc:9b:0b: 38:6a:49:7b:23:52:f7:4a:64:67:cb:d5:14:21:0e:ce:af:4a: 1c:3c:47:ee:da:49:af:5d:d0:0a:79:0d:9e:3f:d5:0f:5f:03: 6d:3d:2d:45:3d:5b:20:b6:0b:3b:90:c5:60:b2:ab:02:ae:22: ba:64:47:d0:62:06:ae:6a:f0:a8:8f:c4:89:62:21:fe:85:4f: 99:59:56:b0:7e:59:32:b5:d9:e1:ef:d9:ba:0c:9b:a1:eb:4e: cb:a3:23:ce:74:b4:e2:3c:5d:1b:5d:24:d1:a5:6a:66:04:b9: d0:e1:da:08:19:9d:c5:65:d9:bc:8a:0f:c4:5c:95:3d:c7:be: c1:a2:69:1a:4b:78:4b:84:ac:6f:5a:05:75:5c:ec:72:21:90: bb:09:63:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY7utB/phxICKuvkUCs2DYJv04+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNFOUEwODQ1OTg4NjdGNjY3N0ZERTA5QzI3MkRBOEQw NUM0ODBGQzAeFw0yNjA2MTYxMjI5MjlaFw0yNjA2MTcxNjA3MjlaMDMxMTAvBgNV BAMTKEE4RTNGOThCQTIzQzY0MkNEMkRCMjA3NjYxNDgyQTc3Nzc0MDZFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY02DJyr51q0v3jhg8ELK6+urQ K2xh6a2XIEcSiite0S/xXzjqRmcvyfNGSM67+3q4wHEG6DSgB+4AHXIwsESdxefg TAbd0E3Z3MNlJP1u0583dYf8nAr4CZ2hvoAOKtk5t5GDhItJ1VlMPhRo2LdVuVRw IZIwnM9Swym1d0/TYJhNB+ZC1/04HyBN5FVDtsp9MulwY3uDL80b3lRyJZi77Hfz mIw/6mdzlKRx+ng53wkaFQa9ZCXlADZdYXHbQOt/FwqlOyoY2w9zB82pEjT8WHyK fSAFg0iABs/3GeprvRdWZ2zSNyjNuXM8TSBIn6nkiQQIMVrUuEKS5rWvnW2vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqOP5i6I8ZCzS2yB2YUgqd3dAbu4wHwYDVR0j BBgwFoAULOmghFmIZ/Znf94JwnLajQXEgPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTliODE1MmUtYWE4Ni00ZDhhLTgxZGEtZTcxMDg2YjI5NTZjLzAvMkNFOUEwODQ1 OTg4NjdGNjY3N0ZERTA5QzI3MkRBOEQwNUM0ODBGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yQ0U5QTA4NDU5ODg2N0Y2Njc3RkRFMDlDMjcyREE4RDA1QzQ4 MEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvMkNFOUEwODQ1OTg4NjdGNjY3N0ZERTA5QzI3MkRB OEQwNUM0ODBGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyLL+cfIZejMl+usXsOzqz7P8uAzdnfl+7W ssbPuBRhfzve92vm7o8+0ovd5hhiuWekdjpc7c4CYhkAVFW6wBD1N0ClOM3ySqYk 7+fQHpL5Ce8ZW84ypn5nqL8sMMwToJOP+28Cf3CwmMybCzhqSXsjUvdKZGfL1RQh Ds6vShw8R+7aSa9d0Ap5DZ4/1Q9fA209LUU9WyC2CzuQxWCyqwKuIrpkR9BiBq5q 8KiPxIliIf6FT5lZVrB+WTK12eHv2boMm6HrTsujI850tOI8XRtdJNGlamYEudDh 2ggZncVl2byKD8RclT3HvsGiaRpLeEuErG9aBXVc7HIhkLsJY0c= -----END CERTIFICATE-----Generated at Wed Jun 17 08:44:25 2026 by rpki-client