$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft File: 2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft (raw, json) Hash identifier: TedzjjzNzXya1nCd+co6cxDvKOhS1uJRqqQaLVYJ2bI= Subject key identifier: 94:C9:F1:45:90:44:11:B6:F5:C4:AF:AA:C5:83:B3:80:72:0D:FD:41 Authority key identifier: 2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3 Certificate issuer: /CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3 Certificate serial: 5BCFFA90A874B95DE4CFB62683C762CA656E27E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 17:40:30 +0000 Manifest this update: Tue 16 Jun 2026 17:35:30 +0000 Manifest next update: Wed 17 Jun 2026 18:20:30 +0000 Files and hashes: 1: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: uD4zXPlmJIJvDYKeBCRvwCSXSW9r9c2Pd73kp0tq76c=) 2: 2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl (hash: 8//1tsPEA7NOg78UEgGX0PTJSwxWNOI0jhkpUuPI6+c=) 3: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: ba9T7QeA28DMOyzLlfoljNenw5738a58LQmu3hf+TMU=) 4: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: Fc1cIIy7yp6fwFNt9JFBozT8wGm732U+MIRuBDuRJKc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:cf:fa:90:a8:74:b9:5d:e4:cf:b6:26:83:c7:62:ca:65:6e:27:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3 Validity Not Before: Jun 16 17:35:30 2026 GMT Not After : Jun 17 18:20:30 2026 GMT Subject: CN=94C9F145904411B6F5C4AFAAC583B380720DFD41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:d7:5c:98:db:43:00:a0:e8:19:33:ee:0e: 77:9d:31:92:05:a4:2f:e6:43:b2:22:13:db:fd:0d: 5d:11:2e:ca:0c:cf:2b:48:e5:55:c9:97:02:e1:53: 0c:a8:33:5d:96:2d:ab:ac:e4:41:b6:72:bc:d4:83: ea:a7:d2:3e:98:57:6d:f3:00:31:77:b4:70:31:34: d3:62:08:e1:3c:fa:f1:03:78:b6:fa:90:9c:6c:c5: 1a:dd:7d:38:2d:d7:b7:30:8a:0b:2e:15:3d:eb:5b: 85:ce:02:fa:47:05:fa:05:47:d6:71:48:6e:5b:2b: 04:bb:01:ed:7a:1a:3c:ca:31:53:5a:96:a9:c8:cb: 30:35:6e:f5:c7:03:38:05:4f:90:60:fb:a8:8d:7c: 4c:03:ba:37:f0:58:1b:d1:89:c2:78:ec:99:94:12: b3:4c:5c:10:30:37:3d:c2:ca:a7:74:b0:b3:ee:42: 10:88:59:d1:c1:dd:0b:e9:0d:d1:59:24:75:79:73: 31:4d:cf:15:8f:76:9e:ad:08:30:01:e6:9d:70:15: 83:ac:40:96:08:c1:72:5c:99:c8:58:17:36:24:10: f4:6e:de:da:e1:44:15:b6:32:e0:09:5a:62:22:fb: 54:52:77:ee:17:09:ea:95:3d:46:28:18:f7:33:8f: fa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C9:F1:45:90:44:11:B6:F5:C4:AF:AA:C5:83:B3:80:72:0D:FD:41 X509v3 Authority Key Identifier: keyid:2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:be:87:8d:6e:d1:6b:0a:7b:3b:fc:30:d8:ec:46:02:70:ef: ee:4f:bb:98:07:00:ce:1c:5c:8d:7c:fa:06:e7:d6:8d:84:b4: 33:23:15:12:91:29:68:8d:3a:56:fe:1e:b7:6c:c8:32:84:eb: a4:01:af:bc:cd:80:65:8a:c5:aa:b2:75:5e:d9:5c:8b:df:a3: 74:ea:c1:61:54:7a:ad:b3:b3:f9:42:8c:89:d1:5a:38:e9:c1: 8c:1e:f4:78:48:42:97:04:99:0f:c3:94:ce:1d:d1:a2:63:b2: c7:57:27:af:9f:b4:04:20:d0:51:f0:db:92:e6:f9:4e:58:61: f6:8f:c7:c6:4d:85:7f:17:a6:9f:b7:e3:fa:7c:af:26:df:7b: 66:03:d1:19:9c:af:6a:0c:79:0f:dd:63:5a:9e:e3:bd:37:b0: fc:7a:ae:9c:a0:41:13:21:4d:38:ec:c1:98:80:72:16:d3:32: ec:a3:22:76:71:a8:a4:61:a6:80:08:2d:08:c0:95:91:a3:e2: e1:c5:a9:26:e4:2e:16:42:4a:2a:50:51:0e:98:3f:93:ca:b2: 15:ac:5e:50:98:57:b9:e2:80:6c:b9:c5:5b:9b:fa:14:4c:a0: 13:97:03:77:5c:83:3b:6b:22:9b:f6:5b:c5:7f:04:59:01:3b: 5b:02:62:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW8/6kKh0uV3kz7Ymg8diymVuJ+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZGOUQ1MkFEQzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3NzZE Q0I0MzNCMzAeFw0yNjA2MTYxNzM1MzBaFw0yNjA2MTcxODIwMzBaMDMxMTAvBgNV BAMTKDk0QzlGMTQ1OTA0NDExQjZGNUM0QUZBQUM1ODNCMzgwNzIwREZENDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChiddcmNtDAKDoGTPuDnedMZIF pC/mQ7IiE9v9DV0RLsoMzytI5VXJlwLhUwyoM12WLaus5EG2crzUg+qn0j6YV23z ADF3tHAxNNNiCOE8+vEDeLb6kJxsxRrdfTgt17cwigsuFT3rW4XOAvpHBfoFR9Zx SG5bKwS7Ae16GjzKMVNalqnIyzA1bvXHAzgFT5Bg+6iNfEwDujfwWBvRicJ47JmU ErNMXBAwNz3Cyqd0sLPuQhCIWdHB3QvpDdFZJHV5czFNzxWPdp6tCDAB5p1wFYOs QJYIwXJcmchYFzYkEPRu3trhRBW2MuAJWmIi+1RSd+4XCeqVPUYoGPczj/pVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlMnxRZBEEbb1xK+qxYOzgHIN/UEwHwYDVR0j BBgwFoAUL/nVKtx3f6POUar5RIuHdty0M7MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2MwNzVlZjYtYTI1MS00N2RkLThkZGEtY2FkZmY0OTdhN2U1LzAvMkZGOUQ1MkFE Qzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3NzZEQ0I0MzNCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkY5RDUyQURDNzc3RkEzQ0U1MUFBRjk0NDhCODc3NkRDQjQz M0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMkZGOUQ1MkFEQzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3 NzZEQ0I0MzNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6+h41u0WsKezv8MNjsRgJw7+5Pu5gHAM4c XI18+gbn1o2EtDMjFRKRKWiNOlb+HrdsyDKE66QBr7zNgGWKxaqydV7ZXIvfo3Tq wWFUeq2zs/lCjInRWjjpwYwe9HhIQpcEmQ/DlM4d0aJjssdXJ6+ftAQg0FHw25Lm +U5YYfaPx8ZNhX8Xpp+34/p8rybfe2YD0Rmcr2oMeQ/dY1qe4703sPx6rpygQRMh TTjswZiAchbTMuyjInZxqKRhpoAILQjAlZGj4uHFqSbkLhZCSipQUQ6YP5PKshWs XlCYV7nigGy5xVub+hRMoBOXA3dcgztrIpv2W8V/BFkBO1sCYv4= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:09 2026 by rpki-client