$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft File: 2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft (raw, json) Hash identifier: uCVtaBUPm7hqQP2rpkSYRFx79qPxfbGUPx3IULdrdxA= Subject key identifier: F8:DE:4A:D2:17:33:82:A1:AA:CE:BF:66:7E:A5:68:38:56:C7:31:72 Authority key identifier: 2A:A2:C2:03:9F:F7:2E:89:6E:CE:6F:0E:3E:AD:38:A0:28:1A:75:AE Certificate issuer: /CN=2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE Certificate serial: 27FAE01D0138DF419DA009896D80D26041F1665F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 03:01:25 +0000 Manifest this update: Wed 17 Jun 2026 02:56:25 +0000 Manifest next update: Thu 18 Jun 2026 03:36:25 +0000 Files and hashes: 1: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: dZhfKdQv3o4ubnF31yoaIvJtkGW4D/+D/cLAtWAUEM0=) 2: 2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl (hash: 2Un8/sAAh2TWTfmWkAzSuTiWh1auS6PClXiU47nX1+I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:fa:e0:1d:01:38:df:41:9d:a0:09:89:6d:80:d2:60:41:f1:66:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE Validity Not Before: Jun 17 02:56:25 2026 GMT Not After : Jun 18 03:36:25 2026 GMT Subject: CN=F8DE4AD2173382A1AACEBF667EA5683856C73172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:34:64:b3:cb:4e:59:6c:1a:f6:d5:a8:7b:08: cd:a5:bc:34:23:70:74:7f:32:79:3e:0c:47:d8:28: 3d:f3:df:d1:94:3b:4d:63:78:75:a3:18:d0:8a:98: 72:32:11:ba:fc:19:81:fd:df:7a:d5:cf:7d:87:be: fd:cd:e7:f8:38:f8:07:c0:ac:e8:4a:e6:85:17:5f: 2e:19:d2:5a:cb:45:7f:93:4d:e4:92:56:55:78:74: 75:a3:0d:17:2c:d8:d8:b8:07:c6:18:aa:c6:27:6a: b2:07:f9:36:5a:d7:a8:b9:d6:29:d1:be:fe:a4:9e: da:06:5d:7f:76:10:3b:b1:51:d5:a5:bb:c7:80:fd: 16:ec:09:a9:54:b4:6f:c1:fb:93:f6:e6:34:0e:f0: d9:2e:5a:28:27:6b:ba:4d:e8:a2:dc:90:c8:cb:1d: 97:26:86:62:2e:f8:d6:1a:dd:ca:69:e0:be:54:46: 76:fe:d4:bf:ac:d6:9b:27:ab:de:73:75:9a:05:21: 3e:ba:ce:60:90:34:93:ae:dc:fe:b4:99:19:79:79: 3f:4a:ba:b2:db:e7:22:9e:72:05:c3:c8:b5:45:4b: 46:02:79:58:42:f0:ff:8b:86:3c:6f:40:2e:4b:56: 51:79:54:e4:37:b1:56:f2:ec:07:ad:99:bd:80:78: 97:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DE:4A:D2:17:33:82:A1:AA:CE:BF:66:7E:A5:68:38:56:C7:31:72 X509v3 Authority Key Identifier: keyid:2A:A2:C2:03:9F:F7:2E:89:6E:CE:6F:0E:3E:AD:38:A0:28:1A:75:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:8c:4e:b8:34:20:d2:11:3d:78:82:9c:d6:2c:db:dd:bb:e9: de:70:79:45:73:a3:70:30:b2:8d:b8:ce:dd:8e:a6:a7:04:85: 17:ea:71:b6:8b:83:82:c5:fb:0f:45:43:51:63:1d:84:55:b6: 50:f0:54:62:18:55:08:74:46:80:ec:b4:1e:d1:b0:36:ad:98: 9d:b2:b7:ba:a3:53:79:c2:e6:43:c6:8b:ef:8c:fc:ca:b4:90: de:d0:6b:34:ee:a9:e4:59:da:35:bc:9b:85:98:81:10:03:7d: 3c:38:98:3b:64:c4:a2:da:f0:20:3f:01:b6:13:0e:42:30:48: 0d:bb:cb:07:09:a2:f4:38:f8:9f:03:bd:de:0e:12:a9:1d:de: d8:a2:1a:e4:06:2b:07:2b:bc:e8:63:03:ec:6a:c4:14:ef:a9: a5:dd:d5:51:f8:2a:6b:49:7f:43:6e:82:5f:f3:0b:86:75:b3: b2:2c:af:bf:d7:3a:54:b6:bf:7e:7c:89:df:31:16:ae:f0:d5: 94:fb:51:f8:63:c8:0f:2a:25:f0:57:4e:20:d1:b4:fb:bc:67: ed:ee:8e:8a:be:0c:38:db:9c:27:60:8f:64:bd:b8:8d:5a:21: a7:5d:9f:89:67:62:1a:0e:88:21:be:6f:29:7c:67:3d:e4:47: 2b:c5:c5:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ/rgHQE430GdoAmJbYDSYEHxZl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBMkMyMDM5RkY3MkU4OTZFQ0U2RjBFM0VBRDM4QTAy ODFBNzVBRTAeFw0yNjA2MTcwMjU2MjVaFw0yNjA2MTgwMzM2MjVaMDMxMTAvBgNV BAMTKEY4REU0QUQyMTczMzgyQTFBQUNFQkY2NjdFQTU2ODM4NTZDNzMxNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1NGSzy05ZbBr21ah7CM2lvDQj cHR/Mnk+DEfYKD3z39GUO01jeHWjGNCKmHIyEbr8GYH933rVz32Hvv3N5/g4+AfA rOhK5oUXXy4Z0lrLRX+TTeSSVlV4dHWjDRcs2Ni4B8YYqsYnarIH+TZa16i51inR vv6kntoGXX92EDuxUdWlu8eA/RbsCalUtG/B+5P25jQO8NkuWigna7pN6KLckMjL HZcmhmIu+NYa3cpp4L5URnb+1L+s1psnq95zdZoFIT66zmCQNJOu3P60mRl5eT9K urLb5yKecgXDyLVFS0YCeVhC8P+LhjxvQC5LVlF5VOQ3sVby7Aetmb2AeJcRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+N5K0hczgqGqzr9mfqVoOFbHMXIwHwYDVR0j BBgwFoAUKqLCA5/3Loluzm8OPq04oCgada4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNlMjdkYTktZTZlNi00NGE1LTk4ZjQtNTkwZWI1YTFiZDY1LzAvMkFBMkMyMDM5 RkY3MkU4OTZFQ0U2RjBFM0VBRDM4QTAyODFBNzVBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUEyQzIwMzlGRjcyRTg5NkVDRTZGMEUzRUFEMzhBMDI4MUE3 NUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNlMjdkYTktZTZlNi00NGE1LTk4 ZjQtNTkwZWI1YTFiZDY1LzAvMkFBMkMyMDM5RkY3MkU4OTZFQ0U2RjBFM0VBRDM4 QTAyODFBNzVBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWMTrg0INIRPXiCnNYs29276d5weUVzo3Aw so24zt2OpqcEhRfqcbaLg4LF+w9FQ1FjHYRVtlDwVGIYVQh0RoDstB7RsDatmJ2y t7qjU3nC5kPGi++M/Mq0kN7QazTuqeRZ2jW8m4WYgRADfTw4mDtkxKLa8CA/AbYT DkIwSA27ywcJovQ4+J8Dvd4OEqkd3tiiGuQGKwcrvOhjA+xqxBTvqaXd1VH4KmtJ f0Nugl/zC4Z1s7Isr7/XOlS2v358id8xFq7w1ZT7UfhjyA8qJfBXTiDRtPu8Z+3u joq+DDjbnCdgj2S9uI1aIaddn4lnYhoOiCG+byl8Zz3kRyvFxao= -----END CERTIFICATE-----Generated at Wed Jun 17 09:42:55 2026 by rpki-client