$ rpki-client -vvf rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft File: 2CFE6C04191B28EDA13984F5549231D1840AACEC.mft (raw, json) Hash identifier: sC34Pg2fOizxxrZdjbXTqru/s9N1zP9vgB7uEk+qDVw= Subject key identifier: BA:58:05:74:6D:AF:E1:D3:37:50:54:3B:46:BB:AB:A2:E4:C3:84:F3 Authority key identifier: 2C:FE:6C:04:19:1B:28:ED:A1:39:84:F5:54:92:31:D1:84:0A:AC:EC Certificate issuer: /CN=2CFE6C04191B28EDA13984F5549231D1840AACEC Certificate serial: 14FC010EDA0FEDFF72D81CBE7C0936A3F8F2F3BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:17:27 +0000 Manifest this update: Tue 16 Jun 2026 19:12:27 +0000 Manifest next update: Wed 17 Jun 2026 21:14:27 +0000 Files and hashes: 1: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: z7Lqa5CkkfTSXbCBFY/k+Fz/ISz+SJw0HySx4HiNPMc=) 2: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: dFGJI1S/FQoqvRu6ehr7n/qth/1SKexx3mS7zWvVonM=) 3: 2CFE6C04191B28EDA13984F5549231D1840AACEC.crl (hash: gypNYpDf/TLm9F22ks9deknDqOXTqrxIOssuVCzruLk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.crl rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:fc:01:0e:da:0f:ed:ff:72:d8:1c:be:7c:09:36:a3:f8:f2:f3:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFE6C04191B28EDA13984F5549231D1840AACEC Validity Not Before: Jun 16 19:12:27 2026 GMT Not After : Jun 17 21:14:27 2026 GMT Subject: CN=BA5805746DAFE1D33750543B46BBABA2E4C384F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:36:a0:74:ce:04:9d:b2:17:0f:a1:ff:47: 03:6b:cd:c4:c9:b4:b1:d7:00:58:a0:fa:63:df:9b: 85:2f:77:67:e1:55:b8:f1:ce:7e:06:3e:5d:19:c0: 67:c4:bb:eb:d8:d9:2f:c1:ec:77:fb:e3:d9:6e:ab: f1:31:04:25:77:cd:03:2d:b7:4b:c1:62:05:a2:db: b8:8b:26:ea:92:b3:06:3d:e4:3c:72:c3:5c:68:67: 11:6c:ee:7a:b3:bd:bc:c1:ad:03:02:b8:73:26:cf: d4:8f:9a:a3:b0:41:ed:b5:d5:2c:c8:60:fb:9d:cc: 55:db:02:b5:fc:14:79:ec:cf:3c:e7:28:80:ea:75: a6:40:08:89:03:cb:8d:37:f6:75:78:28:f7:cd:22: 5e:5c:77:c4:a3:1f:97:36:d7:57:2e:c3:6f:45:5a: b1:b1:fc:8f:b5:e6:2e:36:df:83:e6:fa:c8:f1:9f: 41:e5:e4:a9:1d:b9:4b:4d:2d:80:1d:1d:3f:8b:7c: 7e:77:99:cc:20:f2:e1:3c:07:c5:9c:92:02:f4:b0: 85:e5:17:35:02:09:0c:e0:33:ed:72:c0:7d:9d:6d: 5a:05:a4:09:57:1c:60:09:a4:35:de:85:17:28:50: 9c:d7:61:95:57:a7:ff:a1:18:f7:f7:f0:b7:60:2f: 18:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:58:05:74:6D:AF:E1:D3:37:50:54:3B:46:BB:AB:A2:E4:C3:84:F3 X509v3 Authority Key Identifier: keyid:2C:FE:6C:04:19:1B:28:ED:A1:39:84:F5:54:92:31:D1:84:0A:AC:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:30:c5:8c:3c:42:95:ac:28:8f:ee:6a:04:4f:a8:e9:b0:b7: 34:e9:fc:0f:e8:24:29:fc:ec:22:5f:6f:cf:b0:f3:d5:cc:87: 48:91:19:19:b6:2b:71:6f:08:5b:59:c9:f5:fe:86:3f:82:d5: fe:21:39:8c:f4:84:ef:bd:c5:75:ea:01:4e:6a:ae:14:14:27: b5:13:08:5b:12:b5:ea:ee:f0:fa:fe:08:42:9c:ef:c4:71:70: a4:84:61:66:a4:81:d4:56:2a:31:0a:66:a0:42:2e:c5:f2:71: f4:50:33:82:85:98:d1:61:69:01:2e:a2:ae:20:0c:3c:96:75: 63:e2:3a:7c:18:83:73:36:2e:87:ca:6f:3f:35:87:c2:c6:bb: fa:35:6a:bf:8d:31:9c:1e:b3:1f:0c:f4:dd:73:d8:47:75:8b: 9e:8a:bd:38:09:b0:16:d3:9e:41:c5:62:1b:b2:10:59:bd:c3: 3e:88:67:c0:bc:c7:14:51:98:ee:52:b6:21:39:15:fb:8e:51: cd:ff:b5:08:b6:a6:1f:da:80:ac:c1:4c:de:0d:85:fa:74:17: 2e:26:4d:06:3c:2b:98:01:0d:cc:11:ab:74:46:cb:9c:32:a3: c3:5c:4f:c2:56:40:19:b0:73:5b:74:3c:e9:45:a4:bc:13:36: 69:60:d9:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFPwBDtoP7f9y2By+fAk2o/jy87owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRTZDMDQxOTFCMjhFREExMzk4NEY1NTQ5MjMxRDE4 NDBBQUNFQzAeFw0yNjA2MTYxOTEyMjdaFw0yNjA2MTcyMTE0MjdaMDMxMTAvBgNV BAMTKEJBNTgwNTc0NkRBRkUxRDMzNzUwNTQzQjQ2QkJBQkEyRTRDMzg0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClDjagdM4EnbIXD6H/RwNrzcTJ tLHXAFig+mPfm4Uvd2fhVbjxzn4GPl0ZwGfEu+vY2S/B7Hf749luq/ExBCV3zQMt t0vBYgWi27iLJuqSswY95Dxyw1xoZxFs7nqzvbzBrQMCuHMmz9SPmqOwQe211SzI YPudzFXbArX8FHnszzznKIDqdaZACIkDy4039nV4KPfNIl5cd8SjH5c211cuw29F WrGx/I+15i4234Pm+sjxn0Hl5KkduUtNLYAdHT+LfH53mcwg8uE8B8WckgL0sIXl FzUCCQzgM+1ywH2dbVoFpAlXHGAJpDXehRcoUJzXYZVXp/+hGPf38LdgLxifAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUulgFdG2v4dM3UFQ7RrurouTDhPMwHwYDVR0j BBgwFoAULP5sBBkbKO2hOYT1VJIx0YQKrOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU5MDhiODMtN2Y0NC00NmUwLTg1MzUtNmZiODRiNTlkNThhLzAvMkNGRTZDMDQx OTFCMjhFREExMzk4NEY1NTQ5MjMxRDE4NDBBQUNFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0ZFNkMwNDE5MUIyOEVEQTEzOTg0RjU1NDkyMzFEMTg0MEFB Q0VDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU5MDhiODMtN2Y0NC00NmUwLTg1 MzUtNmZiODRiNTlkNThhLzAvMkNGRTZDMDQxOTFCMjhFREExMzk4NEY1NTQ5MjMx RDE4NDBBQUNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4wxYw8QpWsKI/uagRPqOmwtzTp/A/oJCn8 7CJfb8+w89XMh0iRGRm2K3FvCFtZyfX+hj+C1f4hOYz0hO+9xXXqAU5qrhQUJ7UT CFsSteru8Pr+CEKc78RxcKSEYWakgdRWKjEKZqBCLsXycfRQM4KFmNFhaQEuoq4g DDyWdWPiOnwYg3M2LofKbz81h8LGu/o1ar+NMZwesx8M9N1z2Ed1i56KvTgJsBbT nkHFYhuyEFm9wz6IZ8C8xxRRmO5StiE5FfuOUc3/tQi2ph/agKzBTN4Nhfp0Fy4m TQY8K5gBDcwRq3RGy5wyo8NcT8JWQBmwc1t0POlFpLwTNmlg2YY= -----END CERTIFICATE-----Generated at Wed Jun 17 10:43:31 2026 by rpki-client