$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft File: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft (raw, json) Hash identifier: ih1th0crqeVL7dlzTm3kyT+BdYn43bc03+iTbU2OCvQ= Subject key identifier: 68:FB:F4:FB:75:C0:91:1C:8E:D9:E3:DA:D5:B1:CB:88:A0:B7:40:0A Authority key identifier: 2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 Certificate issuer: /CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Certificate serial: 5C1742D2BB500E06EDFB6E6AC8A8E6EA5796E97D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 21:50:33 +0000 Manifest this update: Sat 13 Jun 2026 21:45:33 +0000 Manifest next update: Mon 15 Jun 2026 01:38:33 +0000 Files and hashes: 1: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl (hash: WGBDKyz1h6AJOq8lY2sytE2JmRArLR3aOjU9t2i6wsU=) 2: 3130332e3133312e3130372e302f32342d3234203d3e20313338313139.roa (hash: cKDgVoSVAFZfl4hgrIHwI1J4tBbCiwmqXmahxpGLx8I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:17:42:d2:bb:50:0e:06:ed:fb:6e:6a:c8:a8:e6:ea:57:96:e9:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Validity Not Before: Jun 13 21:45:33 2026 GMT Not After : Jun 15 01:38:33 2026 GMT Subject: CN=68FBF4FB75C0911C8ED9E3DAD5B1CB88A0B7400A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:41:a2:33:8e:70:3e:00:69:82:ea:8c:ba: 64:8a:ff:45:8e:6d:6c:2e:39:84:c4:e2:7a:24:ac: e1:62:48:8e:33:4a:dd:0f:67:26:7c:82:39:d1:91: 77:32:f5:50:3f:54:aa:29:6f:63:49:b6:0d:a6:65: c3:01:74:1f:d3:70:9c:7b:a1:be:8c:f9:2e:aa:06: 0b:17:c8:9c:2b:67:70:f3:00:0f:a0:f4:16:f6:81: c9:a1:d9:41:29:be:a6:14:53:0b:6f:fa:fc:ac:38: c9:0d:ca:b6:82:91:f9:a6:52:81:60:1f:4a:0d:13: 7c:57:a7:c3:92:2e:f6:d6:12:28:74:3a:69:13:d1: 07:25:37:76:a3:61:c8:b0:6a:b7:ee:1d:49:1a:25: 52:45:bd:c0:c4:02:3b:36:be:53:11:1b:ea:5d:6f: 83:3f:3d:43:ab:d5:84:9d:23:b9:cd:d6:77:7f:15: 9d:e2:d5:c4:8d:dd:e9:f1:5a:39:0b:33:3d:46:c0: 70:68:f9:1f:1d:b7:1a:71:12:20:6c:c7:51:6b:d4: 8a:93:5b:3c:22:b9:ec:94:fb:86:c8:3d:36:d1:45: 67:46:19:e5:4b:86:be:fe:71:75:dd:7a:4e:9f:60: 6d:d3:04:13:8e:56:b2:29:59:8e:b1:fe:fc:4a:50: 40:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FB:F4:FB:75:C0:91:1C:8E:D9:E3:DA:D5:B1:CB:88:A0:B7:40:0A X509v3 Authority Key Identifier: keyid:2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:a7:26:0a:fc:22:e7:aa:5c:b3:e6:5a:aa:db:50:6b:e6:d2: 2e:08:ce:ac:c7:13:8a:73:a8:c2:ce:a7:bb:f4:a1:09:8e:ff: 8d:4e:85:32:2f:f0:78:11:94:67:ff:fb:bc:c1:9b:63:9e:e7: d8:1a:5a:3b:8a:e8:da:31:87:09:49:bd:80:bc:e9:9e:3c:8e: f8:77:99:53:74:5c:1b:d9:6e:76:77:04:bb:cf:65:42:6c:0f: 1e:98:f9:41:61:37:05:40:bc:18:ba:8e:a2:fd:2c:72:73:e3: ab:76:86:d0:18:02:c5:9c:e2:b8:d9:94:1a:71:e6:ae:ef:96: 33:5b:ff:09:89:b7:9b:ed:95:b5:f5:1d:7c:34:2a:c6:3b:7e: 52:e3:65:b9:c9:1b:98:18:d6:85:ff:17:0b:ec:32:f5:8a:64: ff:7c:3a:41:ae:91:32:1a:a5:4c:dd:bb:8c:59:d1:1b:48:7a: 4a:fc:89:6c:c7:bb:b8:80:c3:a3:46:fb:e4:70:05:9a:d3:cd: ed:78:aa:04:ee:8e:96:90:91:17:f7:4e:13:b1:af:c0:4e:c8: 0b:2d:4e:d2:89:3a:07:0b:ae:98:0f:8e:f4:9c:1c:87:35:b8: 15:ac:0c:b0:06:a1:3f:3f:c6:a5:41:a2:11:9f:2d:71:52:bf: e2:59:39:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXBdC0rtQDgbt+25qyKjm6leW6X0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFFMTRBQkJENTE2MUJBMENBREIzQzQwQzFGOURGQ0JD OUNGMzQ3MDAeFw0yNjA2MTMyMTQ1MzNaFw0yNjA2MTUwMTM4MzNaMDMxMTAvBgNV BAMTKDY4RkJGNEZCNzVDMDkxMUM4RUQ5RTNEQUQ1QjFDQjg4QTBCNzQwMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnl0GiM45wPgBpguqMumSK/0WO bWwuOYTE4nokrOFiSI4zSt0PZyZ8gjnRkXcy9VA/VKopb2NJtg2mZcMBdB/TcJx7 ob6M+S6qBgsXyJwrZ3DzAA+g9Bb2gcmh2UEpvqYUUwtv+vysOMkNyraCkfmmUoFg H0oNE3xXp8OSLvbWEih0OmkT0QclN3ajYciwarfuHUkaJVJFvcDEAjs2vlMRG+pd b4M/PUOr1YSdI7nN1nd/FZ3i1cSN3enxWjkLMz1GwHBo+R8dtxpxEiBsx1Fr1IqT WzwiueyU+4bIPTbRRWdGGeVLhr7+cXXdek6fYG3TBBOOVrIpWY6x/vxKUECvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaPv0+3XAkRyO2ePa1bHLiKC3QAowHwYDVR0j BBgwFoAUKuFKu9UWG6DK2zxAwfnfy8nPNHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkyNDM5NTAtM2ZkZi00OWFiLWJmZGMtZjU4NjQ1MzcwNGM2LzAvMkFFMTRBQkJE NTE2MUJBMENBREIzQzQwQzFGOURGQ0JDOUNGMzQ3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUUxNEFCQkQ1MTYxQkEwQ0FEQjNDNDBDMUY5REZDQkM5Q0Yz NDcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkyNDM5NTAtM2ZkZi00OWFiLWJm ZGMtZjU4NjQ1MzcwNGM2LzAvMkFFMTRBQkJENTE2MUJBMENBREIzQzQwQzFGOURG Q0JDOUNGMzQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAanJgr8IueqXLPmWqrbUGvm0i4IzqzHE4pz qMLOp7v0oQmO/41OhTIv8HgRlGf/+7zBm2Oe59gaWjuK6NoxhwlJvYC86Z48jvh3 mVN0XBvZbnZ3BLvPZUJsDx6Y+UFhNwVAvBi6jqL9LHJz46t2htAYAsWc4rjZlBpx 5q7vljNb/wmJt5vtlbX1HXw0KsY7flLjZbnJG5gY1oX/FwvsMvWKZP98OkGukTIa pUzdu4xZ0RtIekr8iWzHu7iAw6NG++RwBZrTze14qgTujpaQkRf3ThOxr8BOyAst TtKJOgcLrpgPjvScHIc1uBWsDLAGoT8/xqVBohGfLXFSv+JZOb0= -----END CERTIFICATE-----Generated at Sun Jun 14 02:44:02 2026 by rpki-client