$ rpki-client -vvf rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft File: 2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft (raw, json) Hash identifier: L4/E1lmnxz3VdZdDbCctdkNhNTH6bP3/QdzC2LB/UKA= Subject key identifier: 61:BE:E3:05:35:53:05:F7:CA:3D:7E:7B:B2:93:77:5E:77:02:BA:32 Authority key identifier: 2C:A6:27:0F:A0:99:DB:2B:77:ED:B7:EA:A9:30:40:FF:23:6B:21:4B Certificate issuer: /CN=2CA6270FA099DB2B77EDB7EAA93040FF236B214B Certificate serial: 566B0C9CDCC72801D6DA466E3EC6A201441EC3FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 15:07:31 +0000 Manifest this update: Tue 16 Jun 2026 15:02:31 +0000 Manifest next update: Wed 17 Jun 2026 18:05:31 +0000 Files and hashes: 1: 2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl (hash: gYqtn3eS4Mdh/XYlBfj4mzRLd3S/1f359SdLg/J8/yA=) 2: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (hash: 5yASRqMJGpH3BlgDiF4qbtYdpHoRGPLyhQdyV1pz60w=) 3: 3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (hash: 7n3FY8Iu2mTaPEdpSsiUuLrwQ3K9YP1KBkJ8ERWrHmg=) 4: 3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (hash: RYdUas2TasB0Egv36O3FoGBWixKmz+f1qKRhr6wdPhI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:6b:0c:9c:dc:c7:28:01:d6:da:46:6e:3e:c6:a2:01:44:1e:c3:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA6270FA099DB2B77EDB7EAA93040FF236B214B Validity Not Before: Jun 16 15:02:31 2026 GMT Not After : Jun 17 18:05:31 2026 GMT Subject: CN=61BEE305355305F7CA3D7E7BB293775E7702BA32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:77:4c:00:06:74:43:26:dc:93:3f:d0:aa:49: d3:64:c8:2d:68:22:75:cd:ee:85:09:56:99:e8:05: 4d:97:80:de:99:9d:bc:32:d2:ba:39:f9:f3:0a:98: 03:c9:43:05:a7:f4:e1:8d:a3:c2:00:83:85:80:bd: 1c:db:ac:ed:8a:8e:85:9f:e4:43:b6:e7:81:79:10: c4:11:bb:e7:01:b3:55:fe:16:c7:cf:f7:10:97:d2: 64:2f:a1:3c:fa:35:05:e9:11:b6:f2:77:80:1d:80: 03:96:36:cd:ce:35:86:c4:57:20:22:fd:fe:ca:b6: 96:bb:bd:49:2b:df:98:fc:21:18:e1:16:0a:94:19: f2:2f:59:22:7d:17:e8:77:05:4e:32:c7:96:72:60: fd:10:82:ee:b2:4a:00:f4:0c:33:9b:c9:1d:fe:69: b2:fd:e0:78:0e:84:af:9c:35:87:40:3d:c5:d2:e9: a5:c1:21:cb:97:83:dc:c5:e9:6f:a3:bd:20:19:48: 11:36:42:04:b8:d3:8c:b7:af:7c:9e:ee:3e:2f:93: f0:c3:75:2f:e8:45:fc:b2:71:61:b1:b3:b9:0c:c1: 60:63:71:d5:83:2d:c4:61:0c:ef:bc:f5:03:37:db: ed:54:a8:8f:06:c6:e9:64:c6:1d:b2:aa:96:ac:cf: 85:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BE:E3:05:35:53:05:F7:CA:3D:7E:7B:B2:93:77:5E:77:02:BA:32 X509v3 Authority Key Identifier: keyid:2C:A6:27:0F:A0:99:DB:2B:77:ED:B7:EA:A9:30:40:FF:23:6B:21:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:f8:d4:c7:36:c5:f4:f2:2a:33:ad:05:bf:b3:a6:e9:71:ab: 9d:11:ff:8a:00:c3:9e:53:2e:79:b2:d8:6d:0b:e8:fb:12:a9: 24:c8:21:c2:6a:8d:f9:97:3e:14:a2:e1:eb:5e:23:b7:d0:1d: 5f:be:eb:4c:c4:1d:82:c8:d4:ba:bc:76:49:56:d1:f3:02:f2: 7b:84:75:37:32:ef:1a:42:5e:4c:aa:92:7e:78:f2:15:08:fd: 45:8f:af:50:85:f7:9e:92:c0:d2:0c:fa:af:90:9e:82:dd:f0: 0b:31:ba:9b:80:6c:22:7f:d5:d3:72:e8:c9:ae:3f:46:94:36: ae:75:20:94:17:72:3a:e5:1a:d1:de:81:21:85:47:5f:1a:e0: cc:1e:17:1b:ba:d1:bf:e4:6d:28:1e:ec:a1:18:93:86:84:d4: 8b:24:8e:dc:71:31:bc:b9:2c:95:f8:48:0b:99:eb:e7:ef:95: 68:ed:78:81:b0:e9:e3:78:21:65:0d:0f:78:9a:82:31:57:b7: 1c:42:57:5a:83:30:95:2b:15:30:66:7f:7c:b9:5e:85:81:1a: 90:b6:61:39:fa:97:02:2d:42:21:55:f0:88:23:a3:4b:c7:fe: 6a:bd:86:ce:a1:35:12:35:ec:c5:42:19:b7:02:2f:70:2b:1a: 87:4b:ea:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVmsMnNzHKAHW2kZuPsaiAUQew/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNjI3MEZBMDk5REIyQjc3RURCN0VBQTkzMDQwRkYy MzZCMjE0QjAeFw0yNjA2MTYxNTAyMzFaFw0yNjA2MTcxODA1MzFaMDMxMTAvBgNV BAMTKDYxQkVFMzA1MzU1MzA1RjdDQTNEN0U3QkIyOTM3NzVFNzcwMkJBMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2d0wABnRDJtyTP9CqSdNkyC1o InXN7oUJVpnoBU2XgN6Znbwy0ro5+fMKmAPJQwWn9OGNo8IAg4WAvRzbrO2KjoWf 5EO254F5EMQRu+cBs1X+FsfP9xCX0mQvoTz6NQXpEbbyd4AdgAOWNs3ONYbEVyAi /f7Ktpa7vUkr35j8IRjhFgqUGfIvWSJ9F+h3BU4yx5ZyYP0Qgu6ySgD0DDObyR3+ abL94HgOhK+cNYdAPcXS6aXBIcuXg9zF6W+jvSAZSBE2QgS404y3r3ye7j4vk/DD dS/oRfyycWGxs7kMwWBjcdWDLcRhDO+89QM32+1UqI8Gxulkxh2yqpasz4WBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYb7jBTVTBffKPX57spN3XncCujIwHwYDVR0j BBgwFoAULKYnD6CZ2yt37bfqqTBA/yNrIUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY3YTdmMGUtOGQwNy00NWRlLTgyNTItM2JmZmMwNWU1NjQ5LzAvMkNBNjI3MEZB MDk5REIyQjc3RURCN0VBQTkzMDQwRkYyMzZCMjE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0E2MjcwRkEwOTlEQjJCNzdFREI3RUFBOTMwNDBGRjIzNkIy MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTY3YTdmMGUtOGQwNy00NWRlLTgy NTItM2JmZmMwNWU1NjQ5LzAvMkNBNjI3MEZBMDk5REIyQjc3RURCN0VBQTkzMDQw RkYyMzZCMjE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADT41Mc2xfTyKjOtBb+zpulxq50R/4oAw55T Lnmy2G0L6PsSqSTIIcJqjfmXPhSi4eteI7fQHV++60zEHYLI1Lq8dklW0fMC8nuE dTcy7xpCXkyqkn548hUI/UWPr1CF956SwNIM+q+QnoLd8AsxupuAbCJ/1dNy6Mmu P0aUNq51IJQXcjrlGtHegSGFR18a4MweFxu60b/kbSge7KEYk4aE1IskjtxxMby5 LJX4SAuZ6+fvlWjteIGw6eN4IWUND3iagjFXtxxCV1qDMJUrFTBmf3y5XoWBGpC2 YTn6lwItQiFV8Igjo0vH/mq9hs6hNRI17MVCGbcCL3ArGodL6tg= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:52 2026 by rpki-client