$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft File: 2A494FAEE44F13448E6C43136F825053CE977009.mft (raw, json) Hash identifier: 4oesfPZL8zFJfl11jRTtuAxNHStLfCpuzvYxyW9dnfQ= Subject key identifier: CB:05:FD:BD:AF:56:84:53:05:37:A6:8C:01:CF:53:32:44:66:42:6C Authority key identifier: 2A:49:4F:AE:E4:4F:13:44:8E:6C:43:13:6F:82:50:53:CE:97:70:09 Certificate issuer: /CN=2A494FAEE44F13448E6C43136F825053CE977009 Certificate serial: 6E1DD0825E62930D9A45EF5A21A603E505036D25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 20:59:38 +0000 Manifest this update: Tue 16 Jun 2026 20:54:38 +0000 Manifest next update: Thu 18 Jun 2026 00:15:38 +0000 Files and hashes: 1: 3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa (hash: SSSkCi1zJkML5HF5+O+odxp65ltRBIRj0krRoe9GJqI=) 2: 2A494FAEE44F13448E6C43136F825053CE977009.crl (hash: r/GYJ2YQOByLb4OinvVwFfGib+yzqRiIHdzsfJ9+y+Y=) 3: 3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (hash: t2vA65s4Rw0JpR4oPJfjFnJ3dyjvcRRBFrdNUp3Bo2M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.crl rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:1d:d0:82:5e:62:93:0d:9a:45:ef:5a:21:a6:03:e5:05:03:6d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A494FAEE44F13448E6C43136F825053CE977009 Validity Not Before: Jun 16 20:54:38 2026 GMT Not After : Jun 18 00:15:38 2026 GMT Subject: CN=CB05FDBDAF5684530537A68C01CF53324466426C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:29:26:58:db:5b:b6:bc:58:12:c3:6b:c9:57: 8c:02:98:d3:44:58:c4:29:9e:e1:d7:8e:7e:99:92: a5:bd:35:70:13:32:a1:5a:ba:30:22:04:2b:7a:19: c8:bb:a8:a9:a0:c3:9d:2a:f3:b3:3b:6b:b2:09:56: bf:23:89:9f:77:ec:6b:a6:d8:ae:3a:54:79:e9:95: c9:72:eb:2a:96:87:15:98:47:e0:cd:bd:53:3c:57: 37:3c:ba:84:c0:5c:8f:5a:29:19:4a:a2:59:fa:99: 3f:d2:79:f2:f4:3e:00:f7:6d:8e:3d:61:d0:1f:ea: 48:8f:12:1d:56:d7:84:15:5f:a2:3e:b6:6c:e7:9d: 74:83:5a:d5:61:5a:51:1b:89:6a:22:56:57:10:03: 37:24:e8:33:d5:f9:81:5c:91:bf:f3:ea:59:0d:41: 63:1c:12:b2:ce:7f:5c:83:6f:1e:40:0b:8d:bf:e8: 99:8f:33:c3:58:db:2e:15:f5:a1:48:99:0b:9f:65: 94:89:f8:68:b9:97:0b:20:73:da:16:84:d7:96:b7: cf:bd:36:db:7f:06:9d:3a:40:b0:ad:b8:47:df:6d: f3:a7:0e:f9:17:fa:48:ff:59:bd:bf:e2:e9:fd:f2: 20:f8:40:f4:de:fd:71:7f:c8:4b:c1:f7:b7:dc:d5: ea:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:05:FD:BD:AF:56:84:53:05:37:A6:8C:01:CF:53:32:44:66:42:6C X509v3 Authority Key Identifier: keyid:2A:49:4F:AE:E4:4F:13:44:8E:6C:43:13:6F:82:50:53:CE:97:70:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b5:72:9d:bc:83:f9:57:7c:70:94:ae:04:42:f1:ef:38:d0: b3:26:16:4e:75:98:aa:f1:62:cb:94:22:d0:1a:86:a5:a4:64: 09:f7:e8:2c:61:58:e3:63:69:2b:41:6f:b7:1f:88:10:3b:77: 25:4d:a2:4b:72:3b:e4:09:a8:af:52:7b:1d:02:60:35:f9:33: 9a:cc:0f:5b:73:2e:69:c9:2b:a4:f6:bf:1d:0f:16:20:b5:88: 41:3f:3c:40:db:76:00:34:00:7c:04:54:10:17:e3:9f:28:f0: 94:b7:cd:a1:79:70:67:22:2c:52:71:d0:ef:af:3c:54:2a:e0: de:bc:cd:00:98:81:97:25:6e:a4:59:ce:8d:57:c3:3a:d3:03: 04:05:2b:ca:1e:78:46:06:24:1a:84:29:24:42:d5:cd:44:15: 3d:f0:00:7b:ff:4e:16:15:d8:40:56:f8:20:d4:01:fc:16:9d: 26:13:21:00:74:0e:15:24:70:28:5d:ed:51:47:65:26:6d:06: 08:58:17:bd:d8:9d:ba:8d:ed:c9:06:e0:cf:26:39:89:a3:c9: d2:2c:4f:15:1c:74:07:10:76:58:00:88:c7:29:ab:7b:df:52: d3:e7:6a:d6:19:dc:8a:38:d0:b5:81:f4:5e:95:e3:ad:5f:03: 21:f4:df:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbh3Qgl5ikw2aRe9aIaYD5QUDbSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE0OTRGQUVFNDRGMTM0NDhFNkM0MzEzNkY4MjUwNTND RTk3NzAwOTAeFw0yNjA2MTYyMDU0MzhaFw0yNjA2MTgwMDE1MzhaMDMxMTAvBgNV BAMTKENCMDVGREJEQUY1Njg0NTMwNTM3QTY4QzAxQ0Y1MzMyNDQ2NjQyNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KSZY21u2vFgSw2vJV4wCmNNE WMQpnuHXjn6ZkqW9NXATMqFaujAiBCt6Gci7qKmgw50q87M7a7IJVr8jiZ937Gum 2K46VHnplcly6yqWhxWYR+DNvVM8Vzc8uoTAXI9aKRlKoln6mT/SefL0PgD3bY49 YdAf6kiPEh1W14QVX6I+tmznnXSDWtVhWlEbiWoiVlcQAzck6DPV+YFckb/z6lkN QWMcErLOf1yDbx5AC42/6JmPM8NY2y4V9aFImQufZZSJ+Gi5lwsgc9oWhNeWt8+9 Ntt/Bp06QLCtuEffbfOnDvkX+kj/Wb2/4un98iD4QPTe/XF/yEvB97fc1eobAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUywX9va9WhFMFN6aMAc9TMkRmQmwwHwYDVR0j BBgwFoAUKklPruRPE0SObEMTb4JQU86XcAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBkYzEyODMtMWNlMi00MWE1LWFmZTYtZjBiZTMxZTliMTBkLzAvMkE0OTRGQUVF NDRGMTM0NDhFNkM0MzEzNkY4MjUwNTNDRTk3NzAwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTQ5NEZBRUU0NEYxMzQ0OEU2QzQzMTM2RjgyNTA1M0NFOTc3 MDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBkYzEyODMtMWNlMi00MWE1LWFm ZTYtZjBiZTMxZTliMTBkLzAvMkE0OTRGQUVFNDRGMTM0NDhFNkM0MzEzNkY4MjUw NTNDRTk3NzAwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADe1cp28g/lXfHCUrgRC8e840LMmFk51mKrx YsuUItAahqWkZAn36CxhWONjaStBb7cfiBA7dyVNoktyO+QJqK9Sex0CYDX5M5rM D1tzLmnJK6T2vx0PFiC1iEE/PEDbdgA0AHwEVBAX458o8JS3zaF5cGciLFJx0O+v PFQq4N68zQCYgZclbqRZzo1XwzrTAwQFK8oeeEYGJBqEKSRC1c1EFT3wAHv/ThYV 2EBW+CDUAfwWnSYTIQB0DhUkcChd7VFHZSZtBghYF73YnbqN7ckG4M8mOYmjydIs TxUcdAcQdlgAiMcpq3vfUtPnatYZ3Io40LWB9F6V461fAyH03xs= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:46 2026 by rpki-client