$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft File: 2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft (raw, json) Hash identifier: LcXvCjN/+LoimqYGcMQ6/w1UBSB5ssGCkgRyi/ayVqA= Subject key identifier: 13:0E:D4:E7:97:5E:52:FB:E2:1F:DA:9A:0C:B3:74:FC:49:5B:C1:A6 Authority key identifier: 2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5 Certificate issuer: /CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5 Certificate serial: 1FAA596B66D3A0FB7159777EB9E644C631D2A317 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:52:55 +0000 Manifest this update: Tue 12 May 2026 17:47:55 +0000 Manifest next update: Wed 13 May 2026 20:57:55 +0000 Files and hashes: 1: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: 8wKUF9NYC7pRZOxvlEf5LxZ2nZECYvwr1BSS5u1G+4Y=) 2: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: 8N1ryLqGS1Ck4AODHf8NX/rVMxyMRb5QCwGLiIIXGg8=) 3: 2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl (hash: 59tPviTuzsOwH7L1Ih2J23q2T+rxJCfvjAN9usdKXMg=) 4: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: K2AeuLRVAE8BPE4wuWW8WhZGZyYvk9GHwxpL0SCIDfk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:aa:59:6b:66:d3:a0:fb:71:59:77:7e:b9:e6:44:c6:31:d2:a3:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5 Validity Not Before: May 12 17:47:55 2026 GMT Not After : May 13 20:57:55 2026 GMT Subject: CN=130ED4E7975E52FBE21FDA9A0CB374FC495BC1A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e9:a4:fd:b2:b1:ec:99:1a:61:5e:bc:f0:48: f1:c3:45:71:10:c1:14:c6:c4:1a:49:28:da:51:06: 4a:58:e2:25:eb:2a:da:86:05:03:ea:e0:40:3a:56: b1:ec:25:1f:68:90:09:fc:80:88:44:c8:86:9b:39: f6:f2:a1:56:1f:c4:fc:c0:fb:f1:a2:68:7e:6e:16: d8:92:20:2d:e9:aa:0f:53:7e:98:bf:c0:d7:68:1e: 46:af:b4:77:57:03:60:a2:63:57:98:5b:87:02:38: de:9c:c2:4a:6d:2a:39:5a:97:5d:32:5b:83:07:6c: 65:e4:09:00:8f:66:03:f4:41:61:6f:51:9c:ed:e6: 7d:6b:44:f0:6e:ed:0b:47:80:f5:64:4c:99:de:69: a1:b6:f5:1a:7c:b5:df:91:cc:dc:fb:26:d5:69:45: df:8e:70:48:d1:85:75:a0:86:44:30:79:73:31:c5: 77:6c:b7:4e:80:61:e9:7b:15:5a:1f:4f:f3:73:a0: b9:70:4e:8c:82:e0:99:d4:c7:da:f3:cb:55:de:d4: 99:da:a2:93:3c:9d:12:65:c5:0e:69:a7:a7:56:f2: 1c:ce:ec:62:c9:70:de:48:35:53:2b:fe:9e:8f:65: 46:a6:56:9c:93:25:1e:cd:4d:9f:b1:c7:d7:ea:80: dc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:0E:D4:E7:97:5E:52:FB:E2:1F:DA:9A:0C:B3:74:FC:49:5B:C1:A6 X509v3 Authority Key Identifier: keyid:2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:9c:80:ac:ca:20:e0:90:c4:0a:85:ed:3c:de:a7:bc:eb:e0: 0f:38:c7:35:07:b2:74:0d:9c:b1:d8:82:b5:28:2e:34:84:3c: 25:4a:06:23:51:06:03:dd:1f:0f:66:bb:3d:8c:b1:bc:72:7f: 3b:f9:93:a9:d9:c7:ed:3f:d4:08:73:54:27:d3:ca:45:16:fe: 9d:84:4f:3b:84:ff:1b:17:32:7d:6b:84:3a:89:41:18:96:d9: d0:3a:1d:88:06:05:0a:d3:44:20:e7:8a:d6:22:d5:18:f6:73: db:13:de:42:13:a9:fe:a8:c9:2e:22:29:46:3c:66:f8:9c:b7: 41:c4:fa:aa:a3:87:2c:68:2b:c8:57:dc:bc:fb:49:a9:66:e8: e9:ce:d1:0b:89:16:c0:86:9b:0b:a1:47:71:32:ac:58:3b:99: fc:48:17:27:67:2e:f1:bc:a4:9f:3e:6b:28:4f:d4:e3:ff:e2: 3f:54:c9:67:92:fc:4d:29:61:79:5d:42:d2:57:bb:df:6c:a5: 02:d2:0f:ae:d9:2b:bb:f6:36:ea:de:62:65:a5:79:cb:8e:6e: d8:2f:31:22:3a:32:b5:0d:1d:7e:df:30:ba:fa:98:c0:f6:68: 20:e3:9e:af:91:4a:bc:a9:6f:ae:e4:3d:c3:a9:5f:a5:63:e6: 61:6c:71:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH6pZa2bToPtxWXd+ueZExjHSoxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFFMTQzM0JCODJGMjc3MTZERjUyNkRBRENDQzRDMkIz NzU4OUNBNTAeFw0yNjA1MTIxNzQ3NTVaFw0yNjA1MTMyMDU3NTVaMDMxMTAvBgNV BAMTKDEzMEVENEU3OTc1RTUyRkJFMjFGREE5QTBDQjM3NEZDNDk1QkMxQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb6aT9srHsmRphXrzwSPHDRXEQ wRTGxBpJKNpRBkpY4iXrKtqGBQPq4EA6VrHsJR9okAn8gIhEyIabOfbyoVYfxPzA +/GiaH5uFtiSIC3pqg9Tfpi/wNdoHkavtHdXA2CiY1eYW4cCON6cwkptKjlal10y W4MHbGXkCQCPZgP0QWFvUZzt5n1rRPBu7QtHgPVkTJneaaG29Rp8td+RzNz7JtVp Rd+OcEjRhXWghkQweXMxxXdst06AYel7FVofT/NzoLlwToyC4JnUx9rzy1Xe1Jna opM8nRJlxQ5pp6dW8hzO7GLJcN5INVMr/p6PZUamVpyTJR7NTZ+xx9fqgNzNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEw7U55deUvviH9qaDLN0/ElbwaYwHwYDVR0j BBgwFoAUKuFDO7gvJ3Ft9Sba3MxMKzdYnKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQwMTFhMWMtYTBhZC00ZDkzLTg2YWYtM2YwYWFkZDk2ODRmLzAvMkFFMTQzM0JC ODJGMjc3MTZERjUyNkRBRENDQzRDMkIzNzU4OUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yQUUxNDMzQkI4MkYyNzcxNkRGNTI2REFEQ0NDNEMyQjM3NTg5 Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvMkFFMTQzM0JCODJGMjc3MTZERjUyNkRBRENDQzRD MkIzNzU4OUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWcgKzKIOCQxAqF7Tzep7zr4A84xzUHsnQN nLHYgrUoLjSEPCVKBiNRBgPdHw9muz2Msbxyfzv5k6nZx+0/1AhzVCfTykUW/p2E TzuE/xsXMn1rhDqJQRiW2dA6HYgGBQrTRCDnitYi1Rj2c9sT3kITqf6oyS4iKUY8 Zvict0HE+qqjhyxoK8hX3Lz7Salm6OnO0QuJFsCGmwuhR3EyrFg7mfxIFydnLvG8 pJ8+ayhP1OP/4j9UyWeS/E0pYXldQtJXu99spQLSD67ZK7v2NureYmWlecuObtgv MSI6MrUNHX7fMLr6mMD2aCDjnq+RSrypb67kPcOpX6Vj5mFscXk= -----END CERTIFICATE-----Generated at Wed May 13 02:36:44 2026 by rpki-client