$ rpki-client -vvf rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft File: 2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft (raw, json) Hash identifier: mVjfES4mpwNisgZcrOVHsUSTXEMZ4X7si+waNkaURIg= Subject key identifier: 1F:C8:22:ED:84:E9:D5:75:91:97:0C:3E:55:C2:EC:F9:60:B9:BF:D6 Authority key identifier: 2C:7A:30:2B:26:8D:C5:40:59:CE:B8:8F:7A:C2:19:8D:98:52:CB:D3 Certificate issuer: /CN=2C7A302B268DC54059CEB88F7AC2198D9852CBD3 Certificate serial: 54517F999C15CD441134419E1C59DCC78356DD99 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:13:24 +0000 Manifest this update: Tue 12 May 2026 07:08:24 +0000 Manifest next update: Wed 13 May 2026 10:25:24 +0000 Files and hashes: 1: 2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl (hash: GK05oKceYDwaxaEkRevpdBHtNlva84StvsviUpR117A=) 2: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: bJqqtyMrUB6ove5aksmXoGy9PsBIFYzerBlsfdZy7oQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 10:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:51:7f:99:9c:15:cd:44:11:34:41:9e:1c:59:dc:c7:83:56:dd:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C7A302B268DC54059CEB88F7AC2198D9852CBD3 Validity Not Before: May 12 07:08:24 2026 GMT Not After : May 13 10:25:24 2026 GMT Subject: CN=1FC822ED84E9D57591970C3E55C2ECF960B9BFD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:33:b5:a1:32:97:62:54:57:0c:2c:3e:07:b8: 66:e8:11:a9:6a:91:e1:9a:9a:97:5b:65:d9:52:fd: d8:68:7f:13:c2:bb:60:94:92:81:a4:7f:02:76:ff: 9a:21:4a:96:af:d9:af:67:ad:14:e1:93:62:bb:96: ce:7a:f4:24:1b:9c:8f:0b:c7:f8:70:ef:5c:39:22: f6:c0:5f:06:ae:58:ba:07:36:7a:32:6f:3e:44:fb: e2:90:e2:51:05:f2:17:f2:90:cc:fb:b5:83:1a:56: 4d:ab:cf:30:ea:dd:25:6f:ea:bb:f7:40:06:42:16: d9:30:9b:60:52:0a:43:d9:6d:c3:91:f8:c6:5a:5d: 3f:97:b9:2d:79:ab:23:94:26:21:9b:79:3d:e2:a6: 7f:25:42:09:ae:d0:4c:e4:94:a7:2b:ec:04:d0:22: 9c:99:0e:07:11:23:bb:fb:4f:fe:fc:88:af:32:a9: 2f:90:58:9e:66:d2:c8:b9:bd:ec:b5:e4:25:bf:f9: 28:85:37:de:f3:2d:85:a9:26:62:50:dd:f3:a0:01: ad:8b:5f:70:3d:52:77:db:a3:fe:47:ea:ee:0b:07: ab:f2:a1:ef:bd:94:ac:0b:15:5a:f7:e2:c1:66:be: 72:c1:03:a7:ff:54:de:30:12:90:7f:a2:1c:d7:c4: a8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C8:22:ED:84:E9:D5:75:91:97:0C:3E:55:C2:EC:F9:60:B9:BF:D6 X509v3 Authority Key Identifier: keyid:2C:7A:30:2B:26:8D:C5:40:59:CE:B8:8F:7A:C2:19:8D:98:52:CB:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a0:2a:c8:65:c6:df:22:4e:c8:a7:fe:2e:86:32:17:67:4c: a5:6b:69:0c:a8:31:77:61:c8:59:5c:1a:5a:03:c3:cd:e4:f4: dc:24:45:5d:f2:57:22:b3:78:06:86:e0:84:36:6a:07:3b:d2: 58:09:36:31:9e:7e:c3:45:da:1d:6d:01:8a:84:92:9d:86:a9: bb:f9:c9:96:26:ae:89:e0:28:93:21:75:97:f5:05:13:2a:26: 12:55:de:ca:7f:98:a1:c4:f1:34:52:fa:f4:db:6a:9e:99:09: 9a:4d:3c:38:46:8b:e7:97:99:bd:a5:8c:71:c9:14:1e:b0:c7: 7c:14:1a:46:a6:ff:83:7a:7c:13:ad:29:69:f4:61:97:e2:67: 87:51:2f:d7:05:28:10:c8:25:72:cd:96:a7:df:e8:9c:d9:4d: f0:54:e8:f9:93:e4:ec:5b:01:57:d6:6a:55:75:11:cd:c7:25: 1d:7e:48:5c:ef:cd:5b:6d:6c:2c:0c:ed:c7:bc:54:d2:c3:92: 26:3b:9e:a4:fc:19:c3:fd:61:05:f0:1e:1c:cd:6b:8b:e7:d8: 0c:ea:e7:2e:0d:25:1d:0c:4b:be:2b:18:20:47:08:f6:34:be: 05:2d:af:60:b4:15:8c:1b:e5:73:eb:bc:d0:e0:16:7a:d5:9a: 6d:91:bc:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVFF/mZwVzUQRNEGeHFncx4NW3ZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM3QTMwMkIyNjhEQzU0MDU5Q0VCODhGN0FDMjE5OEQ5 ODUyQ0JEMzAeFw0yNjA1MTIwNzA4MjRaFw0yNjA1MTMxMDI1MjRaMDMxMTAvBgNV BAMTKDFGQzgyMkVEODRFOUQ1NzU5MTk3MEMzRTU1QzJFQ0Y5NjBCOUJGRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCM7WhMpdiVFcMLD4HuGboEalq keGampdbZdlS/dhofxPCu2CUkoGkfwJ2/5ohSpav2a9nrRThk2K7ls569CQbnI8L x/hw71w5IvbAXwauWLoHNnoybz5E++KQ4lEF8hfykMz7tYMaVk2rzzDq3SVv6rv3 QAZCFtkwm2BSCkPZbcOR+MZaXT+XuS15qyOUJiGbeT3ipn8lQgmu0EzklKcr7ATQ IpyZDgcRI7v7T/78iK8yqS+QWJ5m0si5vey15CW/+SiFN97zLYWpJmJQ3fOgAa2L X3A9Unfbo/5H6u4LB6vyoe+9lKwLFVr34sFmvnLBA6f/VN4wEpB/ohzXxKg1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH8gi7YTp1XWRlww+VcLs+WC5v9YwHwYDVR0j BBgwFoAULHowKyaNxUBZzriPesIZjZhSy9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA1YWY4MjItYmVhOS00OGYzLWFhMTItYjI3MzcxNjJmYzQyLzAvMkM3QTMwMkIy NjhEQzU0MDU5Q0VCODhGN0FDMjE5OEQ5ODUyQ0JEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQzdBMzAyQjI2OERDNTQwNTlDRUI4OEY3QUMyMTk4RDk4NTJD QkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA1YWY4MjItYmVhOS00OGYzLWFh MTItYjI3MzcxNjJmYzQyLzAvMkM3QTMwMkIyNjhEQzU0MDU5Q0VCODhGN0FDMjE5 OEQ5ODUyQ0JEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGygKshlxt8iTsin/i6GMhdnTKVraQyoMXdh yFlcGloDw83k9NwkRV3yVyKzeAaG4IQ2agc70lgJNjGefsNF2h1tAYqEkp2Gqbv5 yZYmrongKJMhdZf1BRMqJhJV3sp/mKHE8TRS+vTbap6ZCZpNPDhGi+eXmb2ljHHJ FB6wx3wUGkam/4N6fBOtKWn0YZfiZ4dRL9cFKBDIJXLNlqff6JzZTfBU6PmT5Oxb AVfWalV1Ec3HJR1+SFzvzVttbCwM7ce8VNLDkiY7nqT8GcP9YQXwHhzNa4vn2Azq 5y4NJR0MS74rGCBHCPY0vgUtr2C0FYwb5XPrvNDgFnrVmm2RvPY= -----END CERTIFICATE-----Generated at Wed May 13 04:00:04 2026 by rpki-client