$ rpki-client -vvf rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft File: 2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft (raw, json) Hash identifier: zoEs8/gHkh16F6ec9E+NVuAxDsiXDdqWPaWg8ADyMZA= Subject key identifier: 15:49:15:B3:32:81:28:42:27:32:12:3C:2E:68:CE:BA:A6:9C:3C:04 Authority key identifier: 2D:88:AC:79:1B:0C:C1:B7:D9:21:EC:E6:60:CD:E0:CF:2E:E8:ED:72 Certificate issuer: /CN=2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72 Certificate serial: 574E38A48B25EA28D759891D6C97E262CC038C43 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:20:38 +0000 Manifest this update: Tue 12 May 2026 05:15:38 +0000 Manifest next update: Wed 13 May 2026 08:12:38 +0000 Files and hashes: 1: 3130332e3136322e3234302e302f32332d3234203d3e20313431363731.roa (hash: 4S3CjwY52E8pJFph27PsS9L2iHBVLGusILVU9iKtoiI=) 2: 2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl (hash: kWE7IWZUDRBRlZVlK5v0w2JF7oWYuUv314AL8LB0opI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:4e:38:a4:8b:25:ea:28:d7:59:89:1d:6c:97:e2:62:cc:03:8c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72 Validity Not Before: May 12 05:15:38 2026 GMT Not After : May 13 08:12:38 2026 GMT Subject: CN=154915B3328128422732123C2E68CEBAA69C3C04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:00:ce:3f:b6:da:7e:bd:4e:e2:07:07:a2:2d: 47:d2:aa:2e:30:b2:87:99:f9:d7:50:fc:49:04:fe: 26:b6:58:20:99:5d:9d:ce:cc:74:b8:cc:8d:ae:23: e9:70:69:6f:ff:fc:7c:fb:f6:d5:05:eb:21:a2:a4: 86:c6:51:9f:d3:43:2e:b2:7f:3e:f3:37:10:10:92: 0b:ff:51:ae:33:a9:f3:b9:ab:77:c4:ad:8c:72:44: 36:82:3a:8c:3c:65:e8:8d:3e:99:68:e1:89:d8:dd: 24:a6:98:c3:a1:b7:f4:6b:44:ce:9c:21:47:2f:09: c1:61:c4:3a:cd:37:f9:1c:8b:62:2b:9a:24:05:da: 6a:5e:f7:a7:06:d5:3b:06:f4:63:21:b7:83:b4:50: 82:cb:e0:85:dc:55:24:4d:6f:04:41:05:a1:07:7f: cc:dc:10:52:cf:b0:ae:38:e9:17:9d:d2:81:69:64: 04:62:2c:de:3c:10:34:2f:73:0d:19:bc:88:86:4c: cf:75:93:c4:d3:43:5c:63:88:a6:a3:dd:a3:0c:7b: 79:88:87:d3:8d:3e:d5:e0:de:f0:59:ed:58:48:fa: 7f:52:01:27:09:f6:b3:63:42:e4:13:04:36:54:14: 1e:b8:65:e7:e6:b4:36:f9:fe:d9:d9:41:5b:a6:3f: 9e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:49:15:B3:32:81:28:42:27:32:12:3C:2E:68:CE:BA:A6:9C:3C:04 X509v3 Authority Key Identifier: keyid:2D:88:AC:79:1B:0C:C1:B7:D9:21:EC:E6:60:CD:E0:CF:2E:E8:ED:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:93:b3:32:eb:0a:9c:3d:f3:f8:8c:1e:ff:a7:c6:17:e9:24: 53:ee:37:ad:b0:cf:df:00:25:72:d4:38:ca:20:e6:b9:2e:36: fc:d6:76:2a:9c:93:6d:07:d0:10:0d:c3:69:40:e0:4a:fd:d5: 40:d8:4a:c9:03:8b:f1:dd:f3:4a:5b:2b:fb:6c:3b:6a:7a:ce: e7:01:6e:dd:b0:55:0e:3e:a6:6f:d9:a5:95:2f:e7:74:1e:a1: ea:c9:a2:d9:84:6f:2d:52:64:f6:28:dc:57:0b:2c:f2:50:01: f4:73:79:c3:04:4d:71:6e:de:79:ef:57:fb:1c:42:c9:8e:f8: f4:f6:ae:b9:85:eb:bd:1b:be:b5:a0:51:1d:50:01:f5:c0:6b: 62:1d:20:3f:0a:fd:68:56:b7:46:be:16:b1:eb:06:24:e2:82: 4f:68:84:52:31:c1:cd:58:ba:11:6a:62:56:13:61:95:6b:5a: 65:38:da:96:32:6a:5d:f0:98:74:c6:b6:e2:92:16:dd:b9:e1: 79:92:3f:d6:4d:a5:e2:16:32:9d:a6:fc:b0:4d:2a:9b:d4:db: b9:f2:34:46:6f:00:f9:58:c9:1b:60:49:f4:be:e6:b3:3e:8d: b7:55:cd:8e:a6:0d:e9:d4:55:9c:e8:c9:87:4a:f6:f8:47:c9: c7:0f:d1:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV044pIsl6ijXWYkdbJfiYswDjEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ4OEFDNzkxQjBDQzFCN0Q5MjFFQ0U2NjBDREUwQ0Yy RUU4RUQ3MjAeFw0yNjA1MTIwNTE1MzhaFw0yNjA1MTMwODEyMzhaMDMxMTAvBgNV BAMTKDE1NDkxNUIzMzI4MTI4NDIyNzMyMTIzQzJFNjhDRUJBQTY5QzNDMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXAM4/ttp+vU7iBweiLUfSqi4w soeZ+ddQ/EkE/ia2WCCZXZ3OzHS4zI2uI+lwaW///Hz79tUF6yGipIbGUZ/TQy6y fz7zNxAQkgv/Ua4zqfO5q3fErYxyRDaCOow8ZeiNPplo4YnY3SSmmMOht/RrRM6c IUcvCcFhxDrNN/kci2IrmiQF2mpe96cG1TsG9GMht4O0UILL4IXcVSRNbwRBBaEH f8zcEFLPsK446Red0oFpZARiLN48EDQvcw0ZvIiGTM91k8TTQ1xjiKaj3aMMe3mI h9ONPtXg3vBZ7VhI+n9SAScJ9rNjQuQTBDZUFB64ZefmtDb5/tnZQVumP56hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFUkVszKBKEInMhI8LmjOuqacPAQwHwYDVR0j BBgwFoAULYiseRsMwbfZIezmYM3gzy7o7XIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjMwMjRkMjQtOWZhYS00YWIwLThmYTQtMGNlNjA4YzZkMGEzLzAvMkQ4OEFDNzkx QjBDQzFCN0Q5MjFFQ0U2NjBDREUwQ0YyRUU4RUQ3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDg4QUM3OTFCMENDMUI3RDkyMUVDRTY2MENERTBDRjJFRThF RDcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjMwMjRkMjQtOWZhYS00YWIwLThm YTQtMGNlNjA4YzZkMGEzLzAvMkQ4OEFDNzkxQjBDQzFCN0Q5MjFFQ0U2NjBDREUw Q0YyRUU4RUQ3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmTszLrCpw98/iMHv+nxhfpJFPuN62wz98A JXLUOMog5rkuNvzWdiqck20H0BANw2lA4Er91UDYSskDi/Hd80pbK/tsO2p6zucB bt2wVQ4+pm/ZpZUv53QeoerJotmEby1SZPYo3FcLLPJQAfRzecMETXFu3nnvV/sc QsmO+PT2rrmF670bvrWgUR1QAfXAa2IdID8K/WhWt0a+FrHrBiTigk9ohFIxwc1Y uhFqYlYTYZVrWmU42pYyal3wmHTGtuKSFt254XmSP9ZNpeIWMp2m/LBNKpvU27ny NEZvAPlYyRtgSfS+5rM+jbdVzY6mDenUVZzoyYdK9vhHyccP0eU= -----END CERTIFICATE-----Generated at Wed May 13 01:11:05 2026 by rpki-client