$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft File: 2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft (raw, json) Hash identifier: qee23soMJXKeMYuVoQCkrt/vrUKdNXTnF1IluJ1u2Vs= Subject key identifier: 95:DF:D8:36:71:1C:6F:C3:6C:6A:C1:4E:6B:77:87:0B:10:2F:0C:D0 Authority key identifier: 2D:4E:F7:6F:F5:F1:DE:08:B9:FB:7C:AE:D4:9A:F7:AD:4C:60:18:35 Certificate issuer: /CN=2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835 Certificate serial: 404D0FD9180994B43E97BE791E1EF1ECA43BCEBF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:08:16 +0000 Manifest this update: Tue 12 May 2026 18:03:16 +0000 Manifest next update: Wed 13 May 2026 18:31:16 +0000 Files and hashes: 1: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: abfZiYldhdnO1xBcxOi/v0tih5cS8BcQKFP2Z8xIlZI=) 2: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (hash: gCsatGRm4KYeS4xTuGnz+oT2rG5lR5XCvd8UnIJR5JU=) 3: 3130332e31392e35362e302f32322d3232203d3e20313332363337.roa (hash: JZgdRbJu890tbXcbh9Oxv/c/hndsIuQkwCj004yU0ZY=) 4: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: Qy2f1Th+IuSFin6EsJuwgkXChR1+TY6gnLgDe+ouGOE=) 5: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: +vElMuoXueIlORLkNX9hNN9LTELx3Cm8ZNhxGm0p8LM=) 6: 2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl (hash: iev5prM3vUq+u7GEO67E/Tk3CuS9IdccpTXS5lHqGS8=) 7: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: Lvw5pO2bg6firYOVJrL24L/mVS2H6b/TJe2TV+FnMQs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:4d:0f:d9:18:09:94:b4:3e:97:be:79:1e:1e:f1:ec:a4:3b:ce:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835 Validity Not Before: May 12 18:03:16 2026 GMT Not After : May 13 18:31:16 2026 GMT Subject: CN=95DFD836711C6FC36C6AC14E6B77870B102F0CD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:90:0c:1f:5d:b0:2d:04:85:99:c6:3d:04:d4: 79:a8:97:b3:34:64:2e:32:20:e1:71:d3:06:05:30: 36:77:f8:48:a9:c6:44:7c:f2:11:b2:07:b2:e7:f6: 43:43:a1:fb:d7:25:99:22:56:1f:b1:b1:30:f7:c2: c2:e6:4e:7c:37:3b:ab:83:3a:93:57:da:5f:8d:79: 8a:78:a9:32:53:79:cc:dc:bb:86:57:20:b3:ba:4e: 05:6a:ce:af:20:71:55:a3:f0:65:7f:f7:57:37:33: 0c:6a:53:a1:b7:c4:7a:58:e9:0e:81:87:44:78:af: 03:c0:92:f8:7f:7d:f9:b5:10:51:76:84:45:96:a4: 7c:e6:94:4b:8f:52:3b:27:3b:b7:82:a9:9a:b6:30: 6f:a2:36:1e:c5:62:d0:f9:94:08:07:31:c3:81:a6: f0:7f:3f:13:e3:dc:22:d7:4f:b6:4a:59:0f:96:3d: c6:37:9d:72:13:7c:f7:db:23:30:c8:66:ae:d8:64: 9e:3b:58:1a:66:1f:29:f6:9a:bd:d6:3d:dc:43:a7: 69:70:8b:99:24:0f:94:d3:3b:83:5f:fd:c1:ae:33: 91:ba:4b:ad:72:db:ca:8a:0c:a0:ba:3e:fe:7e:50: fc:15:cb:94:ec:ad:78:52:87:eb:67:eb:e9:a2:72: 2b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DF:D8:36:71:1C:6F:C3:6C:6A:C1:4E:6B:77:87:0B:10:2F:0C:D0 X509v3 Authority Key Identifier: keyid:2D:4E:F7:6F:F5:F1:DE:08:B9:FB:7C:AE:D4:9A:F7:AD:4C:60:18:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:90:d7:57:e7:bc:01:66:78:ac:2f:2e:c6:30:49:c0:3d:77: 44:d7:e1:58:c7:ad:44:99:2e:6d:ac:cd:17:b8:11:a3:c1:76: 2a:37:f3:d0:d2:8c:57:cd:b7:01:77:dc:5d:ae:49:44:3c:0f: 58:82:f3:df:b6:0d:e3:b8:0b:8f:35:4f:52:90:ed:6a:d9:67: 55:d4:c9:dc:cd:3a:07:fb:c5:bf:55:17:c7:c0:a8:56:43:f4: 23:a4:fb:7b:34:4a:fa:f0:9c:3e:6c:07:8b:6e:c0:6c:12:7f: ce:b1:8c:f4:15:06:a5:43:4b:65:2d:7d:1e:42:03:8a:f2:95: 54:57:f9:66:ed:cf:ff:37:40:aa:59:67:d4:eb:fe:e0:e0:32: 6b:92:cb:b5:c6:ba:75:f5:a0:b6:6a:a4:e9:89:46:e5:7d:4d: 37:9d:87:dd:d9:d8:6c:94:32:05:20:66:e1:65:85:43:90:0f: c7:2f:70:e9:48:b8:47:e3:a9:32:48:c9:cc:1b:1c:f0:43:21: fd:f4:36:4c:53:46:36:b1:fc:cb:19:6e:67:46:02:48:ec:d0: eb:26:b4:52:72:8d:24:04:15:da:0c:d9:33:c4:6a:18:81:90: 44:8f:28:90:de:e7:81:16:1b:05:9b:e6:f3:45:86:c9:a5:b6: 96:7d:b6:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQE0P2RgJlLQ+l755Hh7x7KQ7zr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ0RUY3NkZGNUYxREUwOEI5RkI3Q0FFRDQ5QUY3QUQ0 QzYwMTgzNTAeFw0yNjA1MTIxODAzMTZaFw0yNjA1MTMxODMxMTZaMDMxMTAvBgNV BAMTKDk1REZEODM2NzExQzZGQzM2QzZBQzE0RTZCNzc4NzBCMTAyRjBDRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgkAwfXbAtBIWZxj0E1Hmol7M0 ZC4yIOFx0wYFMDZ3+EipxkR88hGyB7Ln9kNDofvXJZkiVh+xsTD3wsLmTnw3O6uD OpNX2l+NeYp4qTJTeczcu4ZXILO6TgVqzq8gcVWj8GV/91c3MwxqU6G3xHpY6Q6B h0R4rwPAkvh/ffm1EFF2hEWWpHzmlEuPUjsnO7eCqZq2MG+iNh7FYtD5lAgHMcOB pvB/PxPj3CLXT7ZKWQ+WPcY3nXITfPfbIzDIZq7YZJ47WBpmHyn2mr3WPdxDp2lw i5kkD5TTO4Nf/cGuM5G6S61y28qKDKC6Pv5+UPwVy5TsrXhSh+tn6+micivLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUld/YNnEcb8NsasFOa3eHCxAvDNAwHwYDVR0j BBgwFoAULU73b/Xx3gi5+3yu1Jr3rUxgGDUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQwOTI3ZTYtOGEwYS00ZmE3LTg5NjktOWZiOWQ2OTQzOTdjLzAvMkQ0RUY3NkZG NUYxREUwOEI5RkI3Q0FFRDQ5QUY3QUQ0QzYwMTgzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDRFRjc2RkY1RjFERTA4QjlGQjdDQUVENDlBRjdBRDRDNjAx ODM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQwOTI3ZTYtOGEwYS00ZmE3LTg5 NjktOWZiOWQ2OTQzOTdjLzAvMkQ0RUY3NkZGNUYxREUwOEI5RkI3Q0FFRDQ5QUY3 QUQ0QzYwMTgzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuQ11fnvAFmeKwvLsYwScA9d0TX4VjHrUSZ Lm2szRe4EaPBdio389DSjFfNtwF33F2uSUQ8D1iC89+2DeO4C481T1KQ7WrZZ1XU ydzNOgf7xb9VF8fAqFZD9COk+3s0SvrwnD5sB4tuwGwSf86xjPQVBqVDS2UtfR5C A4rylVRX+Wbtz/83QKpZZ9Tr/uDgMmuSy7XGunX1oLZqpOmJRuV9TTedh93Z2GyU MgUgZuFlhUOQD8cvcOlIuEfjqTJIycwbHPBDIf30NkxTRjax/MsZbmdGAkjs0Osm tFJyjSQEFdoM2TPEahiBkESPKJDe54EWGwWb5vNFhsmltpZ9tkA= -----END CERTIFICATE-----Generated at Wed May 13 01:37:31 2026 by rpki-client