$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft File: 2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft (raw, json) Hash identifier: zjKfh6aSm8z9Stfl0pBQ+pocL1axRpk/k0E8tLxCVts= Subject key identifier: 2A:6C:36:25:E0:41:6B:1F:EF:21:0B:FF:F3:3A:56:E2:D5:83:22:B0 Authority key identifier: 27:69:DC:A3:F8:9F:0B:44:81:12:7F:F4:E7:DB:34:D7:95:7B:9B:9A Certificate issuer: /CN=2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A Certificate serial: 47083EF58787E649FE1F174C2130164150DD0E8E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft Manifest number: 0F Signing time: Tue 12 May 2026 12:53:07 +0000 Manifest this update: Tue 12 May 2026 12:48:07 +0000 Manifest next update: Wed 13 May 2026 14:11:07 +0000 Files and hashes: 1: 3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa (hash: SxuSRhZVuQ01C/J4fBuk49O3beWTR2sEuK9CbWvLAoU=) 2: 2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.crl (hash: KDUYP3T/Fm3k8QwBylLUBriUUmBHXe/Tx5OcYMLqMJQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.crl rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:08:3e:f5:87:87:e6:49:fe:1f:17:4c:21:30:16:41:50:dd:0e:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A Validity Not Before: May 12 12:48:07 2026 GMT Not After : May 13 14:11:07 2026 GMT Subject: CN=2A6C3625E0416B1FEF210BFFF33A56E2D58322B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:95:d4:fb:38:5b:43:4c:74:52:cc:5d:6a:58: 3a:8d:8c:7f:0b:54:58:e6:ed:36:5a:79:03:36:3f: 66:62:f7:4f:4f:70:bd:70:86:58:16:67:1b:70:9e: 64:a7:8f:f6:3e:75:1d:cc:a8:e3:dc:9c:d8:19:82: 09:57:15:79:4a:d5:5c:19:9a:0d:ac:c8:ea:df:6e: da:76:4f:21:0b:ed:fd:bb:37:5c:15:e9:9c:b8:c5: 40:b1:81:2d:e5:04:26:90:5f:ab:df:3b:29:0a:dc: 81:1a:40:a0:5d:a4:ed:0a:54:2c:e5:4a:22:12:3c: f9:c3:a4:1a:06:6d:39:4b:2b:fa:9a:4a:cc:1f:84: 47:e6:5a:c0:74:b4:2e:b3:5d:9d:d5:5a:6c:be:af: cb:a9:c0:e3:26:1c:c9:e3:59:00:82:a2:d1:c1:ff: 8b:a5:9c:be:7c:5d:c9:a0:47:6b:d0:29:ab:d2:a6: a0:2f:7d:55:57:de:3d:88:13:88:5f:4a:7d:0c:1c: e5:c9:02:4c:33:2d:62:ae:97:d7:f8:54:05:a9:01: de:18:34:f2:ff:3e:c7:05:39:b9:ce:83:95:12:f0: 43:d7:b3:78:c5:31:f4:8e:b2:4d:00:a0:c1:f6:82: 71:d6:d3:3a:e9:33:0e:e1:1b:73:eb:aa:99:7a:4d: c4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6C:36:25:E0:41:6B:1F:EF:21:0B:FF:F3:3A:56:E2:D5:83:22:B0 X509v3 Authority Key Identifier: keyid:27:69:DC:A3:F8:9F:0B:44:81:12:7F:F4:E7:DB:34:D7:95:7B:9B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:1b:9a:5c:e0:93:0a:a0:d2:2a:2b:f2:e5:ef:8b:e8:6d:c4: 45:5a:68:09:54:be:5b:a7:a1:83:57:af:c1:b5:f3:1c:31:1d: 74:aa:0d:de:60:61:67:8c:b7:bd:d7:e2:51:41:c5:9b:5a:1d: d9:c6:20:de:7b:dd:08:02:ac:45:4a:ad:1d:4a:43:cf:e7:87: 7e:e7:65:bc:4d:e2:3e:5b:72:aa:69:8e:ce:31:91:88:d7:7c: ab:dc:33:1e:68:2d:5a:49:bf:1e:97:8a:7e:d6:11:87:c7:fd: 61:a8:46:ad:7e:2a:a5:a2:d5:c7:39:51:64:58:ad:b1:b8:e5: a4:c5:47:e0:c6:0d:9d:30:1a:97:04:b3:11:46:49:72:6b:f2: 73:5b:af:a2:57:33:75:81:fc:1c:10:29:59:01:2e:2b:2e:d5: 0a:b5:2d:41:62:11:a2:d8:36:4f:ec:ec:55:d5:a5:79:eb:d1: e1:48:39:7f:30:8b:2a:2b:f2:02:e2:ec:ef:51:d2:ce:f7:58: a2:94:0c:ae:29:d0:54:b1:9b:ba:8a:63:d3:71:d8:df:02:cd: 51:1d:72:4d:5c:75:46:6c:cd:e9:35:06:98:21:d0:63:08:ae: bb:8f:1b:83:7d:e8:ba:7e:79:f0:12:2f:dd:fd:2d:43:09:98: 3a:03:e4:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURwg+9YeH5kn+HxdMITAWQVDdDo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc2OURDQTNGODlGMEI0NDgxMTI3RkY0RTdEQjM0RDc5 NTdCOUI5QTAeFw0yNjA1MTIxMjQ4MDdaFw0yNjA1MTMxNDExMDdaMDMxMTAvBgNV BAMTKDJBNkMzNjI1RTA0MTZCMUZFRjIxMEJGRkYzM0E1NkUyRDU4MzIyQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBldT7OFtDTHRSzF1qWDqNjH8L VFjm7TZaeQM2P2Zi909PcL1whlgWZxtwnmSnj/Y+dR3MqOPcnNgZgglXFXlK1VwZ mg2syOrfbtp2TyEL7f27N1wV6Zy4xUCxgS3lBCaQX6vfOykK3IEaQKBdpO0KVCzl SiISPPnDpBoGbTlLK/qaSswfhEfmWsB0tC6zXZ3VWmy+r8upwOMmHMnjWQCCotHB /4ulnL58XcmgR2vQKavSpqAvfVVX3j2IE4hfSn0MHOXJAkwzLWKul9f4VAWpAd4Y NPL/PscFObnOg5US8EPXs3jFMfSOsk0AoMH2gnHW0zrpMw7hG3Prqpl6TcRtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKmw2JeBBax/vIQv/8zpW4tWDIrAwHwYDVR0j BBgwFoAUJ2nco/ifC0SBEn/059s015V7m5owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmUzYTEzOGUtYTJiMi00NjA0LWFkNTAtM2NhYjc1MGE3NWU3LzAvMjc2OURDQTNG ODlGMEI0NDgxMTI3RkY0RTdEQjM0RDc5NTdCOUI5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNzY5RENBM0Y4OUYwQjQ0ODExMjdGRjRFN0RCMzRENzk1N0I5 QjlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmUzYTEzOGUtYTJiMi00NjA0LWFk NTAtM2NhYjc1MGE3NWU3LzAvMjc2OURDQTNGODlGMEI0NDgxMTI3RkY0RTdEQjM0 RDc5NTdCOUI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkbmlzgkwqg0ior8uXvi+htxEVaaAlUvlun oYNXr8G18xwxHXSqDd5gYWeMt73X4lFBxZtaHdnGIN573QgCrEVKrR1KQ8/nh37n ZbxN4j5bcqppjs4xkYjXfKvcMx5oLVpJvx6Xin7WEYfH/WGoRq1+KqWi1cc5UWRY rbG45aTFR+DGDZ0wGpcEsxFGSXJr8nNbr6JXM3WB/BwQKVkBLisu1Qq1LUFiEaLY Nk/s7FXVpXnr0eFIOX8wiyor8gLi7O9R0s73WKKUDK4p0FSxm7qKY9Nx2N8CzVEd ck1cdUZszek1Bpgh0GMIrruPG4N96Lp+efASL939LUMJmDoD5CA= -----END CERTIFICATE-----Generated at Tue May 12 22:19:29 2026 by rpki-client