$ rpki-client -vvf rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft File: 2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft (raw, json) Hash identifier: rsmfsUff8oc9NlhYRpoItitYyjl+S1EyIKi1pBdf6t4= Subject key identifier: 6B:95:56:E5:38:18:74:E7:65:83:EE:48:08:2B:A5:A0:DB:9D:F9:FC Authority key identifier: 2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63 Certificate issuer: /CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463 Certificate serial: 7EC82D13D994BF3704CD4F5D4DFB5B5C45E07A2C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft Manifest number: 0E Signing time: Tue 12 May 2026 13:43:42 +0000 Manifest this update: Tue 12 May 2026 13:38:42 +0000 Manifest next update: Wed 13 May 2026 17:01:42 +0000 Files and hashes: 1: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: JbxVAMh0l8cOOEqUdkvkAwk1Vty1kRSyKXbV2pl/yFg=) 2: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: i83P/tWxpN7+zDb3L4rKQFgIev7DrUCxoADIDDyJE9U=) 3: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: iJm4NhgPbIn9ZoK9MCrx0LzGYq+XRWtI9oNHEB41bTw=) 4: 2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl (hash: P+0KrH4qCk6MV8Eq2f8Hc00ioEJ9XuTpyJH0f0hNRRk=) 5: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: 6oOlCIxGneY8XQmzJaSA+rXwKrW4Xz1wcUf44XfKjgk=) 6: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: 6lFtnPCNARkQq8uMVyUcH9X2yfQ7BRCjGYYqyfiHjKo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c8:2d:13:d9:94:bf:37:04:cd:4f:5d:4d:fb:5b:5c:45:e0:7a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463 Validity Not Before: May 12 13:38:42 2026 GMT Not After : May 13 17:01:42 2026 GMT Subject: CN=6B9556E5381874E76583EE48082BA5A0DB9DF9FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8b:81:84:ac:b9:ad:65:00:3c:08:63:db:cf: bf:73:e4:bc:22:eb:7d:32:3f:f1:2c:79:20:a5:c7: b6:3d:3b:66:45:73:0b:ef:e3:0f:e3:b2:45:55:af: 22:85:e8:64:06:99:8c:c5:ca:e0:ba:0c:45:3a:89: 00:3c:29:52:45:71:e0:de:30:ef:a0:31:a6:ee:49: 84:96:03:ae:07:ae:1d:45:39:8d:df:a2:ee:64:93: 4c:3f:a6:5c:0a:09:11:3c:d6:55:85:4b:24:20:bf: c8:22:d1:62:a9:3f:ac:9c:c5:58:c5:25:22:0c:9d: ba:fb:c5:f7:39:6f:1a:01:29:ca:02:8d:29:d0:ca: 7e:e8:f7:45:80:ca:d6:5d:3b:58:2d:bf:ff:ee:26: ca:b1:8d:9c:87:ad:ec:67:a0:04:46:f7:60:6b:97: 29:e6:78:2f:e3:b8:c0:20:00:8a:ee:e8:ab:bb:76: 63:2e:9a:0b:55:6b:8b:0e:cc:ec:8a:c9:61:04:69: 84:5d:2b:02:df:45:06:ea:d1:4e:8e:07:2f:b2:45: c4:49:ad:35:f3:fd:b2:f2:f8:c9:be:2c:09:10:50: 12:bd:93:15:73:b7:02:2b:22:96:ee:8e:1b:fa:03: 47:0a:94:55:05:ea:b1:74:40:70:6f:43:e1:07:8d: 8b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:95:56:E5:38:18:74:E7:65:83:EE:48:08:2B:A5:A0:DB:9D:F9:FC X509v3 Authority Key Identifier: keyid:2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:64:60:52:fa:ba:b1:89:0a:af:b7:9a:1c:81:e5:8c:95:fb: ed:da:f8:51:56:50:36:1f:07:69:a2:ac:9f:6c:a7:14:da:bf: 0d:9d:4b:dc:16:90:55:a0:44:78:99:35:5f:ec:57:76:e3:3b: 0d:74:84:51:02:2d:9f:b4:6b:6c:03:70:6d:78:51:65:0d:9f: 82:2c:f7:d0:02:23:c0:02:fc:27:3d:07:e3:fd:e0:88:2c:f4: 57:87:f1:74:56:59:b5:10:a4:d5:0d:c4:57:fa:ba:79:e9:13: 72:4a:4e:1a:2f:36:9c:6e:4f:e9:f4:e6:57:9e:32:6b:b3:24: 73:96:58:f0:35:b8:cf:37:37:6b:74:a2:3b:3c:a1:cd:ed:f8: d2:82:51:8e:7d:12:40:c9:13:01:01:ed:2d:3d:dd:e1:c6:74: e0:ed:77:f8:c5:e4:a6:e3:df:f3:31:d6:8b:1b:12:63:25:1d: ef:7d:64:16:b8:7e:8e:42:39:3b:e3:1b:6f:0f:4e:7f:13:9a: 15:7d:6d:bc:07:41:2e:b4:dd:79:f1:44:60:26:57:6a:0b:dd: f9:4e:3b:f7:b2:c1:5a:1b:41:23:61:24:14:46:e7:07:5c:4e: 20:15:44:61:d4:3f:36:a0:6a:48:3b:f1:0e:f0:9a:6c:b2:02: c7:93:94:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfsgtE9mUvzcEzU9dTftbXEXgeiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzMTM3RUVGNzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3 MkUyQzQ2MzAeFw0yNjA1MTIxMzM4NDJaFw0yNjA1MTMxNzAxNDJaMDMxMTAvBgNV BAMTKDZCOTU1NkU1MzgxODc0RTc2NTgzRUU0ODA4MkJBNUEwREI5REY5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOi4GErLmtZQA8CGPbz79z5Lwi 630yP/EseSClx7Y9O2ZFcwvv4w/jskVVryKF6GQGmYzFyuC6DEU6iQA8KVJFceDe MO+gMabuSYSWA64Hrh1FOY3fou5kk0w/plwKCRE81lWFSyQgv8gi0WKpP6ycxVjF JSIMnbr7xfc5bxoBKcoCjSnQyn7o90WAytZdO1gtv//uJsqxjZyHrexnoARG92Br lynmeC/juMAgAIru6Ku7dmMumgtVa4sOzOyKyWEEaYRdKwLfRQbq0U6OBy+yRcRJ rTXz/bLy+Mm+LAkQUBK9kxVztwIrIpbujhv6A0cKlFUF6rF0QHBvQ+EHjYvhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa5VW5TgYdOdlg+5ICCuloNud+fwwHwYDVR0j BBgwFoAUKjE37vd/GvFvehLdbTaUTHLixGMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI4ZWVjNWItNTMyNC00NDIyLWEzMmYtOWIxZGNlZDM3NTlmLzAvMkEzMTM3RUVG NzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3MkUyQzQ2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTMxMzdFRUY3N0YxQUYxNkY3QTEyREQ2RDM2OTQ0QzcyRTJD NDYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMkEzMTM3RUVGNzdGMUFGMTZGN0ExMkRENkQzNjk0 NEM3MkUyQzQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxkYFL6urGJCq+3mhyB5YyV++3a+FFWUDYf B2mirJ9spxTavw2dS9wWkFWgRHiZNV/sV3bjOw10hFECLZ+0a2wDcG14UWUNn4Is 99ACI8AC/Cc9B+P94Igs9FeH8XRWWbUQpNUNxFf6unnpE3JKThovNpxuT+n05lee MmuzJHOWWPA1uM83N2t0ojs8oc3t+NKCUY59EkDJEwEB7S093eHGdODtd/jF5Kbj 3/Mx1osbEmMlHe99ZBa4fo5COTvjG28PTn8TmhV9bbwHQS603XnxRGAmV2oL3flO O/eywVobQSNhJBRG5wdcTiAVRGHUPzagakg78Q7wmmyyAseTlJM= -----END CERTIFICATE-----Generated at Wed May 13 00:20:50 2026 by rpki-client