$ rpki-client -vvf rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft File: 2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft (raw, json) Hash identifier: ta7juCL6zihH44mXfK9jWReeU4NWRUxxATjM+dB/pT4= Subject key identifier: 6E:C1:1E:BC:E9:F8:B4:9C:C1:F9:CC:FA:E1:2A:B9:56:43:67:55:5F Authority key identifier: 2E:06:9E:30:CF:7B:24:CD:D7:7C:20:65:50:B0:BD:BD:B0:16:83:AF Certificate issuer: /CN=2E069E30CF7B24CDD77C206550B0BDBDB01683AF Certificate serial: 5A72F24F895C6F2298C9D16F9C480D709CB3C7A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:46:23 +0000 Manifest this update: Tue 12 May 2026 16:41:23 +0000 Manifest next update: Wed 13 May 2026 18:01:23 +0000 Files and hashes: 1: 2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl (hash: KGJbuA9vxMFgCJyci3tZWYIMLYFHXpqyZcu3tFQL9lA=) 2: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: njSBQKxaBf8FgxYd9UzVWcsd+7NkvHs45etGgjIxXxw=) 3: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: R//K7f8SQ84W/WhpHi/GP3kDl7olX9IsyMdmQ8qFKuk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:72:f2:4f:89:5c:6f:22:98:c9:d1:6f:9c:48:0d:70:9c:b3:c7:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E069E30CF7B24CDD77C206550B0BDBDB01683AF Validity Not Before: May 12 16:41:23 2026 GMT Not After : May 13 18:01:23 2026 GMT Subject: CN=6EC11EBCE9F8B49CC1F9CCFAE12AB9564367555F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:6d:ee:66:59:f8:09:21:54:9c:82:d7:6b: 90:be:fc:4f:60:58:66:6f:63:6b:d3:c0:2a:79:af: 87:8f:de:32:30:83:5c:73:92:c2:06:0a:48:15:c6: db:7a:3a:38:51:f8:ca:22:db:ed:82:a3:7d:d3:85: 16:f9:08:86:86:f8:df:d7:7f:71:b9:4b:b9:ad:2a: b8:80:ce:cd:e2:60:95:f0:4a:e7:aa:f8:d8:be:d0: d6:d7:a7:07:e6:dd:3f:b6:06:a8:74:14:10:d1:50: a7:5f:65:a4:d9:79:02:02:ee:57:38:da:6e:8f:47: 57:44:37:c9:3d:cc:9b:aa:9b:ec:38:db:98:0d:2d: d8:99:96:9c:44:77:01:99:3d:86:a4:8e:dd:7e:8c: 66:b2:b9:77:51:dd:51:38:d7:ce:99:20:ff:5b:48: 34:84:43:31:8c:a8:ce:4c:f2:a9:43:7b:a2:4c:fc: ec:ab:5d:a5:da:b4:22:0e:7b:90:9d:00:6e:57:7a: 72:99:b5:2c:88:c8:61:4e:be:82:e1:a9:fc:f8:aa: d1:68:9c:8d:42:73:b3:e4:c0:2a:1a:d2:09:98:1e: 8b:ec:24:54:2f:20:07:aa:b6:64:26:61:26:6c:98: 29:9f:66:a5:a1:93:8a:45:9b:61:1d:ff:41:01:59: 83:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C1:1E:BC:E9:F8:B4:9C:C1:F9:CC:FA:E1:2A:B9:56:43:67:55:5F X509v3 Authority Key Identifier: keyid:2E:06:9E:30:CF:7B:24:CD:D7:7C:20:65:50:B0:BD:BD:B0:16:83:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:d7:37:b4:dc:8f:f2:a6:0b:0b:ff:9e:1e:60:58:3e:dd:ae: 18:27:29:7e:59:86:bb:33:fe:92:5c:67:83:6a:79:78:8f:e1: e3:27:d5:47:12:e9:30:87:3e:32:39:91:f5:7a:36:c4:90:b2: 0a:b6:42:a3:74:de:fe:07:13:d2:9d:f1:a3:4a:5a:ab:61:c7: bd:43:28:fe:03:f0:cb:4b:77:d1:8f:99:00:70:71:8e:17:2b: 2a:02:52:5b:1e:7c:73:4b:77:88:7c:13:35:28:c2:6e:90:8e: 82:8a:d3:0e:d6:3c:ed:26:98:ef:d5:81:41:12:97:83:52:b3: ce:0b:fb:51:3e:d8:cd:3c:c4:01:24:b0:21:b0:a6:c8:48:a3: a6:b3:b7:59:ec:40:4e:d4:88:4b:fc:de:c2:e2:cd:85:ad:96: 16:2e:ca:71:76:5d:f3:2d:7f:7e:0e:95:ac:b4:71:46:23:97: f6:8f:61:15:dc:09:ce:c6:1d:cb:e9:3d:19:85:69:ef:9e:89: cd:cd:00:18:68:26:25:88:f0:20:34:27:a5:0a:d7:8e:0d:4d: 62:35:4b:ce:37:0a:e5:00:84:4c:0b:a9:91:59:9d:87:1e:80: a3:9c:b4:04:65:e1:2f:73:2a:fe:b8:bd:9f:14:6a:58:de:08: 88:eb:94:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWnLyT4lcbyKYydFvnEgNcJyzx6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUwNjlFMzBDRjdCMjRDREQ3N0MyMDY1NTBCMEJEQkRC MDE2ODNBRjAeFw0yNjA1MTIxNjQxMjNaFw0yNjA1MTMxODAxMjNaMDMxMTAvBgNV BAMTKDZFQzExRUJDRTlGOEI0OUNDMUY5Q0NGQUUxMkFCOTU2NDM2NzU1NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1YG3uZln4CSFUnILXa5C+/E9g WGZvY2vTwCp5r4eP3jIwg1xzksIGCkgVxtt6OjhR+Moi2+2Co33ThRb5CIaG+N/X f3G5S7mtKriAzs3iYJXwSueq+Ni+0NbXpwfm3T+2Bqh0FBDRUKdfZaTZeQIC7lc4 2m6PR1dEN8k9zJuqm+w425gNLdiZlpxEdwGZPYakjt1+jGayuXdR3VE4186ZIP9b SDSEQzGMqM5M8qlDe6JM/OyrXaXatCIOe5CdAG5XenKZtSyIyGFOvoLhqfz4qtFo nI1Cc7PkwCoa0gmYHovsJFQvIAeqtmQmYSZsmCmfZqWhk4pFm2Ed/0EBWYMRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbsEevOn4tJzB+cz64Sq5VkNnVV8wHwYDVR0j BBgwFoAULgaeMM97JM3XfCBlULC9vbAWg68wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzUyMWU1ZWUtNTg4Mi00OTQzLWI0MDgtNDNjMzc1ODJmYjBiLzAvMkUwNjlFMzBD RjdCMjRDREQ3N0MyMDY1NTBCMEJEQkRCMDE2ODNBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTA2OUUzMENGN0IyNENERDc3QzIwNjU1MEIwQkRCREIwMTY4 M0FGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzUyMWU1ZWUtNTg4Mi00OTQzLWI0 MDgtNDNjMzc1ODJmYjBiLzAvMkUwNjlFMzBDRjdCMjRDREQ3N0MyMDY1NTBCMEJE QkRCMDE2ODNBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJPXN7Tcj/KmCwv/nh5gWD7drhgnKX5Zhrsz /pJcZ4NqeXiP4eMn1UcS6TCHPjI5kfV6NsSQsgq2QqN03v4HE9Kd8aNKWqthx71D KP4D8MtLd9GPmQBwcY4XKyoCUlsefHNLd4h8EzUowm6QjoKK0w7WPO0mmO/VgUES l4NSs84L+1E+2M08xAEksCGwpshIo6azt1nsQE7UiEv83sLizYWtlhYuynF2XfMt f34Olay0cUYjl/aPYRXcCc7GHcvpPRmFae+eic3NABhoJiWI8CA0J6UK144NTWI1 S843CuUAhEwLqZFZnYcegKOctARl4S9zKv64vZ8UaljeCIjrlDo= -----END CERTIFICATE-----Generated at Tue May 12 22:20:13 2026 by rpki-client