$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft File: 2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft (raw, json) Hash identifier: vYjdmVA2dkdjC/G5dmMbWY8wws7pxcJpPg7UoQV9xsY= Subject key identifier: 0B:59:10:93:DE:95:6E:CD:72:89:2F:25:48:AE:20:2F:36:CA:7F:F2 Authority key identifier: 2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74 Certificate issuer: /CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274 Certificate serial: 01ACA4F2AB14620546E02F96E1EFC61276462C2D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft Manifest number: 0E Signing time: Tue 12 May 2026 13:33:33 +0000 Manifest this update: Tue 12 May 2026 13:28:33 +0000 Manifest next update: Wed 13 May 2026 14:14:33 +0000 Files and hashes: 1: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: iezQTzMxWp3Coix5fz9eGS/c/h2ulbbwObi3kCUHkW4=) 2: 2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl (hash: zGoDsPMgav+NtOuuD425cjcsfxTXfb/4uRqY+SefqVU=) 3: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: V2s2v2zyv88cwsslpUJdds/b+6l6rcgW5NHb7V5SYWY=) 4: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: 1IjnkMC3ga8KbKp+1i4junuLJGtmG26jgGjukZ4rmxk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ac:a4:f2:ab:14:62:05:46:e0:2f:96:e1:ef:c6:12:76:46:2c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274 Validity Not Before: May 12 13:28:33 2026 GMT Not After : May 13 14:14:33 2026 GMT Subject: CN=0B591093DE956ECD72892F2548AE202F36CA7FF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a7:a6:d3:f7:ea:9b:55:5f:23:a0:8d:b4:c6: 1e:4d:6a:4d:bc:c8:af:f8:64:1c:6c:4d:29:d6:32: 6b:36:6d:cc:8c:81:25:2f:17:0e:10:04:6c:61:dc: 40:07:b1:b2:e7:93:a5:4f:cb:57:c3:98:8a:2d:08: 9f:9a:e3:f0:5a:97:7d:aa:4c:65:1d:c0:7e:96:ef: 04:6f:c2:03:49:1e:16:0b:22:32:0a:89:a7:69:9e: 9b:c6:f2:2f:c6:cd:a5:38:8e:8b:ea:c6:9a:c1:88: 23:2f:a9:33:f0:af:1a:b4:b2:1c:6c:ef:66:fb:7a: 0f:2f:dc:70:df:63:ad:df:87:50:f9:d2:2f:01:8f: 92:bc:bc:9b:01:26:34:8b:a4:91:c0:78:f0:07:a8: e7:9e:10:d1:5f:77:bf:45:c1:16:5a:d8:0c:5d:ed: 07:ce:a9:a0:1b:f4:83:1c:c7:74:95:15:93:0b:62: 8d:e3:b7:b0:0b:5a:92:45:0b:e5:3e:96:7d:c9:4b: 33:16:3a:08:0d:9f:5d:f2:5b:a1:3e:04:32:e5:13: dd:3e:42:27:16:ef:3b:38:95:5b:fd:56:8a:32:35: e6:55:a9:1d:77:69:6a:f6:21:fe:91:ca:31:31:9c: c6:9f:15:4e:2e:54:3f:25:de:da:75:65:e9:eb:70: f9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:59:10:93:DE:95:6E:CD:72:89:2F:25:48:AE:20:2F:36:CA:7F:F2 X509v3 Authority Key Identifier: keyid:2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:cd:b8:e1:57:98:75:b2:75:48:e2:3c:39:22:79:e7:80:f9: 1e:bd:26:50:0a:81:50:c9:3e:6a:09:4f:bb:f5:a7:9f:19:80: ef:6f:74:d5:21:4d:b6:ac:e7:2d:23:c0:0a:61:80:7b:d7:6e: 3c:f6:0e:a6:9a:b1:84:5f:50:a2:f3:32:7a:db:21:48:31:98: 2f:6d:d7:f4:1d:6c:eb:76:b3:32:d7:66:4c:95:96:b3:96:5d: 7e:23:dd:ac:3b:bb:dd:c1:ad:4f:af:d6:46:33:d5:f9:05:98: aa:c7:f8:2b:f2:cb:f7:97:49:2f:f5:15:48:db:da:71:9a:b6: c8:96:70:83:9e:09:a0:1a:06:5b:c0:07:1d:02:7f:8a:55:b6: 77:30:e2:8e:24:6a:85:e8:26:99:0c:56:43:ab:6d:50:35:37: 4d:6b:83:3a:03:a7:04:94:55:f9:07:f8:4f:e7:c7:8a:a6:6e: 2b:f2:f1:15:b9:4f:86:cd:1d:24:82:23:c5:ad:81:33:06:04: 40:bb:45:ee:8e:d3:3c:05:84:0b:e3:b5:cb:d1:aa:f8:9e:a1: fd:e6:b6:2d:33:9f:cb:ed:d3:5a:2a:44:2a:e1:e6:33:4c:83: 40:32:44:55:0a:ef:71:eb:21:c4:4f:03:db:a6:99:6f:ff:b2: 7a:ca:be:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAayk8qsUYgVG4C+W4e/GEnZGLC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2RjE2RTgwQkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0QjBE N0Q5QzI3NDAeFw0yNjA1MTIxMzI4MzNaFw0yNjA1MTMxNDE0MzNaMDMxMTAvBgNV BAMTKDBCNTkxMDkzREU5NTZFQ0Q3Mjg5MkYyNTQ4QUUyMDJGMzZDQTdGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCip6bT9+qbVV8joI20xh5Nak28 yK/4ZBxsTSnWMms2bcyMgSUvFw4QBGxh3EAHsbLnk6VPy1fDmIotCJ+a4/Bal32q TGUdwH6W7wRvwgNJHhYLIjIKiadpnpvG8i/GzaU4jovqxprBiCMvqTPwrxq0shxs 72b7eg8v3HDfY63fh1D50i8Bj5K8vJsBJjSLpJHAePAHqOeeENFfd79FwRZa2Axd 7QfOqaAb9IMcx3SVFZMLYo3jt7ALWpJFC+U+ln3JSzMWOggNn13yW6E+BDLlE90+ QicW7zs4lVv9VooyNeZVqR13aWr2If6RyjExnMafFU4uVD8l3tp1ZenrcPm/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC1kQk96Vbs1yiS8lSK4gLzbKf/IwHwYDVR0j BBgwFoAUKm8W6Av9x7TWeXcm+4/UsNfZwnQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E0NjM2MGQtNjYyYi00ZjdkLWJiMTctZDg2MDgyMTUyNDcxLzAvMkE2RjE2RTgw QkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0QjBEN0Q5QzI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTZGMTZFODBCRkRDN0I0RDY3OTc3MjZGQjhGRDRCMEQ3RDlD Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvMkE2RjE2RTgwQkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0 QjBEN0Q5QzI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLNuOFXmHWydUjiPDkieeeA+R69JlAKgVDJ PmoJT7v1p58ZgO9vdNUhTbas5y0jwAphgHvXbjz2DqaasYRfUKLzMnrbIUgxmC9t 1/QdbOt2szLXZkyVlrOWXX4j3aw7u93BrU+v1kYz1fkFmKrH+Cvyy/eXSS/1FUjb 2nGatsiWcIOeCaAaBlvABx0Cf4pVtncw4o4kaoXoJpkMVkOrbVA1N01rgzoDpwSU VfkH+E/nx4qmbivy8RW5T4bNHSSCI8WtgTMGBEC7Re6O0zwFhAvjtcvRqvieof3m ti0zn8vt01oqRCrh5jNMg0AyRFUK73HrIcRPA9ummW//snrKvjw= -----END CERTIFICATE-----Generated at Wed May 13 00:34:00 2026 by rpki-client