$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft File: 2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft (raw, json) Hash identifier: jnjTIGS9lkL2vsHoGRodKlPcZcSCQ7lFGr6RJmqGWzc= Subject key identifier: ED:D1:3A:DC:CA:07:F5:F6:EF:88:D0:67:71:F6:D3:B3:73:B8:2E:86 Authority key identifier: 2A:C4:B9:21:8D:44:A8:AF:6A:89:3D:00:D5:F2:8F:34:AD:B8:3E:ED Certificate issuer: /CN=2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED Certificate serial: 7A8A7072855434B0CDFED35B47D3EC2216418037 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:28:52 +0000 Manifest this update: Tue 12 May 2026 18:23:52 +0000 Manifest next update: Wed 13 May 2026 19:42:52 +0000 Files and hashes: 1: 2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl (hash: Myx+qI3D4Xzn7popeQIfoyFD23yAJiCvBzFJr/HtA4Q=) 2: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: Yu7TLcR1tuusuhDSrYnM4of9BN5qOWkNLvH5+MvtCeE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:8a:70:72:85:54:34:b0:cd:fe:d3:5b:47:d3:ec:22:16:41:80:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED Validity Not Before: May 12 18:23:52 2026 GMT Not After : May 13 19:42:52 2026 GMT Subject: CN=EDD13ADCCA07F5F6EF88D06771F6D3B373B82E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:57:c9:05:09:44:83:bd:13:f1:09:e8:1c: ec:b9:9e:c9:68:d2:73:50:8f:3f:dd:af:3c:8e:a5: f1:06:4d:3d:97:b3:b1:85:08:3a:99:80:1d:f6:b0: 41:8b:3c:04:8e:cb:8b:98:44:af:d7:a5:ad:3a:19: 7f:d5:f7:34:d2:0f:14:93:c1:53:ae:89:a3:4b:77: be:27:6c:98:78:6b:3d:58:1b:46:42:07:a5:4c:48: 4d:5b:73:83:66:b7:fa:a0:34:24:d4:30:2f:1c:ff: c0:4f:32:66:92:9a:b2:64:6b:f2:a9:6f:f4:0a:dd: a4:7c:9c:36:1b:e7:f3:12:e9:7f:6f:e3:9a:40:3b: 12:8c:f6:27:d9:ae:99:55:ea:5a:d8:f4:15:a1:a4: 7a:b3:8d:52:8c:a2:85:bc:fc:66:00:0c:2c:d3:d2: 8e:a1:d4:24:f8:82:bf:e2:97:67:4d:5a:a6:1e:13: cc:0b:4b:3f:14:d3:7d:a1:fb:a3:96:00:b7:0e:47: 6c:4b:8e:c5:de:90:0c:0f:6a:58:8e:14:b7:e1:85: 1c:05:0a:a8:90:d9:17:28:59:23:a5:fb:b9:49:50: 3c:94:30:f8:20:14:35:42:c5:e1:4d:61:58:28:48: 45:b7:b1:df:76:ce:86:7f:cb:bd:60:ea:c6:2c:df: 49:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D1:3A:DC:CA:07:F5:F6:EF:88:D0:67:71:F6:D3:B3:73:B8:2E:86 X509v3 Authority Key Identifier: keyid:2A:C4:B9:21:8D:44:A8:AF:6A:89:3D:00:D5:F2:8F:34:AD:B8:3E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:8f:20:e1:e7:16:20:62:59:44:5f:40:8f:be:79:f8:dd:88: 3a:5e:f5:a4:4b:87:d5:a9:22:0b:1e:4e:7e:81:4a:a3:7b:ed: c9:61:b6:c8:14:4e:74:80:c5:8f:3c:27:f8:5c:cb:29:38:bb: d0:db:33:61:e4:d3:5f:55:f4:70:6d:ef:e1:3f:85:cb:7d:a7: 76:fa:b9:d4:fe:d9:57:39:79:91:f4:71:66:09:ee:e2:5c:f4: 07:1b:68:72:ab:a2:ea:7c:90:00:d9:37:95:de:96:2d:b9:59: d0:36:5c:08:c2:f0:04:81:0e:2d:bd:23:23:e2:64:d0:b4:94: cb:d0:c5:7f:08:fd:95:d6:dd:0f:b8:9e:44:57:76:73:e3:ab: 8d:21:6f:8b:56:8e:71:d3:3b:6a:cb:dd:2f:b6:88:ec:12:e8: 8c:76:e3:d8:33:9b:e5:f2:0b:d8:0e:2a:f9:20:e9:aa:00:73: bb:28:bd:99:27:74:2a:2b:0a:15:9b:01:08:4a:9c:1d:13:7c: 6b:df:de:92:6e:31:1e:51:b8:c8:e7:99:34:fd:52:ef:d7:8e: 0d:b1:39:16:1e:81:ae:0a:b2:21:47:cf:59:15:53:cc:e6:96: bc:cf:8c:b0:52:9a:51:3b:fe:43:b9:be:55:d2:df:4f:1b:d6: a0:3d:cf:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeopwcoVUNLDN/tNbR9PsIhZBgDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFDNEI5MjE4RDQ0QThBRjZBODkzRDAwRDVGMjhGMzRB REI4M0VFRDAeFw0yNjA1MTIxODIzNTJaFw0yNjA1MTMxOTQyNTJaMDMxMTAvBgNV BAMTKEVERDEzQURDQ0EwN0Y1RjZFRjg4RDA2NzcxRjZEM0IzNzNCODJFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFA1fJBQlEg70T8QnoHOy5nslo 0nNQjz/drzyOpfEGTT2Xs7GFCDqZgB32sEGLPASOy4uYRK/Xpa06GX/V9zTSDxST wVOuiaNLd74nbJh4az1YG0ZCB6VMSE1bc4Nmt/qgNCTUMC8c/8BPMmaSmrJka/Kp b/QK3aR8nDYb5/MS6X9v45pAOxKM9ifZrplV6lrY9BWhpHqzjVKMooW8/GYADCzT 0o6h1CT4gr/il2dNWqYeE8wLSz8U032h+6OWALcOR2xLjsXekAwPaliOFLfhhRwF CqiQ2RcoWSOl+7lJUDyUMPggFDVCxeFNYVgoSEW3sd92zoZ/y71g6sYs30kdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7dE63MoH9fbviNBncfbTs3O4LoYwHwYDVR0j BBgwFoAUKsS5IY1EqK9qiT0A1fKPNK24Pu0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4NmNiNWQtZjA3ZC00MjZhLThlNWUtYTc3YTk3OGRkMmVlLzAvMkFDNEI5MjE4 RDQ0QThBRjZBODkzRDAwRDVGMjhGMzRBREI4M0VFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUM0QjkyMThENDRBOEFGNkE4OTNEMDBENUYyOEYzNEFEQjgz RUVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvMkFDNEI5MjE4RDQ0QThBRjZBODkzRDAwRDVGMjhG MzRBREI4M0VFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+PIOHnFiBiWURfQI++efjdiDpe9aRLh9Wp IgseTn6BSqN77clhtsgUTnSAxY88J/hcyyk4u9DbM2Hk019V9HBt7+E/hct9p3b6 udT+2Vc5eZH0cWYJ7uJc9AcbaHKroup8kADZN5Xeli25WdA2XAjC8ASBDi29IyPi ZNC0lMvQxX8I/ZXW3Q+4nkRXdnPjq40hb4tWjnHTO2rL3S+2iOwS6Ix249gzm+Xy C9gOKvkg6aoAc7sovZkndCorChWbAQhKnB0TfGvf3pJuMR5RuMjnmTT9Uu/Xjg2x ORYega4KsiFHz1kVU8zmlrzPjLBSmlE7/kO5vlXS308b1qA9z8Q= -----END CERTIFICATE-----Generated at Tue May 12 22:47:14 2026 by rpki-client