$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft File: 2E714C194A9AD07684B017C191F12805054E1FC8.mft (raw, json) Hash identifier: Li9qAabaqXFrhGiAG2KZ/KTgkO/ZTFENK6YJBJXa/VU= Subject key identifier: 02:DD:DB:77:EF:B3:24:FF:42:D6:EA:E5:FB:A4:F4:67:66:A5:B1:57 Authority key identifier: 2E:71:4C:19:4A:9A:D0:76:84:B0:17:C1:91:F1:28:05:05:4E:1F:C8 Certificate issuer: /CN=2E714C194A9AD07684B017C191F12805054E1FC8 Certificate serial: 42CF8DF8D54E48FCCCB56049BA3DFB7CFD626BDF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft Manifest number: 0E Signing time: Tue 12 May 2026 01:59:53 +0000 Manifest this update: Tue 12 May 2026 01:54:53 +0000 Manifest next update: Wed 13 May 2026 04:39:53 +0000 Files and hashes: 1: 2E714C194A9AD07684B017C191F12805054E1FC8.crl (hash: bbEOANjBnAQogfy1cx1TF+1Ru07ovSXkM6xYIdoqLGo=) 2: 3130332e3136302e3139332e302f32342d3234203d3e20313530353433.roa (hash: pi7opShYJXpPoFXhyGT9aMrMLC59BMPBUsNaZoHvFnY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.crl rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 04:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:cf:8d:f8:d5:4e:48:fc:cc:b5:60:49:ba:3d:fb:7c:fd:62:6b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E714C194A9AD07684B017C191F12805054E1FC8 Validity Not Before: May 12 01:54:53 2026 GMT Not After : May 13 04:39:53 2026 GMT Subject: CN=02DDDB77EFB324FF42D6EAE5FBA4F46766A5B157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d0:c3:33:0b:a5:70:b4:5d:50:97:b3:2c:7a: 82:46:82:96:4b:31:8e:94:ec:0f:dd:07:53:cc:39: 70:fe:92:93:e4:47:8a:5c:ac:5c:65:bb:c0:76:5a: ed:24:a2:bc:17:2e:d3:a0:2d:5e:3c:87:48:26:a4: 81:25:1f:fe:a3:78:a5:29:f6:4c:ce:f3:b4:46:84: 1f:0b:d0:60:11:f8:ac:42:62:d8:64:23:48:01:f5: dc:a4:58:9e:20:6c:79:b0:9b:de:67:1c:d1:86:92: a7:79:4b:b9:48:a7:da:46:0c:c2:b5:49:d1:64:84: 8e:14:8f:c7:1b:62:14:71:97:2c:72:20:6a:f9:12: 05:37:02:48:f8:2e:28:48:3c:41:71:d7:a0:67:38: 33:ed:fa:7a:e5:1a:09:a2:a2:b9:34:30:da:74:56: fc:86:9a:32:6e:a5:fe:eb:d0:48:7c:73:82:6b:35: b8:23:c5:d3:3c:0f:72:f3:41:a1:a2:5b:95:d9:1f: a7:f8:21:c4:65:70:f9:02:97:32:55:f7:42:5b:c8: 8d:4a:2f:d8:fa:58:93:1e:53:f5:6e:9b:f3:60:00: e8:f3:ee:1a:c4:21:fd:c5:20:b9:56:ef:73:0c:d5: cf:ed:b4:86:4f:2d:a4:0e:1b:b7:d0:cc:56:46:4b: 72:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DD:DB:77:EF:B3:24:FF:42:D6:EA:E5:FB:A4:F4:67:66:A5:B1:57 X509v3 Authority Key Identifier: keyid:2E:71:4C:19:4A:9A:D0:76:84:B0:17:C1:91:F1:28:05:05:4E:1F:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:50:2f:52:99:db:a3:11:0c:4e:8a:89:61:bd:86:cb:5f:44: bb:b4:0f:d9:df:83:bd:dd:76:fb:25:0c:1b:a3:43:a0:d9:8a: 0b:00:91:26:ae:f6:21:25:35:c1:5c:af:26:4f:49:c0:bc:6f: 76:7e:e5:6b:ec:6c:86:f5:58:1a:03:85:d3:5e:b1:43:5f:10: 4a:a5:79:15:15:61:89:4f:ad:fe:9a:23:76:d6:98:3d:a1:21: 3f:bd:b6:8b:bd:58:70:49:f6:dc:80:8c:59:f1:80:e2:88:b7: c0:fe:4f:f1:d3:8c:e8:ba:70:89:34:ff:16:ed:91:a0:d9:4f: a9:6b:c9:5b:1d:2e:af:66:0b:8b:14:07:0a:9c:19:c0:4c:60: 06:4d:5c:ef:b8:52:1f:35:31:7f:d6:64:70:c2:e0:b5:5c:5a: f3:26:7e:f9:ea:e9:88:c8:a7:1e:88:ed:26:94:6a:48:d7:c1: 69:49:da:b5:9b:90:d4:2b:fb:95:de:b5:3a:19:29:8f:3a:4e: 73:54:04:ee:82:d4:10:b8:35:6d:05:ab:de:fc:04:3b:99:b9: b2:52:b4:79:e0:42:1e:17:98:12:df:f7:2c:a9:61:4a:94:c8: 04:2d:38:14:54:2d:11:d9:e7:d3:74:49:fb:d0:90:27:c3:f4: 11:ff:80:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQs+N+NVOSPzMtWBJuj37fP1ia98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU3MTRDMTk0QTlBRDA3Njg0QjAxN0MxOTFGMTI4MDUw NTRFMUZDODAeFw0yNjA1MTIwMTU0NTNaFw0yNjA1MTMwNDM5NTNaMDMxMTAvBgNV BAMTKDAyREREQjc3RUZCMzI0RkY0MkQ2RUFFNUZCQTRGNDY3NjZBNUIxNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCA0MMzC6VwtF1Ql7MseoJGgpZL MY6U7A/dB1PMOXD+kpPkR4pcrFxlu8B2Wu0korwXLtOgLV48h0gmpIElH/6jeKUp 9kzO87RGhB8L0GAR+KxCYthkI0gB9dykWJ4gbHmwm95nHNGGkqd5S7lIp9pGDMK1 SdFkhI4Uj8cbYhRxlyxyIGr5EgU3Akj4LihIPEFx16BnODPt+nrlGgmiork0MNp0 VvyGmjJupf7r0Eh8c4JrNbgjxdM8D3LzQaGiW5XZH6f4IcRlcPkClzJV90JbyI1K L9j6WJMeU/Vum/NgAOjz7hrEIf3FILlW73MM1c/ttIZPLaQOG7fQzFZGS3JnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAt3bd++zJP9C1url+6T0Z2alsVcwHwYDVR0j BBgwFoAULnFMGUqa0HaEsBfBkfEoBQVOH8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NiM2IwMGItYWQ3Yi00ODQ5LWIwYjItZTI0OWEyZmE2MDRhLzAvMkU3MTRDMTk0 QTlBRDA3Njg0QjAxN0MxOTFGMTI4MDUwNTRFMUZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTcxNEMxOTRBOUFEMDc2ODRCMDE3QzE5MUYxMjgwNTA1NEUx RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NiM2IwMGItYWQ3Yi00ODQ5LWIw YjItZTI0OWEyZmE2MDRhLzAvMkU3MTRDMTk0QTlBRDA3Njg0QjAxN0MxOTFGMTI4 MDUwNTRFMUZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhQL1KZ26MRDE6KiWG9hstfRLu0D9nfg73d dvslDBujQ6DZigsAkSau9iElNcFcryZPScC8b3Z+5WvsbIb1WBoDhdNesUNfEEql eRUVYYlPrf6aI3bWmD2hIT+9tou9WHBJ9tyAjFnxgOKIt8D+T/HTjOi6cIk0/xbt kaDZT6lryVsdLq9mC4sUBwqcGcBMYAZNXO+4Uh81MX/WZHDC4LVcWvMmfvnq6YjI px6I7SaUakjXwWlJ2rWbkNQr+5XetToZKY86TnNUBO6C1BC4NW0Fq978BDuZubJS tHngQh4XmBLf9yypYUqUyAQtOBRULRHZ59N0SfvQkCfD9BH/gAQ= -----END CERTIFICATE-----Generated at Tue May 12 22:13:26 2026 by rpki-client