$ rpki-client -vvf rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft File: 2C1233B548C07507C6EF58E2A03DD8309F820753.mft (raw, json) Hash identifier: frfGx7myZajkncTkn6uNtAal5tnEZtX6VKFGJSeGmEE= Subject key identifier: D5:0F:0E:ED:CE:00:14:67:04:27:F8:E8:5D:68:4C:0F:36:61:42:C5 Authority key identifier: 2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53 Certificate issuer: /CN=2C1233B548C07507C6EF58E2A03DD8309F820753 Certificate serial: 6DF98521D99190ED133709D3F344CBB59A3AEFB8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:46:41 +0000 Manifest this update: Tue 12 May 2026 10:41:41 +0000 Manifest next update: Wed 13 May 2026 10:55:41 +0000 Files and hashes: 1: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: bvFzrT6armN3+NSh25eEAeVsS6vGdsFIsCLC0MUnl3s=) 2: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: /6iiyBTTzA+gJYo5W8sFnueJYX/K6dQcso0XDUc2u/0=) 3: 2C1233B548C07507C6EF58E2A03DD8309F820753.crl (hash: uPulOEW18RaeuAZoJZozI6gktTzWUxCjbZrtEs/Wwrc=) 4: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 0GUMhzS+5NIthW1wvl37lL5c5ztTRVnrHP+oCvOX4MA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f9:85:21:d9:91:90:ed:13:37:09:d3:f3:44:cb:b5:9a:3a:ef:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C1233B548C07507C6EF58E2A03DD8309F820753 Validity Not Before: May 12 10:41:41 2026 GMT Not After : May 13 10:55:41 2026 GMT Subject: CN=D50F0EEDCE0014670427F8E85D684C0F366142C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:66:4e:7c:df:50:d5:7d:69:0b:ba:a3:10:99: dc:87:d9:e8:3b:5c:bb:b5:1d:fe:7e:51:75:41:d9: 65:c0:b4:36:0f:e9:b7:db:14:9c:fe:43:02:81:b7: 28:a6:e4:a7:de:00:22:81:8b:79:aa:fd:fe:02:6f: 2c:05:31:95:91:1c:da:11:72:6e:8e:fa:5e:cb:ba: f3:fa:7c:e3:c4:74:34:c9:60:e8:99:74:c8:7f:02: 3a:b0:67:e2:f5:f5:97:ba:1b:ee:63:f2:57:7a:b2: db:da:47:b7:ca:e0:ee:9e:d4:a9:3f:e1:f1:7e:c3: f1:0a:c6:ab:e8:53:04:33:be:87:39:39:88:16:02: 28:60:74:36:d4:da:e1:b2:de:19:36:26:3b:60:24: 04:d1:be:3f:e8:20:db:46:43:30:25:fa:e8:a2:9e: a0:08:8b:2c:14:34:22:f7:36:c7:f0:f8:93:0e:0f: 1e:ba:c9:88:0f:28:df:6d:4a:63:d0:53:a7:d7:46: 68:1e:08:5e:2b:c9:da:cf:57:ae:82:d5:d8:2e:31: 02:1a:27:d2:d2:ea:f3:a0:37:f8:92:0f:3a:b5:a8: b9:21:63:87:64:2b:c4:89:11:86:2c:52:01:6b:66: d2:cd:62:39:99:f0:16:3e:9f:03:86:d6:f1:b8:3c: 46:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0F:0E:ED:CE:00:14:67:04:27:F8:E8:5D:68:4C:0F:36:61:42:C5 X509v3 Authority Key Identifier: keyid:2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ea:d7:96:f6:08:e2:0c:6a:42:a8:ca:6b:7a:a5:c9:00:8c: 04:00:88:8e:a2:5a:48:f6:59:ff:89:7c:3d:06:3c:e5:e1:56: e4:03:52:3c:0d:d7:02:23:7e:90:f8:11:50:a9:0e:4a:33:7f: d3:85:69:5b:ae:1e:fe:e5:06:20:1f:63:ad:0d:93:e6:2a:e0: d6:02:93:f0:d8:fd:89:6b:b7:da:11:77:a0:ef:e5:c4:39:04: 7f:ab:6e:d3:d4:8e:9e:4e:4a:c2:7c:d2:ca:59:1f:c9:37:ea: fc:dd:d8:11:34:d2:d5:96:ef:89:79:9d:5a:47:35:ef:41:22: 53:7a:dd:69:bf:90:32:ca:d6:71:b8:4f:24:7f:e9:7d:4c:ae: e9:73:08:67:3b:45:5a:1f:58:9a:bd:3c:cf:65:df:cf:88:b2: b4:4f:1b:ef:c3:45:b9:6b:c1:c6:94:9e:cf:e3:a0:86:9d:6b: d7:a2:70:bc:ab:a1:d9:36:32:b3:3b:8a:6b:0c:83:10:69:5b: 3a:96:de:63:69:39:d0:c6:83:4a:02:f5:1c:70:2c:11:a1:63: cf:d2:a9:ef:13:9b:ff:a7:a9:4c:7c:db:bd:80:87:2c:59:b4: 5e:4e:c7:2b:12:48:97:99:a0:48:65:14:d0:e6:c1:ac:cd:90: b7:d9:f8:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbfmFIdmRkO0TNwnT80TLtZo677gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMxMjMzQjU0OEMwNzUwN0M2RUY1OEUyQTAzREQ4MzA5 RjgyMDc1MzAeFw0yNjA1MTIxMDQxNDFaFw0yNjA1MTMxMDU1NDFaMDMxMTAvBgNV BAMTKEQ1MEYwRUVEQ0UwMDE0NjcwNDI3RjhFODVENjg0QzBGMzY2MTQyQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpZk5831DVfWkLuqMQmdyH2eg7 XLu1Hf5+UXVB2WXAtDYP6bfbFJz+QwKBtyim5KfeACKBi3mq/f4CbywFMZWRHNoR cm6O+l7LuvP6fOPEdDTJYOiZdMh/AjqwZ+L19Ze6G+5j8ld6stvaR7fK4O6e1Kk/ 4fF+w/EKxqvoUwQzvoc5OYgWAihgdDbU2uGy3hk2JjtgJATRvj/oINtGQzAl+uii nqAIiywUNCL3Nsfw+JMODx66yYgPKN9tSmPQU6fXRmgeCF4rydrPV66C1dguMQIa J9LS6vOgN/iSDzq1qLkhY4dkK8SJEYYsUgFrZtLNYjmZ8BY+nwOG1vG4PEYrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Q8O7c4AFGcEJ/joXWhMDzZhQsUwHwYDVR0j BBgwFoAULBIztUjAdQfG71jioD3YMJ+CB1MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTFlOTQyNDMtODdmMC00MjZmLWE5Y2EtNGMxOWVkYjA2YjQyLzAvMkMxMjMzQjU0 OEMwNzUwN0M2RUY1OEUyQTAzREQ4MzA5RjgyMDc1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQzEyMzNCNTQ4QzA3NTA3QzZFRjU4RTJBMDNERDgzMDlGODIw NzUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5 Y2EtNGMxOWVkYjA2YjQyLzAvMkMxMjMzQjU0OEMwNzUwN0M2RUY1OEUyQTAzREQ4 MzA5RjgyMDc1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALq15b2COIMakKoymt6pckAjAQAiI6iWkj2 Wf+JfD0GPOXhVuQDUjwN1wIjfpD4EVCpDkozf9OFaVuuHv7lBiAfY60Nk+Yq4NYC k/DY/Ylrt9oRd6Dv5cQ5BH+rbtPUjp5OSsJ80spZH8k36vzd2BE00tWW74l5nVpH Ne9BIlN63Wm/kDLK1nG4TyR/6X1MrulzCGc7RVofWJq9PM9l38+IsrRPG+/DRblr wcaUns/joIada9eicLyrodk2MrM7imsMgxBpWzqW3mNpOdDGg0oC9RxwLBGhY8/S qe8Tm/+nqUx8272AhyxZtF5OxysSSJeZoEhlFNDmwazNkLfZ+DA= -----END CERTIFICATE-----Generated at Tue May 12 22:13:15 2026 by rpki-client