$ rpki-client -vvf rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft File: 2BF94227A09D96F51AE8819B28CA3696003CBC60.mft (raw, json) Hash identifier: Ydezoy60QoU8mapl9GygHYo+sJJI2WfN5s4LDA7gZIg= Subject key identifier: EA:E6:10:18:9D:FC:98:90:A4:A4:D0:4F:48:B4:28:10:98:A5:07:35 Authority key identifier: 2B:F9:42:27:A0:9D:96:F5:1A:E8:81:9B:28:CA:36:96:00:3C:BC:60 Certificate issuer: /CN=2BF94227A09D96F51AE8819B28CA3696003CBC60 Certificate serial: 219B86947490F9F822FEEAEFB95FBA6A5E1155C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft Manifest number: 0E Signing time: Tue 12 May 2026 18:23:41 +0000 Manifest this update: Tue 12 May 2026 18:18:41 +0000 Manifest next update: Wed 13 May 2026 19:43:41 +0000 Files and hashes: 1: 2BF94227A09D96F51AE8819B28CA3696003CBC60.crl (hash: rZIFFiZ4fkznMwvQLrPo4d4swIR8UnIvNud3N2QvfZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.crl rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:9b:86:94:74:90:f9:f8:22:fe:ea:ef:b9:5f:ba:6a:5e:11:55:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BF94227A09D96F51AE8819B28CA3696003CBC60 Validity Not Before: May 12 18:18:41 2026 GMT Not After : May 13 19:43:41 2026 GMT Subject: CN=EAE610189DFC9890A4A4D04F48B4281098A50735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:99:f6:fd:a9:38:ea:8c:e5:b9:41:74:17:f8: 7f:1e:ac:b9:fc:07:5c:bf:4d:f4:b0:c9:79:91:39: fb:55:1f:de:e4:09:98:2b:95:eb:73:22:53:f9:cf: d1:ff:13:11:63:8a:2a:26:a4:46:ca:91:b0:76:bf: 19:4c:15:5b:3c:ec:a6:b9:92:ac:23:e2:c2:09:5f: f6:87:39:b5:95:cc:cd:ec:9d:b8:42:1e:f7:7a:15: 29:d8:01:67:8c:a1:3a:d1:71:20:e1:0c:67:d9:99: ce:9b:5d:4f:8b:e8:ea:57:4d:ac:d5:76:79:5b:43: e4:5f:52:6d:65:ad:95:d5:18:97:63:d0:7f:45:f8: 9b:37:90:06:c3:18:38:da:93:dd:ba:1b:35:f1:25: 2a:55:e9:18:03:06:1d:8f:41:2b:29:7f:02:fa:7f: b0:27:6b:1f:2e:ab:97:70:b2:5f:4b:78:38:b9:dc: d4:19:79:13:b1:84:7b:fa:5d:f0:d1:78:c1:93:6c: 06:b9:0d:e2:1f:65:2e:1b:e9:46:4c:ed:47:3b:15: 1b:54:44:e2:3f:12:3d:aa:68:98:eb:72:b3:ef:87: d0:60:cf:e7:d3:37:f0:20:bf:58:8e:23:49:0b:b5: d5:70:55:b0:a0:d0:6a:4c:38:39:b6:08:10:b7:84: e9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E6:10:18:9D:FC:98:90:A4:A4:D0:4F:48:B4:28:10:98:A5:07:35 X509v3 Authority Key Identifier: keyid:2B:F9:42:27:A0:9D:96:F5:1A:E8:81:9B:28:CA:36:96:00:3C:BC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:a5:5c:fd:49:a3:e9:a6:30:72:9c:9b:d2:a2:e1:fd:9f:4e: 86:ff:d7:bf:38:81:40:05:20:fa:7a:34:51:1d:33:7e:b5:03: b5:07:99:2c:b2:99:bc:54:b7:d4:66:7a:71:94:56:ed:86:5a: 03:92:c8:78:6c:d4:1d:35:85:c0:db:0d:92:33:c3:e0:6e:0a: 10:76:13:45:a6:42:14:29:d9:46:72:4d:51:bb:82:f0:9b:ff: 9d:97:fa:44:c7:22:6b:48:2e:19:2b:3a:61:47:6a:ad:9f:f6: 48:00:f8:4a:79:ee:b0:62:f3:10:93:5f:b4:23:fa:6b:85:af: 92:36:e2:13:79:13:e2:27:fd:d0:01:f9:94:6f:a1:18:ec:4a: 2a:e8:cd:99:42:a8:71:6c:19:b9:7f:4b:16:6f:ca:95:93:d5: 51:e3:70:d2:b1:bf:3a:46:ef:fb:2e:9f:13:6c:dc:51:5c:c6: d2:93:e1:92:3e:87:d0:83:40:5e:25:2c:00:3c:6d:40:a6:c9: c7:c3:76:26:00:bd:05:cb:0d:91:e7:16:65:23:28:68:ae:8a: 68:1f:bd:f3:fc:4f:e7:cb:c4:7d:a4:89:bc:90:73:aa:f9:07: dc:bb:00:95:98:1d:1a:a2:18:1e:c4:7b:e6:9e:e9:22:c6:38: e0:d0:82:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIZuGlHSQ+fgi/urvuV+6al4RVcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJGOTQyMjdBMDlEOTZGNTFBRTg4MTlCMjhDQTM2OTYw MDNDQkM2MDAeFw0yNjA1MTIxODE4NDFaFw0yNjA1MTMxOTQzNDFaMDMxMTAvBgNV BAMTKEVBRTYxMDE4OURGQzk4OTBBNEE0RDA0RjQ4QjQyODEwOThBNTA3MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGmfb9qTjqjOW5QXQX+H8erLn8 B1y/TfSwyXmROftVH97kCZgrletzIlP5z9H/ExFjiiompEbKkbB2vxlMFVs87Ka5 kqwj4sIJX/aHObWVzM3snbhCHvd6FSnYAWeMoTrRcSDhDGfZmc6bXU+L6OpXTazV dnlbQ+RfUm1lrZXVGJdj0H9F+Js3kAbDGDjak926GzXxJSpV6RgDBh2PQSspfwL6 f7Anax8uq5dwsl9LeDi53NQZeROxhHv6XfDReMGTbAa5DeIfZS4b6UZM7Uc7FRtU ROI/Ej2qaJjrcrPvh9Bgz+fTN/Agv1iOI0kLtdVwVbCg0GpMODm2CBC3hOkBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6uYQGJ38mJCkpNBPSLQoEJilBzUwHwYDVR0j BBgwFoAUK/lCJ6CdlvUa6IGbKMo2lgA8vGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmFkZmNiNDQtYWU3YS00NDIzLWFlN2QtMDg2NDhiZjFkZWIxLzAvMkJGOTQyMjdB MDlEOTZGNTFBRTg4MTlCMjhDQTM2OTYwMDNDQkM2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQkY5NDIyN0EwOUQ5NkY1MUFFODgxOUIyOENBMzY5NjAwM0NC QzYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmFkZmNiNDQtYWU3YS00NDIzLWFl N2QtMDg2NDhiZjFkZWIxLzAvMkJGOTQyMjdBMDlEOTZGNTFBRTg4MTlCMjhDQTM2 OTYwMDNDQkM2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmlXP1Jo+mmMHKcm9Ki4f2fTob/1784gUAF IPp6NFEdM361A7UHmSyymbxUt9RmenGUVu2GWgOSyHhs1B01hcDbDZIzw+BuChB2 E0WmQhQp2UZyTVG7gvCb/52X+kTHImtILhkrOmFHaq2f9kgA+Ep57rBi8xCTX7Qj +muFr5I24hN5E+In/dAB+ZRvoRjsSirozZlCqHFsGbl/SxZvypWT1VHjcNKxvzpG 7/sunxNs3FFcxtKT4ZI+h9CDQF4lLAA8bUCmycfDdiYAvQXLDZHnFmUjKGiuimgf vfP8T+fLxH2kibyQc6r5B9y7AJWYHRqiGB7Ee+ae6SLGOODQgrE= -----END CERTIFICATE-----Generated at Wed May 13 02:49:57 2026 by rpki-client