$ rpki-client -vvf rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft File: 2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft (raw, json) Hash identifier: EWfXnxEVJNikQv55PD1O25VFaBsy7cP5jS+IfQB/PX4= Subject key identifier: BA:30:98:AD:55:8B:25:92:0F:52:A4:7F:0D:A2:66:0B:84:35:70:E9 Authority key identifier: 2D:FC:5C:3D:38:82:FE:6E:7F:9A:9E:FE:2F:6B:96:55:5F:F5:2D:D7 Certificate issuer: /CN=2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7 Certificate serial: 58ADF5265A9BD55CC5CABB91890CF861010A5FD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:35:09 +0000 Manifest this update: Tue 12 May 2026 15:30:09 +0000 Manifest next update: Wed 13 May 2026 18:04:09 +0000 Files and hashes: 1: 2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl (hash: YGso0OlZA96WkHOnL8KWjvGDyanwBw/S7QT9rFy4nYY=) 2: 3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (hash: KyTDN/npdCxMnf6sB8d1UiCU7Ow9yE5T+dZIKGap4fI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ad:f5:26:5a:9b:d5:5c:c5:ca:bb:91:89:0c:f8:61:01:0a:5f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7 Validity Not Before: May 12 15:30:09 2026 GMT Not After : May 13 18:04:09 2026 GMT Subject: CN=BA3098AD558B25920F52A47F0DA2660B843570E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:01:26:47:08:f2:23:72:c8:32:0e:ae:44:ff: be:66:14:3d:f5:e3:1f:bd:16:bf:9a:5c:45:85:80: 2a:1a:8b:30:22:ca:76:8e:db:30:cd:f9:91:76:31: da:08:c9:18:35:7d:ee:23:5e:f1:e7:5f:1e:56:79: 67:12:92:d1:c3:1e:7f:ad:4a:1b:ff:f4:22:0d:ed: 58:c5:52:71:ac:5d:29:54:8c:c9:6a:c1:26:23:af: 49:ac:87:5e:0a:74:38:25:87:93:c2:ef:86:2e:8b: 41:79:9f:21:fa:b3:2e:28:91:7a:77:8f:da:b9:99: 5f:41:b6:f1:58:76:1c:0d:5d:53:b4:d7:d4:03:64: 97:1f:d0:67:5e:77:f5:de:08:cb:2a:d4:be:82:48: 7d:68:ba:96:10:90:70:3e:ee:f4:fc:b3:64:9a:c1: 93:44:32:82:01:22:af:0b:af:3a:67:af:2e:47:03: c7:99:3d:0d:e6:4c:8f:88:f3:b2:5f:7b:37:bc:d4: 52:f1:97:af:ec:af:27:22:57:d6:e8:d3:9a:fe:cf: b1:6e:84:61:a5:6c:4b:b1:f5:e9:e3:05:ab:f0:e4: a7:27:56:ff:e7:7f:e7:a9:49:28:ed:e3:06:d2:bc: 68:53:84:7e:c0:49:8e:12:2b:95:40:d8:ea:9c:fc: 16:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:30:98:AD:55:8B:25:92:0F:52:A4:7F:0D:A2:66:0B:84:35:70:E9 X509v3 Authority Key Identifier: keyid:2D:FC:5C:3D:38:82:FE:6E:7F:9A:9E:FE:2F:6B:96:55:5F:F5:2D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:72:62:1f:14:46:97:55:5d:09:c7:f8:8f:b7:72:5b:05:43: cc:cc:a7:31:fd:b1:5f:3f:f0:a1:89:74:3e:49:8e:3c:2a:28: 3e:4f:53:ce:38:9b:e7:1d:10:b8:00:cb:14:60:47:3b:c0:ed: 9a:c1:a3:e0:1d:50:a0:00:da:77:3a:4a:63:5d:f2:65:d0:a4: 58:40:ec:47:c8:67:a9:cc:fc:e0:b0:b5:d8:07:9f:c5:a2:06: 13:1d:b4:64:74:15:2c:ff:7e:cc:17:f1:2e:7a:00:20:e8:68: c2:33:14:df:9d:73:47:c2:4e:e6:aa:5f:57:c2:5a:9d:4a:84: 74:5b:d6:a7:ff:d7:e2:e8:89:6b:f7:12:4b:58:9f:fb:40:34: d3:00:d6:30:6e:74:a6:98:c4:af:b7:0f:54:21:7f:52:ea:89: 02:da:e4:78:b2:93:2f:e4:9e:ae:9d:68:2e:e1:36:f5:71:3d: e7:b4:9c:06:9b:ad:93:df:89:64:18:eb:79:1e:42:2a:ec:30: db:30:9a:a2:3b:35:b9:44:2d:b7:11:72:ac:ed:ed:61:a2:0c: 38:3c:06:e4:3e:a2:9f:a7:cd:9b:f4:85:ba:b0:37:53:7d:0a: 45:8f:3e:c7:85:1c:2c:a9:f7:db:24:e0:16:96:4f:6c:ad:29: 95:5e:35:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWK31Jlqb1VzFyruRiQz4YQEKX9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQzVDM0QzODgyRkU2RTdGOUE5RUZFMkY2Qjk2NTU1 RkY1MkRENzAeFw0yNjA1MTIxNTMwMDlaFw0yNjA1MTMxODA0MDlaMDMxMTAvBgNV BAMTKEJBMzA5OEFENTU4QjI1OTIwRjUyQTQ3RjBEQTI2NjBCODQzNTcwRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMASZHCPIjcsgyDq5E/75mFD31 4x+9Fr+aXEWFgCoaizAiynaO2zDN+ZF2MdoIyRg1fe4jXvHnXx5WeWcSktHDHn+t Shv/9CIN7VjFUnGsXSlUjMlqwSYjr0msh14KdDglh5PC74Yui0F5nyH6sy4okXp3 j9q5mV9BtvFYdhwNXVO019QDZJcf0Gded/XeCMsq1L6CSH1oupYQkHA+7vT8s2Sa wZNEMoIBIq8Lrzpnry5HA8eZPQ3mTI+I87Jfeze81FLxl6/sryciV9bo05r+z7Fu hGGlbEux9enjBavw5KcnVv/nf+epSSjt4wbSvGhThH7ASY4SK5VA2Oqc/BYlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUujCYrVWLJZIPUqR/DaJmC4Q1cOkwHwYDVR0j BBgwFoAULfxcPTiC/m5/mp7+L2uWVV/1LdcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVmMDAxM2ItNTlhNi00NzMzLTg5ZjgtMjhmYTNkODg1NzlmLzAvMkRGQzVDM0Qz ODgyRkU2RTdGOUE5RUZFMkY2Qjk2NTU1RkY1MkRENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREZDNUMzRDM4ODJGRTZFN0Y5QTlFRkUyRjZCOTY1NTVGRjUy REQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmVmMDAxM2ItNTlhNi00NzMzLTg5 ZjgtMjhmYTNkODg1NzlmLzAvMkRGQzVDM0QzODgyRkU2RTdGOUE5RUZFMkY2Qjk2 NTU1RkY1MkRENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHByYh8URpdVXQnH+I+3clsFQ8zMpzH9sV8/ 8KGJdD5JjjwqKD5PU844m+cdELgAyxRgRzvA7ZrBo+AdUKAA2nc6SmNd8mXQpFhA 7EfIZ6nM/OCwtdgHn8WiBhMdtGR0FSz/fswX8S56ACDoaMIzFN+dc0fCTuaqX1fC Wp1KhHRb1qf/1+LoiWv3EktYn/tANNMA1jBudKaYxK+3D1Qhf1LqiQLa5Hiyky/k nq6daC7hNvVxPee0nAabrZPfiWQY63keQirsMNswmqI7NblELbcRcqzt7WGiDDg8 BuQ+op+nzZv0hbqwN1N9CkWPPseFHCyp99sk4BaWT2ytKZVeNb0= -----END CERTIFICATE-----Generated at Wed May 13 00:31:17 2026 by rpki-client