$ rpki-client -vvf rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft File: 2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft (raw, json) Hash identifier: 2Cv80bLpuWzEjWqVmt3ry0/I8/81oUy6/+pDIAtfr2s= Subject key identifier: B7:06:24:4C:41:8F:F3:15:49:D3:14:03:56:73:F2:71:61:EF:E6:BE Authority key identifier: 2D:30:C3:00:58:7F:6D:81:BE:9B:55:44:3E:A8:EE:94:22:9F:CF:34 Certificate issuer: /CN=2D30C300587F6D81BE9B55443EA8EE94229FCF34 Certificate serial: 551EF3B82AA89C1DE5E60D5CA62CD0F13F56FC05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:09:58 +0000 Manifest this update: Tue 12 May 2026 19:04:58 +0000 Manifest next update: Wed 13 May 2026 20:29:58 +0000 Files and hashes: 1: 2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl (hash: LOUGZT9G83LT2HXn6Ifp4IermVKe7f0CK9wDeKg0H4o=) 2: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: tFodUbzYC2MyevsY+1U3r+nqHy3x7yy2dunKYq9vZuc=) 3: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: /HZ9PgBcY1v+LICUOzB+p9dmjd1y9vMbbZwrBhVjk44=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:1e:f3:b8:2a:a8:9c:1d:e5:e6:0d:5c:a6:2c:d0:f1:3f:56:fc:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D30C300587F6D81BE9B55443EA8EE94229FCF34 Validity Not Before: May 12 19:04:58 2026 GMT Not After : May 13 20:29:58 2026 GMT Subject: CN=B706244C418FF31549D314035673F27161EFE6BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a0:da:ed:00:83:d5:2c:13:3f:bf:85:b4:29: f8:fe:d9:98:c3:2f:65:26:76:24:04:a3:c9:5f:18: e6:ca:0e:e8:e7:93:7c:34:ae:b1:a0:3b:84:0a:a5: 2d:de:ee:50:5a:c1:f6:a3:0f:77:5d:3b:51:b5:28: ed:cc:72:87:eb:11:f6:fc:fe:48:5a:97:46:a2:9d: 8b:1f:e0:f4:4b:5d:80:9c:f6:20:48:a3:cd:a3:8d: 54:35:d6:b1:9c:8a:a1:7b:25:6d:8f:5f:e6:f0:8a: e1:7e:29:66:f0:eb:05:47:79:f3:85:96:8d:c8:2c: 88:8d:16:02:66:23:59:91:10:b1:1e:53:60:28:b0: 82:bf:a7:09:c7:32:41:63:2a:ca:d4:12:a9:b5:8b: 1b:93:25:00:69:59:7c:b6:5e:e6:22:c7:e7:05:fb: e9:82:03:64:9d:2c:48:cf:7b:65:14:6b:1c:e8:b9: 7c:4d:4a:bf:8d:3a:35:0e:70:02:38:5e:e0:69:85: e8:4b:69:a3:82:61:f6:bc:8f:36:55:fa:d4:82:1d: db:09:91:41:9c:f2:45:5a:4f:dd:57:22:d8:2c:13: d9:e8:dd:65:bf:c7:77:6c:4f:c4:48:cb:5e:31:66: 99:49:df:f9:a2:0f:b0:da:3c:bb:3f:74:cd:bc:77: 6d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:06:24:4C:41:8F:F3:15:49:D3:14:03:56:73:F2:71:61:EF:E6:BE X509v3 Authority Key Identifier: keyid:2D:30:C3:00:58:7F:6D:81:BE:9B:55:44:3E:A8:EE:94:22:9F:CF:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:16:92:d1:98:b0:b6:16:70:84:8a:8b:44:07:3c:c2:3d:de: c7:11:09:68:c4:f9:af:61:31:e1:35:19:ed:59:b7:4f:0b:db: 96:94:02:01:79:6a:69:bb:34:6d:6d:08:2a:4d:9f:4b:82:57: b1:da:91:da:74:fd:fd:9c:81:a3:82:83:69:3b:85:37:43:8d: 2a:ef:37:66:f1:7e:e2:7d:0f:cd:43:42:dd:9b:ba:5e:c1:76: 1a:fa:a7:2b:9c:c9:c1:7c:a5:30:49:ca:a9:84:9b:78:38:2d: 55:66:3f:17:24:94:58:06:e3:d1:24:0f:42:c8:cc:78:3c:0f: f7:37:8d:90:fb:c6:b8:2c:fb:63:4c:62:b0:71:18:e2:a3:6a: 85:48:40:f7:93:fe:23:0a:44:44:85:f0:77:66:a4:4d:db:c6: 18:6d:60:31:05:4b:bf:c7:f1:5d:c6:2b:a9:2f:10:1b:be:e4: 59:bb:a1:4f:52:5e:9b:03:2a:68:4a:ef:24:b0:f3:a2:82:53: 8e:55:83:ae:99:26:f1:51:1a:81:8f:9e:78:ed:9c:8a:83:90: 50:65:af:c4:af:1d:a9:66:52:d2:6d:f9:ea:84:cc:e4:dc:a1: 48:73:21:19:4c:d1:fc:37:ff:67:69:a4:6d:39:0b:14:7f:a7: 29:a3:c0:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVR7zuCqonB3l5g1cpizQ8T9W/AUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQzMEMzMDA1ODdGNkQ4MUJFOUI1NTQ0M0VBOEVFOTQy MjlGQ0YzNDAeFw0yNjA1MTIxOTA0NThaFw0yNjA1MTMyMDI5NThaMDMxMTAvBgNV BAMTKEI3MDYyNDRDNDE4RkYzMTU0OUQzMTQwMzU2NzNGMjcxNjFFRkU2QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkoNrtAIPVLBM/v4W0Kfj+2ZjD L2UmdiQEo8lfGObKDujnk3w0rrGgO4QKpS3e7lBawfajD3ddO1G1KO3McofrEfb8 /khal0ainYsf4PRLXYCc9iBIo82jjVQ11rGciqF7JW2PX+bwiuF+KWbw6wVHefOF lo3ILIiNFgJmI1mRELEeU2AosIK/pwnHMkFjKsrUEqm1ixuTJQBpWXy2XuYix+cF ++mCA2SdLEjPe2UUaxzouXxNSr+NOjUOcAI4XuBphehLaaOCYfa8jzZV+tSCHdsJ kUGc8kVaT91XItgsE9no3WW/x3dsT8RIy14xZplJ3/miD7DaPLs/dM28d20pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtwYkTEGP8xVJ0xQDVnPycWHv5r4wHwYDVR0j BBgwFoAULTDDAFh/bYG+m1VEPqjulCKfzzQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTRkY2VmNjUtNWRlMy00MTI5LWFjMjctNzcwNmQ3MjY2MDAxLzAvMkQzMEMzMDA1 ODdGNkQ4MUJFOUI1NTQ0M0VBOEVFOTQyMjlGQ0YzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDMwQzMwMDU4N0Y2RDgxQkU5QjU1NDQzRUE4RUU5NDIyOUZD RjM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMkQzMEMzMDA1ODdGNkQ4MUJFOUI1NTQ0M0VBOEVF OTQyMjlGQ0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwWktGYsLYWcISKi0QHPMI93scRCWjE+a9h MeE1Ge1Zt08L25aUAgF5amm7NG1tCCpNn0uCV7Hakdp0/f2cgaOCg2k7hTdDjSrv N2bxfuJ9D81DQt2bul7Bdhr6pyucycF8pTBJyqmEm3g4LVVmPxcklFgG49EkD0LI zHg8D/c3jZD7xrgs+2NMYrBxGOKjaoVIQPeT/iMKRESF8HdmpE3bxhhtYDEFS7/H 8V3GK6kvEBu+5Fm7oU9SXpsDKmhK7ySw86KCU45Vg66ZJvFRGoGPnnjtnIqDkFBl r8SvHalmUtJt+eqEzOTcoUhzIRlM0fw3/2dppG05CxR/pymjwNo= -----END CERTIFICATE-----Generated at Wed May 13 04:16:24 2026 by rpki-client