$ rpki-client -vvf rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft File: 2CE9A084598867F6677FDE09C272DA8D05C480FC.mft (raw, json) Hash identifier: +y/rgfYiy4NLP8JCKSauZkM8e7BHo9QnjcJKsMzdhz8= Subject key identifier: 1F:5F:44:26:C6:69:6C:28:9B:23:24:86:84:52:F0:04:B3:30:E5:4E Authority key identifier: 2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC Certificate issuer: /CN=2CE9A084598867F6677FDE09C272DA8D05C480FC Certificate serial: 5496971E0025A2F4F20D9DE923E68F07115A71DF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:49:49 +0000 Manifest this update: Tue 12 May 2026 04:44:49 +0000 Manifest next update: Wed 13 May 2026 05:50:49 +0000 Files and hashes: 1: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: 7nMz4s5YYhUtNRJIR+ORKIg42vTypWbintD4uEN6yZw=) 2: 2CE9A084598867F6677FDE09C272DA8D05C480FC.crl (hash: gHk0wKljk94i6rVrpnreg5prZB90ZCMUqw7ndGMQNI4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:96:97:1e:00:25:a2:f4:f2:0d:9d:e9:23:e6:8f:07:11:5a:71:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CE9A084598867F6677FDE09C272DA8D05C480FC Validity Not Before: May 12 04:44:49 2026 GMT Not After : May 13 05:50:49 2026 GMT Subject: CN=1F5F4426C6696C289B2324868452F004B330E54E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3d:a6:22:48:0d:04:aa:45:24:dd:83:f6:d0: f0:c3:9c:4a:64:c8:48:2b:62:39:d0:5a:c0:29:62: 68:0e:a9:71:15:a5:a6:10:31:09:0e:71:0a:9c:e1: 25:36:63:52:dd:7e:cb:75:ed:a1:70:a1:6a:39:55: 08:d1:af:1f:f4:2e:bf:f8:3e:e3:64:0c:77:45:26: 7f:e6:a3:da:27:cd:5e:8e:58:3d:87:89:bf:19:c4: 9d:0f:55:5b:b0:74:f1:d6:04:ae:27:6d:2a:23:d7: 58:86:2a:6d:dd:3c:9e:50:47:3a:eb:bc:a4:ab:b4: b6:f6:38:9a:f4:8c:fb:47:df:64:35:b0:0e:44:16: b8:78:70:50:29:ff:ee:7d:e6:76:14:b2:00:9c:69: eb:8a:42:88:21:ef:93:34:fe:3d:90:03:2e:e8:68: 0b:61:9b:c4:03:b4:df:2f:c4:73:fb:16:dd:e2:cc: ca:67:d5:c5:33:6d:b5:5f:39:a4:35:65:de:a7:b2: c1:de:8d:0c:dc:b4:6d:ef:91:36:ff:17:60:48:c3: fc:38:1f:de:59:dd:81:b4:9e:22:c5:40:62:00:e9: a8:35:11:d3:cf:7e:b6:7c:1b:78:a9:ad:62:09:6f: 17:28:55:4d:39:ee:cf:02:27:a7:6b:0b:43:e1:cc: 03:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5F:44:26:C6:69:6C:28:9B:23:24:86:84:52:F0:04:B3:30:E5:4E X509v3 Authority Key Identifier: keyid:2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:54:cf:f2:55:8f:20:0f:b5:1c:7a:0a:5a:79:25:fe:69:ce: 0a:ee:d0:8e:8b:08:84:d9:e7:19:95:00:66:be:a4:e7:05:44: 08:c4:35:37:3a:3a:dd:d6:2a:a8:0a:ee:6b:f7:91:4f:51:c4: 05:75:69:9d:9b:62:23:16:e9:18:74:ca:a2:8e:16:48:78:3e: a2:32:df:3c:4e:27:05:99:31:19:a5:49:9d:31:f9:45:04:ad: 8c:0a:03:5f:d4:62:28:48:2a:56:0b:20:cc:c3:f9:33:40:46: 0b:51:8d:83:e7:9d:78:02:77:90:a3:73:95:a1:79:a6:0f:41: 1c:d8:c1:27:be:2d:7c:d2:07:7e:36:45:53:43:6d:42:d8:4a: 5f:23:77:ff:7a:aa:5b:01:4c:79:06:da:ec:7e:d8:0d:54:3b: 59:03:d4:6e:63:98:39:fd:56:ba:a8:cf:e0:73:4b:ef:49:11: 94:94:ba:32:69:07:3d:30:b9:2b:09:a7:ee:56:c9:78:ae:9d: f3:2d:3b:83:27:b6:4e:35:9b:19:64:39:79:ff:00:80:98:fa: 26:85:51:d5:d6:be:18:c2:0f:8c:db:2d:2e:98:eb:e1:4f:39: 48:f0:8d:3d:5d:fa:99:54:8a:a0:61:5d:7b:40:99:f4:33:56: a9:38:f3:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJaXHgAlovTyDZ3pI+aPBxFacd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNFOUEwODQ1OTg4NjdGNjY3N0ZERTA5QzI3MkRBOEQw NUM0ODBGQzAeFw0yNjA1MTIwNDQ0NDlaFw0yNjA1MTMwNTUwNDlaMDMxMTAvBgNV BAMTKDFGNUY0NDI2QzY2OTZDMjg5QjIzMjQ4Njg0NTJGMDA0QjMzMEU1NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqPaYiSA0EqkUk3YP20PDDnEpk yEgrYjnQWsApYmgOqXEVpaYQMQkOcQqc4SU2Y1Ldfst17aFwoWo5VQjRrx/0Lr/4 PuNkDHdFJn/mo9onzV6OWD2Hib8ZxJ0PVVuwdPHWBK4nbSoj11iGKm3dPJ5QRzrr vKSrtLb2OJr0jPtH32Q1sA5EFrh4cFAp/+595nYUsgCcaeuKQogh75M0/j2QAy7o aAthm8QDtN8vxHP7Ft3izMpn1cUzbbVfOaQ1Zd6nssHejQzctG3vkTb/F2BIw/w4 H95Z3YG0niLFQGIA6ag1EdPPfrZ8G3iprWIJbxcoVU057s8CJ6drC0PhzAMHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH19EJsZpbCibIySGhFLwBLMw5U4wHwYDVR0j BBgwFoAULOmghFmIZ/Znf94JwnLajQXEgPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTliODE1MmUtYWE4Ni00ZDhhLTgxZGEtZTcxMDg2YjI5NTZjLzAvMkNFOUEwODQ1 OTg4NjdGNjY3N0ZERTA5QzI3MkRBOEQwNUM0ODBGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yQ0U5QTA4NDU5ODg2N0Y2Njc3RkRFMDlDMjcyREE4RDA1QzQ4 MEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvMkNFOUEwODQ1OTg4NjdGNjY3N0ZERTA5QzI3MkRB OEQwNUM0ODBGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZUz/JVjyAPtRx6Clp5Jf5pzgru0I6LCITZ 5xmVAGa+pOcFRAjENTc6Ot3WKqgK7mv3kU9RxAV1aZ2bYiMW6Rh0yqKOFkh4PqIy 3zxOJwWZMRmlSZ0x+UUErYwKA1/UYihIKlYLIMzD+TNARgtRjYPnnXgCd5Cjc5Wh eaYPQRzYwSe+LXzSB342RVNDbULYSl8jd/96qlsBTHkG2ux+2A1UO1kD1G5jmDn9 Vrqoz+BzS+9JEZSUujJpBz0wuSsJp+5WyXiunfMtO4Mntk41mxlkOXn/AICY+iaF UdXWvhjCD4zbLS6Y6+FPOUjwjT1d+plUiqBhXXtAmfQzVqk48yM= -----END CERTIFICATE-----Generated at Tue May 12 23:55:19 2026 by rpki-client