$ rpki-client -vvf rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft File: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft (raw, json) Hash identifier: Web3/zHbOcpKmY7XsLkdbZb7HBsztCXKQ0Bs0MStwig= Subject key identifier: AC:E4:7B:9F:03:42:39:52:39:E9:6F:5F:BA:BD:01:15:09:4C:F4:22 Authority key identifier: 2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A Certificate issuer: /CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A Certificate serial: 17C1061088B83BE300B8CBE1C48E1F2DE82B6F54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:44:27 +0000 Manifest this update: Tue 12 May 2026 14:39:27 +0000 Manifest next update: Wed 13 May 2026 16:14:27 +0000 Files and hashes: 1: 3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa (hash: VdJ1ZIQnNrJcWKeLJSeBvVO0FNQ/sxBZNurd+uNh3ek=) 2: 3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa (hash: GzkXDWcauMWYNDn5MyFD1nDjKkP9ZpScdykpa6iOEak=) 3: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl (hash: UtGmhPTI1WlbQXTu3idYAahgEcaUT2PzX9bm2XekRj4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c1:06:10:88:b8:3b:e3:00:b8:cb:e1:c4:8e:1f:2d:e8:2b:6f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A Validity Not Before: May 12 14:39:27 2026 GMT Not After : May 13 16:14:27 2026 GMT Subject: CN=ACE47B9F0342395239E96F5FBABD0115094CF422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:86:1f:36:2f:2d:f1:8e:06:03:a8:d7:3d:40: fb:4d:94:83:e0:91:f6:32:92:02:d0:0d:a5:2b:f2: 92:35:b1:ea:4a:37:de:40:8b:70:26:eb:e5:e6:85: 55:f7:8c:e7:32:13:44:1b:f3:c0:d7:61:80:46:77: 20:5e:2d:6d:dd:4f:44:79:a1:1e:33:a4:eb:3c:79: 33:cf:ac:b7:80:96:e8:2a:3f:dc:60:8e:e1:78:b2: d8:30:70:41:31:15:8a:0a:99:98:62:29:51:1f:ef: b9:02:49:be:01:76:44:f6:de:8a:eb:d6:ca:3a:fc: 36:df:39:5b:92:de:08:a2:c0:be:12:df:be:0a:6c: 5b:f2:e7:b9:89:95:ff:17:7f:0b:66:8e:73:3b:3c: 45:10:2a:27:8e:fe:1d:cc:c2:11:a3:d5:f4:ea:38: ce:2d:4a:95:d4:63:53:46:df:11:4a:cb:63:a8:b3: 36:49:48:71:45:96:5b:08:a8:93:da:a6:17:58:4a: e9:e0:05:c4:12:c1:c7:c8:9a:ea:c2:67:c7:3d:0a: 0f:f1:74:de:78:64:9e:8b:ca:01:78:d4:46:59:60: 9b:28:4e:73:da:9b:b3:69:08:34:b4:04:c1:86:95: 43:b3:4b:61:07:2c:a6:b0:75:73:0d:14:26:f7:46: 22:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E4:7B:9F:03:42:39:52:39:E9:6F:5F:BA:BD:01:15:09:4C:F4:22 X509v3 Authority Key Identifier: keyid:2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:08:a3:5f:3a:9e:b0:fd:85:50:4b:bb:7b:31:29:4e:59:fd: 82:40:b5:c2:a4:af:9f:0f:cb:2f:67:66:76:25:fa:bc:5f:ae: b2:89:a9:af:06:d9:1e:f6:1a:bc:94:c6:41:6e:2c:45:9c:3d: bf:33:d0:32:ea:8a:16:2b:30:19:1a:2c:4a:0c:68:07:1b:79: 09:30:04:ba:b4:87:56:63:a2:07:51:f4:86:da:8e:e7:85:0c: 80:60:fa:74:ef:3a:95:b3:88:7d:71:19:67:37:bd:2d:c4:6e: b6:fa:f2:8c:fc:1b:a7:ad:d6:c4:54:a9:0e:ec:08:aa:90:50: 5d:2d:bc:12:25:36:0b:3a:66:98:26:e4:65:b4:a1:be:b2:c9: e7:fe:83:57:02:96:e0:1d:07:65:29:00:3f:1c:3f:ff:73:22: 32:34:e2:7b:b7:41:68:4c:c6:0b:15:5e:32:ed:d7:60:be:1c: 5f:f1:4e:d3:54:41:6a:c0:9e:c1:2c:25:b5:74:36:01:03:e3: 8f:f7:78:b2:51:54:fc:54:a3:df:7b:46:58:ad:81:d5:b7:aa: 63:18:02:7b:67:be:0a:2c:72:72:b8:ff:07:78:ac:05:71:68: 28:d7:c9:7a:f7:2c:e5:d2:3d:39:c2:39:de:69:49:15:a1:81: 8b:fe:fb:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF8EGEIi4O+MAuMvhxI4fLegrb1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJGQzc0MUFBMTc3MUZDNUNFNzc5RTRDRjg4QTVDM0FG NTJGOEU3QTAeFw0yNjA1MTIxNDM5MjdaFw0yNjA1MTMxNjE0MjdaMDMxMTAvBgNV BAMTKEFDRTQ3QjlGMDM0MjM5NTIzOUU5NkY1RkJBQkQwMTE1MDk0Q0Y0MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHhh82Ly3xjgYDqNc9QPtNlIPg kfYykgLQDaUr8pI1sepKN95Ai3Am6+XmhVX3jOcyE0Qb88DXYYBGdyBeLW3dT0R5 oR4zpOs8eTPPrLeAlugqP9xgjuF4stgwcEExFYoKmZhiKVEf77kCSb4BdkT23orr 1so6/DbfOVuS3giiwL4S374KbFvy57mJlf8XfwtmjnM7PEUQKieO/h3MwhGj1fTq OM4tSpXUY1NG3xFKy2OoszZJSHFFllsIqJPaphdYSungBcQSwcfImurCZ8c9Cg/x dN54ZJ6LygF41EZZYJsoTnPam7NpCDS0BMGGlUOzS2EHLKawdXMNFCb3RiJTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrOR7nwNCOVI56W9fur0BFQlM9CIwHwYDVR0j BBgwFoAUK/x0GqF3H8XOd55M+IpcOvUvjnowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWRiZDNhNTAtODMyZS00MTI3LTk0ZTEtNDhhY2UxNjRjZjI2LzAvMkJGQzc0MUFB MTc3MUZDNUNFNzc5RTRDRjg4QTVDM0FGNTJGOEU3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQkZDNzQxQUExNzcxRkM1Q0U3NzlFNENGODhBNUMzQUY1MkY4 RTdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWRiZDNhNTAtODMyZS00MTI3LTk0 ZTEtNDhhY2UxNjRjZjI2LzAvMkJGQzc0MUFBMTc3MUZDNUNFNzc5RTRDRjg4QTVD M0FGNTJGOEU3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcIo186nrD9hVBLu3sxKU5Z/YJAtcKkr58P yy9nZnYl+rxfrrKJqa8G2R72GryUxkFuLEWcPb8z0DLqihYrMBkaLEoMaAcbeQkw BLq0h1ZjogdR9IbajueFDIBg+nTvOpWziH1xGWc3vS3Ebrb68oz8G6et1sRUqQ7s CKqQUF0tvBIlNgs6Zpgm5GW0ob6yyef+g1cCluAdB2UpAD8cP/9zIjI04nu3QWhM xgsVXjLt12C+HF/xTtNUQWrAnsEsJbV0NgED44/3eLJRVPxUo997RlitgdW3qmMY AntnvgoscnK4/wd4rAVxaCjXyXr3LOXSPTnCOd5pSRWhgYv++xg= -----END CERTIFICATE-----Generated at Tue May 12 22:20:12 2026 by rpki-client