$ rpki-client -vvf rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft File: 2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft (raw, json) Hash identifier: bgvheZ2A716+sEqF8sUZfr5C+bNE+JMuquHmajxjxFk= Subject key identifier: 5E:4A:E2:80:75:0F:3D:39:6B:99:69:CC:31:70:49:49:EE:6E:83:AD Authority key identifier: 2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32 Certificate issuer: /CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32 Certificate serial: 3C3FE0F51DACD123B15016FA4CACB45F2397509D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft Manifest number: 0F Signing time: Wed 13 May 2026 05:08:30 +0000 Manifest this update: Wed 13 May 2026 05:03:30 +0000 Manifest next update: Thu 14 May 2026 06:03:30 +0000 Files and hashes: 1: 2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl (hash: V+vekjYer7DlQgFcAsvIrrvjlbnwPVKNx3meSLdwDWo=) 2: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: rpaRQ6pLcg3h8lZWS5mZP3KVaWJuOAbOO/JXcmWKPAY=) 3: 3130332e35322e36302e302f32342d3234203d3e20313339343237.roa (hash: oRYTuCJLLdMWXGYdD1e1WCx/FrIV0BiHCyH2sk8DrtM=) 4: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: Ks9YnRvxTe5fupbuzzjnQ7H1k8qTkpLLIojCNDLV9tI=) 5: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: WTrF0cDS2UOT2PvqICS4rHLAPEa2DituaEKy6TilvQo=) 6: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: gQZiPSYPZragbcbOQFwUKBcBf5Wr0XRio1UQ/GfXKcY=) 7: 3130332e35322e36302e302f32332d3233203d3e20313339343237.roa (hash: wZpRBXgVxARx5THQhkidt3uYEJCBivcYi7zf6PFHOe8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:3f:e0:f5:1d:ac:d1:23:b1:50:16:fa:4c:ac:b4:5f:23:97:50:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32 Validity Not Before: May 13 05:03:30 2026 GMT Not After : May 14 06:03:30 2026 GMT Subject: CN=5E4AE280750F3D396B9969CC31704949EE6E83AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:43:d7:0c:60:b3:81:83:db:8a:06:d6:fe:48: 30:11:fa:4a:a4:8b:dc:2d:3f:d9:1d:00:fa:52:43: 66:68:58:60:7d:38:96:b1:f5:9b:ba:97:b2:ff:86: f9:fa:b9:dd:f2:3e:61:52:0d:1f:de:0e:2d:ca:fa: 50:0c:ab:5b:d3:a8:1b:00:6d:83:b3:4f:ac:20:cf: 4c:12:f0:7f:36:17:f2:fc:f5:07:89:9a:3a:ec:7c: 12:6b:d9:66:4d:98:22:b7:62:35:c2:b5:bd:32:2e: b2:29:d4:a1:65:e6:32:b4:60:2d:1c:ab:a1:23:9c: e6:a2:38:b8:36:12:7c:38:9a:d4:a3:5c:54:65:8a: a3:e1:ca:31:b9:32:0f:89:34:e7:e1:23:63:09:fb: 4c:53:45:e4:45:80:73:ba:38:0b:41:04:01:c2:db: 0f:df:20:1c:12:12:ea:84:78:2d:00:7b:90:a9:af: e5:4c:47:5f:d7:7b:1c:c2:fc:34:c5:85:b3:2d:59: 69:04:83:a1:8e:c0:0b:8f:c7:68:ae:24:75:a4:ae: 24:37:25:ac:0f:55:7a:d9:4b:8b:83:a9:12:db:a4: b1:c5:25:e5:f7:7e:df:0e:aa:64:69:8d:f6:31:9d: fc:16:71:69:7b:cd:2d:dc:41:97:79:b3:4f:e9:45: 50:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4A:E2:80:75:0F:3D:39:6B:99:69:CC:31:70:49:49:EE:6E:83:AD X509v3 Authority Key Identifier: keyid:2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f9:a5:ea:03:13:1e:6a:1b:72:f7:86:62:44:80:01:82:59: 1b:c1:a3:e1:c6:18:0b:7f:e6:84:cc:ec:64:9b:b8:e6:eb:40: a7:da:9b:77:92:27:da:48:0b:57:3d:54:fc:15:b0:95:7b:a5: b7:76:5f:8f:57:2b:7d:6c:a1:ee:9e:5e:f4:ca:16:53:5b:4b: f6:0b:92:81:78:1e:a1:09:47:22:f7:28:43:18:e6:d5:fc:04: 63:a1:70:9a:51:e6:b6:6f:fd:21:36:a0:a9:cd:ab:ad:f0:3a: a6:a3:b9:d9:60:bc:99:8d:a8:95:62:c6:22:a2:77:c6:d3:88: 84:5c:e0:ad:4f:64:01:f0:fa:c6:79:00:c5:00:13:32:d6:26: 26:90:95:49:98:2f:d5:20:a7:4a:a3:78:64:6d:32:bc:97:79: c6:e8:58:3c:87:fc:0c:00:37:92:c4:97:e2:9a:dc:4a:3f:74: b3:1b:0e:19:74:f2:94:5c:be:83:91:51:84:fe:69:b8:02:cd: 93:cc:ff:98:69:e2:e1:66:ee:1d:45:41:10:f1:3e:c7:d5:d9: 25:1e:65:10:b2:3b:15:0d:5b:e4:03:25:de:bf:22:ba:be:33: 45:2d:92:91:72:90:6c:57:05:44:bf:f9:9c:1d:c9:fb:ae:41: 2d:a9:9a:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPD/g9R2s0SOxUBb6TKy0XyOXUJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCRDgxMjk1RUEzRkEzODY3MDgyMDcyRDFCREU0MUNC RkIzRkIzMjAeFw0yNjA1MTMwNTAzMzBaFw0yNjA1MTQwNjAzMzBaMDMxMTAvBgNV BAMTKDVFNEFFMjgwNzUwRjNEMzk2Qjk5NjlDQzMxNzA0OTQ5RUU2RTgzQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOQ9cMYLOBg9uKBtb+SDAR+kqk i9wtP9kdAPpSQ2ZoWGB9OJax9Zu6l7L/hvn6ud3yPmFSDR/eDi3K+lAMq1vTqBsA bYOzT6wgz0wS8H82F/L89QeJmjrsfBJr2WZNmCK3YjXCtb0yLrIp1KFl5jK0YC0c q6EjnOaiOLg2Enw4mtSjXFRliqPhyjG5Mg+JNOfhI2MJ+0xTReRFgHO6OAtBBAHC 2w/fIBwSEuqEeC0Ae5Cpr+VMR1/XexzC/DTFhbMtWWkEg6GOwAuPx2iuJHWkriQ3 JawPVXrZS4uDqRLbpLHFJeX3ft8OqmRpjfYxnfwWcWl7zS3cQZd5s0/pRVChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXkrigHUPPTlrmWnMMXBJSe5ug60wHwYDVR0j BBgwFoAULL2BKV6j+jhnCCBy0b3kHL+z+zIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDYxYjhjY2MtNmMyMi00MjRlLTk2MTQtOGFiOGFkMjg4NDljLzAvMkNCRDgxMjk1 RUEzRkEzODY3MDgyMDcyRDFCREU0MUNCRkIzRkIzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0JEODEyOTVFQTNGQTM4NjcwODIwNzJEMUJERTQxQ0JGQjNG QjMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDYxYjhjY2MtNmMyMi00MjRlLTk2 MTQtOGFiOGFkMjg4NDljLzAvMkNCRDgxMjk1RUEzRkEzODY3MDgyMDcyRDFCREU0 MUNCRkIzRkIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/5peoDEx5qG3L3hmJEgAGCWRvBo+HGGAt/ 5oTM7GSbuObrQKfam3eSJ9pIC1c9VPwVsJV7pbd2X49XK31soe6eXvTKFlNbS/YL koF4HqEJRyL3KEMY5tX8BGOhcJpR5rZv/SE2oKnNq63wOqajudlgvJmNqJVixiKi d8bTiIRc4K1PZAHw+sZ5AMUAEzLWJiaQlUmYL9Ugp0qjeGRtMryXecboWDyH/AwA N5LEl+Ka3Eo/dLMbDhl08pRcvoORUYT+abgCzZPM/5hp4uFm7h1FQRDxPsfV2SUe ZRCyOxUNW+QDJd6/Irq+M0UtkpFykGxXBUS/+ZwdyfuuQS2pmmc= -----END CERTIFICATE-----Generated at Wed May 13 11:46:53 2026 by rpki-client