$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft File: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft (raw, json) Hash identifier: bd/MCIjXGnWCH6gMmbysFKj91oBPBHGFlGRJBnzR6vk= Subject key identifier: ED:62:9D:DC:A0:EA:C3:7F:FF:64:8C:5D:2D:21:19:D7:DD:91:E4:F9 Authority key identifier: 2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 Certificate issuer: /CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Certificate serial: 1DF5774A79EC4DA2DBDE8B47EBE52F7F89684056 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:15:27 +0000 Manifest this update: Tue 12 May 2026 22:10:27 +0000 Manifest next update: Wed 13 May 2026 22:23:27 +0000 Files and hashes: 1: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl (hash: DlM5yOlvs5rI17YRG7om5hLdih/A4Ffg4J32HtJNAKU=) 2: 3130332e3133312e3130372e302f32342d3234203d3e20313338313139.roa (hash: cKDgVoSVAFZfl4hgrIHwI1J4tBbCiwmqXmahxpGLx8I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f5:77:4a:79:ec:4d:a2:db:de:8b:47:eb:e5:2f:7f:89:68:40:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Validity Not Before: May 12 22:10:27 2026 GMT Not After : May 13 22:23:27 2026 GMT Subject: CN=ED629DDCA0EAC37FFF648C5D2D2119D7DD91E4F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e5:1f:27:2b:1c:fe:eb:e2:e9:f7:44:94:da: 98:92:64:9f:00:0b:94:5c:41:0b:b9:b9:b4:35:9a: ea:b2:c9:8a:c8:15:63:37:d1:df:95:ab:b8:ee:50: 0f:5d:3d:ae:90:1f:73:e7:f0:01:69:52:13:6e:a2: 5d:d8:36:ea:9a:74:b7:de:d2:c3:4e:e6:cc:3f:23: 96:89:0d:cf:72:e8:77:2d:ad:4a:ae:4c:e6:8b:92: 9c:3b:5f:85:c4:11:63:12:d0:31:54:e2:d9:3a:67: e0:27:5f:4f:4b:05:af:50:c8:1d:dd:20:b7:e5:22: 4f:3b:56:2e:e1:0c:d1:aa:fc:4c:a8:c2:12:fc:60: 98:3c:93:a3:ad:bf:16:38:e2:6a:2b:93:e6:82:4d: ec:42:73:09:39:95:23:6e:03:73:e7:9e:c1:7e:c7: 14:1a:68:88:83:58:ad:14:b7:78:3b:60:73:70:78: 35:be:bb:63:f8:05:da:22:82:f0:13:ff:1e:72:ff: ca:2e:c4:e5:76:ff:5f:9f:23:ea:ef:68:c5:15:07: 08:95:70:b4:cd:df:87:ce:e9:a9:7b:95:73:72:f3: 21:b4:98:f9:d6:09:8c:29:df:0d:cc:fe:e6:37:d8: e8:35:83:46:21:4d:c4:ab:99:43:28:63:ce:84:23: 92:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:62:9D:DC:A0:EA:C3:7F:FF:64:8C:5D:2D:21:19:D7:DD:91:E4:F9 X509v3 Authority Key Identifier: keyid:2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:5a:6b:4e:13:cd:cf:aa:79:56:01:04:6f:d3:d0:cc:75:8b: 28:1b:e2:60:bc:c5:b8:21:f8:a4:41:82:fd:d1:eb:7f:cc:48: f0:14:79:d7:06:b1:da:7c:fb:01:ce:53:7e:bd:f5:19:be:01: 4b:4e:6f:63:a6:dd:bb:06:e6:15:15:1a:f8:4d:c7:17:3e:d2: f0:0d:ee:e3:e1:8b:30:87:61:71:78:ba:61:4c:2e:22:08:cc: 3a:89:17:64:e8:79:0b:94:32:56:ba:16:75:65:0f:f0:d1:ee: 66:10:e5:3a:c5:1b:60:39:b1:67:2e:e9:8e:9c:eb:a0:f7:95: b1:01:7f:bf:dd:dc:2c:b4:47:49:19:4a:ec:2d:ae:8a:2b:65: 22:e8:b2:2b:c3:c4:1c:50:4f:ef:1e:ed:7a:b2:16:41:96:57: 50:57:6f:4c:95:96:c1:f3:c6:24:61:82:18:71:6a:66:ba:f3: ec:87:4c:4f:5e:62:ce:ab:26:dc:d1:e3:b8:fa:0e:9d:36:ea: b6:dc:3d:4d:44:c0:69:47:db:bc:db:83:bd:85:14:3c:21:be: 8b:d0:35:f0:7b:43:2e:a5:34:e2:27:8c:dc:74:a0:d7:06:45: d3:1f:7a:84:3f:52:55:d2:a6:6b:3f:55:7a:65:4a:b5:4a:5c: 2d:38:49:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHfV3SnnsTaLb3otH6+Uvf4loQFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFFMTRBQkJENTE2MUJBMENBREIzQzQwQzFGOURGQ0JD OUNGMzQ3MDAeFw0yNjA1MTIyMjEwMjdaFw0yNjA1MTMyMjIzMjdaMDMxMTAvBgNV BAMTKEVENjI5RERDQTBFQUMzN0ZGRjY0OEM1RDJEMjExOUQ3REQ5MUU0RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN5R8nKxz+6+Lp90SU2piSZJ8A C5RcQQu5ubQ1muqyyYrIFWM30d+Vq7juUA9dPa6QH3Pn8AFpUhNuol3YNuqadLfe 0sNO5sw/I5aJDc9y6HctrUquTOaLkpw7X4XEEWMS0DFU4tk6Z+AnX09LBa9QyB3d ILflIk87Vi7hDNGq/EyowhL8YJg8k6OtvxY44mork+aCTexCcwk5lSNuA3PnnsF+ xxQaaIiDWK0Ut3g7YHNweDW+u2P4BdoigvAT/x5y/8ouxOV2/1+fI+rvaMUVBwiV cLTN34fO6al7lXNy8yG0mPnWCYwp3w3M/uY32Og1g0YhTcSrmUMoY86EI5JpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7WKd3KDqw3//ZIxdLSEZ192R5PkwHwYDVR0j BBgwFoAUKuFKu9UWG6DK2zxAwfnfy8nPNHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkyNDM5NTAtM2ZkZi00OWFiLWJmZGMtZjU4NjQ1MzcwNGM2LzAvMkFFMTRBQkJE NTE2MUJBMENBREIzQzQwQzFGOURGQ0JDOUNGMzQ3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUUxNEFCQkQ1MTYxQkEwQ0FEQjNDNDBDMUY5REZDQkM5Q0Yz NDcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkyNDM5NTAtM2ZkZi00OWFiLWJm ZGMtZjU4NjQ1MzcwNGM2LzAvMkFFMTRBQkJENTE2MUJBMENBREIzQzQwQzFGOURG Q0JDOUNGMzQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhaa04Tzc+qeVYBBG/T0Mx1iygb4mC8xbgh +KRBgv3R63/MSPAUedcGsdp8+wHOU3699Rm+AUtOb2Om3bsG5hUVGvhNxxc+0vAN 7uPhizCHYXF4umFMLiIIzDqJF2ToeQuUMla6FnVlD/DR7mYQ5TrFG2A5sWcu6Y6c 66D3lbEBf7/d3Cy0R0kZSuwtroorZSLosivDxBxQT+8e7XqyFkGWV1BXb0yVlsHz xiRhghhxama68+yHTE9eYs6rJtzR47j6Dp026rbcPU1EwGlH27zbg72FFDwhvovQ NfB7Qy6lNOInjNx0oNcGRdMfeoQ/UlXSpms/VXplSrVKXC04Sbs= -----END CERTIFICATE-----Generated at Wed May 13 02:18:52 2026 by rpki-client