$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft File: 2FE1FA7D4DD3388355BABAD73020013D485C168C.mft (raw, json) Hash identifier: 2i+Z2ZoTMAzG4pCt6A3FwjmKkMviyrdaqfaGrgdbwEI= Subject key identifier: 94:7B:E2:E3:AC:2E:60:50:C1:40:CC:37:89:2C:1C:20:59:1A:47:97 Authority key identifier: 2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C Certificate issuer: /CN=2FE1FA7D4DD3388355BABAD73020013D485C168C Certificate serial: 434A52B9085C0DE36CDC45724D203A291F32F778 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:32:26 +0000 Manifest this update: Tue 12 May 2026 06:27:26 +0000 Manifest next update: Wed 13 May 2026 07:00:26 +0000 Files and hashes: 1: 3130332e39352e32322e302f32342d3234203d3e20313530353537.roa (hash: UmfUI05XEmk9hWgPXOd+povgJcvWbtg+6u6rN6Z8bBg=) 2: 3130332e39352e32322e302f32332d3233203d3e20313530353537.roa (hash: aB7QEaSEcJTWbjfIxBku5UcRO6NDRrQsqaho45FCjZI=) 3: 2FE1FA7D4DD3388355BABAD73020013D485C168C.crl (hash: ElD5kXN+GXk7bNywCr89AGZVoGL1NmoMAZuraezJvV8=) 4: 3130332e39352e32332e302f32342d3234203d3e20313530353537.roa (hash: QUvsonqLXdsih84z12pFdTCBAMOMy8pmVg5n4B/zEOQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.crl rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:4a:52:b9:08:5c:0d:e3:6c:dc:45:72:4d:20:3a:29:1f:32:f7:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FE1FA7D4DD3388355BABAD73020013D485C168C Validity Not Before: May 12 06:27:26 2026 GMT Not After : May 13 07:00:26 2026 GMT Subject: CN=947BE2E3AC2E6050C140CC37892C1C20591A4797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:86:70:ee:ed:1e:25:b9:36:5f:10:d5:c8:de: 7f:25:65:ae:1e:b2:c0:15:97:7b:f0:e6:5b:cc:79: 80:c0:07:04:6b:f4:d3:f2:fc:4c:15:7e:7d:89:15: 96:4a:8a:52:24:7d:c4:6a:ab:e0:cd:72:d9:fe:67: 8b:3b:70:ca:cf:e6:a0:a7:40:be:4d:4e:06:3a:7a: 80:5c:ef:40:de:b7:b9:24:ed:c3:2d:e4:09:91:db: 72:0f:9d:fb:32:30:db:a4:fa:e3:ee:d2:35:f5:78: 76:e2:29:71:39:6f:b6:33:87:02:a7:79:4a:b1:e0: 4b:98:0d:90:10:bd:0b:9b:bc:79:d0:e8:e0:23:dc: f5:7d:2d:a1:54:22:af:84:0b:13:a3:19:e0:d8:36: 41:bf:2b:47:f5:43:44:6f:91:ad:f4:0e:05:7f:68: 8e:21:78:37:3a:88:0c:33:11:00:c6:36:1c:c9:1f: d2:b1:88:e1:fe:ba:5e:c4:e9:db:0b:fb:65:d3:ef: 7e:c9:c0:34:de:9d:74:7e:3c:46:8d:d2:5a:0d:5d: d9:7b:c4:b0:a0:10:1a:23:6a:dc:8c:4d:94:79:4a: 40:9b:f9:12:f0:56:ad:77:19:b1:4a:15:4c:57:40: b5:6a:5e:fe:94:f9:0a:9c:1c:3c:33:9b:86:2f:c9: f2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7B:E2:E3:AC:2E:60:50:C1:40:CC:37:89:2C:1C:20:59:1A:47:97 X509v3 Authority Key Identifier: keyid:2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:de:20:9f:7f:a4:8a:f1:70:3b:f6:5c:f5:f4:c3:1c:4f:43: 18:d2:da:24:80:2b:88:69:47:ef:ea:73:bb:0c:3e:64:b6:69: da:57:15:4e:69:d8:82:87:37:86:2c:db:72:04:15:de:cc:6b: 98:f1:f3:0c:0d:59:07:f9:28:93:36:44:cd:ba:af:a6:a1:8f: 01:fe:f9:1d:83:46:bb:71:19:37:d2:01:bf:dc:c0:90:da:09: 7b:f7:59:2c:54:62:b3:5a:42:93:b9:c9:af:3b:5f:cd:10:50: a5:f6:18:81:e9:6a:a2:73:4c:87:fd:b7:54:9c:f3:9d:86:ba: d4:eb:f4:fd:34:b9:a8:1f:fb:58:79:66:76:41:b1:4e:ea:12: ed:ec:11:c9:04:58:9d:a7:98:0f:ad:4c:97:dd:de:fd:20:67: e2:76:cf:c6:65:c7:89:e2:4f:13:87:d5:02:a3:38:29:c1:f8: 32:62:5d:d6:12:84:4b:15:17:07:48:77:01:8b:30:ac:e4:89: 5a:ae:3a:86:a9:77:c4:55:7b:90:d6:7a:ea:23:72:aa:41:1b: 46:44:a0:21:18:4d:20:d0:da:0b:ca:50:64:c1:f8:3a:c8:6d: c1:0b:dc:03:a6:cb:6c:3d:c9:73:bc:74:0e:82:8e:48:a8:b4: 0b:c2:79:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0pSuQhcDeNs3EVyTSA6KR8y93gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZFMUZBN0Q0REQzMzg4MzU1QkFCQUQ3MzAyMDAxM0Q0 ODVDMTY4QzAeFw0yNjA1MTIwNjI3MjZaFw0yNjA1MTMwNzAwMjZaMDMxMTAvBgNV BAMTKDk0N0JFMkUzQUMyRTYwNTBDMTQwQ0MzNzg5MkMxQzIwNTkxQTQ3OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQhnDu7R4luTZfENXI3n8lZa4e ssAVl3vw5lvMeYDABwRr9NPy/EwVfn2JFZZKilIkfcRqq+DNctn+Z4s7cMrP5qCn QL5NTgY6eoBc70Det7kk7cMt5AmR23IPnfsyMNuk+uPu0jX1eHbiKXE5b7YzhwKn eUqx4EuYDZAQvQubvHnQ6OAj3PV9LaFUIq+ECxOjGeDYNkG/K0f1Q0Rvka30DgV/ aI4heDc6iAwzEQDGNhzJH9KxiOH+ul7E6dsL+2XT737JwDTenXR+PEaN0loNXdl7 xLCgEBojatyMTZR5SkCb+RLwVq13GbFKFUxXQLVqXv6U+QqcHDwzm4YvyfI/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlHvi46wuYFDBQMw3iSwcIFkaR5cwHwYDVR0j BBgwFoAUL+H6fU3TOINVurrXMCABPUhcFowwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZkNGY4NjktNGRiNi00YjBhLWFhYjYtY2RlNDdiNDQ3ZDc3LzAvMkZFMUZBN0Q0 REQzMzg4MzU1QkFCQUQ3MzAyMDAxM0Q0ODVDMTY4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkUxRkE3RDRERDMzODgzNTVCQUJBRDczMDIwMDEzRDQ4NUMx NjhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZkNGY4NjktNGRiNi00YjBhLWFh YjYtY2RlNDdiNDQ3ZDc3LzAvMkZFMUZBN0Q0REQzMzg4MzU1QkFCQUQ3MzAyMDAx M0Q0ODVDMTY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELeIJ9/pIrxcDv2XPX0wxxPQxjS2iSAK4hp R+/qc7sMPmS2adpXFU5p2IKHN4Ys23IEFd7Ma5jx8wwNWQf5KJM2RM26r6ahjwH+ +R2DRrtxGTfSAb/cwJDaCXv3WSxUYrNaQpO5ya87X80QUKX2GIHpaqJzTIf9t1Sc 852GutTr9P00uagf+1h5ZnZBsU7qEu3sEckEWJ2nmA+tTJfd3v0gZ+J2z8Zlx4ni TxOH1QKjOCnB+DJiXdYShEsVFwdIdwGLMKzkiVquOoapd8RVe5DWeuojcqpBG0ZE oCEYTSDQ2gvKUGTB+DrIbcEL3AOmy2w9yXO8dA6CjkiotAvCeao= -----END CERTIFICATE-----Generated at Tue May 12 22:52:27 2026 by rpki-client