$ rpki-client -vvf rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft File: 2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft (raw, json) Hash identifier: JwKJHbHIGv11ufjxv2jQhl8HA+ltOT7/gIaK6dL5Zuw= Subject key identifier: 05:CC:50:7C:13:AB:C2:07:8C:6B:FC:76:59:1C:D4:FD:EF:3B:6B:B9 Authority key identifier: 2C:A6:27:0F:A0:99:DB:2B:77:ED:B7:EA:A9:30:40:FF:23:6B:21:4B Certificate issuer: /CN=2CA6270FA099DB2B77EDB7EAA93040FF236B214B Certificate serial: 6FDEE8F041A19687EBB47B7FDD8F7F07E451E07C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:46:05 +0000 Manifest this update: Tue 12 May 2026 09:41:05 +0000 Manifest next update: Wed 13 May 2026 12:01:05 +0000 Files and hashes: 1: 3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (hash: 7n3FY8Iu2mTaPEdpSsiUuLrwQ3K9YP1KBkJ8ERWrHmg=) 2: 3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (hash: RYdUas2TasB0Egv36O3FoGBWixKmz+f1qKRhr6wdPhI=) 3: 2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl (hash: MN1mhOY9GGZohxLRqHjiy7cSrwZ1OQWyKhALhdR+u4o=) 4: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (hash: 5yASRqMJGpH3BlgDiF4qbtYdpHoRGPLyhQdyV1pz60w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:de:e8:f0:41:a1:96:87:eb:b4:7b:7f:dd:8f:7f:07:e4:51:e0:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA6270FA099DB2B77EDB7EAA93040FF236B214B Validity Not Before: May 12 09:41:05 2026 GMT Not After : May 13 12:01:05 2026 GMT Subject: CN=05CC507C13ABC2078C6BFC76591CD4FDEF3B6BB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d1:9b:a4:7c:b4:b3:c7:31:60:53:d6:c2:43: 58:47:81:16:49:5e:c2:a6:b2:d8:c8:71:6b:b0:e7: b8:08:0d:4e:94:98:e3:53:dc:ac:8f:35:6a:c5:ad: 82:11:5c:e2:a5:58:7a:c0:84:db:a0:3c:04:26:42: f2:1e:ce:d7:5f:49:89:01:64:bb:86:b9:aa:82:3a: 24:3d:5d:77:d8:20:af:c7:c7:01:31:6f:57:e2:d8: 0c:13:9e:67:7b:e3:38:bd:82:56:39:c5:b5:ac:5f: e7:b8:74:9d:71:b6:a5:e2:83:5e:4a:3c:d9:b5:36: 7c:10:66:9b:19:38:1c:47:ba:c9:25:db:35:20:a1: 78:fa:18:b2:80:4e:8d:92:f9:2b:1c:4e:a6:07:18: 6e:7f:e9:cf:46:1e:38:de:33:1d:32:e0:2b:41:60: 8e:5b:a3:4c:8a:3f:42:07:2f:0f:4f:34:ec:8f:02: c8:90:4e:a9:89:c8:61:6c:ea:41:e1:87:f1:4b:0a: f9:a6:47:f0:45:37:f6:1a:b6:42:03:24:3a:73:e5: 10:05:50:b4:b6:1a:85:dd:43:34:fe:a0:f4:a4:13: 59:58:4f:cd:c8:28:ba:1b:71:ce:18:71:75:ce:c9: c1:ce:e7:f0:4b:36:23:05:ff:8f:a0:d4:8c:a2:c5: fc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CC:50:7C:13:AB:C2:07:8C:6B:FC:76:59:1C:D4:FD:EF:3B:6B:B9 X509v3 Authority Key Identifier: keyid:2C:A6:27:0F:A0:99:DB:2B:77:ED:B7:EA:A9:30:40:FF:23:6B:21:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:59:c7:2c:09:d0:51:e4:a2:b4:d7:94:b1:40:43:f3:e7:97: 28:19:02:8e:a8:5b:e5:e8:1a:89:45:c2:44:3c:a8:b3:4e:31: e6:12:0e:b8:f7:f0:3c:8f:ed:78:5c:7f:b0:81:b6:f4:1b:17: 71:ac:f7:d7:6f:5f:bc:dc:d6:bf:95:04:0b:09:9d:7a:4f:dd: f9:fe:ef:d5:a5:95:cb:2b:ab:82:81:c4:12:3e:58:3e:46:83: 03:9f:44:23:75:b7:0b:f0:98:22:c1:55:43:02:94:ee:2c:fe: 3d:a8:55:76:93:8b:d4:80:ab:a0:49:ed:af:ff:b0:d2:bd:41: 6a:91:53:82:c8:a9:56:e4:00:54:82:cc:84:be:e8:06:19:5d: 82:3f:34:60:6b:34:25:2d:f7:8e:f6:d1:45:f1:55:61:43:99: 2c:bb:86:81:f6:59:6c:a3:2e:16:e8:25:61:c6:ed:97:9a:77: 8a:bd:f7:02:b7:09:41:65:09:9b:e3:a0:99:6d:2b:96:6f:17: a3:b1:a1:ed:b9:9a:d3:44:ae:a4:ea:1b:66:26:c2:bf:85:9d: c5:0b:58:56:36:e0:63:63:ac:a7:eb:05:f7:eb:f7:63:4e:26: 87:2c:d7:1e:78:1d:8e:e7:ec:68:97:75:7a:32:7c:a1:85:c8: 8a:db:1c:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb97o8EGhlofrtHt/3Y9/B+RR4HwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNjI3MEZBMDk5REIyQjc3RURCN0VBQTkzMDQwRkYy MzZCMjE0QjAeFw0yNjA1MTIwOTQxMDVaFw0yNjA1MTMxMjAxMDVaMDMxMTAvBgNV BAMTKDA1Q0M1MDdDMTNBQkMyMDc4QzZCRkM3NjU5MUNENEZERUYzQjZCQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj0ZukfLSzxzFgU9bCQ1hHgRZJ XsKmstjIcWuw57gIDU6UmONT3KyPNWrFrYIRXOKlWHrAhNugPAQmQvIeztdfSYkB ZLuGuaqCOiQ9XXfYIK/HxwExb1fi2AwTnmd74zi9glY5xbWsX+e4dJ1xtqXig15K PNm1NnwQZpsZOBxHuskl2zUgoXj6GLKATo2S+SscTqYHGG5/6c9GHjjeMx0y4CtB YI5bo0yKP0IHLw9PNOyPAsiQTqmJyGFs6kHhh/FLCvmmR/BFN/YatkIDJDpz5RAF ULS2GoXdQzT+oPSkE1lYT83IKLobcc4YcXXOycHO5/BLNiMF/4+g1IyixfxvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBcxQfBOrwgeMa/x2WRzU/e87a7kwHwYDVR0j BBgwFoAULKYnD6CZ2yt37bfqqTBA/yNrIUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY3YTdmMGUtOGQwNy00NWRlLTgyNTItM2JmZmMwNWU1NjQ5LzAvMkNBNjI3MEZB MDk5REIyQjc3RURCN0VBQTkzMDQwRkYyMzZCMjE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0E2MjcwRkEwOTlEQjJCNzdFREI3RUFBOTMwNDBGRjIzNkIy MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTY3YTdmMGUtOGQwNy00NWRlLTgy NTItM2JmZmMwNWU1NjQ5LzAvMkNBNjI3MEZBMDk5REIyQjc3RURCN0VBQTkzMDQw RkYyMzZCMjE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVZxywJ0FHkorTXlLFAQ/PnlygZAo6oW+Xo GolFwkQ8qLNOMeYSDrj38DyP7Xhcf7CBtvQbF3Gs99dvX7zc1r+VBAsJnXpP3fn+ 79Wllcsrq4KBxBI+WD5GgwOfRCN1twvwmCLBVUMClO4s/j2oVXaTi9SAq6BJ7a// sNK9QWqRU4LIqVbkAFSCzIS+6AYZXYI/NGBrNCUt94720UXxVWFDmSy7hoH2WWyj LhboJWHG7Zead4q99wK3CUFlCZvjoJltK5ZvF6Oxoe25mtNErqTqG2Ymwr+FncUL WFY24GNjrKfrBffr92NOJocs1x54HY7n7GiXdXoyfKGFyIrbHEc= -----END CERTIFICATE-----Generated at Tue May 12 22:19:42 2026 by rpki-client