$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft File: 2A494FAEE44F13448E6C43136F825053CE977009.mft (raw, json) Hash identifier: avUjYQxbfTdh6BBkuw6GYsD58/rg8vMuPOPmT6c77BY= Subject key identifier: 57:4E:95:88:1C:AE:82:A9:BA:77:0A:D5:EF:56:05:33:78:B0:E1:1D Authority key identifier: 2A:49:4F:AE:E4:4F:13:44:8E:6C:43:13:6F:82:50:53:CE:97:70:09 Certificate issuer: /CN=2A494FAEE44F13448E6C43136F825053CE977009 Certificate serial: 3BB6398A5406F4DE398293A75C803566E64F3CCD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:15:07 +0000 Manifest this update: Tue 12 May 2026 19:10:07 +0000 Manifest next update: Wed 13 May 2026 22:14:07 +0000 Files and hashes: 1: 3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa (hash: SSSkCi1zJkML5HF5+O+odxp65ltRBIRj0krRoe9GJqI=) 2: 3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (hash: t2vA65s4Rw0JpR4oPJfjFnJ3dyjvcRRBFrdNUp3Bo2M=) 3: 2A494FAEE44F13448E6C43136F825053CE977009.crl (hash: fpr/MA/v+vgyjxvyfB2hcfKG0EGFbGwV4IwbzW2Bo88=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.crl rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b6:39:8a:54:06:f4:de:39:82:93:a7:5c:80:35:66:e6:4f:3c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A494FAEE44F13448E6C43136F825053CE977009 Validity Not Before: May 12 19:10:07 2026 GMT Not After : May 13 22:14:07 2026 GMT Subject: CN=574E95881CAE82A9BA770AD5EF56053378B0E11D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0c:b9:a2:10:42:1d:c3:f2:20:ec:12:74:05: 54:57:9f:fb:dc:81:8e:cf:54:1b:fb:37:83:6d:23: 63:15:c5:5c:b2:e3:06:d0:dc:2d:0f:fd:32:b3:39: fd:46:9c:9f:fd:47:7a:39:28:18:32:69:b6:3b:ab: e3:33:a8:65:a1:e3:ee:08:7a:c7:e3:36:3e:1b:b8: 3b:75:4f:a2:be:8c:b3:18:a8:1e:4b:de:d8:a8:1e: 12:cc:24:82:34:48:06:40:fc:c1:95:6b:d1:95:ce: ba:6a:fa:65:62:fb:d2:e0:50:d0:d6:52:65:71:ff: 82:ff:71:77:ea:ef:24:b7:3b:fa:99:b3:c4:30:44: e7:a7:c2:53:39:d4:d3:a1:c6:95:9f:7a:0c:02:10: 0f:0e:a3:43:83:60:90:ab:ff:d7:22:c5:da:53:79: 76:68:46:13:8e:1c:aa:99:83:b1:0b:11:f7:72:ba: 94:66:d7:60:d6:55:13:68:a6:91:8e:1f:d4:62:6a: 2e:60:ac:78:93:45:56:59:cb:70:e5:fa:4f:1b:24: df:f8:1f:aa:86:41:65:98:a7:fa:93:72:c7:d7:41: 81:5f:21:7d:bb:b0:53:c3:24:d4:a9:47:45:21:ef: c1:b0:a4:33:8d:09:29:49:0f:f5:f6:d6:a5:6c:74: a2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4E:95:88:1C:AE:82:A9:BA:77:0A:D5:EF:56:05:33:78:B0:E1:1D X509v3 Authority Key Identifier: keyid:2A:49:4F:AE:E4:4F:13:44:8E:6C:43:13:6F:82:50:53:CE:97:70:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:ad:f0:c7:86:0a:c4:4d:53:6f:6b:41:77:0c:62:20:0e:9c: 38:ec:24:a3:05:d8:89:33:f1:6d:b7:6d:b5:aa:a3:97:ca:a0: 94:27:9a:13:a9:c5:ce:33:e9:9e:93:29:99:f3:21:95:13:00: 86:8b:2c:b9:b8:df:2a:29:ac:d4:0f:48:07:cf:c4:a4:88:a3: e2:63:7d:5d:f1:ee:2f:63:5e:cf:4b:8a:18:17:76:ec:f7:d7: 81:1e:09:ed:d0:4d:dc:9b:15:e6:84:51:ca:94:c6:c3:44:e3: a1:66:ed:4e:96:fc:fd:ee:9d:fd:14:0c:3c:41:48:b4:ac:64: 07:7a:4d:da:c3:d2:70:9a:a5:aa:1a:c3:65:c8:de:d9:0c:e4: 9e:b6:19:97:31:0b:e1:06:d7:45:8d:b8:e5:df:a7:73:ba:1c: 83:22:e4:2d:0e:51:d0:69:42:68:11:56:e2:6f:05:67:0d:f5: 86:d6:3c:15:72:94:ff:08:11:70:49:28:6b:bc:a4:3e:2b:44: 72:41:52:36:8c:43:ec:37:3a:e5:ea:8f:07:72:69:33:7f:0a: 7b:12:61:4a:10:8a:c7:8d:b7:3e:46:ce:44:50:80:ef:c2:c6: 88:c4:51:fd:3d:0f:58:24:a1:d2:23:cd:ce:f2:7f:d6:94:ea: 87:71:78:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO7Y5ilQG9N45gpOnXIA1ZuZPPM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE0OTRGQUVFNDRGMTM0NDhFNkM0MzEzNkY4MjUwNTND RTk3NzAwOTAeFw0yNjA1MTIxOTEwMDdaFw0yNjA1MTMyMjE0MDdaMDMxMTAvBgNV BAMTKDU3NEU5NTg4MUNBRTgyQTlCQTc3MEFENUVGNTYwNTMzNzhCMEUxMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDLmiEEIdw/Ig7BJ0BVRXn/vc gY7PVBv7N4NtI2MVxVyy4wbQ3C0P/TKzOf1GnJ/9R3o5KBgyabY7q+MzqGWh4+4I esfjNj4buDt1T6K+jLMYqB5L3tioHhLMJII0SAZA/MGVa9GVzrpq+mVi+9LgUNDW UmVx/4L/cXfq7yS3O/qZs8QwROenwlM51NOhxpWfegwCEA8Oo0ODYJCr/9cixdpT eXZoRhOOHKqZg7ELEfdyupRm12DWVRNoppGOH9Riai5grHiTRVZZy3Dl+k8bJN/4 H6qGQWWYp/qTcsfXQYFfIX27sFPDJNSpR0Uh78GwpDONCSlJD/X21qVsdKJDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV06ViByugqm6dwrV71YFM3iw4R0wHwYDVR0j BBgwFoAUKklPruRPE0SObEMTb4JQU86XcAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBkYzEyODMtMWNlMi00MWE1LWFmZTYtZjBiZTMxZTliMTBkLzAvMkE0OTRGQUVF NDRGMTM0NDhFNkM0MzEzNkY4MjUwNTNDRTk3NzAwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTQ5NEZBRUU0NEYxMzQ0OEU2QzQzMTM2RjgyNTA1M0NFOTc3 MDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBkYzEyODMtMWNlMi00MWE1LWFm ZTYtZjBiZTMxZTliMTBkLzAvMkE0OTRGQUVFNDRGMTM0NDhFNkM0MzEzNkY4MjUw NTNDRTk3NzAwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCt8MeGCsRNU29rQXcMYiAOnDjsJKMF2Ikz 8W23bbWqo5fKoJQnmhOpxc4z6Z6TKZnzIZUTAIaLLLm43yoprNQPSAfPxKSIo+Jj fV3x7i9jXs9LihgXduz314EeCe3QTdybFeaEUcqUxsNE46Fm7U6W/P3unf0UDDxB SLSsZAd6TdrD0nCapaoaw2XI3tkM5J62GZcxC+EG10WNuOXfp3O6HIMi5C0OUdBp QmgRVuJvBWcN9YbWPBVylP8IEXBJKGu8pD4rRHJBUjaMQ+w3OuXqjwdyaTN/CnsS YUoQiseNtz5GzkRQgO/CxojEUf09D1gkodIjzc7yf9aU6odxeJM= -----END CERTIFICATE-----Generated at Wed May 13 04:53:26 2026 by rpki-client