$ rpki-client -vvf rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft File: 2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft (raw, json) Hash identifier: 820abDykR8aH/mmBTIIGL38kmrmyA3R4shzHubI0PmQ= Subject key identifier: 7F:B3:3A:89:CE:C9:45:5F:C2:85:18:47:81:B8:B3:27:02:93:C3:40 Authority key identifier: 2C:F0:62:4C:97:05:2A:18:8B:12:C2:D8:DF:D6:92:56:BE:AE:A0:A3 Certificate issuer: /CN=2CF0624C97052A188B12C2D8DFD69256BEAEA0A3 Certificate serial: 3E68FA3294F1F9512F12510A962EFF15DA9B79DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft Manifest number: 12 Signing time: Fri 15 May 2026 06:09:53 +0000 Manifest this update: Fri 15 May 2026 06:04:53 +0000 Manifest next update: Sat 16 May 2026 08:01:53 +0000 Files and hashes: 1: 2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl (hash: RD3yeqnA6GSCRvNmgr07z0ZqtCzbADAQse9XXKlvheU=) 2: 3131372e3132312e3230352e302f32342d3234203d3e203436303239.roa (hash: UH+sfXi3uyUzmqtZ5a3kiK88kT3KnsNHU+6St14pVbU=) 3: 3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa (hash: JklHOE9UnXIvsKlW/PC+ZLgav3mgVpKETno9/XOSONo=) 4: 3131372e3132312e3230302e302f32342d3234203d3e203436303239.roa (hash: jjDQyLwOLFkeP+V5865OD4J5ZSFyfyGf7kRLTYcgAUA=) 5: 3131372e3132312e3230332e302f32342d3234203d3e203436303239.roa (hash: khNOf5qfeVAtCDmI+P0qU0wtTsenc+owEXE7IuCFTL4=) 6: 3131372e3132312e3230342e302f32342d3234203d3e203436303239.roa (hash: 9xyVMpzGgMxzPTr0/YEPxhsOk4K0WU7VoWYP2UAihTY=) 7: 3131372e3132312e3230322e302f32342d3234203d3e203436303239.roa (hash: G6layxH6VqJ35uHJZhmjgga72kPwjzbEYW/yD2TBIJU=) 8: 3131372e3132312e3230312e302f32342d3234203d3e203436303239.roa (hash: Gt77/DpvHcyfECJ/rzUv8b/LftlAsDwob9ro6Az9CBg=) 9: 3131372e3132312e3230372e302f32342d3234203d3e203436303239.roa (hash: 5qjiHCREo3yTZVwviMFSFaOdgsJ0Wu7pJnWioBrnUw8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 08:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:68:fa:32:94:f1:f9:51:2f:12:51:0a:96:2e:ff:15:da:9b:79:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CF0624C97052A188B12C2D8DFD69256BEAEA0A3 Validity Not Before: May 15 06:04:53 2026 GMT Not After : May 16 08:01:53 2026 GMT Subject: CN=7FB33A89CEC9455FC285184781B8B3270293C340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b7:cd:db:51:d9:47:d5:a7:40:b2:ef:9d:3b: a6:18:a3:f5:b5:40:9e:ad:e6:43:55:82:98:69:29: 7a:02:01:3e:72:48:15:aa:44:98:e1:7f:f3:63:44: db:48:50:0d:80:67:db:a0:bc:32:5e:e4:ac:ac:9f: 61:0b:20:c0:34:01:5b:a3:cc:b1:d3:24:6a:48:90: fa:7f:a4:e2:50:62:7d:5a:9d:9f:c8:97:01:12:46: c2:91:1c:ca:09:00:3c:c3:e2:0e:a8:3d:d2:c9:0c: b1:cb:c2:d1:50:e5:53:ac:3b:9a:d8:bb:23:48:50: ee:49:97:bf:53:62:07:8f:a3:ef:c3:26:87:76:f5: a8:a1:d6:0c:f1:15:61:98:ef:6e:82:4d:76:b8:00: 34:3c:5b:e9:93:a3:15:4e:32:72:6d:5f:30:fc:40: 36:e4:0e:41:f6:bf:a8:39:da:a4:75:86:aa:29:d4: e6:08:37:62:41:99:17:58:38:42:6d:ae:cd:c5:02: de:62:88:dc:31:9c:40:c7:26:32:f7:0f:cc:78:c3: cf:ab:b3:83:2d:13:d7:7f:1c:6b:fb:6b:0a:99:d8: 11:78:03:81:17:8a:5b:87:9e:19:6d:a0:33:d0:48: 48:0f:2c:d8:b3:2c:fc:81:13:2a:ce:f5:4c:99:23: 2e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B3:3A:89:CE:C9:45:5F:C2:85:18:47:81:B8:B3:27:02:93:C3:40 X509v3 Authority Key Identifier: keyid:2C:F0:62:4C:97:05:2A:18:8B:12:C2:D8:DF:D6:92:56:BE:AE:A0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:9c:c6:51:09:0c:01:36:a8:05:7f:f4:c1:34:87:37:f7:61: 8c:f7:ff:51:40:00:04:8b:67:c3:aa:b7:11:5e:9c:ce:4c:55: dc:7b:f4:cf:67:c8:20:5b:f4:31:08:21:26:66:1f:43:5b:7a: 22:21:a1:1b:75:d7:ff:82:41:5f:ff:33:d6:1a:57:94:e9:ec: 90:aa:fb:c8:ef:86:d6:f0:3d:77:4c:91:95:7c:6e:c9:24:c3: e0:0a:ee:b5:e6:57:a6:34:d6:ed:e4:ca:d8:2f:d1:85:65:e9: d8:a9:8d:64:39:d1:e0:b7:02:fe:d1:90:d5:c9:d3:92:be:3b: 31:a4:bc:ad:65:9f:14:fd:25:42:b5:a0:8a:74:26:f3:20:e7: 46:23:fa:2f:98:2b:c3:c6:c1:0d:a0:6a:61:0f:cc:8b:87:56: 3f:ff:b9:ca:23:bb:ae:54:7b:65:1c:80:e5:90:b9:06:34:b5: b5:f8:ee:cb:19:1e:e9:87:c9:dd:90:e1:ef:1e:97:a6:c2:ab: d8:87:a8:32:67:fc:0c:e5:86:1b:14:fa:91:54:25:f9:8b:69: 49:87:ce:7f:00:f5:d9:1b:b2:03:c9:af:0d:40:59:80:08:8b: ad:3c:ff:d4:ff:02:40:03:cf:90:f5:b5:8f:5f:2e:f5:61:a1: da:3c:51:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmj6MpTx+VEvElEKli7/FdqbedwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGMDYyNEM5NzA1MkExODhCMTJDMkQ4REZENjkyNTZC RUFFQTBBMzAeFw0yNjA1MTUwNjA0NTNaFw0yNjA1MTYwODAxNTNaMDMxMTAvBgNV BAMTKDdGQjMzQTg5Q0VDOTQ1NUZDMjg1MTg0NzgxQjhCMzI3MDI5M0MzNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJt83bUdlH1adAsu+dO6YYo/W1 QJ6t5kNVgphpKXoCAT5ySBWqRJjhf/NjRNtIUA2AZ9ugvDJe5Kysn2ELIMA0AVuj zLHTJGpIkPp/pOJQYn1anZ/IlwESRsKRHMoJADzD4g6oPdLJDLHLwtFQ5VOsO5rY uyNIUO5Jl79TYgePo+/DJod29aih1gzxFWGY726CTXa4ADQ8W+mToxVOMnJtXzD8 QDbkDkH2v6g52qR1hqop1OYIN2JBmRdYOEJtrs3FAt5iiNwxnEDHJjL3D8x4w8+r s4MtE9d/HGv7awqZ2BF4A4EXiluHnhltoDPQSEgPLNizLPyBEyrO9UyZIy59AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf7M6ic7JRV/ChRhHgbizJwKTw0AwHwYDVR0j BBgwFoAULPBiTJcFKhiLEsLY39aSVr6uoKMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTUzYjA2N2MtZWNjOS00ZGNhLTk4N2QtYjk1NzY4MTVmODU1LzAvMkNGMDYyNEM5 NzA1MkExODhCMTJDMkQ4REZENjkyNTZCRUFFQTBBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0YwNjI0Qzk3MDUyQTE4OEIxMkMyRDhERkQ2OTI1NkJFQUVB MEEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTUzYjA2N2MtZWNjOS00ZGNhLTk4 N2QtYjk1NzY4MTVmODU1LzAvMkNGMDYyNEM5NzA1MkExODhCMTJDMkQ4REZENjky NTZCRUFFQTBBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADycxlEJDAE2qAV/9ME0hzf3YYz3/1FAAASL Z8OqtxFenM5MVdx79M9nyCBb9DEIISZmH0NbeiIhoRt11/+CQV//M9YaV5Tp7JCq +8jvhtbwPXdMkZV8bskkw+AK7rXmV6Y01u3kytgv0YVl6dipjWQ50eC3Av7RkNXJ 05K+OzGkvK1lnxT9JUK1oIp0JvMg50Yj+i+YK8PGwQ2gamEPzIuHVj//ucoju65U e2UcgOWQuQY0tbX47ssZHumHyd2Q4e8el6bCq9iHqDJn/AzlhhsU+pFUJfmLaUmH zn8A9dkbsgPJrw1AWYAIi608/9T/AkADz5D1tY9fLvVhodo8UWo= -----END CERTIFICATE-----Generated at Sat May 16 00:40:22 2026 by rpki-client