$ rpki-client -vvf rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/2224681B90D457DB106C5BD5E5518DFF52C87334.mft File: 2224681B90D457DB106C5BD5E5518DFF52C87334.mft (raw, json) Hash identifier: uadU0fzSWc8g3d87x2wfFJlh5YbxdFGQLz+D3sovuGI= Subject key identifier: 42:C6:F8:34:5D:94:E4:75:CE:78:C1:80:EB:BE:94:50:97:E6:E5:8C Authority key identifier: 22:24:68:1B:90:D4:57:DB:10:6C:5B:D5:E5:51:8D:FF:52:C8:73:34 Certificate issuer: /CN=2224681B90D457DB106C5BD5E5518DFF52C87334 Certificate serial: 6EB93AA668CA15B192858ECAA932F955C5DAECC9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2224681B90D457DB106C5BD5E5518DFF52C87334.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/2224681B90D457DB106C5BD5E5518DFF52C87334.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 20:14:31 +0000 Manifest this update: Tue 02 Jun 2026 20:09:31 +0000 Manifest next update: Thu 04 Jun 2026 00:08:31 +0000 Files and hashes: 1: 3130332e3136392e3230362e302f32342d3234203d3e203435333235.roa (hash: JRz0AikjKf8Hdwl6cjt7jaFDxGE4945L1g49NYJWAso=) 2: 2224681B90D457DB106C5BD5E5518DFF52C87334.crl (hash: B/VYL9Za1M5KK5b5vlvSRd0ruDQDrVkNAUmLiCDrqnU=) 3: 3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa (hash: 2XkpN/yeHiOUoJ2xsuKoxeJRASOp5SwKm66EqL0pa2o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/2224681B90D457DB106C5BD5E5518DFF52C87334.crl rsync://rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/2224681B90D457DB106C5BD5E5518DFF52C87334.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2224681B90D457DB106C5BD5E5518DFF52C87334.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b9:3a:a6:68:ca:15:b1:92:85:8e:ca:a9:32:f9:55:c5:da:ec:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2224681B90D457DB106C5BD5E5518DFF52C87334 Validity Not Before: Jun 2 20:09:31 2026 GMT Not After : Jun 4 00:08:31 2026 GMT Subject: CN=42C6F8345D94E475CE78C180EBBE945097E6E58C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:69:2d:b4:f1:7f:59:49:9d:e1:2d:2b:40:25: 30:89:6c:f5:5d:6f:f2:89:4a:0f:10:26:30:e6:eb: 26:d6:5c:ab:3f:6b:fe:ce:5a:e9:8f:41:be:9b:61: b0:8f:a1:37:bd:04:8e:b5:de:d1:2e:31:5a:15:e7: b9:66:39:cb:3e:f8:61:bd:d6:fc:6f:b0:cc:7c:d3: 5e:8a:af:c2:ef:39:16:a8:5c:f4:70:50:86:a9:43: ab:a1:28:27:e0:70:b4:1e:23:54:f5:3b:90:d9:ac: 8c:c4:fd:3e:f5:1e:f2:65:ac:0e:be:fc:d1:4d:71: dd:0b:53:a4:d1:64:8d:0c:fb:6f:02:ce:16:11:e6: f3:74:f2:77:53:5a:00:92:cb:e3:b5:e1:90:2c:cb: fc:72:42:8f:46:9a:f1:cc:d6:94:8d:59:69:13:ee: 01:c1:73:c2:f1:c0:90:b1:39:3f:bd:95:09:f7:85: dd:a5:87:47:2f:d1:88:ad:94:a0:78:2e:f0:10:3e: 5d:b3:3d:76:4e:4b:ce:c2:3d:dc:3c:00:cf:de:4e: 2d:1d:a6:e3:68:e3:a3:e0:6f:8e:8c:53:64:00:a1: 25:7b:e6:f8:3f:2f:37:7a:9f:6a:65:24:2e:70:31: c7:90:95:1f:72:92:c2:fc:bb:7a:92:b4:34:25:c0: c9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C6:F8:34:5D:94:E4:75:CE:78:C1:80:EB:BE:94:50:97:E6:E5:8C X509v3 Authority Key Identifier: keyid:22:24:68:1B:90:D4:57:DB:10:6C:5B:D5:E5:51:8D:FF:52:C8:73:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/2224681B90D457DB106C5BD5E5518DFF52C87334.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2224681B90D457DB106C5BD5E5518DFF52C87334.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/2224681B90D457DB106C5BD5E5518DFF52C87334.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a8:4e:b9:45:5e:42:91:bd:05:a1:99:ee:9b:b9:5f:58:2e: ca:c6:b2:2b:51:ad:ed:00:30:87:7c:b8:b8:ac:b1:fa:95:be: 44:6b:35:74:d8:51:71:31:f0:06:34:03:2d:ca:e1:4e:3a:10: 84:96:fe:62:78:c2:41:f5:ce:14:22:f3:bc:8b:81:9f:26:61: 59:44:de:68:37:e6:10:f0:01:84:16:15:80:48:91:82:3c:d7: 08:e9:6f:fd:03:00:c4:be:2c:69:62:4e:8d:60:7b:e5:48:d3: b0:87:24:c4:04:60:be:84:d7:67:1f:94:c5:1c:f7:ef:af:39: fd:65:f9:d7:93:fc:9f:d3:b7:c0:7e:d8:45:14:32:2e:9c:9c: 75:ac:f7:99:81:f2:bf:65:49:9b:63:58:47:f6:c3:0c:bb:5b: 0f:0d:b2:ba:f6:20:dc:d3:dc:8b:95:3f:ca:b3:bc:bb:78:b0: 42:0f:56:c7:17:74:e2:60:86:c2:eb:1b:8e:fb:05:68:8b:36: 3e:63:59:00:75:a9:22:a7:ed:ce:d2:6c:b3:91:ad:e3:8b:d0: 46:65:16:92:07:08:0d:47:87:33:2e:b2:4d:11:49:7e:67:d5: ca:f8:e6:d0:63:42:8b:61:20:e1:8d:b9:98:a5:fb:04:fe:08: c7:7d:cb:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbrk6pmjKFbGShY7KqTL5VcXa7MkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIyNDY4MUI5MEQ0NTdEQjEwNkM1QkQ1RTU1MThERkY1 MkM4NzMzNDAeFw0yNjA2MDIyMDA5MzFaFw0yNjA2MDQwMDA4MzFaMDMxMTAvBgNV BAMTKDQyQzZGODM0NUQ5NEU0NzVDRTc4QzE4MEVCQkU5NDUwOTdFNkU1OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvaS208X9ZSZ3hLStAJTCJbPVd b/KJSg8QJjDm6ybWXKs/a/7OWumPQb6bYbCPoTe9BI613tEuMVoV57lmOcs++GG9 1vxvsMx8016Kr8LvORaoXPRwUIapQ6uhKCfgcLQeI1T1O5DZrIzE/T71HvJlrA6+ /NFNcd0LU6TRZI0M+28CzhYR5vN08ndTWgCSy+O14ZAsy/xyQo9GmvHM1pSNWWkT 7gHBc8LxwJCxOT+9lQn3hd2lh0cv0YitlKB4LvAQPl2zPXZOS87CPdw8AM/eTi0d puNo46Pgb46MU2QAoSV75vg/Lzd6n2plJC5wMceQlR9yksL8u3qStDQlwMk5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQsb4NF2U5HXOeMGA676UUJfm5YwwHwYDVR0j BBgwFoAUIiRoG5DUV9sQbFvV5VGN/1LIczQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTdmNzM3ODAtMDkyNS00YjRhLWJjYTctYTFlN2VkM2ZmNDJhLzAvMjIyNDY4MUI5 MEQ0NTdEQjEwNkM1QkQ1RTU1MThERkY1MkM4NzMzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjI0NjgxQjkwRDQ1N0RCMTA2QzVCRDVFNTUxOERGRjUyQzg3 MzM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTdmNzM3ODAtMDkyNS00YjRhLWJj YTctYTFlN2VkM2ZmNDJhLzAvMjIyNDY4MUI5MEQ0NTdEQjEwNkM1QkQ1RTU1MThE RkY1MkM4NzMzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqoTrlFXkKRvQWhme6buV9YLsrGsitRre0A MId8uLissfqVvkRrNXTYUXEx8AY0Ay3K4U46EISW/mJ4wkH1zhQi87yLgZ8mYVlE 3mg35hDwAYQWFYBIkYI81wjpb/0DAMS+LGliTo1ge+VI07CHJMQEYL6E12cflMUc 9++vOf1l+deT/J/Tt8B+2EUUMi6cnHWs95mB8r9lSZtjWEf2wwy7Ww8Nsrr2INzT 3IuVP8qzvLt4sEIPVscXdOJghsLrG477BWiLNj5jWQB1qSKn7c7SbLORreOL0EZl FpIHCA1HhzMusk0RSX5n1cr45tBjQothIOGNuZil+wT+CMd9yx0= -----END CERTIFICATE-----Generated at Wed Jun 3 03:20:59 2026 by rpki-client