$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft File: 2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft (raw, json) Hash identifier: YPlZOmMGBE79iclTOIAyMhQkK5e9u8WpYfRVPC6xfro= Subject key identifier: 4D:70:66:10:AC:69:82:DD:5B:3E:2E:31:DD:C8:E6:9C:CE:3F:E7:BC Authority key identifier: 2E:5B:4D:91:9A:E6:E0:98:45:4A:21:D8:3B:EE:48:9C:0A:1D:F6:87 Certificate issuer: /CN=2E5B4D919AE6E098454A21D83BEE489C0A1DF687 Certificate serial: 02B79A56975EA575E398A410C09DE2C079FA02C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:09:27 +0000 Manifest this update: Tue 02 Jun 2026 16:04:27 +0000 Manifest next update: Wed 03 Jun 2026 19:15:27 +0000 Files and hashes: 1: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: hXYZBw+zcNWgfpkr4qfi2P6UAXZrhjOtAH+ubipVz38=) 2: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: w0l4Z0QTqPW7n9jh4ktHZnj4TWLQC1w9BHsCnnP0SC0=) 3: 2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl (hash: xkybGkdQ5iMWU/SraRa7XVoiSa54xVNwrHqLEfZbbcA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 19:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b7:9a:56:97:5e:a5:75:e3:98:a4:10:c0:9d:e2:c0:79:fa:02:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E5B4D919AE6E098454A21D83BEE489C0A1DF687 Validity Not Before: Jun 2 16:04:27 2026 GMT Not After : Jun 3 19:15:27 2026 GMT Subject: CN=4D706610AC6982DD5B3E2E31DDC8E69CCE3FE7BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0a:45:0f:16:aa:fa:10:6b:f4:26:3a:49:51: 70:a2:6c:ff:3a:ce:22:48:2a:b8:b6:4f:93:b5:2a: d5:f1:d3:a2:38:87:ed:12:03:d5:4b:0e:f5:c7:47: 2e:f9:f4:fb:9e:30:88:51:5c:99:f0:cc:77:1e:41: e5:d1:6e:70:3d:37:97:88:5f:a1:39:6e:74:ec:5c: 34:61:4f:ea:b4:3d:99:38:51:37:de:04:70:9d:9d: ca:bd:e2:68:0a:54:be:58:23:fe:7f:2a:45:8e:5e: 78:07:c4:78:fb:84:06:3c:6f:3c:ce:e2:2f:3b:8e: 2c:4d:df:d5:ad:26:29:c2:e8:27:f6:c5:0d:22:15: 85:40:81:5d:0d:07:c6:f6:a4:77:81:1c:53:88:56: 0d:c3:4b:66:b5:1b:f8:67:da:91:65:4e:c6:45:7f: a1:d1:07:88:e3:6b:81:2b:1e:7b:d8:21:86:11:f8: b5:73:59:41:9e:26:19:07:df:d3:bc:20:07:06:3a: a3:80:ec:c6:ba:82:7a:18:50:d0:43:35:2d:f2:ef: b1:d4:48:4c:cb:92:17:58:d1:a9:26:06:04:73:62: 29:90:2b:d5:e5:79:e7:0f:d8:54:58:1f:67:59:02: 2f:34:08:78:2f:09:e3:28:77:2b:2b:88:49:69:52: cb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:70:66:10:AC:69:82:DD:5B:3E:2E:31:DD:C8:E6:9C:CE:3F:E7:BC X509v3 Authority Key Identifier: keyid:2E:5B:4D:91:9A:E6:E0:98:45:4A:21:D8:3B:EE:48:9C:0A:1D:F6:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:6d:a8:a7:30:a8:c3:ec:94:1d:05:1d:f2:92:70:88:34:14: c4:9c:2b:7d:e8:f4:c4:b8:cd:4f:a9:8f:2b:00:90:9d:d9:1e: 9c:12:22:ab:b3:2a:90:ef:16:9e:1a:43:a9:66:99:09:f3:ba: ca:11:b9:db:88:94:58:1d:18:94:c0:44:88:52:e6:ab:89:e0: d3:3f:8a:dc:94:1f:fb:c7:a6:57:45:bb:87:3f:c0:53:19:31: db:57:02:f3:c3:a2:4b:d1:2d:f3:07:d4:4d:3c:3a:c1:36:e6: 41:20:41:81:b9:15:bb:51:94:78:14:66:56:c6:ec:4f:c9:db: 8f:f7:7b:13:c4:85:2f:ae:21:13:38:54:11:93:36:c6:e6:ca: 0d:dd:71:28:29:c2:32:ca:be:bb:23:e8:61:62:39:e5:a9:d3: 0b:74:ee:b8:1b:df:33:81:57:46:8b:08:ac:2d:b8:95:ed:c5: 1a:1b:18:72:1c:e8:c9:be:c4:e2:40:97:b7:50:e1:1d:fd:78: 3e:f8:6c:b1:c0:88:41:c9:e2:cf:89:cf:e2:c0:a8:34:e9:6d: 9a:ed:67:56:fc:b6:52:26:74:e4:e3:bc:ae:6f:fe:05:2c:ae: 6a:7a:f2:06:2f:2e:04:ef:36:2a:bf:d2:81:c3:b6:e0:13:f0: ea:f7:b8:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAreaVpdepXXjmKQQwJ3iwHn6AscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU1QjREOTE5QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4OUMw QTFERjY4NzAeFw0yNjA2MDIxNjA0MjdaFw0yNjA2MDMxOTE1MjdaMDMxMTAvBgNV BAMTKDRENzA2NjEwQUM2OTgyREQ1QjNFMkUzMUREQzhFNjlDQ0UzRkU3QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkCkUPFqr6EGv0JjpJUXCibP86 ziJIKri2T5O1KtXx06I4h+0SA9VLDvXHRy759PueMIhRXJnwzHceQeXRbnA9N5eI X6E5bnTsXDRhT+q0PZk4UTfeBHCdncq94mgKVL5YI/5/KkWOXngHxHj7hAY8bzzO 4i87jixN39WtJinC6Cf2xQ0iFYVAgV0NB8b2pHeBHFOIVg3DS2a1G/hn2pFlTsZF f6HRB4jja4ErHnvYIYYR+LVzWUGeJhkH39O8IAcGOqOA7Ma6gnoYUNBDNS3y77HU SEzLkhdY0akmBgRzYimQK9XleecP2FRYH2dZAi80CHgvCeModysriElpUsuDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTXBmEKxpgt1bPi4x3cjmnM4/57wwHwYDVR0j BBgwFoAULltNkZrm4JhFSiHYO+5InAod9ocwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkM2RkNzktODYzNS00ODU3LThhM2MtOTg1OTU0NTE2ZjllLzAvMkU1QjREOTE5 QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4OUMwQTFERjY4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTVCNEQ5MTlBRTZFMDk4NDU0QTIxRDgzQkVFNDg5QzBBMURG Njg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkM2RkNzktODYzNS00ODU3LThh M2MtOTg1OTU0NTE2ZjllLzAvMkU1QjREOTE5QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4 OUMwQTFERjY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5tqKcwqMPslB0FHfKScIg0FMScK33o9MS4 zU+pjysAkJ3ZHpwSIquzKpDvFp4aQ6lmmQnzusoRuduIlFgdGJTARIhS5quJ4NM/ ityUH/vHpldFu4c/wFMZMdtXAvPDokvRLfMH1E08OsE25kEgQYG5FbtRlHgUZlbG 7E/J24/3exPEhS+uIRM4VBGTNsbmyg3dcSgpwjLKvrsj6GFiOeWp0wt07rgb3zOB V0aLCKwtuJXtxRobGHIc6Mm+xOJAl7dQ4R39eD74bLHAiEHJ4s+Jz+LAqDTpbZrt Z1b8tlImdOTjvK5v/gUsrmp68gYvLgTvNiq/0oHDtuAT8Or3uO8= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:30 2026 by rpki-client