$ rpki-client -vvf rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft File: 2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft (raw, json) Hash identifier: R9b6lUJ4C6YEQH3eBqa8OOL8q9Xwt6MchzDkP1ZFAPg= Subject key identifier: B2:4E:6E:2D:FB:DD:C4:F8:CC:53:63:D5:BA:76:8C:09:EF:A6:3F:21 Authority key identifier: 2C:7A:30:2B:26:8D:C5:40:59:CE:B8:8F:7A:C2:19:8D:98:52:CB:D3 Certificate issuer: /CN=2C7A302B268DC54059CEB88F7AC2198D9852CBD3 Certificate serial: 198C7BA428565CD63609B2AB0DD6090CE0CDAE43 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 11:24:04 +0000 Manifest this update: Tue 02 Jun 2026 11:19:04 +0000 Manifest next update: Wed 03 Jun 2026 13:12:04 +0000 Files and hashes: 1: 2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl (hash: H5JDfH++cSSGsaq6OUmvzAja8t18scOxxGka2o0JhJ4=) 2: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: bJqqtyMrUB6ove5aksmXoGy9PsBIFYzerBlsfdZy7oQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 13:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:8c:7b:a4:28:56:5c:d6:36:09:b2:ab:0d:d6:09:0c:e0:cd:ae:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C7A302B268DC54059CEB88F7AC2198D9852CBD3 Validity Not Before: Jun 2 11:19:04 2026 GMT Not After : Jun 3 13:12:04 2026 GMT Subject: CN=B24E6E2DFBDDC4F8CC5363D5BA768C09EFA63F21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5b:1a:42:02:20:9b:11:47:c3:28:d9:fe:5e: 74:1d:1b:53:92:5a:a3:13:b6:bc:b3:22:fa:d2:fe: 4c:1c:66:1a:87:75:ce:80:e1:92:7c:42:60:5f:e6: e8:ac:17:d0:db:6f:2f:be:37:08:5d:45:71:f8:18: ca:0d:a3:63:99:1f:c0:51:06:2d:e4:2a:2b:ad:4a: 8c:a7:07:56:23:da:14:4f:ef:35:43:0f:76:e7:87: 63:b8:e8:12:9a:a1:2d:e6:81:c6:93:f7:bc:a8:53: a8:87:fb:02:16:bc:3a:e2:9c:15:a7:38:52:6e:0b: 34:44:c7:20:a1:82:04:48:0b:46:ac:7e:2c:b9:ac: 8d:94:be:0f:86:a3:ce:cd:37:cb:a2:49:46:2f:1c: 5f:6a:c9:fa:64:65:91:cb:9d:39:ad:50:33:ba:93: 98:f5:03:59:db:88:65:83:c0:9c:d2:fc:0c:33:6f: 05:51:cb:f2:d2:ca:ff:99:26:c3:e4:70:b4:11:9a: 74:b0:fa:2b:6b:8d:71:8b:49:47:c8:84:b6:ec:35: eb:b1:fd:97:c9:0f:22:d5:66:58:82:26:6b:63:9e: 47:ce:41:d0:c5:35:b1:68:07:8b:3a:fd:83:f8:91: a3:3b:4f:8d:c9:23:38:32:cf:79:41:5d:65:5b:80: 9c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4E:6E:2D:FB:DD:C4:F8:CC:53:63:D5:BA:76:8C:09:EF:A6:3F:21 X509v3 Authority Key Identifier: keyid:2C:7A:30:2B:26:8D:C5:40:59:CE:B8:8F:7A:C2:19:8D:98:52:CB:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ec:32:1f:24:ec:76:e9:30:04:fd:69:ea:20:31:fd:70:83: 5c:26:0f:f8:d7:95:c7:70:73:e2:09:72:38:ca:b6:de:09:17: c0:47:b7:43:26:2b:ac:a0:c4:b4:d8:12:2d:a4:f2:66:42:7a: a6:c3:86:71:3b:b2:18:fb:4e:ce:9c:9f:58:46:fb:4d:b9:63: 00:89:c5:23:7d:b1:3a:77:57:4b:70:22:7c:06:24:10:09:97: 85:25:7a:fe:d6:fb:75:c4:d0:fd:c9:03:f6:34:04:cc:4a:66: 18:3c:32:bc:ac:16:e4:e9:df:72:d8:60:96:a8:fb:19:4f:e8: 7e:8b:a1:dd:a3:43:4c:68:5f:3d:24:68:33:43:f7:60:e1:4b: 55:4a:e4:04:d0:5b:bb:b5:64:9f:df:b1:b9:ee:c1:a0:84:70: d8:76:d6:fd:89:4a:35:bf:78:5e:2f:6f:1a:c0:83:f9:36:f7: 7a:92:e9:16:75:66:c2:fb:bd:05:ee:8e:66:29:aa:e3:7e:4c: 77:a4:b3:09:80:cb:26:f1:aa:3a:93:8c:62:ec:21:3a:61:ef: 2d:97:a5:29:e7:57:1e:ea:e1:ba:96:09:0d:f0:27:00:55:b9: 96:e0:e3:f3:59:b5:77:55:47:3d:9d:c5:f9:c9:cd:a2:a2:25: 3f:1d:cf:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGYx7pChWXNY2CbKrDdYJDODNrkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM3QTMwMkIyNjhEQzU0MDU5Q0VCODhGN0FDMjE5OEQ5 ODUyQ0JEMzAeFw0yNjA2MDIxMTE5MDRaFw0yNjA2MDMxMzEyMDRaMDMxMTAvBgNV BAMTKEIyNEU2RTJERkJEREM0RjhDQzUzNjNENUJBNzY4QzA5RUZBNjNGMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpWxpCAiCbEUfDKNn+XnQdG1OS WqMTtryzIvrS/kwcZhqHdc6A4ZJ8QmBf5uisF9Dbby++NwhdRXH4GMoNo2OZH8BR Bi3kKiutSoynB1Yj2hRP7zVDD3bnh2O46BKaoS3mgcaT97yoU6iH+wIWvDrinBWn OFJuCzRExyChggRIC0asfiy5rI2Uvg+Go87NN8uiSUYvHF9qyfpkZZHLnTmtUDO6 k5j1A1nbiGWDwJzS/AwzbwVRy/LSyv+ZJsPkcLQRmnSw+itrjXGLSUfIhLbsNeux /ZfJDyLVZliCJmtjnkfOQdDFNbFoB4s6/YP4kaM7T43JIzgyz3lBXWVbgJzbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsk5uLfvdxPjMU2PVunaMCe+mPyEwHwYDVR0j BBgwFoAULHowKyaNxUBZzriPesIZjZhSy9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA1YWY4MjItYmVhOS00OGYzLWFhMTItYjI3MzcxNjJmYzQyLzAvMkM3QTMwMkIy NjhEQzU0MDU5Q0VCODhGN0FDMjE5OEQ5ODUyQ0JEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQzdBMzAyQjI2OERDNTQwNTlDRUI4OEY3QUMyMTk4RDk4NTJD QkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA1YWY4MjItYmVhOS00OGYzLWFh MTItYjI3MzcxNjJmYzQyLzAvMkM3QTMwMkIyNjhEQzU0MDU5Q0VCODhGN0FDMjE5 OEQ5ODUyQ0JEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXsMh8k7HbpMAT9aeogMf1wg1wmD/jXlcdw c+IJcjjKtt4JF8BHt0MmK6ygxLTYEi2k8mZCeqbDhnE7shj7Ts6cn1hG+025YwCJ xSN9sTp3V0twInwGJBAJl4Ulev7W+3XE0P3JA/Y0BMxKZhg8MrysFuTp33LYYJao +xlP6H6Lod2jQ0xoXz0kaDND92DhS1VK5ATQW7u1ZJ/fsbnuwaCEcNh21v2JSjW/ eF4vbxrAg/k293qS6RZ1ZsL7vQXujmYpquN+THekswmAyybxqjqTjGLsITph7y2X pSnnVx7q4bqWCQ3wJwBVuZbg4/NZtXdVRz2dxfnJzaKiJT8dzzE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:59 2026 by rpki-client