$ rpki-client -vvf rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft File: 2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft (raw, json) Hash identifier: sJhMxS5HgLMRESwO7JEYjMSb76XRsmAz+nOLRxiBxTU= Subject key identifier: AB:75:5A:35:D2:9A:FE:DE:8C:6E:90:79:AA:09:94:7C:3B:7D:42:D0 Authority key identifier: 2F:F2:8E:C3:1F:A9:59:5D:4C:93:72:E0:37:8B:12:7B:FC:07:D5:43 Certificate issuer: /CN=2FF28EC31FA9595D4C9372E0378B127BFC07D543 Certificate serial: 38AC4228219457B73F461BA8383FAE7028BC1D67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:24:48 +0000 Manifest this update: Tue 02 Jun 2026 16:19:48 +0000 Manifest next update: Wed 03 Jun 2026 19:19:48 +0000 Files and hashes: 1: 3130332e37382e3135382e302f32342d3234203d3e20313530323438.roa (hash: WBevjDBrr8T3lRgtMCROWKCPpKkw27Bp5qV284oO8bo=) 2: 2FF28EC31FA9595D4C9372E0378B127BFC07D543.crl (hash: VLpLpXKg834oQD2GbFrKaE1S8If8bO69BX8c9LYjoh4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.crl rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ac:42:28:21:94:57:b7:3f:46:1b:a8:38:3f:ae:70:28:bc:1d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FF28EC31FA9595D4C9372E0378B127BFC07D543 Validity Not Before: Jun 2 16:19:48 2026 GMT Not After : Jun 3 19:19:48 2026 GMT Subject: CN=AB755A35D29AFEDE8C6E9079AA09947C3B7D42D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fc:ad:47:76:28:72:8f:de:51:7b:83:fd:63: 8e:91:d8:c0:e5:a5:61:4b:68:98:fd:61:21:ab:92: 11:cf:2f:a7:df:91:cd:38:5b:13:1c:b6:56:d1:52: ba:a1:06:24:40:5b:55:e9:53:3c:a1:7e:61:e7:9e: 17:a1:cb:70:37:5c:b3:fa:67:e8:f2:26:54:a8:7e: 77:f1:96:f1:24:0c:ad:9f:0d:68:93:f9:83:b6:5e: 6c:56:36:5f:86:09:cd:9d:27:15:a7:7a:29:70:25: 00:8d:38:fa:d8:03:e7:30:23:23:35:7e:01:14:c8: 5a:12:57:5e:66:ce:c8:5b:cc:92:f0:78:00:fc:98: b2:50:15:9b:b2:7c:c2:fc:6d:ca:9f:ad:36:57:c7: d6:f3:47:51:74:b3:ec:54:d3:fa:16:c7:ab:ec:ca: 11:5d:64:e7:03:81:dc:53:ca:19:5d:4b:70:85:cb: 6e:72:83:9c:c2:e0:3c:1f:e8:27:37:f2:7d:e7:99: 14:22:6f:67:57:0a:13:ce:d3:b5:2f:3b:bd:e4:7d: a8:8a:79:da:11:93:f5:bd:d4:e5:ac:5d:0d:a9:f7: c6:26:87:c1:82:d2:9a:c1:88:e2:91:86:4f:a6:37: 56:eb:d6:9b:02:c1:90:fc:8b:72:52:cb:1b:20:e4: 20:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:75:5A:35:D2:9A:FE:DE:8C:6E:90:79:AA:09:94:7C:3B:7D:42:D0 X509v3 Authority Key Identifier: keyid:2F:F2:8E:C3:1F:A9:59:5D:4C:93:72:E0:37:8B:12:7B:FC:07:D5:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:26:85:51:3a:a7:88:64:c3:bd:9e:fc:8d:cb:99:f4:6e:a0: 5d:f1:69:6f:c3:e9:5c:ae:ca:68:5e:0c:ff:64:ab:d4:e6:e7: 6f:7a:22:d7:d3:73:a6:66:62:15:63:69:33:6e:0f:0a:70:4f: ed:2f:8b:d6:71:3a:18:fa:fe:50:ae:93:f0:aa:cf:bb:fe:c0: ca:1d:1b:41:d5:07:c1:13:32:53:c5:2c:b5:76:2e:46:3e:ac: bb:9c:ad:df:72:2e:63:62:c0:39:d5:47:e3:20:4c:86:b3:b6: c3:2e:5d:a5:e2:24:3a:d9:82:15:7d:5d:59:b6:6f:6d:6b:a1: 41:99:24:3e:52:36:12:b3:09:73:94:14:08:8d:57:2e:70:dd: ab:67:53:2a:a5:66:5d:99:00:ac:eb:d3:d9:98:dd:56:1c:e6: a2:39:09:10:e9:ec:19:d2:2e:8e:e7:00:c5:47:87:48:98:74: d3:ee:50:d7:ff:93:f3:66:25:6e:ae:7c:df:47:84:a6:25:58: de:77:e8:f4:fa:ec:38:ae:3c:cb:7a:c2:93:a9:07:1b:0e:fa: 2b:a7:1b:a9:74:37:98:2b:19:55:ad:c3:e6:5e:b5:d0:f6:b2: e3:b2:88:48:a3:df:9b:43:c8:e3:73:a7:74:d7:7f:9c:0f:34: 50:2f:5d:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOKxCKCGUV7c/RhuoOD+ucCi8HWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZGMjhFQzMxRkE5NTk1RDRDOTM3MkUwMzc4QjEyN0JG QzA3RDU0MzAeFw0yNjA2MDIxNjE5NDhaFw0yNjA2MDMxOTE5NDhaMDMxMTAvBgNV BAMTKEFCNzU1QTM1RDI5QUZFREU4QzZFOTA3OUFBMDk5NDdDM0I3RDQyRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/K1Hdihyj95Re4P9Y46R2MDl pWFLaJj9YSGrkhHPL6ffkc04WxMctlbRUrqhBiRAW1XpUzyhfmHnnhehy3A3XLP6 Z+jyJlSofnfxlvEkDK2fDWiT+YO2XmxWNl+GCc2dJxWneilwJQCNOPrYA+cwIyM1 fgEUyFoSV15mzshbzJLweAD8mLJQFZuyfML8bcqfrTZXx9bzR1F0s+xU0/oWx6vs yhFdZOcDgdxTyhldS3CFy25yg5zC4Dwf6Cc38n3nmRQib2dXChPO07UvO73kfaiK edoRk/W91OWsXQ2p98Ymh8GC0prBiOKRhk+mN1br1psCwZD8i3JSyxsg5CAFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq3VaNdKa/t6MbpB5qgmUfDt9QtAwHwYDVR0j BBgwFoAUL/KOwx+pWV1Mk3LgN4sSe/wH1UMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjZjMDYwZmItZTkzNi00YTIzLWJiZTItOTQ0NTdiZjcwOWJmLzAvMkZGMjhFQzMx RkE5NTk1RDRDOTM3MkUwMzc4QjEyN0JGQzA3RDU0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkYyOEVDMzFGQTk1OTVENEM5MzcyRTAzNzhCMTI3QkZDMDdE NTQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjZjMDYwZmItZTkzNi00YTIzLWJi ZTItOTQ0NTdiZjcwOWJmLzAvMkZGMjhFQzMxRkE5NTk1RDRDOTM3MkUwMzc4QjEy N0JGQzA3RDU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGwmhVE6p4hkw72e/I3LmfRuoF3xaW/D6Vyu ymheDP9kq9Tm5296ItfTc6ZmYhVjaTNuDwpwT+0vi9ZxOhj6/lCuk/Cqz7v+wMod G0HVB8ETMlPFLLV2LkY+rLucrd9yLmNiwDnVR+MgTIaztsMuXaXiJDrZghV9XVm2 b21roUGZJD5SNhKzCXOUFAiNVy5w3atnUyqlZl2ZAKzr09mY3VYc5qI5CRDp7BnS Lo7nAMVHh0iYdNPuUNf/k/NmJW6ufN9HhKYlWN536PT67DiuPMt6wpOpBxsO+iun G6l0N5grGVWtw+ZetdD2suOyiEij35tDyONzp3TXf5wPNFAvXT4= -----END CERTIFICATE-----Generated at Wed Jun 3 03:38:51 2026 by rpki-client