$ rpki-client -vvf rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft File: 2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft (raw, json) Hash identifier: 2zRENBjWVTZeS9UQWbH//UEw/scFz9WNiNTfUOpqYRg= Subject key identifier: DC:A3:36:2A:E6:73:B6:2A:9D:D4:A0:C4:D7:62:BC:B0:FF:B2:E8:8F Authority key identifier: 2E:06:9E:30:CF:7B:24:CD:D7:7C:20:65:50:B0:BD:BD:B0:16:83:AF Certificate issuer: /CN=2E069E30CF7B24CDD77C206550B0BDBDB01683AF Certificate serial: 347CD6E774758A3B036F397121E8EC1EDD7E89A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 12:30:28 +0000 Manifest this update: Tue 02 Jun 2026 12:25:28 +0000 Manifest next update: Wed 03 Jun 2026 15:47:28 +0000 Files and hashes: 1: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: R//K7f8SQ84W/WhpHi/GP3kDl7olX9IsyMdmQ8qFKuk=) 2: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: njSBQKxaBf8FgxYd9UzVWcsd+7NkvHs45etGgjIxXxw=) 3: 2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl (hash: 90HgwTQMLeLbd3WdVukwjaxHvewq8nf1w6iIimmqxio=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7c:d6:e7:74:75:8a:3b:03:6f:39:71:21:e8:ec:1e:dd:7e:89:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E069E30CF7B24CDD77C206550B0BDBDB01683AF Validity Not Before: Jun 2 12:25:28 2026 GMT Not After : Jun 3 15:47:28 2026 GMT Subject: CN=DCA3362AE673B62A9DD4A0C4D762BCB0FFB2E88F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:db:5e:a7:13:7b:ba:da:3b:12:71:3c:1a:a7: f3:3e:e3:59:1c:27:55:c3:fd:e8:5e:b3:2f:27:b5: c9:c9:d5:07:bc:71:fe:dc:cd:e2:86:f5:f5:39:3e: 22:b5:0c:94:b9:65:e1:f2:2f:31:fe:1f:c2:b2:23: ae:ec:b4:c3:98:e5:e4:f6:99:a0:0e:bc:3d:27:83: 77:66:a2:f1:6b:8d:e9:f4:d4:36:7c:5c:f5:2a:2c: 4a:ad:9c:18:0d:f9:ee:65:ad:5d:19:2c:b0:51:af: 09:48:7b:ca:6b:1c:4b:74:80:eb:4f:87:09:ea:a8: c5:c3:ac:23:0e:c4:68:be:4f:5e:68:09:9b:e0:21: 8d:6b:fd:29:3a:22:2f:10:fe:14:5c:2e:91:b3:e5: f5:87:b2:7c:34:ee:9a:63:8e:11:68:4a:c0:5e:aa: b0:10:54:13:3c:ec:8e:35:70:ed:84:d9:f0:f6:84: 51:2b:e4:d8:72:3a:f9:be:ed:2d:5c:0a:62:5a:63: fa:77:2d:3c:0e:f4:a3:28:b5:1b:31:9a:f4:23:38: 41:2a:bc:49:52:c2:6d:73:3b:38:87:94:e9:d6:92: 6f:c3:12:a6:90:79:8c:bd:57:16:01:6f:b3:a4:8e: 19:86:28:d8:50:02:be:da:b4:e6:c7:9c:e3:b6:74: 8c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A3:36:2A:E6:73:B6:2A:9D:D4:A0:C4:D7:62:BC:B0:FF:B2:E8:8F X509v3 Authority Key Identifier: keyid:2E:06:9E:30:CF:7B:24:CD:D7:7C:20:65:50:B0:BD:BD:B0:16:83:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e3:4d:08:c8:0a:cf:76:ca:b2:15:0d:22:65:7f:36:cc:de: 3d:d6:8e:14:d6:84:c8:df:42:37:b4:eb:0f:06:37:91:dd:ee: 5f:b3:02:20:23:84:71:0c:34:69:9d:91:bc:b9:00:a2:54:0c: 7d:7c:2d:8c:d2:1b:59:23:ef:5f:22:b4:78:9f:12:ec:3d:52: 3e:e8:fd:2a:95:9c:3f:35:47:21:3f:fc:10:9f:bd:37:b7:05: 54:98:b7:32:f8:2e:59:02:dc:d4:b4:9f:71:ae:82:d4:f1:6d: be:a7:8d:20:b5:90:85:6f:ec:82:16:07:c5:ff:8e:1f:87:a3: 9d:58:b8:9f:09:25:16:df:b1:04:65:49:fb:b3:2a:5e:fa:f4: 5b:e4:77:df:a7:ae:5f:c7:24:95:42:d8:d8:ba:65:13:4d:36: c4:07:a7:b0:31:4b:ea:c5:3f:7a:89:ec:42:77:57:3d:01:da: dd:0b:e1:a6:bc:e1:41:50:be:2b:24:da:a4:e9:be:44:cd:93: 3e:8e:b6:28:63:c8:a1:db:2b:20:c0:d3:7e:f7:c6:53:6c:61: be:76:49:25:ef:34:36:84:4f:84:90:43:b2:b5:b2:5d:ce:bd: 8e:68:6e:7f:75:01:d8:73:26:73:49:cb:ee:07:16:1e:8c:1c: 70:3b:60:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNHzW53R1ijsDbzlxIejsHt1+iagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUwNjlFMzBDRjdCMjRDREQ3N0MyMDY1NTBCMEJEQkRC MDE2ODNBRjAeFw0yNjA2MDIxMjI1MjhaFw0yNjA2MDMxNTQ3MjhaMDMxMTAvBgNV BAMTKERDQTMzNjJBRTY3M0I2MkE5REQ0QTBDNEQ3NjJCQ0IwRkZCMkU4OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0216nE3u62jsScTwap/M+41kc J1XD/ehesy8ntcnJ1Qe8cf7czeKG9fU5PiK1DJS5ZeHyLzH+H8KyI67stMOY5eT2 maAOvD0ng3dmovFrjen01DZ8XPUqLEqtnBgN+e5lrV0ZLLBRrwlIe8prHEt0gOtP hwnqqMXDrCMOxGi+T15oCZvgIY1r/Sk6Ii8Q/hRcLpGz5fWHsnw07ppjjhFoSsBe qrAQVBM87I41cO2E2fD2hFEr5NhyOvm+7S1cCmJaY/p3LTwO9KMotRsxmvQjOEEq vElSwm1zOziHlOnWkm/DEqaQeYy9VxYBb7OkjhmGKNhQAr7atObHnOO2dIyZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3KM2KuZztiqd1KDE12K8sP+y6I8wHwYDVR0j BBgwFoAULgaeMM97JM3XfCBlULC9vbAWg68wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzUyMWU1ZWUtNTg4Mi00OTQzLWI0MDgtNDNjMzc1ODJmYjBiLzAvMkUwNjlFMzBD RjdCMjRDREQ3N0MyMDY1NTBCMEJEQkRCMDE2ODNBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTA2OUUzMENGN0IyNENERDc3QzIwNjU1MEIwQkRCREIwMTY4 M0FGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzUyMWU1ZWUtNTg4Mi00OTQzLWI0 MDgtNDNjMzc1ODJmYjBiLzAvMkUwNjlFMzBDRjdCMjRDREQ3N0MyMDY1NTBCMEJE QkRCMDE2ODNBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLjTQjICs92yrIVDSJlfzbM3j3WjhTWhMjf Qje06w8GN5Hd7l+zAiAjhHEMNGmdkby5AKJUDH18LYzSG1kj718itHifEuw9Uj7o /SqVnD81RyE//BCfvTe3BVSYtzL4LlkC3NS0n3GugtTxbb6njSC1kIVv7IIWB8X/ jh+Ho51YuJ8JJRbfsQRlSfuzKl769Fvkd9+nrl/HJJVC2Ni6ZRNNNsQHp7AxS+rF P3qJ7EJ3Vz0B2t0L4aa84UFQvisk2qTpvkTNkz6OtihjyKHbKyDA0373xlNsYb52 SSXvNDaET4SQQ7K1sl3OvY5obn91AdhzJnNJy+4HFh6MHHA7YDE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:15 2026 by rpki-client