$ rpki-client -vvf rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft File: 2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft (raw, json) Hash identifier: Vw2lg2t9lbmSfiSx/opdG3crpy/YY4eXQh46+nNs2Ng= Subject key identifier: 73:4A:15:9C:05:AC:FF:B8:E0:85:4D:85:4F:8B:6D:62:11:A6:70:6F Authority key identifier: 2A:0F:66:41:16:FB:E2:E0:71:7E:83:DF:D4:F2:B6:ED:EB:09:E1:7E Certificate issuer: /CN=2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E Certificate serial: 4430D7C94C531A593951B26FAB1C1FEE0DC3B8EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 08:35:40 +0000 Manifest this update: Tue 02 Jun 2026 08:30:40 +0000 Manifest next update: Wed 03 Jun 2026 11:33:40 +0000 Files and hashes: 1: 3130332e36372e39302e302f32342d3234203d3e20313532303035.roa (hash: D74+LFtaiM6p1bNo+g/DP+Bfx1wgVTvyGuc6jRnjUKM=) 2: 323030313a6466333a316363303a3a2f34382d3438203d3e20313532303035.roa (hash: 6lgQliV3qWJWSqE96iH08yO2bxxIknhiUKxtAeSrcOo=) 3: 3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (hash: /Da4Pm0aCGjoevGiiRcx0Xt7whtWvoaG8WYvVgD2NtQ=) 4: 2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl (hash: 2q97XUhe5Xh550T5Eu0maqoDPFAYqJvENZH9tdVgIFE=) 5: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (hash: MDqOFg62hmCAUHW4Muj3krYCTsgPpqhMHNl5EdSS1rQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:30:d7:c9:4c:53:1a:59:39:51:b2:6f:ab:1c:1f:ee:0d:c3:b8:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E Validity Not Before: Jun 2 08:30:40 2026 GMT Not After : Jun 3 11:33:40 2026 GMT Subject: CN=734A159C05ACFFB8E0854D854F8B6D6211A6706F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:85:c9:f7:e7:dd:02:e2:2e:2b:00:34:9c: 64:50:fa:a7:16:1c:d3:e5:fc:31:99:fa:c6:b6:12: 42:ca:6c:4f:18:0b:ce:e2:4e:f8:d5:01:09:ad:4c: de:d7:6a:97:ea:a0:1c:a0:8f:15:af:34:d0:01:04: 9f:aa:7d:04:7c:ba:a5:9c:0f:50:ed:95:62:18:0c: 84:ba:e4:04:df:1b:b1:1c:6b:b6:d1:0d:db:56:7a: 3b:66:61:f1:d2:ce:43:fa:fd:5c:1b:fc:3b:0b:0f: a7:d6:e7:32:e5:39:38:91:21:12:d3:9a:4b:4f:78: 69:bc:9f:86:e0:fa:62:bf:c9:87:7e:9d:de:4d:22: 14:be:d8:66:ac:15:de:82:af:3c:13:8e:fb:11:34: 34:4e:d6:3f:3c:27:ef:69:b3:06:68:ff:e7:c5:9c: 80:8d:ff:5d:06:da:d9:18:79:0b:d3:2a:a3:dc:43: e9:95:81:92:b8:8c:3c:cc:f0:3e:d7:7a:4c:01:c6: 16:5c:60:2e:08:98:59:48:86:98:2d:5b:23:02:a4: 11:88:dc:a7:7e:e5:6c:15:48:ae:04:72:3d:cd:a2: c6:3c:3c:52:d4:88:e9:6d:32:ec:89:21:d3:bf:0c: e1:83:a3:e5:00:b7:c8:06:fd:9e:57:cb:f6:e0:bb: 66:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4A:15:9C:05:AC:FF:B8:E0:85:4D:85:4F:8B:6D:62:11:A6:70:6F X509v3 Authority Key Identifier: keyid:2A:0F:66:41:16:FB:E2:E0:71:7E:83:DF:D4:F2:B6:ED:EB:09:E1:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:5d:59:9c:77:30:ec:76:c0:8c:dc:49:90:6c:7b:cb:4a:cd: b2:01:3a:59:52:4a:d4:8d:73:5b:6a:1f:82:bc:6f:95:99:73: 67:95:bd:a8:b9:7f:40:66:9e:05:6c:a3:59:f8:5d:13:ac:62: 58:c9:03:9f:58:88:18:8a:c1:ac:bc:3b:2a:8b:f4:03:c4:c6: ad:3d:20:3e:45:ee:d8:6e:c6:a1:5d:77:f6:b5:57:70:ef:74: cb:d9:99:22:e2:dd:14:ef:1d:21:40:5c:8b:3d:9e:e5:70:c4: 29:7c:35:bd:b6:9e:4d:aa:bf:3d:88:b7:c2:15:b9:c1:12:d8: 95:66:40:8b:22:bd:4c:f9:77:b9:62:0f:4e:5a:51:cd:7f:47: 62:3c:ed:1b:35:75:3c:03:10:30:26:93:5f:d6:81:60:76:12: 78:08:04:69:65:23:fe:0f:c8:aa:c1:1e:de:e5:fa:85:36:cc: 68:03:bf:0a:a6:05:90:e4:3a:eb:07:86:b4:6a:09:e2:86:d7: 09:0d:d5:7b:e4:6c:ec:d4:70:06:17:6e:3b:17:97:59:af:b9: b1:93:70:fc:87:b8:e1:1a:5e:ce:2c:f5:7a:95:8c:03:a8:5f: 1e:d6:d7:85:1f:9e:96:33:ab:09:49:35:b6:c9:3f:e9:c7:7e: ef:22:ee:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURDDXyUxTGlk5UbJvqxwf7g3DuO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwRjY2NDExNkZCRTJFMDcxN0U4M0RGRDRGMkI2RURF QjA5RTE3RTAeFw0yNjA2MDIwODMwNDBaFw0yNjA2MDMxMTMzNDBaMDMxMTAvBgNV BAMTKDczNEExNTlDMDVBQ0ZGQjhFMDg1NEQ4NTRGOEI2RDYyMTFBNjcwNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs7YXJ9+fdAuIuKwA0nGRQ+qcW HNPl/DGZ+sa2EkLKbE8YC87iTvjVAQmtTN7XapfqoBygjxWvNNABBJ+qfQR8uqWc D1DtlWIYDIS65ATfG7Eca7bRDdtWejtmYfHSzkP6/Vwb/DsLD6fW5zLlOTiRIRLT mktPeGm8n4bg+mK/yYd+nd5NIhS+2GasFd6CrzwTjvsRNDRO1j88J+9pswZo/+fF nICN/10G2tkYeQvTKqPcQ+mVgZK4jDzM8D7XekwBxhZcYC4ImFlIhpgtWyMCpBGI 3Kd+5WwVSK4Ecj3NosY8PFLUiOltMuyJIdO/DOGDo+UAt8gG/Z5Xy/bgu2aTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc0oVnAWs/7jghU2FT4ttYhGmcG8wHwYDVR0j BBgwFoAUKg9mQRb74uBxfoPf1PK27esJ4X4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg0ODg1MTktOGYwNC00NGY1LTgzMTItOGQ5ZDM2MTZkMGQ5LzAvMkEwRjY2NDEx NkZCRTJFMDcxN0U4M0RGRDRGMkI2RURFQjA5RTE3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTBGNjY0MTE2RkJFMkUwNzE3RTgzREZENEYyQjZFREVCMDlF MTdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg0ODg1MTktOGYwNC00NGY1LTgz MTItOGQ5ZDM2MTZkMGQ5LzAvMkEwRjY2NDExNkZCRTJFMDcxN0U4M0RGRDRGMkI2 RURFQjA5RTE3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANJdWZx3MOx2wIzcSZBse8tKzbIBOllSStSN c1tqH4K8b5WZc2eVvai5f0BmngVso1n4XROsYljJA59YiBiKway8OyqL9APExq09 ID5F7thuxqFdd/a1V3DvdMvZmSLi3RTvHSFAXIs9nuVwxCl8Nb22nk2qvz2It8IV ucES2JVmQIsivUz5d7liD05aUc1/R2I87Rs1dTwDEDAmk1/WgWB2EngIBGllI/4P yKrBHt7l+oU2zGgDvwqmBZDkOusHhrRqCeKG1wkN1XvkbOzUcAYXbjsXl1mvubGT cPyHuOEaXs4s9XqVjAOoXx7W14UfnpYzqwlJNbbJP+nHfu8i7qU= -----END CERTIFICATE-----Generated at Wed Jun 3 03:57:36 2026 by rpki-client