$ rpki-client -vvf rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft File: 2DFA9ABE82F079690092186CFE591462760D0F8A.mft (raw, json) Hash identifier: EZhtF+09/XJXezQiUiZJgL/bEdhIyFURj4oMCYNQ3h0= Subject key identifier: 56:BD:ED:BF:7E:77:72:E7:25:FE:1D:BD:E1:7B:E0:55:91:72:B4:D3 Authority key identifier: 2D:FA:9A:BE:82:F0:79:69:00:92:18:6C:FE:59:14:62:76:0D:0F:8A Certificate issuer: /CN=2DFA9ABE82F079690092186CFE591462760D0F8A Certificate serial: 31BB26FAF8E21CDA4D60CD60BA636210306A102F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:48:31 +0000 Manifest this update: Tue 02 Jun 2026 22:43:31 +0000 Manifest next update: Thu 04 Jun 2026 00:52:31 +0000 Files and hashes: 1: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: W/hw+IjAyZrPFulBFkYLnFPX3SzGksOOsryB2xI+HDo=) 2: 2DFA9ABE82F079690092186CFE591462760D0F8A.crl (hash: moZrdq43rEIQh8lt0qgFt4U9FDLb/T3oxFk14cEb6LI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.crl rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 00:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:bb:26:fa:f8:e2:1c:da:4d:60:cd:60:ba:63:62:10:30:6a:10:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFA9ABE82F079690092186CFE591462760D0F8A Validity Not Before: Jun 2 22:43:31 2026 GMT Not After : Jun 4 00:52:31 2026 GMT Subject: CN=56BDEDBF7E7772E725FE1DBDE17BE0559172B4D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e7:91:7d:f3:ba:a2:70:fa:44:6d:ff:4e:a7: 22:59:4f:86:d7:e1:1e:0d:98:52:6f:a3:83:34:71: 3b:00:0a:f2:e4:c9:20:b7:85:13:d0:a7:5a:8b:0a: 95:9c:95:8e:8c:91:f4:51:e1:e0:dd:df:43:61:54: 18:fe:c3:4e:04:24:d9:0e:f8:04:8a:6b:e1:10:39: e8:63:a6:b6:4e:67:87:b2:27:67:04:f8:f2:f0:2f: ee:9e:a1:fd:ce:1f:dc:7b:d8:2f:0f:f1:1e:0c:af: 73:73:43:2f:33:04:3f:a2:31:d2:05:78:fe:ee:f4: 81:6f:6c:b9:ab:59:f9:5f:7a:ad:26:81:eb:db:18: 35:da:8e:d6:80:49:f6:0e:35:d3:11:1f:e0:94:93: 8d:f2:a0:51:f2:0b:3e:10:51:01:a0:8b:8e:05:46: 5a:40:98:f7:e9:b9:65:f0:09:fe:4e:bc:65:a8:54: 4f:97:9e:65:03:84:02:01:2a:08:73:bc:e5:ff:8d: b4:fe:96:d9:8a:3f:0f:ad:44:09:e0:1a:d5:b2:ac: 1b:65:f5:f9:08:83:eb:2a:89:3b:53:93:9c:b2:6d: 5a:b6:13:06:2f:4f:c9:9d:7f:2c:4f:c5:1b:8d:48: c4:76:14:92:42:d3:ca:59:69:28:82:1c:0e:01:80: 2e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BD:ED:BF:7E:77:72:E7:25:FE:1D:BD:E1:7B:E0:55:91:72:B4:D3 X509v3 Authority Key Identifier: keyid:2D:FA:9A:BE:82:F0:79:69:00:92:18:6C:FE:59:14:62:76:0D:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d8:8d:e3:b2:34:35:18:41:5d:89:9d:af:ad:49:44:98:09: a7:f9:ca:1d:30:18:90:87:dd:a6:41:8f:d5:26:34:79:98:bf: a6:0b:66:a1:9e:50:0d:d2:b5:6b:74:6b:0d:fc:74:1b:7d:fa: 9f:c3:be:46:56:49:a4:49:a8:9d:9f:27:1e:a2:21:a1:89:f6: 6c:bd:3c:2c:dc:94:cf:a0:84:0e:9c:e7:3a:10:58:cd:57:8e: e9:32:b9:f6:9a:f7:8f:48:47:81:e5:4f:5f:2c:ed:ab:d7:7a: 72:13:3f:59:e8:30:46:29:f1:b1:22:d1:36:9f:ef:d6:6a:25: b1:c9:70:23:2b:96:cf:38:79:0c:fe:ef:76:53:e2:37:91:10: 62:86:e0:6a:df:ef:4d:ee:55:57:4d:e7:cc:13:55:04:d4:98: d3:c1:d2:06:7e:c4:bd:91:f1:e5:46:3a:1f:03:4d:d8:6b:15: 06:c7:46:09:e6:03:4d:64:c4:44:76:07:60:d8:31:b7:64:0e: d5:75:98:29:48:07:08:4a:a5:3b:c7:bd:07:8c:f0:a4:7d:a7: ed:f9:dd:4a:19:25:e2:1c:d2:ad:1e:aa:b1:86:ed:01:2e:fc: 62:92:ad:9e:fd:d5:bc:26:25:82:9e:1d:36:86:72:9b:64:59: ab:07:3e:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMbsm+vjiHNpNYM1gumNiEDBqEC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQTlBQkU4MkYwNzk2OTAwOTIxODZDRkU1OTE0NjI3 NjBEMEY4QTAeFw0yNjA2MDIyMjQzMzFaFw0yNjA2MDQwMDUyMzFaMDMxMTAvBgNV BAMTKDU2QkRFREJGN0U3NzcyRTcyNUZFMURCREUxN0JFMDU1OTE3MkI0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX55F987qicPpEbf9OpyJZT4bX 4R4NmFJvo4M0cTsACvLkySC3hRPQp1qLCpWclY6MkfRR4eDd30NhVBj+w04EJNkO +ASKa+EQOehjprZOZ4eyJ2cE+PLwL+6eof3OH9x72C8P8R4Mr3NzQy8zBD+iMdIF eP7u9IFvbLmrWflfeq0mgevbGDXajtaASfYONdMRH+CUk43yoFHyCz4QUQGgi44F RlpAmPfpuWXwCf5OvGWoVE+XnmUDhAIBKghzvOX/jbT+ltmKPw+tRAngGtWyrBtl 9fkIg+sqiTtTk5yybVq2EwYvT8mdfyxPxRuNSMR2FJJC08pZaSiCHA4BgC5tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVr3tv353cucl/h294XvgVZFytNMwHwYDVR0j BBgwFoAULfqavoLweWkAkhhs/lkUYnYND4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGNjYzJhZjQtYTYyZC00NzA4LWI2ODgtMTg5MjU5NGJhOTg5LzAvMkRGQTlBQkU4 MkYwNzk2OTAwOTIxODZDRkU1OTE0NjI3NjBEMEY4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREZBOUFCRTgyRjA3OTY5MDA5MjE4NkNGRTU5MTQ2Mjc2MEQw RjhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvMkRGQTlBQkU4MkYwNzk2OTAwOTIxODZDRkU1OTE0 NjI3NjBEMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfYjeOyNDUYQV2Jna+tSUSYCaf5yh0wGJCH 3aZBj9UmNHmYv6YLZqGeUA3StWt0aw38dBt9+p/DvkZWSaRJqJ2fJx6iIaGJ9my9 PCzclM+ghA6c5zoQWM1Xjukyufaa949IR4HlT18s7avXenITP1noMEYp8bEi0Taf 79ZqJbHJcCMrls84eQz+73ZT4jeREGKG4Grf703uVVdN58wTVQTUmNPB0gZ+xL2R 8eVGOh8DTdhrFQbHRgnmA01kxER2B2DYMbdkDtV1mClIBwhKpTvHvQeM8KR9p+35 3UoZJeIc0q0eqrGG7QEu/GKSrZ791bwmJYKeHTaGcptkWasHPpA= -----END CERTIFICATE-----Generated at Wed Jun 3 04:24:28 2026 by rpki-client