$ rpki-client -vvf rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft File: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft (raw, json) Hash identifier: ARU8hK2tL8njUZ6YZkZGqNQHBRouoUWxAy7/RnN7H2E= Subject key identifier: FE:7C:D6:E6:85:B1:10:13:F4:EE:36:2F:C6:2A:6F:A2:FC:6D:0C:CE Authority key identifier: 2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 Certificate issuer: /CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Certificate serial: 25C6BEAE55956B3AB3ABB57A6D1211D470B1AF11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:28:08 +0000 Manifest this update: Tue 02 Jun 2026 10:23:08 +0000 Manifest next update: Wed 03 Jun 2026 11:52:08 +0000 Files and hashes: 1: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: o8ATK3bD9zxeJufeZWJNK7oFuttO5EJXj2X9FF47zyA=) 2: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: Sc3G90iBjlZbQp4eiRWZGBi7/nNefrAvOJorxw0BbBg=) 3: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: +Yvf7pOmzIGa62dYtF9IiIRwOM/GLeNEJw6+0hLCuFs=) 4: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: YxIG5gE82yucA04IL0UOvUpSplXnSvbMztHXZbePQI4=) 5: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: mQrrkGIS8HoF4AiDSmw6SD2SG/T7/MXDAFnexE70y7o=) 6: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl (hash: nBRcJ08kiSfFrIh7cdKD86MazNilLotj8I3KXCMG6tM=) 7: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Zn0CgMhZBE1Ox5HRkdKzvhOJuMe+bbXdGHM8Z1fRLu4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c6:be:ae:55:95:6b:3a:b3:ab:b5:7a:6d:12:11:d4:70:b1:af:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Validity Not Before: Jun 2 10:23:08 2026 GMT Not After : Jun 3 11:52:08 2026 GMT Subject: CN=FE7CD6E685B11013F4EE362FC62A6FA2FC6D0CCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5b:3e:24:78:1b:42:7a:21:23:0a:3c:7d:b1: 00:00:cf:03:d7:c1:6c:a9:84:f7:88:68:7a:3c:d9: 04:c5:36:26:8c:d3:d6:a2:c0:f4:8d:f8:ab:d0:c5: 71:f2:89:c5:6a:f2:dc:df:e8:31:78:3b:14:49:40: 05:b8:2e:d9:cc:51:e0:00:56:f5:1e:b2:1f:40:7b: 4a:53:c8:33:6b:c1:d9:d1:4a:dd:44:d4:70:07:46: 37:d0:86:21:1e:6b:42:1c:2e:87:bb:09:e3:c6:0d: 66:e3:3c:28:73:24:3e:d6:f2:83:51:7b:ae:30:26: ec:cb:67:0b:ef:82:59:5d:97:a5:b6:58:29:e0:f7: ac:38:3d:6f:f8:15:1b:92:1f:0f:58:51:3a:60:30: 32:8f:b9:02:f6:b1:35:c0:71:12:22:f1:83:b5:99: 00:e9:37:63:e5:65:b3:d0:8c:1a:d3:fa:86:b7:3a: 13:4e:ed:2c:ac:77:22:4c:92:f0:ad:ca:b5:7e:22: 9e:a8:cf:eb:f6:5a:fc:ae:cb:c8:1d:95:af:d9:4d: 83:13:d9:c7:be:4f:ed:5c:56:20:5e:5b:10:f0:dc: d5:dd:7f:4d:b8:48:83:08:e1:19:19:c6:6a:1f:bc: 86:92:04:98:86:4a:73:93:5e:ff:08:99:e6:5c:2c: 0b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7C:D6:E6:85:B1:10:13:F4:EE:36:2F:C6:2A:6F:A2:FC:6D:0C:CE X509v3 Authority Key Identifier: keyid:2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:48:c0:a9:32:b2:c8:38:8c:3d:7f:7b:6e:60:18:74:2f:5b: 96:ae:20:cb:87:30:45:08:82:e3:6b:65:9a:df:0f:66:ae:01: 8e:a7:b7:5c:0d:76:91:0d:89:3d:7c:c8:17:81:08:81:a0:0c: 57:7d:0b:97:62:5d:af:d7:f1:43:b2:20:ae:d1:83:35:ba:c9: eb:66:1c:93:13:67:80:ba:6b:e7:ae:0d:4b:df:06:cc:8f:48: 5a:54:41:df:d9:cb:89:ed:72:74:60:c7:76:60:30:d7:bc:9b: c1:47:91:4c:62:6e:ef:35:4a:1e:3c:e8:94:bc:b7:e6:4e:dd: af:07:89:bc:5e:a0:a8:b1:a6:45:d1:41:e9:df:03:0c:32:a4: 5d:3c:80:07:94:35:5d:77:5b:92:d0:38:ca:71:ce:f8:3d:c1: b4:2d:56:81:5a:96:d3:a8:fe:a2:48:1e:9c:85:93:55:4f:19: 06:e2:28:ab:cb:43:39:18:52:3e:2f:45:d2:b9:6f:13:f8:77: 09:b4:87:35:2c:59:03:f3:23:77:f0:94:05:0d:94:47:90:ed: 89:39:4f:57:5c:f7:85:be:df:2f:57:c4:00:ba:06:b8:e6:8e: 6c:83:b3:5a:ad:28:ed:84:0d:29:d0:8b:77:4e:ba:65:00:8f: 51:75:7c:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJca+rlWVazqzq7V6bRIR1HCxrxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlE MzBDNDYzNTAeFw0yNjA2MDIxMDIzMDhaFw0yNjA2MDMxMTUyMDhaMDMxMTAvBgNV BAMTKEZFN0NENkU2ODVCMTEwMTNGNEVFMzYyRkM2MkE2RkEyRkM2RDBDQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTWz4keBtCeiEjCjx9sQAAzwPX wWyphPeIaHo82QTFNiaM09aiwPSN+KvQxXHyicVq8tzf6DF4OxRJQAW4LtnMUeAA VvUesh9Ae0pTyDNrwdnRSt1E1HAHRjfQhiEea0IcLoe7CePGDWbjPChzJD7W8oNR e64wJuzLZwvvglldl6W2WCng96w4PW/4FRuSHw9YUTpgMDKPuQL2sTXAcRIi8YO1 mQDpN2PlZbPQjBrT+oa3OhNO7SysdyJMkvCtyrV+Ip6oz+v2Wvyuy8gdla/ZTYMT 2ce+T+1cViBeWxDw3NXdf024SIMI4RkZxmofvIaSBJiGSnOTXv8ImeZcLAsxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/nzW5oWxEBP07jYvxipvovxtDM4wHwYDVR0j BBgwFoAULpDHQn/huQJV3YVW28nMadMMRjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTAzNmUwN2MtODI4My00M2QzLTkxNjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3 RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlEMzBDNDYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTkwQzc0MjdGRTFCOTAyNTVERDg1NTZEQkM5Q0M2OUQzMEM0 NjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUND NjlEMzBDNDYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFIwKkyssg4jD1/e25gGHQvW5auIMuHMEUI guNrZZrfD2auAY6nt1wNdpENiT18yBeBCIGgDFd9C5diXa/X8UOyIK7RgzW6yetm HJMTZ4C6a+euDUvfBsyPSFpUQd/Zy4ntcnRgx3ZgMNe8m8FHkUxibu81Sh486JS8 t+ZO3a8HibxeoKixpkXRQenfAwwypF08gAeUNV13W5LQOMpxzvg9wbQtVoFaltOo /qJIHpyFk1VPGQbiKKvLQzkYUj4vRdK5bxP4dwm0hzUsWQPzI3fwlAUNlEeQ7Yk5 T1dc94W+3y9XxAC6BrjmjmyDs1qtKO2EDSnQi3dOumUAj1F1fLc= -----END CERTIFICATE-----Generated at Wed Jun 3 03:21:02 2026 by rpki-client