$ rpki-client -vvf rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft File: 2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft (raw, json) Hash identifier: 8PFEUUaCSL/xraD4cNgRtErM64St23NrwJpzRjBjh4M= Subject key identifier: 26:60:9D:CC:54:21:31:B3:64:A0:3D:4B:C8:01:B2:59:4E:63:A0:29 Authority key identifier: 2D:30:C3:00:58:7F:6D:81:BE:9B:55:44:3E:A8:EE:94:22:9F:CF:34 Certificate issuer: /CN=2D30C300587F6D81BE9B55443EA8EE94229FCF34 Certificate serial: 140356D592FBEAE0023413BC6682FE4F2483A264 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:00:31 +0000 Manifest this update: Tue 02 Jun 2026 20:55:31 +0000 Manifest next update: Thu 04 Jun 2026 00:58:31 +0000 Files and hashes: 1: 2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl (hash: KY8m5Pk7mNZqSvYs2mdCOKRKRdrS/gyX+Klq5m4uEwc=) 2: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: /HZ9PgBcY1v+LICUOzB+p9dmjd1y9vMbbZwrBhVjk44=) 3: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: tFodUbzYC2MyevsY+1U3r+nqHy3x7yy2dunKYq9vZuc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 00:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:03:56:d5:92:fb:ea:e0:02:34:13:bc:66:82:fe:4f:24:83:a2:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D30C300587F6D81BE9B55443EA8EE94229FCF34 Validity Not Before: Jun 2 20:55:31 2026 GMT Not After : Jun 4 00:58:31 2026 GMT Subject: CN=26609DCC542131B364A03D4BC801B2594E63A029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d1:a3:dd:c7:e2:8c:a6:23:ae:a2:62:f1:e3: 95:19:9a:26:38:aa:12:c3:9f:dc:fa:35:2c:6b:ee: 77:29:67:31:eb:30:70:75:f4:fb:a5:12:ab:b3:f3: 07:04:92:71:12:24:bc:ab:bd:f7:6c:9d:3f:44:7c: 3d:ac:48:1a:b6:f4:fe:a0:e4:c8:78:48:45:40:b0: 07:6f:6d:db:72:04:6c:26:e9:b0:84:bb:d5:3e:88: c9:d0:ad:bc:38:ef:d9:6d:d7:ab:aa:28:1b:ba:28: 95:cc:b6:c6:0d:e9:71:06:06:05:1c:76:ef:f2:b5: 5d:78:e4:2f:38:e1:1e:e9:67:e1:6f:c5:20:a6:b7: 98:79:db:aa:28:0c:93:96:75:18:20:3e:cf:65:8b: 61:55:2c:b6:db:b3:36:af:08:d1:26:0a:12:68:cd: 2f:33:f9:37:66:e4:b7:20:5c:cc:9f:cf:3f:4e:11: b5:96:98:04:30:5b:42:07:b8:b3:dc:23:36:5b:dd: cb:0e:06:e3:1d:7c:1e:e4:30:50:3f:82:8e:1a:a7: 9a:4d:48:a9:d5:e7:9e:03:19:54:54:35:7b:89:1e: dc:2c:04:7a:07:f4:72:7d:4e:2b:7b:ca:c0:20:e6: a0:9b:52:11:de:0c:4e:d9:e1:db:f9:bc:f6:45:5b: 75:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:60:9D:CC:54:21:31:B3:64:A0:3D:4B:C8:01:B2:59:4E:63:A0:29 X509v3 Authority Key Identifier: keyid:2D:30:C3:00:58:7F:6D:81:BE:9B:55:44:3E:A8:EE:94:22:9F:CF:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:d7:08:de:f7:50:d3:47:4e:84:b7:cd:02:e8:7a:f5:fc:25: d6:44:6a:b6:db:a8:a5:bd:00:db:41:8f:76:f8:e7:d7:49:4b: 3f:3d:52:08:6b:35:57:19:b3:3c:44:b6:11:da:62:83:45:54: 39:65:f3:ca:87:e2:8a:d3:b0:ac:ea:47:e8:1e:91:60:c3:d1: 8d:b9:a4:24:73:3d:b2:69:03:ad:77:bc:a1:a7:2d:a9:9c:47: 0e:23:5f:af:4e:95:87:2d:5c:00:27:b0:33:0f:b4:bc:9e:50: 5d:5a:0d:91:d3:8a:e4:ce:f7:40:50:ad:6f:87:10:65:7b:65: 9c:58:04:d7:5b:49:72:6e:dc:50:1a:4a:a7:bf:aa:36:a4:0d: 21:5d:76:d8:5a:4e:46:82:7d:15:e2:bd:0d:8d:28:0f:31:f9: 28:3b:2a:c8:97:7d:ff:c5:c7:1d:63:27:29:f9:a1:29:46:90: d7:4f:c9:a1:79:ab:9c:a4:29:30:f6:86:90:ac:2e:28:f1:a2: 8f:75:18:50:5f:2d:47:e0:b9:82:7c:e8:18:3d:0b:5a:72:1e: 7b:ab:94:c0:98:b8:fb:22:ba:ff:c8:ad:08:fb:6f:3e:80:af: c3:46:16:8e:2f:95:0e:07:b2:ca:52:77:54:1d:51:47:6e:3f: fe:0a:06:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFANW1ZL76uACNBO8ZoL+TySDomQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQzMEMzMDA1ODdGNkQ4MUJFOUI1NTQ0M0VBOEVFOTQy MjlGQ0YzNDAeFw0yNjA2MDIyMDU1MzFaFw0yNjA2MDQwMDU4MzFaMDMxMTAvBgNV BAMTKDI2NjA5RENDNTQyMTMxQjM2NEEwM0Q0QkM4MDFCMjU5NEU2M0EwMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd0aPdx+KMpiOuomLx45UZmiY4 qhLDn9z6NSxr7ncpZzHrMHB19PulEquz8wcEknESJLyrvfdsnT9EfD2sSBq29P6g 5Mh4SEVAsAdvbdtyBGwm6bCEu9U+iMnQrbw479lt16uqKBu6KJXMtsYN6XEGBgUc du/ytV145C844R7pZ+FvxSCmt5h526ooDJOWdRggPs9li2FVLLbbszavCNEmChJo zS8z+Tdm5LcgXMyfzz9OEbWWmAQwW0IHuLPcIzZb3csOBuMdfB7kMFA/go4ap5pN SKnV554DGVRUNXuJHtwsBHoH9HJ9Tit7ysAg5qCbUhHeDE7Z4dv5vPZFW3UpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJmCdzFQhMbNkoD1LyAGyWU5joCkwHwYDVR0j BBgwFoAULTDDAFh/bYG+m1VEPqjulCKfzzQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTRkY2VmNjUtNWRlMy00MTI5LWFjMjctNzcwNmQ3MjY2MDAxLzAvMkQzMEMzMDA1 ODdGNkQ4MUJFOUI1NTQ0M0VBOEVFOTQyMjlGQ0YzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDMwQzMwMDU4N0Y2RDgxQkU5QjU1NDQzRUE4RUU5NDIyOUZD RjM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMkQzMEMzMDA1ODdGNkQ4MUJFOUI1NTQ0M0VBOEVF OTQyMjlGQ0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfXCN73UNNHToS3zQLoevX8JdZEarbbqKW9 ANtBj3b459dJSz89UghrNVcZszxEthHaYoNFVDll88qH4orTsKzqR+gekWDD0Y25 pCRzPbJpA613vKGnLamcRw4jX69OlYctXAAnsDMPtLyeUF1aDZHTiuTO90BQrW+H EGV7ZZxYBNdbSXJu3FAaSqe/qjakDSFddthaTkaCfRXivQ2NKA8x+Sg7KsiXff/F xx1jJyn5oSlGkNdPyaF5q5ykKTD2hpCsLijxoo91GFBfLUfguYJ86Bg9C1pyHnur lMCYuPsiuv/IrQj7bz6Ar8NGFo4vlQ4HsspSd1QdUUduP/4KBkI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:19:14 2026 by rpki-client