$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft File: 2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft (raw, json) Hash identifier: 6xOY5cqqupeMnlnJqgkDavVu/2lbq9MXLs+8OIbsMA4= Subject key identifier: 56:53:75:A7:99:49:D6:4C:8A:5B:1B:5F:A5:4B:34:AC:9E:89:39:78 Authority key identifier: 26:95:C5:87:0A:02:5E:F2:E5:D5:7A:EA:E0:60:19:14:A8:CB:88:70 Certificate issuer: /CN=2695C5870A025EF2E5D57AEAE0601914A8CB8870 Certificate serial: 2C4DC53BA8C55D6B98FB21421D2F4D4F2F6B6A40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:28:05 +0000 Manifest this update: Tue 02 Jun 2026 22:23:05 +0000 Manifest next update: Thu 04 Jun 2026 00:36:05 +0000 Files and hashes: 1: 2695C5870A025EF2E5D57AEAE0601914A8CB8870.crl (hash: abMPw5quObAdbP395TpXZvA1oXXhZBHOJ4vRK0zvVLo=) 2: 3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa (hash: 2FI3DRw6poz7+/6DZetNhGhzUS2lCGKW4XFdtiSijVE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.crl rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 00:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:4d:c5:3b:a8:c5:5d:6b:98:fb:21:42:1d:2f:4d:4f:2f:6b:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2695C5870A025EF2E5D57AEAE0601914A8CB8870 Validity Not Before: Jun 2 22:23:05 2026 GMT Not After : Jun 4 00:36:05 2026 GMT Subject: CN=565375A79949D64C8A5B1B5FA54B34AC9E893978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:62:00:0f:8f:e9:e6:10:d6:0a:fd:ee:fd: 42:c8:7f:dd:fc:aa:c9:52:40:85:f9:b9:b6:6b:eb: de:11:61:a8:89:e8:6f:77:ea:07:07:09:85:10:a5: 0b:23:90:e9:76:ed:44:84:91:3c:74:8b:24:da:00: 33:15:9a:c4:a2:5d:e1:54:05:de:f3:93:54:6f:84: 1d:ef:db:73:0a:cd:6d:c6:73:0a:e7:44:91:40:12: ee:41:46:33:6f:d3:b4:32:4b:ab:ae:3f:6c:b4:65: 53:21:89:47:7e:4b:47:ef:e9:83:86:1b:2b:a7:16: 4a:6c:94:b2:e0:6f:97:17:6a:17:e6:84:f0:43:22: 98:eb:74:6a:21:25:ec:fd:1f:07:0c:7c:ad:ad:1e: 7c:49:50:18:a4:3d:eb:fa:88:ee:34:b2:8d:04:d7: 5c:5b:15:7b:c0:73:92:a5:fa:54:3d:14:62:76:f5: 41:03:6d:fe:3d:e0:67:25:4d:ff:62:b5:67:6e:49: 7e:16:3e:2a:3b:27:e0:de:b7:2e:df:91:b8:8b:b9: 66:3c:d6:33:59:73:26:5f:c4:68:cd:71:d4:a8:bc: cb:eb:ad:66:50:10:46:82:03:0b:6b:9a:90:e2:0a: 3b:48:79:60:29:f9:48:eb:7d:50:3e:7c:14:ef:ae: bd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:53:75:A7:99:49:D6:4C:8A:5B:1B:5F:A5:4B:34:AC:9E:89:39:78 X509v3 Authority Key Identifier: keyid:26:95:C5:87:0A:02:5E:F2:E5:D5:7A:EA:E0:60:19:14:A8:CB:88:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:11:e4:1d:67:9e:d3:4e:4a:69:cc:da:19:50:39:03:4e:ff: fc:6b:bd:c5:e5:92:63:55:8e:8e:aa:50:98:b1:cb:d9:0f:b9: 64:a2:5e:21:f4:1d:8d:cf:87:2e:59:d8:89:87:39:3d:d0:6c: 01:0d:7a:01:bb:9a:32:b4:6b:88:57:e3:76:47:0e:8c:69:00: 3b:a7:49:9e:8f:ef:ba:f0:26:be:77:4a:b8:99:40:78:9b:65: 38:ad:1d:27:2f:14:f8:a5:a3:24:ec:f8:96:64:73:4f:24:fb: 97:b8:b6:07:f3:a2:e8:1b:a9:a5:05:1c:73:a5:b5:c1:74:73: 38:ff:fc:01:79:dd:15:ae:d5:bd:6f:e1:1b:a8:1a:78:11:10: a0:09:27:03:10:01:7d:2b:f1:a2:45:23:a9:aa:13:ab:62:6e: f1:fc:d1:7d:ea:58:bc:45:d5:b0:d1:3f:2b:01:45:8c:8e:a1: 55:cc:3c:50:89:2b:32:d9:b8:68:3f:d6:37:81:c1:0b:fb:d3: 5e:c9:57:ec:36:cc:fe:72:84:0e:61:a3:88:0f:18:59:26:74: d8:ac:43:fb:bd:ad:41:c6:e6:df:b7:db:46:7a:20:a6:1f:bc: 56:f0:eb:fd:b3:21:13:66:f5:38:70:ca:2f:62:a9:8a:ee:c5: 7c:6e:54:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULE3FO6jFXWuY+yFCHS9NTy9rakAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY5NUM1ODcwQTAyNUVGMkU1RDU3QUVBRTA2MDE5MTRB OENCODg3MDAeFw0yNjA2MDIyMjIzMDVaFw0yNjA2MDQwMDM2MDVaMDMxMTAvBgNV BAMTKDU2NTM3NUE3OTk0OUQ2NEM4QTVCMUI1RkE1NEIzNEFDOUU4OTM5NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAU2IAD4/p5hDWCv3u/ULIf938 qslSQIX5ubZr694RYaiJ6G936gcHCYUQpQsjkOl27USEkTx0iyTaADMVmsSiXeFU Bd7zk1RvhB3v23MKzW3GcwrnRJFAEu5BRjNv07QyS6uuP2y0ZVMhiUd+S0fv6YOG GyunFkpslLLgb5cXahfmhPBDIpjrdGohJez9HwcMfK2tHnxJUBikPev6iO40so0E 11xbFXvAc5Kl+lQ9FGJ29UEDbf494GclTf9itWduSX4WPio7J+Dety7fkbiLuWY8 1jNZcyZfxGjNcdSovMvrrWZQEEaCAwtrmpDiCjtIeWAp+UjrfVA+fBTvrr2dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVlN1p5lJ1kyKWxtfpUs0rJ6JOXgwHwYDVR0j BBgwFoAUJpXFhwoCXvLl1Xrq4GAZFKjLiHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZkNTcyMDEtN2UyZi00OWJiLTk0MWQtOWZjYWJlODYyM2Y1LzAvMjY5NUM1ODcw QTAyNUVGMkU1RDU3QUVBRTA2MDE5MTRBOENCODg3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNjk1QzU4NzBBMDI1RUYyRTVENTdBRUFFMDYwMTkxNEE4Q0I4 ODcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZkNTcyMDEtN2UyZi00OWJiLTk0 MWQtOWZjYWJlODYyM2Y1LzAvMjY5NUM1ODcwQTAyNUVGMkU1RDU3QUVBRTA2MDE5 MTRBOENCODg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsR5B1nntNOSmnM2hlQOQNO//xrvcXlkmNV jo6qUJixy9kPuWSiXiH0HY3Phy5Z2ImHOT3QbAENegG7mjK0a4hX43ZHDoxpADun SZ6P77rwJr53SriZQHibZTitHScvFPiloyTs+JZkc08k+5e4tgfzougbqaUFHHOl tcF0czj//AF53RWu1b1v4RuoGngREKAJJwMQAX0r8aJFI6mqE6tibvH80X3qWLxF 1bDRPysBRYyOoVXMPFCJKzLZuGg/1jeBwQv7017JV+w2zP5yhA5ho4gPGFkmdNis Q/u9rUHG5t+320Z6IKYfvFbw6/2zIRNm9Thwyi9iqYruxXxuVNs= -----END CERTIFICATE-----Generated at Wed Jun 3 04:44:57 2026 by rpki-client