$ rpki-client -vvf rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft File: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft (raw, json) Hash identifier: FX6wwKkSQn3KDnMwO7Oq62VlgOgMArmxCSRVo+t1vpQ= Subject key identifier: FB:0D:4A:0B:07:23:29:8E:A9:5C:5A:66:68:B9:4F:44:09:B3:84:81 Authority key identifier: 2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A Certificate issuer: /CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A Certificate serial: 37D34CB7A0670F84E75F673E228810249932DD07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 14:37:58 +0000 Manifest this update: Tue 02 Jun 2026 14:32:58 +0000 Manifest next update: Wed 03 Jun 2026 16:30:58 +0000 Files and hashes: 1: 3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa (hash: GzkXDWcauMWYNDn5MyFD1nDjKkP9ZpScdykpa6iOEak=) 2: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl (hash: Hbno/B+KBZTFu35DOdh3S8i4j0rpABmq9OSr2qx3vbE=) 3: 3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa (hash: VdJ1ZIQnNrJcWKeLJSeBvVO0FNQ/sxBZNurd+uNh3ek=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d3:4c:b7:a0:67:0f:84:e7:5f:67:3e:22:88:10:24:99:32:dd:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A Validity Not Before: Jun 2 14:32:58 2026 GMT Not After : Jun 3 16:30:58 2026 GMT Subject: CN=FB0D4A0B0723298EA95C5A6668B94F4409B38481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a7:a5:23:3a:3d:51:fb:cf:75:7f:0f:31:67: 7c:53:c0:fb:31:3c:d8:e9:46:44:ac:26:82:5c:31: 59:21:11:12:cb:38:49:da:a3:a3:b6:d9:4f:d1:79: 53:e9:b5:c2:c3:29:1a:19:f9:dd:a5:79:aa:bb:35: 7c:1f:8b:45:b7:2b:af:64:70:aa:a6:6e:00:73:ed: 93:7a:4c:29:7e:04:38:de:61:01:a9:84:b1:8c:ab: ed:c7:20:c6:f4:8c:89:56:05:49:6b:19:59:d1:df: 04:be:d2:09:b7:45:eb:3a:33:27:f1:46:9a:74:2d: f8:0d:f0:e1:81:1e:8a:51:c7:18:73:d1:65:1d:89: 20:5b:e1:5f:39:a4:6c:eb:b0:7d:a7:cd:48:7d:a7: d0:4d:72:44:c3:e3:1f:f5:eb:02:d8:6f:8c:08:d4: 1b:43:88:5c:96:83:63:47:08:20:30:92:99:e3:46: 06:b9:3b:9e:88:eb:3e:a0:2a:7d:da:cc:a4:a4:2c: c7:68:90:93:ed:39:ac:b3:9a:a6:a0:f6:c2:fe:53: 9e:13:5a:b4:c5:ef:e6:86:de:61:2a:23:8d:78:22: 1c:2e:c7:e6:02:28:69:4a:b7:0f:c8:b4:36:9c:fc: 8d:4e:3f:3b:80:4c:51:b4:6b:c3:63:98:28:e9:df: 17:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0D:4A:0B:07:23:29:8E:A9:5C:5A:66:68:B9:4F:44:09:B3:84:81 X509v3 Authority Key Identifier: keyid:2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:2a:29:74:f5:be:b9:d8:2a:cb:b0:86:6a:18:88:a0:ee:04: 83:65:54:7f:8f:1d:8c:2c:ca:35:52:4a:54:50:18:4d:4e:51: ba:64:d6:2b:7e:4b:04:23:9f:a0:58:2f:5a:eb:96:7a:d3:cf: ac:00:e4:d6:5c:50:66:2f:81:34:61:f9:ff:fc:33:9e:f5:a9: 23:9f:ce:7c:0f:c7:2c:48:61:67:d2:69:f8:b0:87:a6:ab:45: 1a:cd:04:e8:19:f3:8d:78:59:3d:24:09:d5:a7:62:a8:16:cb: dc:40:0a:cd:ba:53:d8:f4:07:c1:9f:55:d9:c4:ba:12:89:4d: 59:b1:26:0d:9b:fc:f7:f0:c7:0c:0b:db:fb:de:49:29:48:79: cd:e9:a1:cd:47:cc:f6:14:9c:8f:6d:e0:99:bb:7c:9e:45:d3: 8d:89:24:a1:48:6e:a9:aa:5e:f0:a8:00:a6:b4:bb:9d:55:a5: b4:00:77:fd:37:a7:78:1f:89:17:e3:d6:d5:03:60:53:64:93: 28:15:1b:95:6a:6b:ae:22:da:ae:23:ab:49:03:45:74:72:3a: f5:d0:93:c2:be:7f:01:35:81:1c:9e:67:b0:16:72:f7:54:70: 09:56:d3:cf:16:74:1a:51:f7:68:ef:a9:cb:30:f4:f5:42:d1: 4e:25:9f:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN9NMt6BnD4TnX2c+IogQJJky3QcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJGQzc0MUFBMTc3MUZDNUNFNzc5RTRDRjg4QTVDM0FG NTJGOEU3QTAeFw0yNjA2MDIxNDMyNThaFw0yNjA2MDMxNjMwNThaMDMxMTAvBgNV BAMTKEZCMEQ0QTBCMDcyMzI5OEVBOTVDNUE2NjY4Qjk0RjQ0MDlCMzg0ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlp6UjOj1R+891fw8xZ3xTwPsx PNjpRkSsJoJcMVkhERLLOEnao6O22U/ReVPptcLDKRoZ+d2leaq7NXwfi0W3K69k cKqmbgBz7ZN6TCl+BDjeYQGphLGMq+3HIMb0jIlWBUlrGVnR3wS+0gm3Res6Myfx Rpp0LfgN8OGBHopRxxhz0WUdiSBb4V85pGzrsH2nzUh9p9BNckTD4x/16wLYb4wI 1BtDiFyWg2NHCCAwkpnjRga5O56I6z6gKn3azKSkLMdokJPtOayzmqag9sL+U54T WrTF7+aG3mEqI414Ihwux+YCKGlKtw/ItDac/I1OPzuATFG0a8NjmCjp3xenAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+w1KCwcjKY6pXFpmaLlPRAmzhIEwHwYDVR0j BBgwFoAUK/x0GqF3H8XOd55M+IpcOvUvjnowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWRiZDNhNTAtODMyZS00MTI3LTk0ZTEtNDhhY2UxNjRjZjI2LzAvMkJGQzc0MUFB MTc3MUZDNUNFNzc5RTRDRjg4QTVDM0FGNTJGOEU3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQkZDNzQxQUExNzcxRkM1Q0U3NzlFNENGODhBNUMzQUY1MkY4 RTdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWRiZDNhNTAtODMyZS00MTI3LTk0 ZTEtNDhhY2UxNjRjZjI2LzAvMkJGQzc0MUFBMTc3MUZDNUNFNzc5RTRDRjg4QTVD M0FGNTJGOEU3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQqKXT1vrnYKsuwhmoYiKDuBINlVH+PHYws yjVSSlRQGE1OUbpk1it+SwQjn6BYL1rrlnrTz6wA5NZcUGYvgTRh+f/8M571qSOf znwPxyxIYWfSafiwh6arRRrNBOgZ8414WT0kCdWnYqgWy9xACs26U9j0B8GfVdnE uhKJTVmxJg2b/PfwxwwL2/veSSlIec3poc1HzPYUnI9t4Jm7fJ5F042JJKFIbqmq XvCoAKa0u51VpbQAd/03p3gfiRfj1tUDYFNkkygVG5Vqa64i2q4jq0kDRXRyOvXQ k8K+fwE1gRyeZ7AWcvdUcAlW088WdBpR92jvqcsw9PVC0U4lnz0= -----END CERTIFICATE-----Generated at Wed Jun 3 03:28:22 2026 by rpki-client