$ rpki-client -vvf rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft File: 2702EC259515C0960B0BFF36647679F0CA781E52.mft (raw, json) Hash identifier: 6DcO6NinGRCAiavfiyoGWil2YSSdj469lsivubk6o9s= Subject key identifier: D2:25:EA:09:03:D8:1A:CE:B4:78:C3:55:34:A0:09:04:AC:E6:BC:49 Authority key identifier: 27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52 Certificate issuer: /CN=2702EC259515C0960B0BFF36647679F0CA781E52 Certificate serial: 40CB743A2D2622C9DDE675E522B2A6E622341C6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 12:55:55 +0000 Manifest this update: Tue 02 Jun 2026 12:50:55 +0000 Manifest next update: Wed 03 Jun 2026 13:35:55 +0000 Files and hashes: 1: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: vNMbKB+jjAGCqgxCSWzjKIMOhXwlS0DnqcWYtGqskho=) 2: 2702EC259515C0960B0BFF36647679F0CA781E52.crl (hash: 92njRUNVd5LM0vO/9kCrDvb4SwKQF3JZvfcJ1NU83V4=) 3: 3130332e3133382e36332e302f32342d3234203d3e20313338383433.roa (hash: MvYURtqKvXgJtHDe+bGVN+qQ+GvO+Bbw/63OedWxccg=) 4: 323430343a636263303a3a2f34302d3430203d3e20313338383433.roa (hash: g1km73POKKg69MSbDnEF0CkpP2rF3ZrF65BD2T6WTQc=) 5: 3130332e3133382e36322e302f32342d3234203d3e20313338383433.roa (hash: /lklKRwQXzQQDya+GH3WUkfxs3Rw/gHVRuuz1tcXoUE=) 6: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: SF5csYZOV6O0/pz/yzpUeG3NGqNwVVPBe+gjRAAxx1w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.crl rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 13:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:cb:74:3a:2d:26:22:c9:dd:e6:75:e5:22:b2:a6:e6:22:34:1c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2702EC259515C0960B0BFF36647679F0CA781E52 Validity Not Before: Jun 2 12:50:55 2026 GMT Not After : Jun 3 13:35:55 2026 GMT Subject: CN=D225EA0903D81ACEB478C35534A00904ACE6BC49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:17:0f:a7:65:4b:8b:83:7b:f2:17:2d:f7:aa: 57:f1:13:b9:6e:4d:cf:8a:82:ca:ed:d8:41:2f:c4: c7:3d:34:9e:4c:6b:c1:73:b2:3e:5d:04:53:79:d7: 61:59:b2:bc:32:60:f1:ab:cc:0b:56:b5:54:c9:b5: 0a:5b:c8:ed:ce:de:9b:aa:60:ea:55:52:c1:e3:f9: b8:0c:b3:75:ea:fa:73:36:b4:ee:1b:ce:e4:64:f9: ea:68:ac:56:05:c4:4c:72:68:30:17:cd:32:7d:eb: df:91:3b:c6:5a:be:98:ee:57:c5:bb:30:a9:e5:ca: 56:a0:f7:b4:60:62:09:e8:04:eb:15:06:8a:ce:3d: 1b:7c:72:9e:a9:50:89:b0:01:fe:02:64:ff:26:4a: f5:09:df:11:06:82:76:7b:ec:fe:e3:da:93:83:0b: 21:28:81:21:c7:d7:6e:80:26:be:cd:82:ea:ea:85: 81:18:25:74:96:7e:65:5c:4b:25:6a:de:e3:a8:b8: cb:96:5a:7d:7f:1a:f8:26:79:b2:ea:cf:7a:8f:e1: 11:df:eb:54:0b:aa:c9:99:34:d4:2b:a0:11:26:2c: 9b:71:d0:34:8f:65:53:e2:29:42:83:69:c9:52:b6: 9b:99:74:8c:60:c3:68:99:6c:9c:ea:43:59:53:7c: 77:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:25:EA:09:03:D8:1A:CE:B4:78:C3:55:34:A0:09:04:AC:E6:BC:49 X509v3 Authority Key Identifier: keyid:27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e3:4b:c5:9b:b5:f7:9e:da:78:9d:ca:40:9c:18:4c:3b:77: 7b:08:36:27:a2:a3:48:15:2f:f4:29:3d:ac:3a:ab:6d:15:0f: 0a:f7:bc:d9:6f:4b:cd:08:02:31:da:be:42:e2:05:66:64:27: af:49:dc:12:6c:c9:df:cb:86:d5:65:2c:a3:24:39:f0:2f:eb: 98:07:c2:78:29:ce:e0:7d:77:47:1c:19:2a:e7:c8:c0:2e:56: d9:ca:2c:46:68:19:f2:a6:39:49:d5:b7:90:74:e7:6c:82:b6: bf:ed:f1:fc:80:47:89:ec:b0:6c:e3:7a:a5:49:25:88:5e:75: 8f:be:10:4b:81:16:9a:e6:f3:ee:0f:6b:6d:1a:2b:51:71:51: f4:6d:9c:ef:ae:73:e7:63:70:26:9b:c4:eb:0f:8f:93:80:ba: 27:40:55:bf:16:3c:6d:8c:6a:0f:bf:36:2d:a6:97:a8:c4:98: 97:a0:b1:f3:8c:3a:52:6a:76:67:e6:de:33:fd:5e:42:77:35: 05:2e:25:d2:34:b1:9b:6b:35:17:3a:87:88:e0:0a:07:a4:d4: 35:e9:20:7d:28:ac:28:67:10:4d:a0:61:85:d3:cd:4a:bc:81: 0d:de:ec:4f:f7:a9:53:d5:db:7c:92:c7:db:2a:7a:6c:4d:27: 3d:d9:bb:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQMt0Oi0mIsnd5nXlIrKm5iI0HG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjcwMkVDMjU5NTE1QzA5NjBCMEJGRjM2NjQ3Njc5RjBD QTc4MUU1MjAeFw0yNjA2MDIxMjUwNTVaFw0yNjA2MDMxMzM1NTVaMDMxMTAvBgNV BAMTKEQyMjVFQTA5MDNEODFBQ0VCNDc4QzM1NTM0QTAwOTA0QUNFNkJDNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFFw+nZUuLg3vyFy33qlfxE7lu Tc+Kgsrt2EEvxMc9NJ5Ma8Fzsj5dBFN512FZsrwyYPGrzAtWtVTJtQpbyO3O3puq YOpVUsHj+bgMs3Xq+nM2tO4bzuRk+eporFYFxExyaDAXzTJ969+RO8ZavpjuV8W7 MKnlylag97RgYgnoBOsVBorOPRt8cp6pUImwAf4CZP8mSvUJ3xEGgnZ77P7j2pOD CyEogSHH126AJr7NgurqhYEYJXSWfmVcSyVq3uOouMuWWn1/GvgmebLqz3qP4RHf 61QLqsmZNNQroBEmLJtx0DSPZVPiKUKDaclStpuZdIxgw2iZbJzqQ1lTfHe7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0iXqCQPYGs60eMNVNKAJBKzmvEkwHwYDVR0j BBgwFoAUJwLsJZUVwJYLC/82ZHZ58Mp4HlIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmM1ODY3ZDgtM2Q2Zi00ODE2LWI4NGYtZmRkNWM1MDJiNjM0LzAvMjcwMkVDMjU5 NTE1QzA5NjBCMEJGRjM2NjQ3Njc5RjBDQTc4MUU1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNzAyRUMyNTk1MTVDMDk2MEIwQkZGMzY2NDc2NzlGMENBNzgx RTUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmM1ODY3ZDgtM2Q2Zi00ODE2LWI4 NGYtZmRkNWM1MDJiNjM0LzAvMjcwMkVDMjU5NTE1QzA5NjBCMEJGRjM2NjQ3Njc5 RjBDQTc4MUU1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjjS8Wbtfee2nidykCcGEw7d3sINieio0gV L/QpPaw6q20VDwr3vNlvS80IAjHavkLiBWZkJ69J3BJsyd/LhtVlLKMkOfAv65gH wngpzuB9d0ccGSrnyMAuVtnKLEZoGfKmOUnVt5B052yCtr/t8fyAR4nssGzjeqVJ JYhedY++EEuBFprm8+4Pa20aK1FxUfRtnO+uc+djcCabxOsPj5OAuidAVb8WPG2M ag+/Ni2ml6jEmJegsfOMOlJqdmfm3jP9XkJ3NQUuJdI0sZtrNRc6h4jgCgek1DXp IH0orChnEE2gYYXTzUq8gQ3e7E/3qVPV23ySx9sqemxNJz3Zu/I= -----END CERTIFICATE-----Generated at Wed Jun 3 03:50:55 2026 by rpki-client