$ rpki-client -vvf rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft File: 117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft (raw, json) Hash identifier: sON2yrK0K2BrBoPWBFjR2WlihWaNAqyx7OVp0LT2JIY= Subject key identifier: 19:65:85:15:DE:EF:3A:D1:8E:2E:2A:36:59:78:FB:3F:B6:98:88:E4 Authority key identifier: 11:7E:DB:2C:7E:35:7D:66:94:5E:9D:85:AB:0F:26:46:2E:08:B3:F7 Certificate issuer: /CN=117EDB2C7E357D66945E9D85AB0F26462E08B3F7 Certificate serial: 27EF271380A1E2B85C56E01BDB3BA1FCA0239C7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 15:59:18 +0000 Manifest this update: Tue 02 Jun 2026 15:54:18 +0000 Manifest next update: Wed 03 Jun 2026 16:24:18 +0000 Files and hashes: 1: 3130332e3133302e342e302f32342d3234203d3e20313338303933.roa (hash: uXphZOgs1UxDr6rlg7GEi/R0AmZWeoVGQk1F8ZBelwY=) 2: 3130332e3133302e352e302f32342d3234203d3e20313338303933.roa (hash: PhJmneFuDWlTXWctD2qR5ZAYy5+ja872YXywtoKMqcg=) 3: 117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl (hash: FEzfw6a0Z7Zgnzdyh6v+Mjvyt6btd4YGTaPzoJDIVr4=) 4: 3130332e3133302e372e302f32342d3234203d3e20313338303933.roa (hash: TTCI25wdl8MT1j/k3SgrRG2ioIhmgTNO/KKrY8EcLOs=) 5: 3130332e3133302e362e302f32342d3234203d3e20313338303933.roa (hash: 9glYBsYr2QWSfiwb0WHAYJMulo/TgpJ7re/5Z5a0XvI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ef:27:13:80:a1:e2:b8:5c:56:e0:1b:db:3b:a1:fc:a0:23:9c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117EDB2C7E357D66945E9D85AB0F26462E08B3F7 Validity Not Before: Jun 2 15:54:18 2026 GMT Not After : Jun 3 16:24:18 2026 GMT Subject: CN=19658515DEEF3AD18E2E2A365978FB3FB69888E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a8:80:0c:f0:6b:00:1f:91:d8:b4:00:2d:f3: f7:c8:3b:75:37:ce:78:6a:84:f5:da:81:cf:91:a2: 80:82:8f:62:50:7a:01:e7:8b:a4:9b:51:ff:56:80: d6:ee:5d:1b:c5:e4:98:0d:e9:19:bb:13:fa:fe:e8: bb:bf:4f:c7:3b:17:a6:b8:cd:e8:d7:61:23:31:5a: 36:66:49:b4:84:03:7d:8f:db:ce:2c:3e:e7:6a:9d: 54:fa:b3:fb:0d:ac:db:c6:de:aa:8e:5a:6e:26:28: 05:85:9f:5c:c6:6b:8d:99:dd:65:ea:96:c2:53:57: 2a:ff:76:8d:a1:98:0d:a4:42:c6:e1:0a:9a:41:5b: 9e:2a:f4:76:1a:e9:14:11:51:d4:9d:53:a1:d8:59: f2:9f:4e:de:07:39:18:82:d8:8b:66:77:86:8d:41: 6c:b5:05:2a:54:ff:96:81:1b:0c:22:72:5e:ae:eb: 26:8a:54:74:0d:3d:b9:46:77:45:d2:82:56:cf:7e: 76:73:cf:73:aa:5c:b8:88:52:28:9f:29:e0:be:38: 6d:0d:5f:4e:2a:62:cb:6f:44:03:4d:fb:8c:03:33: ad:56:2a:c6:99:2e:27:ed:fc:aa:62:9c:5b:fc:8e: 31:f4:c5:33:15:9e:98:14:b8:23:03:0a:61:2d:23: 06:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:65:85:15:DE:EF:3A:D1:8E:2E:2A:36:59:78:FB:3F:B6:98:88:E4 X509v3 Authority Key Identifier: keyid:11:7E:DB:2C:7E:35:7D:66:94:5E:9D:85:AB:0F:26:46:2E:08:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:8b:de:54:c3:50:28:66:32:71:c5:ae:b9:66:23:a2:77:98: 0e:17:83:7e:ff:14:0b:94:aa:88:93:35:96:24:30:4c:8b:cb: bc:f3:49:f0:17:03:bc:48:3c:40:20:0b:53:79:d9:cf:8b:21: 77:b4:ad:6a:d0:8c:2c:ee:9b:89:6b:0e:68:10:33:b7:1e:82: ab:0f:4f:62:49:7e:0b:ba:75:85:a8:5d:9a:23:f5:dc:cb:9e: 7b:2a:4a:aa:37:09:e3:ff:5e:7d:33:9d:52:01:dc:4d:b7:e9: d5:d1:3c:45:a2:cc:bc:54:17:a1:d6:43:a0:52:98:83:ba:db: 3e:7d:4c:df:c5:e4:4c:bd:80:58:5f:61:59:fb:d0:e5:16:7d: 79:72:9a:b2:e5:37:c1:bb:da:1d:1d:06:c7:7b:91:fb:9a:06: b8:b2:63:07:3d:df:54:c1:43:d8:b6:cd:52:a8:b0:5b:ec:e3: cc:7f:87:63:ee:7c:30:2c:d6:48:0a:18:ee:71:43:13:a9:87: 38:98:ad:b5:08:06:8a:42:2d:32:2b:25:a9:3b:ea:84:42:df: 5b:f6:79:72:d9:5e:d9:52:5e:72:8d:07:16:a2:ae:27:e3:47: a6:68:b4:12:e8:d9:a6:f0:86:89:a9:de:d2:7f:a7:be:06:6c: d5:02:f0:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+8nE4Ch4rhcVuAb2zuh/KAjnHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE3RURCMkM3RTM1N0Q2Njk0NUU5RDg1QUIwRjI2NDYy RTA4QjNGNzAeFw0yNjA2MDIxNTU0MThaFw0yNjA2MDMxNjI0MThaMDMxMTAvBgNV BAMTKDE5NjU4NTE1REVFRjNBRDE4RTJFMkEzNjU5NzhGQjNGQjY5ODg4RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjqIAM8GsAH5HYtAAt8/fIO3U3 znhqhPXagc+RooCCj2JQegHni6SbUf9WgNbuXRvF5JgN6Rm7E/r+6Lu/T8c7F6a4 zejXYSMxWjZmSbSEA32P284sPudqnVT6s/sNrNvG3qqOWm4mKAWFn1zGa42Z3WXq lsJTVyr/do2hmA2kQsbhCppBW54q9HYa6RQRUdSdU6HYWfKfTt4HORiC2Itmd4aN QWy1BSpU/5aBGwwicl6u6yaKVHQNPblGd0XSglbPfnZzz3OqXLiIUiifKeC+OG0N X04qYstvRANN+4wDM61WKsaZLift/KpinFv8jjH0xTMVnpgUuCMDCmEtIwaBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGWWFFd7vOtGOLio2WXj7P7aYiOQwHwYDVR0j BBgwFoAUEX7bLH41fWaUXp2Fqw8mRi4Is/cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI5ZTA2MzYtMWZlMi00ZDNiLThjMzgtMmRiYjk5MTRlOTEzLzAvMTE3RURCMkM3 RTM1N0Q2Njk0NUU5RDg1QUIwRjI2NDYyRTA4QjNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTdFREIyQzdFMzU3RDY2OTQ1RTlEODVBQjBGMjY0NjJFMDhC M0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzI5ZTA2MzYtMWZlMi00ZDNiLThj MzgtMmRiYjk5MTRlOTEzLzAvMTE3RURCMkM3RTM1N0Q2Njk0NUU5RDg1QUIwRjI2 NDYyRTA4QjNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSL3lTDUChmMnHFrrlmI6J3mA4Xg37/FAuU qoiTNZYkMEyLy7zzSfAXA7xIPEAgC1N52c+LIXe0rWrQjCzum4lrDmgQM7cegqsP T2JJfgu6dYWoXZoj9dzLnnsqSqo3CeP/Xn0znVIB3E236dXRPEWizLxUF6HWQ6BS mIO62z59TN/F5Ey9gFhfYVn70OUWfXlymrLlN8G72h0dBsd7kfuaBriyYwc931TB Q9i2zVKosFvs48x/h2PufDAs1kgKGO5xQxOphziYrbUIBopCLTIrJak76oRC31v2 eXLZXtlSXnKNBxairifjR6ZotBLo2abwhomp3tJ/p74GbNUC8Nw= -----END CERTIFICATE-----Generated at Wed Jun 3 03:28:24 2026 by rpki-client