$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft File: 0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft (raw, json) Hash identifier: WWXntQB6L7il1J/2h+RD0KbgEE0ekVcXWaWMpE4pZiY= Subject key identifier: 54:27:2E:96:56:EB:6E:63:8B:7C:E0:A9:54:94:7A:C2:30:A5:7B:AA Authority key identifier: 0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8 Certificate issuer: /CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8 Certificate serial: 0FCE3A0698E368FF38D9E5456B51FC7CD1BF1BBC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 15:13:30 +0000 Manifest this update: Tue 02 Jun 2026 15:08:30 +0000 Manifest next update: Wed 03 Jun 2026 17:21:30 +0000 Files and hashes: 1: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (hash: jwkbabyLyV6UKztbR0SZEz5ZRMUHBTd8adRm57dyw+w=) 2: 3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa (hash: i6JN3toKQT5i4NNrRSH28JimRYw5XqvDzH+54AyAuPo=) 3: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (hash: 5z0mLNjU28RRuMehTiGd0TZpTvoqOni8uwA3Q/9FXCA=) 4: 0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl (hash: zgCtntZRNIqBEu4d7AWyySWZTcT00ugaXhlrLN0uOuU=) 5: 3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (hash: wzbhyHWdZFf+4zRG4eljIzSQe2JUQdKqrkpbRniPBU4=) 6: 3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (hash: cscNYPGsX1ZTL4zXvVeeKicXVJQf2gUl7CaS2wz5lho=) 7: 3130332e39382e3131372e302f32342d3234203d3e20313336383230.roa (hash: /nw/dsQp3nfOBW0Do0NFqr3xduuQUXnkGUlyPsTQV10=) 8: 3130332e39382e3131362e302f32332d3233203d3e20313336383230.roa (hash: nzJ2KTaH0mWJ2JUT7TIQaEIs1V4rS2Hb5qe4oVuW+qY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ce:3a:06:98:e3:68:ff:38:d9:e5:45:6b:51:fc:7c:d1:bf:1b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8 Validity Not Before: Jun 2 15:08:30 2026 GMT Not After : Jun 3 17:21:30 2026 GMT Subject: CN=54272E9656EB6E638B7CE0A954947AC230A57BAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8c:1d:9c:5a:9c:12:54:d2:12:a6:b6:4c:9c: 9e:87:e1:5a:f8:ae:aa:1e:9a:eb:f4:87:18:0f:bb: 87:85:84:37:89:04:ce:bd:74:e9:1d:00:98:ce:ce: 50:8e:8b:e0:6c:86:b1:bc:33:02:8c:3b:10:e5:00: 5b:e0:53:7a:33:d8:91:d5:b9:bb:d2:33:93:f2:49: 02:a8:23:82:95:a7:25:7c:5e:93:06:36:f3:91:93: 65:cd:8b:a7:84:dc:d9:46:b6:3d:42:45:bb:9b:a3: eb:2d:9d:63:c3:be:71:6f:3f:a5:4d:f0:2d:f9:39: 9a:96:81:de:5e:0c:00:2c:79:ef:60:cc:00:c0:ce: 94:5f:ed:9e:ef:82:71:c6:2b:0f:83:b0:8f:c1:12: ad:9f:f4:fe:c7:ac:7d:a1:7a:85:5e:1a:44:08:13: 4b:98:27:44:af:5a:bb:06:39:78:24:bf:d9:ae:5f: 70:74:46:da:3e:d0:85:70:27:e3:f8:76:70:33:b1: 65:9e:a0:65:d2:99:17:d4:95:b9:bf:5c:53:6c:39: 0e:88:f5:54:11:95:5f:5c:04:e8:3a:24:66:09:fb: e5:28:77:b8:d8:6d:ac:34:a9:ad:76:85:27:22:82: e7:8a:08:f3:32:1b:1e:7d:0e:33:5e:c4:14:fa:21: 55:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:27:2E:96:56:EB:6E:63:8B:7C:E0:A9:54:94:7A:C2:30:A5:7B:AA X509v3 Authority Key Identifier: keyid:0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e6:3b:cc:fe:70:31:d0:13:69:4a:89:17:23:b7:9b:7d:7c: d4:da:77:b3:5a:0f:5d:c5:25:86:93:1a:18:16:5d:09:07:62: 6a:e6:a3:18:0f:d4:cf:9d:75:1a:7f:e0:71:56:63:0b:3a:a0: a0:8b:94:c7:5c:39:a0:4b:35:72:f7:01:6e:d7:a7:2d:5c:0e: 4d:35:f2:53:99:ad:87:8d:e2:a1:1d:a9:7d:a7:4b:68:9d:26: 8f:62:84:4a:6b:10:22:ff:43:f6:46:71:b4:a2:c1:20:bb:c1: f0:5b:ad:c7:81:0a:e1:91:28:0e:c0:84:be:df:fb:8d:5d:38: a7:39:a6:15:2c:4b:11:99:36:26:7f:25:94:90:62:ce:e8:47: 12:ad:2b:fa:ba:9c:66:ef:90:e0:5e:1d:f8:53:ed:e4:0c:f6: 46:40:be:fd:75:37:cf:cf:72:59:c9:99:68:4f:49:86:63:13: 03:94:b0:9c:28:4b:c8:9e:66:22:20:1e:fc:74:81:37:13:50: 30:ea:99:ec:ac:26:be:2f:77:de:7e:30:f3:24:58:92:73:3a: 6a:f5:93:b3:29:e7:aa:17:72:99:c5:d6:a9:fa:94:ae:cb:d9: 97:a5:8f:47:84:18:3b:04:93:4c:86:b1:40:32:aa:0e:b3:47: 38:22:6b:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD846BpjjaP842eVFa1H8fNG/G7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGRTJFQTEyQUMxNTZBRjc4QUMyRDlBNDU5QUYxNkUy MTc2RUVDODAeFw0yNjA2MDIxNTA4MzBaFw0yNjA2MDMxNzIxMzBaMDMxMTAvBgNV BAMTKDU0MjcyRTk2NTZFQjZFNjM4QjdDRTBBOTU0OTQ3QUMyMzBBNTdCQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDejB2cWpwSVNISprZMnJ6H4Vr4 rqoemuv0hxgPu4eFhDeJBM69dOkdAJjOzlCOi+BshrG8MwKMOxDlAFvgU3oz2JHV ubvSM5PySQKoI4KVpyV8XpMGNvORk2XNi6eE3NlGtj1CRbubo+stnWPDvnFvP6VN 8C35OZqWgd5eDAAsee9gzADAzpRf7Z7vgnHGKw+DsI/BEq2f9P7HrH2heoVeGkQI E0uYJ0SvWrsGOXgkv9muX3B0Rto+0IVwJ+P4dnAzsWWeoGXSmRfUlbm/XFNsOQ6I 9VQRlV9cBOg6JGYJ++Uod7jYbaw0qa12hScigueKCPMyGx59DjNexBT6IVUJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVCcullbrbmOLfOCpVJR6wjCle6owHwYDVR0j BBgwFoAUD/4uoSrBVq94rC2aRZrxbiF27sgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NkNTM5NDgtZGRmMy00NDlhLWJmMmItY2YzZjdhZTE3NmQzLzAvMEZGRTJFQTEy QUMxNTZBRjc4QUMyRDlBNDU5QUYxNkUyMTc2RUVDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkZFMkVBMTJBQzE1NkFGNzhBQzJEOUE0NTlBRjE2RTIxNzZF RUM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NkNTM5NDgtZGRmMy00NDlhLWJm MmItY2YzZjdhZTE3NmQzLzAvMEZGRTJFQTEyQUMxNTZBRjc4QUMyRDlBNDU5QUYx NkUyMTc2RUVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPmO8z+cDHQE2lKiRcjt5t9fNTad7NaD13F JYaTGhgWXQkHYmrmoxgP1M+ddRp/4HFWYws6oKCLlMdcOaBLNXL3AW7Xpy1cDk01 8lOZrYeN4qEdqX2nS2idJo9ihEprECL/Q/ZGcbSiwSC7wfBbrceBCuGRKA7AhL7f +41dOKc5phUsSxGZNiZ/JZSQYs7oRxKtK/q6nGbvkOBeHfhT7eQM9kZAvv11N8/P clnJmWhPSYZjEwOUsJwoS8ieZiIgHvx0gTcTUDDqmeysJr4vd95+MPMkWJJzOmr1 k7Mp56oXcpnF1qn6lK7L2Zelj0eEGDsEk0yGsUAyqg6zRzgiaxg= -----END CERTIFICATE-----Generated at Wed Jun 3 03:49:57 2026 by rpki-client