$ rpki-client -vvf rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft File: 2CFE6C04191B28EDA13984F5549231D1840AACEC.mft (raw, json) Hash identifier: 6MJmMQ00YGLsXcxEvlQmtFHQ2YMQ961qAXBicxujg3I= Subject key identifier: 31:3E:EA:A4:49:43:91:34:BD:60:BA:00:EB:EF:8A:80:B1:10:47:4E Authority key identifier: 2C:FE:6C:04:19:1B:28:ED:A1:39:84:F5:54:92:31:D1:84:0A:AC:EC Certificate issuer: /CN=2CFE6C04191B28EDA13984F5549231D1840AACEC Certificate serial: 606247114622568A59AE5831AE94486E603E609A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:40:03 +0000 Manifest this update: Tue 02 Jun 2026 16:35:03 +0000 Manifest next update: Wed 03 Jun 2026 16:53:03 +0000 Files and hashes: 1: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: z7Lqa5CkkfTSXbCBFY/k+Fz/ISz+SJw0HySx4HiNPMc=) 2: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: dFGJI1S/FQoqvRu6ehr7n/qth/1SKexx3mS7zWvVonM=) 3: 2CFE6C04191B28EDA13984F5549231D1840AACEC.crl (hash: +pktINCQWG3RMPWUPhwA6Zm3fHjYt1S3uTxh1dJasus=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.crl rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:62:47:11:46:22:56:8a:59:ae:58:31:ae:94:48:6e:60:3e:60:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFE6C04191B28EDA13984F5549231D1840AACEC Validity Not Before: Jun 2 16:35:03 2026 GMT Not After : Jun 3 16:53:03 2026 GMT Subject: CN=313EEAA449439134BD60BA00EBEF8A80B110474E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:87:1a:78:f8:e5:e1:21:f9:48:e1:36:e3:0a: b9:3a:5d:ce:77:9c:ba:a5:f8:7e:72:48:b2:47:52: 29:52:22:0a:75:f1:b1:d3:ec:fb:e9:bc:56:97:6d: f0:1a:11:f7:b3:95:1e:71:5c:b2:43:fd:7f:14:24: 36:6f:01:a6:72:7d:15:35:a0:34:c4:aa:86:4f:1b: 02:db:17:84:70:ef:fb:39:bc:84:54:30:a5:31:39: c4:00:a4:a5:63:91:57:cc:8b:a3:24:6b:1a:65:8e: b9:ac:56:4e:2c:c3:4d:61:62:63:4a:05:32:32:4c: 23:59:55:29:95:a7:02:4e:69:77:c4:31:af:14:09: 15:d9:5a:c8:ca:ee:fd:20:a9:25:b5:ed:73:2f:45: 64:12:80:ad:46:aa:c3:8e:17:36:31:05:06:fe:6e: 9a:0f:4f:19:9e:f0:94:a6:a1:61:f2:33:d9:fc:93: 41:c6:ee:39:21:98:78:6b:e6:9c:c9:c6:ab:86:c7: 16:f3:e3:b6:ca:9b:96:63:58:cb:96:00:42:e1:2e: 65:2f:af:0c:92:5c:d3:48:3f:ad:68:57:74:23:dd: 1c:8f:6f:7f:af:40:a4:a7:12:1b:4b:f4:a1:25:e0: 82:56:bb:85:19:e2:69:2a:22:d0:ff:2f:65:76:8b: ff:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3E:EA:A4:49:43:91:34:BD:60:BA:00:EB:EF:8A:80:B1:10:47:4E X509v3 Authority Key Identifier: keyid:2C:FE:6C:04:19:1B:28:ED:A1:39:84:F5:54:92:31:D1:84:0A:AC:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ac:2e:9a:50:a7:49:c4:0e:a9:89:f3:88:1c:9f:4a:76:5a: e0:fb:5f:36:6c:26:fe:3d:27:c3:f8:b6:28:30:a5:32:83:78: 2c:be:91:5b:61:cb:b3:d7:77:4d:1a:59:ff:c6:a4:d9:94:1d: 27:27:05:a5:c1:59:aa:ca:38:d4:ea:db:78:3c:61:5b:60:d3: 55:24:bd:80:10:95:d0:48:85:8c:92:72:33:0d:c0:92:ab:86: d4:ba:e0:0b:26:42:05:c7:6f:7a:de:75:25:54:dc:44:b3:8f: 99:74:41:f7:27:8e:83:5c:f1:d1:90:e4:41:23:6d:11:a4:20: 16:01:ad:0b:94:87:ad:8c:a6:cf:d8:28:fb:73:5c:cb:a3:ec: e5:35:82:9c:2b:93:25:ac:b6:0a:a4:ad:95:1e:30:ef:c3:1a: d7:90:e7:66:a6:7d:0d:af:99:ee:bb:42:6f:cf:24:78:18:66: 18:4d:e5:c5:e8:ce:cd:23:c7:ab:ea:f2:63:3a:4a:95:2f:cc: f8:41:b7:3f:b9:66:23:c6:b1:3e:a6:1b:c8:e9:a3:3b:e1:66: c7:05:26:d5:dc:3a:b6:85:cb:7f:3a:a2:03:8a:0d:a8:75:15: 0c:17:a8:4e:b6:71:b5:2f:95:85:fd:9e:36:04:f0:f9:84:99: c1:b7:f0:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYGJHEUYiVopZrlgxrpRIbmA+YJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRTZDMDQxOTFCMjhFREExMzk4NEY1NTQ5MjMxRDE4 NDBBQUNFQzAeFw0yNjA2MDIxNjM1MDNaFw0yNjA2MDMxNjUzMDNaMDMxMTAvBgNV BAMTKDMxM0VFQUE0NDk0MzkxMzRCRDYwQkEwMEVCRUY4QTgwQjExMDQ3NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUhxp4+OXhIflI4TbjCrk6Xc53 nLql+H5ySLJHUilSIgp18bHT7PvpvFaXbfAaEfezlR5xXLJD/X8UJDZvAaZyfRU1 oDTEqoZPGwLbF4Rw7/s5vIRUMKUxOcQApKVjkVfMi6MkaxpljrmsVk4sw01hYmNK BTIyTCNZVSmVpwJOaXfEMa8UCRXZWsjK7v0gqSW17XMvRWQSgK1GqsOOFzYxBQb+ bpoPTxme8JSmoWHyM9n8k0HG7jkhmHhr5pzJxquGxxbz47bKm5ZjWMuWAELhLmUv rwySXNNIP61oV3Qj3RyPb3+vQKSnEhtL9KEl4IJWu4UZ4mkqItD/L2V2i/9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMT7qpElDkTS9YLoA6++KgLEQR04wHwYDVR0j BBgwFoAULP5sBBkbKO2hOYT1VJIx0YQKrOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU5MDhiODMtN2Y0NC00NmUwLTg1MzUtNmZiODRiNTlkNThhLzAvMkNGRTZDMDQx OTFCMjhFREExMzk4NEY1NTQ5MjMxRDE4NDBBQUNFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0ZFNkMwNDE5MUIyOEVEQTEzOTg0RjU1NDkyMzFEMTg0MEFB Q0VDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU5MDhiODMtN2Y0NC00NmUwLTg1 MzUtNmZiODRiNTlkNThhLzAvMkNGRTZDMDQxOTFCMjhFREExMzk4NEY1NTQ5MjMx RDE4NDBBQUNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKusLppQp0nEDqmJ84gcn0p2WuD7XzZsJv49 J8P4tigwpTKDeCy+kVthy7PXd00aWf/GpNmUHScnBaXBWarKONTq23g8YVtg01Uk vYAQldBIhYyScjMNwJKrhtS64AsmQgXHb3redSVU3ESzj5l0QfcnjoNc8dGQ5EEj bRGkIBYBrQuUh62Mps/YKPtzXMuj7OU1gpwrkyWstgqkrZUeMO/DGteQ52amfQ2v me67Qm/PJHgYZhhN5cXozs0jx6vq8mM6SpUvzPhBtz+5ZiPGsT6mG8jpozvhZscF JtXcOraFy386ogOKDah1FQwXqE62cbUvlYX9njYE8PmEmcG38E0= -----END CERTIFICATE-----Generated at Wed Jun 3 04:22:30 2026 by rpki-client