$ rpki-client -vvf rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft File: 2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft (raw, json) Hash identifier: bOBeCjm546toXd4z0mqY8piIVkKjfeeqjj8y00gKo68= Subject key identifier: E1:C2:99:B2:23:65:56:99:0C:95:60:8C:2E:06:09:2E:99:CE:AC:F9 Authority key identifier: 2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32 Certificate issuer: /CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32 Certificate serial: 08932F1ED2B6788ACE86F4C729E3E90FFA42840A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 14:07:17 +0000 Manifest this update: Tue 02 Jun 2026 14:02:17 +0000 Manifest next update: Wed 03 Jun 2026 14:31:17 +0000 Files and hashes: 1: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: WTrF0cDS2UOT2PvqICS4rHLAPEa2DituaEKy6TilvQo=) 2: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: Ks9YnRvxTe5fupbuzzjnQ7H1k8qTkpLLIojCNDLV9tI=) 3: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: gQZiPSYPZragbcbOQFwUKBcBf5Wr0XRio1UQ/GfXKcY=) 4: 3130332e35322e36302e302f32332d3233203d3e20313339343237.roa (hash: wZpRBXgVxARx5THQhkidt3uYEJCBivcYi7zf6PFHOe8=) 5: 2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl (hash: OwTT8Gupq6WMVr8PwleWvVepNqaGMXBayYYQojKv9sc=) 6: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: rpaRQ6pLcg3h8lZWS5mZP3KVaWJuOAbOO/JXcmWKPAY=) 7: 3130332e35322e36302e302f32342d3234203d3e20313339343237.roa (hash: oRYTuCJLLdMWXGYdD1e1WCx/FrIV0BiHCyH2sk8DrtM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 14:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:93:2f:1e:d2:b6:78:8a:ce:86:f4:c7:29:e3:e9:0f:fa:42:84:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32 Validity Not Before: Jun 2 14:02:17 2026 GMT Not After : Jun 3 14:31:17 2026 GMT Subject: CN=E1C299B2236556990C95608C2E06092E99CEACF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f2:30:0c:f2:c2:47:ab:18:88:48:bd:b7:60: 6c:53:f6:ad:a5:ae:7d:c1:86:28:ee:c0:87:c9:4f: 29:b1:92:a1:ca:c0:0d:a5:cc:78:f6:da:79:14:3d: 87:fd:39:cc:41:f7:27:c7:04:56:c9:d5:94:b1:c7: 4f:95:8a:6f:54:46:b8:ad:6a:4a:97:af:07:94:4e: 9b:19:c7:6a:bf:1e:30:75:52:59:c4:cc:52:0e:35: 1a:a9:95:b9:d9:8c:65:91:1e:8b:dd:1a:93:35:be: 94:76:dd:3f:24:06:6c:24:47:26:47:14:a4:a2:cc: 8c:ca:db:d9:8f:39:ad:cd:ff:bf:ba:85:ed:eb:4f: 95:4d:97:a8:3e:32:70:cf:0a:2a:ac:3d:bd:1a:92: b2:8d:cc:b5:e7:62:2d:92:de:ab:db:16:5f:0b:85: 37:52:88:e1:63:40:36:2e:59:21:04:90:63:fb:b6: 5e:8d:ff:7c:b5:27:7b:bf:68:19:87:e2:4f:82:7a: dd:00:9d:c9:ae:2b:20:24:c9:44:91:ab:c0:29:1e: a5:ed:ad:d9:9b:42:68:1c:e4:d6:df:39:6c:3f:d2: 1f:ee:60:17:c0:e6:9b:9a:13:08:58:c0:35:0d:0c: da:5c:1b:f9:f4:5d:d9:2e:4b:53:a5:fb:26:0a:c5: 3b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C2:99:B2:23:65:56:99:0C:95:60:8C:2E:06:09:2E:99:CE:AC:F9 X509v3 Authority Key Identifier: keyid:2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:2a:c1:70:cd:c6:93:eb:4e:a4:af:e3:44:48:3c:d7:ba:fe: 0f:06:5d:c4:5d:a5:2c:89:e1:97:68:25:0d:39:c8:74:88:fe: dc:89:f1:84:35:c0:f2:78:67:dd:94:33:7b:15:64:ee:61:42: 4e:84:75:9a:27:a8:87:e2:ee:fd:a8:bb:c0:5d:a0:34:a2:18: f6:40:25:79:4c:3b:61:50:22:59:94:e1:15:69:10:43:1a:1c: 58:04:72:b8:0e:c9:9d:83:75:0b:ab:9b:9e:9c:5a:f8:15:06: 73:a7:bc:f7:68:51:79:b2:cd:f1:ab:5a:f5:92:b2:32:7a:59: 53:eb:1a:8e:42:64:99:7a:34:3a:3b:53:73:3f:16:5c:c4:1f: dc:0f:d4:99:9c:0a:41:ba:a9:f8:7c:bf:ba:4f:a8:03:fc:c0: 1e:3d:24:6c:23:22:b3:32:d1:4b:96:e2:37:04:6b:fd:6e:36: de:48:eb:0a:2e:05:63:36:53:96:4e:d7:88:78:9a:7f:3c:48: b3:59:4c:95:8c:99:ab:7b:a8:5b:71:3f:c3:c2:36:10:cd:1b: cc:b9:4b:1d:57:06:98:92:60:55:1c:da:9b:1a:e6:3b:6e:e3: 7e:80:50:06:87:08:9b:31:8d:a7:1f:17:62:4a:15:94:09:91: cd:2e:28:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJMvHtK2eIrOhvTHKePpD/pChAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCRDgxMjk1RUEzRkEzODY3MDgyMDcyRDFCREU0MUNC RkIzRkIzMjAeFw0yNjA2MDIxNDAyMTdaFw0yNjA2MDMxNDMxMTdaMDMxMTAvBgNV BAMTKEUxQzI5OUIyMjM2NTU2OTkwQzk1NjA4QzJFMDYwOTJFOTlDRUFDRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY8jAM8sJHqxiISL23YGxT9q2l rn3BhijuwIfJTymxkqHKwA2lzHj22nkUPYf9OcxB9yfHBFbJ1ZSxx0+Vim9URrit akqXrweUTpsZx2q/HjB1UlnEzFIONRqplbnZjGWRHovdGpM1vpR23T8kBmwkRyZH FKSizIzK29mPOa3N/7+6he3rT5VNl6g+MnDPCiqsPb0akrKNzLXnYi2S3qvbFl8L hTdSiOFjQDYuWSEEkGP7tl6N/3y1J3u/aBmH4k+Cet0AncmuKyAkyUSRq8ApHqXt rdmbQmgc5NbfOWw/0h/uYBfA5puaEwhYwDUNDNpcG/n0XdkuS1Ol+yYKxTufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4cKZsiNlVpkMlWCMLgYJLpnOrPkwHwYDVR0j BBgwFoAULL2BKV6j+jhnCCBy0b3kHL+z+zIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDYxYjhjY2MtNmMyMi00MjRlLTk2MTQtOGFiOGFkMjg4NDljLzAvMkNCRDgxMjk1 RUEzRkEzODY3MDgyMDcyRDFCREU0MUNCRkIzRkIzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0JEODEyOTVFQTNGQTM4NjcwODIwNzJEMUJERTQxQ0JGQjNG QjMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDYxYjhjY2MtNmMyMi00MjRlLTk2 MTQtOGFiOGFkMjg4NDljLzAvMkNCRDgxMjk1RUEzRkEzODY3MDgyMDcyRDFCREU0 MUNCRkIzRkIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUqwXDNxpPrTqSv40RIPNe6/g8GXcRdpSyJ 4ZdoJQ05yHSI/tyJ8YQ1wPJ4Z92UM3sVZO5hQk6EdZonqIfi7v2ou8BdoDSiGPZA JXlMO2FQIlmU4RVpEEMaHFgEcrgOyZ2DdQurm56cWvgVBnOnvPdoUXmyzfGrWvWS sjJ6WVPrGo5CZJl6NDo7U3M/FlzEH9wP1JmcCkG6qfh8v7pPqAP8wB49JGwjIrMy 0UuW4jcEa/1uNt5I6wouBWM2U5ZO14h4mn88SLNZTJWMmat7qFtxP8PCNhDNG8y5 Sx1XBpiSYFUc2psa5jtu436AUAaHCJsxjacfF2JKFZQJkc0uKKQ= -----END CERTIFICATE-----Generated at Wed Jun 3 03:58:22 2026 by rpki-client