$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft File: 2FE1FA7D4DD3388355BABAD73020013D485C168C.mft (raw, json) Hash identifier: iNDb70ThCnQZKHPEB5B443wdNQyN6YnZXOytcUhtWxg= Subject key identifier: E5:96:7B:30:1A:97:E4:55:E4:4D:34:C9:52:25:C3:64:3E:21:36:B5 Authority key identifier: 2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C Certificate issuer: /CN=2FE1FA7D4DD3388355BABAD73020013D485C168C Certificate serial: 51719FF0F2BE2362A88A40B1DE44764EB84681FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 00:55:51 +0000 Manifest this update: Wed 03 Jun 2026 00:50:51 +0000 Manifest next update: Thu 04 Jun 2026 01:09:51 +0000 Files and hashes: 1: 2FE1FA7D4DD3388355BABAD73020013D485C168C.crl (hash: ce8OHc/jhe2sj+aDhyuomMteoIf9vkLnT/911/n76y0=) 2: 3130332e39352e32322e302f32332d3233203d3e20313530353537.roa (hash: aB7QEaSEcJTWbjfIxBku5UcRO6NDRrQsqaho45FCjZI=) 3: 3130332e39352e32332e302f32342d3234203d3e20313530353537.roa (hash: QUvsonqLXdsih84z12pFdTCBAMOMy8pmVg5n4B/zEOQ=) 4: 3130332e39352e32322e302f32342d3234203d3e20313530353537.roa (hash: UmfUI05XEmk9hWgPXOd+povgJcvWbtg+6u6rN6Z8bBg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.crl rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 01:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:71:9f:f0:f2:be:23:62:a8:8a:40:b1:de:44:76:4e:b8:46:81:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FE1FA7D4DD3388355BABAD73020013D485C168C Validity Not Before: Jun 3 00:50:51 2026 GMT Not After : Jun 4 01:09:51 2026 GMT Subject: CN=E5967B301A97E455E44D34C95225C3643E2136B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:54:4b:46:e6:3a:a7:9f:78:e7:b1:7a:8c:61: b4:72:11:62:a1:e8:d6:0f:a0:f6:f1:7a:20:ce:15: 96:a7:7d:e1:04:f2:c0:44:06:bd:96:3f:58:33:76: af:7e:12:2a:7f:32:24:0b:85:15:04:fd:eb:75:23: 20:78:49:de:95:89:0d:d4:84:82:39:54:1f:1c:47: 98:2e:03:7e:8e:a0:10:ea:2d:76:0e:8e:25:74:c7: 65:c1:ac:3a:8f:91:a0:28:15:9b:9c:4a:f9:ba:34: e0:4d:f2:28:71:3b:bf:e6:2e:54:d2:e0:3b:d8:0f: 7b:54:f0:1f:e3:d4:84:c9:0e:50:04:11:bf:37:ff: 8c:4d:2b:35:b5:06:91:6c:4d:1c:5a:7b:e0:3c:2d: 3f:d8:7f:78:f3:de:a3:0b:87:f1:11:d8:f6:ac:4b: 2f:aa:08:c4:2a:b6:5d:eb:a9:ab:42:0c:3d:33:b4: f3:81:61:17:1a:79:42:0f:bc:8c:a2:0b:23:37:57: c3:6d:e7:cc:34:f1:82:f6:d1:e8:f3:66:40:52:ea: 3e:2f:58:3a:3e:c4:3b:98:8c:f7:d4:85:56:1c:7e: d7:27:b0:18:91:96:78:98:54:98:a1:4e:55:50:e9: 64:64:3c:00:cf:b4:a5:fc:e2:e9:74:f6:17:02:af: 69:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:96:7B:30:1A:97:E4:55:E4:4D:34:C9:52:25:C3:64:3E:21:36:B5 X509v3 Authority Key Identifier: keyid:2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b2:22:e4:0a:d2:66:d7:6d:49:c4:31:ab:a2:95:6f:fb:8f: 1b:7b:91:74:38:85:23:0e:d7:7d:3d:bd:a3:44:80:09:f9:cf: 4f:95:09:46:32:3e:bd:a4:69:de:79:cf:e8:93:dc:f8:a0:03: 9c:50:3b:07:71:34:d1:ec:53:20:a6:79:4a:c0:27:31:71:6b: ca:36:0f:00:48:8d:8d:4b:76:2d:bb:0b:ce:a5:6a:db:ee:b9: 72:ab:0f:6e:43:a1:70:1c:83:96:c0:a9:e8:22:a0:06:00:c2: 1f:b7:64:db:fd:87:9b:6c:0a:1c:2e:25:b5:8a:d3:dc:fc:40: ec:d8:e5:26:47:b3:87:fd:32:2e:32:6a:84:1e:93:c8:eb:ee: 26:bd:3b:3e:a0:2d:01:b0:00:5b:3b:d2:ad:04:ae:8d:24:60: 6d:71:cd:be:67:83:13:4a:b1:34:10:9e:6d:ae:1d:99:13:46: 7b:94:01:e7:cb:6e:96:f2:6a:e0:81:fb:da:70:01:12:2b:ec: 62:da:18:f2:7e:94:aa:4b:1e:89:73:e4:ea:ef:b7:1b:f1:ac: c9:35:ce:c0:f6:52:34:43:eb:2f:95:ff:a2:07:e2:38:53:97: 4f:2a:bb:ec:f8:1f:49:f5:33:52:fd:a3:1e:5a:f8:d7:5a:9a: 7d:dc:a9:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUXGf8PK+I2KoikCx3kR2TrhGgfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZFMUZBN0Q0REQzMzg4MzU1QkFCQUQ3MzAyMDAxM0Q0 ODVDMTY4QzAeFw0yNjA2MDMwMDUwNTFaFw0yNjA2MDQwMTA5NTFaMDMxMTAvBgNV BAMTKEU1OTY3QjMwMUE5N0U0NTVFNDREMzRDOTUyMjVDMzY0M0UyMTM2QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVEtG5jqnn3jnsXqMYbRyEWKh 6NYPoPbxeiDOFZanfeEE8sBEBr2WP1gzdq9+Eip/MiQLhRUE/et1IyB4Sd6ViQ3U hII5VB8cR5guA36OoBDqLXYOjiV0x2XBrDqPkaAoFZucSvm6NOBN8ihxO7/mLlTS 4DvYD3tU8B/j1ITJDlAEEb83/4xNKzW1BpFsTRxae+A8LT/Yf3jz3qMLh/ER2Pas Sy+qCMQqtl3rqatCDD0ztPOBYRcaeUIPvIyiCyM3V8Nt58w08YL20ejzZkBS6j4v WDo+xDuYjPfUhVYcftcnsBiRlniYVJihTlVQ6WRkPADPtKX84ul09hcCr2mTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ZZ7MBqX5FXkTTTJUiXDZD4hNrUwHwYDVR0j BBgwFoAUL+H6fU3TOINVurrXMCABPUhcFowwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZkNGY4NjktNGRiNi00YjBhLWFhYjYtY2RlNDdiNDQ3ZDc3LzAvMkZFMUZBN0Q0 REQzMzg4MzU1QkFCQUQ3MzAyMDAxM0Q0ODVDMTY4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkUxRkE3RDRERDMzODgzNTVCQUJBRDczMDIwMDEzRDQ4NUMx NjhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZkNGY4NjktNGRiNi00YjBhLWFh YjYtY2RlNDdiNDQ3ZDc3LzAvMkZFMUZBN0Q0REQzMzg4MzU1QkFCQUQ3MzAyMDAx M0Q0ODVDMTY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2yIuQK0mbXbUnEMauilW/7jxt7kXQ4hSMO 1309vaNEgAn5z0+VCUYyPr2kad55z+iT3PigA5xQOwdxNNHsUyCmeUrAJzFxa8o2 DwBIjY1Ldi27C86latvuuXKrD25DoXAcg5bAqegioAYAwh+3ZNv9h5tsChwuJbWK 09z8QOzY5SZHs4f9Mi4yaoQek8jr7ia9Oz6gLQGwAFs70q0Ero0kYG1xzb5ngxNK sTQQnm2uHZkTRnuUAefLbpbyauCB+9pwARIr7GLaGPJ+lKpLHolz5OrvtxvxrMk1 zsD2UjRD6y+V/6IH4jhTl08qu+z4H0n1M1L9ox5a+Ndamn3cqWI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:07:57 2026 by rpki-client