$ rpki-client -vvf rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft File: 2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft (raw, json) Hash identifier: wE9YCSwL/AZwexsu46Uvetea+DjAbkeUjWrpInznNzo= Subject key identifier: F2:8C:A3:88:1B:7B:CD:36:1B:56:9B:2C:D4:59:02:EC:14:88:FA:79 Authority key identifier: 2C:A6:27:0F:A0:99:DB:2B:77:ED:B7:EA:A9:30:40:FF:23:6B:21:4B Certificate issuer: /CN=2CA6270FA099DB2B77EDB7EAA93040FF236B214B Certificate serial: 010FFE86D667A7CDE410A6BDCF108A32AD190058 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:48:33 +0000 Manifest this update: Tue 02 Jun 2026 22:43:33 +0000 Manifest next update: Thu 04 Jun 2026 00:13:33 +0000 Files and hashes: 1: 3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (hash: 7n3FY8Iu2mTaPEdpSsiUuLrwQ3K9YP1KBkJ8ERWrHmg=) 2: 2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl (hash: 3PjZJiFfLcIZCOdqkQI7O+dOXT/JVtY4vBv3jTIt5Lo=) 3: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (hash: 5yASRqMJGpH3BlgDiF4qbtYdpHoRGPLyhQdyV1pz60w=) 4: 3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (hash: RYdUas2TasB0Egv36O3FoGBWixKmz+f1qKRhr6wdPhI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0f:fe:86:d6:67:a7:cd:e4:10:a6:bd:cf:10:8a:32:ad:19:00:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA6270FA099DB2B77EDB7EAA93040FF236B214B Validity Not Before: Jun 2 22:43:33 2026 GMT Not After : Jun 4 00:13:33 2026 GMT Subject: CN=F28CA3881B7BCD361B569B2CD45902EC1488FA79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b1:cc:42:1f:c4:ee:44:3b:5b:cb:5e:9a:29: 21:c5:39:b8:82:27:47:99:c1:e2:42:0e:78:3f:2d: eb:dc:37:9b:37:4e:59:0a:c8:63:5e:d2:6c:f0:4c: bf:fb:d8:19:ef:d1:ad:08:b6:74:d4:c1:c7:c4:6d: 4e:38:4a:a9:52:39:76:8c:d4:b8:83:c8:81:65:58: 83:32:3e:12:7b:65:29:99:c2:1f:24:0f:47:80:77: 05:48:fa:20:67:8a:88:33:93:4f:30:e1:7a:50:f1: db:3a:25:9c:6f:70:80:30:f1:ed:8e:a4:2b:2b:c0: 45:11:4d:90:1a:c6:14:09:7f:a4:4f:aa:44:60:27: ee:e4:e3:c8:27:5d:c0:10:3e:41:f8:dc:36:01:a0: 0b:10:49:78:b4:cd:a8:85:47:be:40:93:ec:86:5b: b8:19:23:8f:99:be:f5:af:de:40:75:ba:19:ca:fc: 1e:be:b5:88:67:85:36:2e:b2:4f:6f:62:61:31:a5: 09:8c:86:66:02:0e:dc:99:23:37:0d:fc:1b:4c:f4: c6:9f:31:6b:8f:01:84:51:3e:cc:da:cc:0d:3d:6b: 37:4e:6a:ad:29:fb:11:83:1e:73:5a:ee:56:a3:e4: df:60:bf:ed:0a:76:3b:7c:c3:ee:56:dd:80:2d:b6: 7a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8C:A3:88:1B:7B:CD:36:1B:56:9B:2C:D4:59:02:EC:14:88:FA:79 X509v3 Authority Key Identifier: keyid:2C:A6:27:0F:A0:99:DB:2B:77:ED:B7:EA:A9:30:40:FF:23:6B:21:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:b5:a1:fa:75:45:bb:20:e5:73:f0:e6:c5:63:e7:61:96:67: df:e6:f8:1c:18:b6:4f:46:f5:42:4a:72:ee:6a:5c:e2:53:f0: 78:6b:58:66:33:d8:84:15:86:a1:70:98:4b:ef:1d:27:61:2f: e0:cc:1e:f7:aa:91:bd:65:57:c3:1d:67:67:1a:04:a7:df:4a: 5d:67:d2:12:6c:0f:61:27:43:5b:3f:66:f2:d3:75:4e:a0:3f: 18:c6:9b:cd:d9:07:63:47:1f:4f:66:9c:55:2d:86:29:18:75: fd:0c:e6:48:82:b1:c6:6d:46:a6:d2:57:31:7a:dd:f9:17:61: 44:e6:87:3b:c8:e2:51:d7:77:01:62:ef:f8:ed:4e:24:f3:a6: 15:42:c5:67:0e:04:65:89:2f:05:51:6e:2f:11:14:89:8a:a7: 55:55:25:9b:d2:49:ea:07:60:90:43:c3:18:4a:41:eb:2a:e6: 77:37:03:ce:e1:42:98:a5:b1:27:dc:f4:3d:ff:45:8f:65:b7: 66:bc:0c:1c:35:a3:88:ac:88:d5:75:16:b9:57:55:a7:11:e3: f9:26:26:98:de:55:0a:6b:b0:39:7c:06:52:78:87:b6:9a:c6: a3:0a:d2:17:dd:84:c1:e5:f2:98:c2:37:b9:3b:50:ba:ea:b1: 1f:78:a6:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAQ/+htZnp83kEKa9zxCKMq0ZAFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNjI3MEZBMDk5REIyQjc3RURCN0VBQTkzMDQwRkYy MzZCMjE0QjAeFw0yNjA2MDIyMjQzMzNaFw0yNjA2MDQwMDEzMzNaMDMxMTAvBgNV BAMTKEYyOENBMzg4MUI3QkNEMzYxQjU2OUIyQ0Q0NTkwMkVDMTQ4OEZBNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcscxCH8TuRDtby16aKSHFObiC J0eZweJCDng/LevcN5s3TlkKyGNe0mzwTL/72Bnv0a0ItnTUwcfEbU44SqlSOXaM 1LiDyIFlWIMyPhJ7ZSmZwh8kD0eAdwVI+iBniogzk08w4XpQ8ds6JZxvcIAw8e2O pCsrwEURTZAaxhQJf6RPqkRgJ+7k48gnXcAQPkH43DYBoAsQSXi0zaiFR75Ak+yG W7gZI4+ZvvWv3kB1uhnK/B6+tYhnhTYusk9vYmExpQmMhmYCDtyZIzcN/BtM9Maf MWuPAYRRPszazA09azdOaq0p+xGDHnNa7laj5N9gv+0Kdjt8w+5W3YAttnpLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8oyjiBt7zTYbVpss1FkC7BSI+nkwHwYDVR0j BBgwFoAULKYnD6CZ2yt37bfqqTBA/yNrIUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY3YTdmMGUtOGQwNy00NWRlLTgyNTItM2JmZmMwNWU1NjQ5LzAvMkNBNjI3MEZB MDk5REIyQjc3RURCN0VBQTkzMDQwRkYyMzZCMjE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0E2MjcwRkEwOTlEQjJCNzdFREI3RUFBOTMwNDBGRjIzNkIy MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTY3YTdmMGUtOGQwNy00NWRlLTgy NTItM2JmZmMwNWU1NjQ5LzAvMkNBNjI3MEZBMDk5REIyQjc3RURCN0VBQTkzMDQw RkYyMzZCMjE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIO1ofp1Rbsg5XPw5sVj52GWZ9/m+BwYtk9G 9UJKcu5qXOJT8HhrWGYz2IQVhqFwmEvvHSdhL+DMHveqkb1lV8MdZ2caBKffSl1n 0hJsD2EnQ1s/ZvLTdU6gPxjGm83ZB2NHH09mnFUthikYdf0M5kiCscZtRqbSVzF6 3fkXYUTmhzvI4lHXdwFi7/jtTiTzphVCxWcOBGWJLwVRbi8RFImKp1VVJZvSSeoH YJBDwxhKQesq5nc3A87hQpilsSfc9D3/RY9lt2a8DBw1o4isiNV1FrlXVacR4/km JpjeVQprsDl8BlJ4h7aaxqMK0hfdhMHl8pjCN7k7ULrqsR94pvY= -----END CERTIFICATE-----Generated at Wed Jun 3 03:46:36 2026 by rpki-client