$ rpki-client -vvf rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft File: 2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft (raw, json) Hash identifier: x5mwnaF0ZBKemxZeuaD9WJH8fhBUzjKcXL1nPmrTLxo= Subject key identifier: A2:95:3C:22:16:2F:1F:4B:C4:82:B7:84:D0:2A:AC:A2:80:A9:14:F7 Authority key identifier: 2B:5A:07:8B:9D:8A:31:7D:A7:A2:AD:40:20:90:C9:AE:72:A1:D0:F4 Certificate issuer: /CN=2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4 Certificate serial: BDD0C3514D23701B31615CD3D29FF79922C825 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft Manifest number: 2E Signing time: Fri 05 Jun 2026 01:58:33 +0000 Manifest this update: Fri 05 Jun 2026 01:53:33 +0000 Manifest next update: Sat 06 Jun 2026 03:20:33 +0000 Files and hashes: 1: 2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl (hash: l/na49IptCJ8/TmSHCe/wqbijeB0kHCUjXrNpO7h3DI=) 2: 3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa (hash: I+MpxcufYeam5pksOgKwBNTewvekIqJYxt3l7XuR42Q=) 3: 3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa (hash: cjqOi69hQ/DuVUUYy0IY+fZE1a6xIzJfgF06BFHgrL0=) 4: 3130332e3130302e39392e302f32342d3234203d3e20313336383338.roa (hash: YEpJ9MshH91OnFv/znxkxIYveM8j2r6OPnOxKsElZA4=) 5: 3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa (hash: SSJvSdL4NA21o/quBBkRYHXaBZlnNisf6npebpyix0w=) 6: 3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa (hash: F/SUGaqSrvN9l0bA+VVFhafqTQPYwg8gVdDw3HwYYEg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jun 2026 03:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: bd:d0:c3:51:4d:23:70:1b:31:61:5c:d3:d2:9f:f7:99:22:c8:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4 Validity Not Before: Jun 5 01:53:33 2026 GMT Not After : Jun 6 03:20:33 2026 GMT Subject: CN=A2953C22162F1F4BC482B784D02AACA280A914F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:20:60:a2:fd:90:46:87:35:f8:8c:6a:40:a1: f5:c8:14:5c:62:f3:f2:bf:b8:b5:ba:1b:28:a8:1f: eb:2f:bd:99:8c:14:06:00:08:e1:1a:fe:08:67:1a: d0:9d:42:36:df:fc:d6:80:3d:93:95:50:e4:c3:f5: 7d:35:d9:2d:09:44:6e:d9:77:dd:b2:53:8d:48:3e: 35:be:c4:b1:5d:22:86:3c:f0:65:1e:a3:82:7e:68: 2b:18:63:c2:72:85:42:07:ee:f4:db:98:75:1b:1f: 30:a4:41:bf:fb:6c:8f:b6:22:a2:15:66:b0:3b:f3: 5c:7a:29:6c:c3:e1:55:c5:9c:44:09:d9:3f:a5:6e: 8a:f8:8d:31:6b:57:a0:59:89:4b:dd:09:da:27:e5: f4:f0:6d:46:93:7c:14:a2:a5:1e:11:f6:40:63:48: 77:4e:3d:eb:ae:9a:02:40:f4:79:27:8a:a0:0c:bf: e7:14:78:ba:32:23:f0:6e:64:ba:1a:2c:9d:34:fa: 52:5a:fe:66:a5:05:82:a6:b6:86:93:a5:74:29:05: 7d:3d:64:37:cd:7a:95:16:4c:e3:e4:73:f0:d4:ce: ea:21:20:5a:8d:51:ed:f1:21:28:6c:09:13:29:c8: 5b:d1:e3:ee:08:24:83:89:e4:cf:a7:ff:d7:dc:8f: 67:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:95:3C:22:16:2F:1F:4B:C4:82:B7:84:D0:2A:AC:A2:80:A9:14:F7 X509v3 Authority Key Identifier: keyid:2B:5A:07:8B:9D:8A:31:7D:A7:A2:AD:40:20:90:C9:AE:72:A1:D0:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:cd:be:0c:17:7d:1f:c7:40:70:5d:15:07:4b:a5:52:55:a2: b2:a8:83:67:ae:c5:78:ea:59:3c:88:76:5c:35:f6:67:f5:1a: 3c:9d:90:e8:71:d6:97:17:4b:81:47:ab:27:98:ba:6f:36:d1: d1:56:fc:8a:ff:94:4b:4d:1e:b4:a1:1e:c3:fb:07:be:f0:8b: 99:03:e0:a6:5b:0b:a4:35:81:8d:70:90:ad:c8:22:69:1b:86: 07:79:a9:bd:74:bc:a3:eb:87:6b:36:5d:fa:88:1c:1b:6c:78: ec:fa:d7:de:9d:39:79:5d:47:98:4d:5c:7a:2a:b5:dc:78:72: ed:54:a2:f8:de:eb:c2:5f:66:cb:50:64:71:c7:59:4b:98:8d: 1f:a5:35:1f:51:48:65:50:c7:b2:fa:00:41:5c:e5:8c:22:75: b6:0c:77:10:02:21:c9:ef:3a:8d:f6:4b:22:42:60:0f:d9:34: e9:f2:8c:45:14:68:40:51:17:8c:58:29:78:7b:cb:55:0a:a7: 6b:90:89:b9:db:06:16:42:dc:8d:43:f3:93:fc:28:c4:aa:e8: 6f:82:43:8f:1a:63:e1:d3:86:7f:4f:58:7c:60:5e:a4:22:39: 27:b5:2e:de:49:74:e2:3d:11:e9:09:09:64:d5:f0:50:4c:d3: 6d:0b:56:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAL3Qw1FNI3AbMWFc09Kf95kiyCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI1QTA3OEI5RDhBMzE3REE3QTJBRDQwMjA5MEM5QUU3 MkExRDBGNDAeFw0yNjA2MDUwMTUzMzNaFw0yNjA2MDYwMzIwMzNaMDMxMTAvBgNV BAMTKEEyOTUzQzIyMTYyRjFGNEJDNDgyQjc4NEQwMkFBQ0EyODBBOTE0RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpIGCi/ZBGhzX4jGpAofXIFFxi 8/K/uLW6GyioH+svvZmMFAYACOEa/ghnGtCdQjbf/NaAPZOVUOTD9X012S0JRG7Z d92yU41IPjW+xLFdIoY88GUeo4J+aCsYY8JyhUIH7vTbmHUbHzCkQb/7bI+2IqIV ZrA781x6KWzD4VXFnEQJ2T+lbor4jTFrV6BZiUvdCdon5fTwbUaTfBSipR4R9kBj SHdOPeuumgJA9HkniqAMv+cUeLoyI/BuZLoaLJ00+lJa/malBYKmtoaTpXQpBX09 ZDfNepUWTOPkc/DUzuohIFqNUe3xIShsCRMpyFvR4+4IJIOJ5M+n/9fcj2etAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUopU8IhYvH0vEgreE0CqsooCpFPcwHwYDVR0j BBgwFoAUK1oHi52KMX2noq1AIJDJrnKh0PQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTNkODA2NDMtZDVlOS00MWFmLTk0ZGYtNmQ5NGZiZjQ2NDg3LzAvMkI1QTA3OEI5 RDhBMzE3REE3QTJBRDQwMjA5MEM5QUU3MkExRDBGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQjVBMDc4QjlEOEEzMTdEQTdBMkFENDAyMDkwQzlBRTcyQTFE MEY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTNkODA2NDMtZDVlOS00MWFmLTk0 ZGYtNmQ5NGZiZjQ2NDg3LzAvMkI1QTA3OEI5RDhBMzE3REE3QTJBRDQwMjA5MEM5 QUU3MkExRDBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7NvgwXfR/HQHBdFQdLpVJVorKog2euxXjq WTyIdlw19mf1GjydkOhx1pcXS4FHqyeYum820dFW/Ir/lEtNHrShHsP7B77wi5kD 4KZbC6Q1gY1wkK3IImkbhgd5qb10vKPrh2s2XfqIHBtseOz6196dOXldR5hNXHoq tdx4cu1Uovje68JfZstQZHHHWUuYjR+lNR9RSGVQx7L6AEFc5YwidbYMdxACIcnv Oo32SyJCYA/ZNOnyjEUUaEBRF4xYKXh7y1UKp2uQibnbBhZC3I1D85P8KMSq6G+C Q48aY+HThn9PWHxgXqQiOSe1Lt5JdOI9EekJCWTV8FBM020LVkw= -----END CERTIFICATE-----Generated at Fri Jun 5 19:51:58 2026 by rpki-client