$ rpki-client -vvf rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft File: 2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft (raw, json) Hash identifier: WqBxcRAZX0cifD+lqZ1UkkosVFwivtklAItysZwrLl4= Subject key identifier: 0A:BB:78:23:0C:A6:00:EB:7B:C7:90:BC:2B:D0:1E:8C:03:01:4E:35 Authority key identifier: 2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14 Certificate issuer: /CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714 Certificate serial: 1DC980E1491DE1C01071B5660B40A8343FB5864A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 00:20:18 +0000 Manifest this update: Sat 20 Jun 2026 00:15:18 +0000 Manifest next update: Sun 21 Jun 2026 03:48:18 +0000 Files and hashes: 1: 3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa (hash: hq7t6IGdrToWC5Y/u0/ln3majWig7C7xPRHwOMHho0s=) 2: 3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (hash: HyudSDnKB8bCiy0S2RrKH+D8dZ2RY7de+E6PViymOWI=) 3: 3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (hash: ib7HPEQ/1sTUx6nXpMyLf2LdpmFve2tZtQrzXQVTi5I=) 4: 2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl (hash: ax+ktjjSqkQR457pWeaesHu/KXO67AnSgnx5Vv5pToI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:c9:80:e1:49:1d:e1:c0:10:71:b5:66:0b:40:a8:34:3f:b5:86:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714 Validity Not Before: Jun 20 00:15:18 2026 GMT Not After : Jun 21 03:48:18 2026 GMT Subject: CN=0ABB78230CA600EB7BC790BC2BD01E8C03014E35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:76:f1:0c:63:d0:ef:9e:8b:25:d8:24:dd:f2: e7:84:d1:f8:65:da:5f:e4:32:2e:00:20:aa:62:e8: 30:3f:d0:72:02:53:38:60:2a:46:f1:53:b9:8e:18: 7d:20:e9:88:8f:7a:cb:c1:b5:e6:f5:9d:ae:86:45: 4a:9d:2d:4c:65:d6:7d:2a:15:df:fb:b8:f4:57:5c: 51:56:6d:11:fd:ec:19:81:08:58:9b:a1:3f:e4:23: 60:6f:c7:4d:42:e2:64:f5:88:ce:53:43:ea:af:0c: 69:78:06:c0:b5:8a:06:2c:95:2d:a3:9b:d1:e2:fb: f1:48:f9:1e:4f:72:ab:bb:2d:60:fa:d7:cc:43:c1: a6:2c:c1:77:08:6e:6b:34:08:70:2e:66:dd:63:65: e9:fe:24:71:0f:9a:e7:2c:43:b8:16:01:49:77:31: c3:6a:ac:f8:e4:4e:55:63:69:b7:93:b7:62:d7:30: 3d:2d:36:74:cd:60:e0:78:85:4f:3d:11:85:c6:47: 47:55:0c:3c:e7:f2:c6:f8:07:80:78:f9:6d:22:e1: 7d:5e:30:cd:fd:bd:86:e1:c2:dd:47:70:d9:2e:94: 4a:a9:fd:73:41:fb:8c:da:d7:4f:4f:25:e4:58:d6: 45:8c:32:59:eb:27:a9:31:a3:39:35:c3:b6:bb:7a: 26:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BB:78:23:0C:A6:00:EB:7B:C7:90:BC:2B:D0:1E:8C:03:01:4E:35 X509v3 Authority Key Identifier: keyid:2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:12:e8:12:91:1e:95:57:dd:18:f4:fc:73:11:fc:07:e0:bf: 56:54:9f:08:52:8f:0b:35:80:82:68:33:7d:1f:70:bd:ad:c2: 2e:6d:98:28:53:50:a4:2b:bf:71:77:0d:93:36:20:00:05:c6: 08:3c:e2:2b:85:0e:8a:97:1b:6e:6c:86:7f:c4:15:31:0e:a1: 37:9f:01:bd:6b:15:91:a9:8c:40:fa:91:40:de:ed:87:d6:b3: 72:ed:74:ba:c8:fa:94:28:55:11:b7:4a:00:95:ea:20:70:98: b8:9f:b6:36:c0:92:ff:18:1f:b7:74:b0:c4:fe:5b:cb:a9:1e: db:99:fc:3b:9c:75:7b:da:f4:1f:58:97:32:9e:b5:dd:dd:c4: ec:a8:99:6e:38:0e:06:db:c8:e6:52:d8:11:57:c4:ad:dd:0f: 33:57:40:f3:fa:2b:ec:a0:72:03:b3:16:9d:c9:3f:a4:63:23: dc:65:7c:78:60:64:f7:ec:98:a8:d9:13:06:5f:94:6e:fb:57: 51:36:3c:36:24:cf:64:f1:d4:37:f6:ff:ac:b2:b4:ce:47:4a: 08:d7:96:b5:5a:9c:a7:ab:79:b9:01:58:a3:2c:35:bc:51:d1: 35:f3:b5:e7:ce:e9:24:2d:38:e5:4f:79:e5:55:25:d8:16:19: e0:03:58:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHcmA4Ukd4cAQcbVmC0CoND+1hkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRBRkMyNTAzMDUwOUFENzEyNkJCRDkzQUJDQ0I5NUU3 QTE4NjcxNDAeFw0yNjA2MjAwMDE1MThaFw0yNjA2MjEwMzQ4MThaMDMxMTAvBgNV BAMTKDBBQkI3ODIzMENBNjAwRUI3QkM3OTBCQzJCRDAxRThDMDMwMTRFMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCldvEMY9Dvnosl2CTd8ueE0fhl 2l/kMi4AIKpi6DA/0HICUzhgKkbxU7mOGH0g6YiPesvBteb1na6GRUqdLUxl1n0q Fd/7uPRXXFFWbRH97BmBCFiboT/kI2Bvx01C4mT1iM5TQ+qvDGl4BsC1igYslS2j m9Hi+/FI+R5Pcqu7LWD618xDwaYswXcIbms0CHAuZt1jZen+JHEPmucsQ7gWAUl3 McNqrPjkTlVjabeTt2LXMD0tNnTNYOB4hU89EYXGR0dVDDzn8sb4B4B4+W0i4X1e MM39vYbhwt1HcNkulEqp/XNB+4za109PJeRY1kWMMlnrJ6kxozk1w7a7eibLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCrt4IwymAOt7x5C8K9AejAMBTjUwHwYDVR0j BBgwFoAULa/CUDBQmtcSa72Tq8y5XnoYZxQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0YmI0YzgtNmZjZi00ZmZmLWJkY2MtZmUxZmNjZWUxMDQ1LzAvMkRBRkMyNTAz MDUwOUFENzEyNkJCRDkzQUJDQ0I5NUU3QTE4NjcxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREFGQzI1MDMwNTA5QUQ3MTI2QkJEOTNBQkNDQjk1RTdBMTg2 NzE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0YmI0YzgtNmZjZi00ZmZmLWJk Y2MtZmUxZmNjZWUxMDQ1LzAvMkRBRkMyNTAzMDUwOUFENzEyNkJCRDkzQUJDQ0I5 NUU3QTE4NjcxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAS6BKRHpVX3Rj0/HMR/Afgv1ZUnwhSjws1 gIJoM30fcL2twi5tmChTUKQrv3F3DZM2IAAFxgg84iuFDoqXG25shn/EFTEOoTef Ab1rFZGpjED6kUDe7YfWs3LtdLrI+pQoVRG3SgCV6iBwmLiftjbAkv8YH7d0sMT+ W8upHtuZ/DucdXva9B9YlzKetd3dxOyomW44DgbbyOZS2BFXxK3dDzNXQPP6K+yg cgOzFp3JP6RjI9xlfHhgZPfsmKjZEwZflG77V1E2PDYkz2Tx1Df2/6yytM5HSgjX lrVanKerebkBWKMsNbxR0TXztefO6SQtOOVPeeVVJdgWGeADWGw= -----END CERTIFICATE-----Generated at Sat Jun 20 09:15:21 2026 by rpki-client