$ rpki-client -vvf rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft File: 2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft (raw, json) Hash identifier: d2b97vT8JSLPTrIRFxbSB3vxJPsbYvJbq5kEQkpmjNY= Subject key identifier: 68:A6:14:B9:06:01:48:52:45:5D:17:3C:4E:44:D4:08:C1:DA:33:64 Authority key identifier: 2D:88:AC:79:1B:0C:C1:B7:D9:21:EC:E6:60:CD:E0:CF:2E:E8:ED:72 Certificate issuer: /CN=2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72 Certificate serial: 0B5A1830AD31C8DDB622F177B8CF2710A1E0846C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 06:37:42 +0000 Manifest this update: Sat 20 Jun 2026 06:32:42 +0000 Manifest next update: Sun 21 Jun 2026 07:36:42 +0000 Files and hashes: 1: 3130332e3136322e3234302e302f32332d3234203d3e20313431363731.roa (hash: 4S3CjwY52E8pJFph27PsS9L2iHBVLGusILVU9iKtoiI=) 2: 2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl (hash: JPnH8h04C0P/8FF2afyRpPOr/FS7nXFjKP4iT+u61+Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:5a:18:30:ad:31:c8:dd:b6:22:f1:77:b8:cf:27:10:a1:e0:84:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72 Validity Not Before: Jun 20 06:32:42 2026 GMT Not After : Jun 21 07:36:42 2026 GMT Subject: CN=68A614B906014852455D173C4E44D408C1DA3364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:23:46:89:50:35:ee:5e:b5:82:49:b9:47:d3: 6a:f8:db:dd:b2:50:4e:28:55:ba:c3:e9:1e:ee:63: f7:44:5a:81:7f:bd:16:72:1f:cb:89:b3:03:92:7e: 99:ad:ec:86:d9:d0:20:2c:a7:95:fd:c3:10:57:29: d1:e1:cf:29:85:36:43:51:33:60:14:78:76:4d:df: d3:a0:31:6b:2d:41:29:8f:24:0b:97:58:71:c9:b9: a2:69:49:d1:51:07:0c:4d:6b:34:e5:b3:9d:e9:3e: 2f:c4:a7:25:65:e0:4c:b6:80:a7:42:a1:0c:31:7a: 62:b8:d5:d7:aa:ee:1f:df:84:7a:c0:c6:b3:7e:d9: 89:37:59:20:e2:ad:fd:40:cd:ea:df:60:da:27:96: 36:53:85:9d:be:cc:55:24:4d:0f:5f:a2:16:bb:7a: ab:0c:88:cf:23:e5:59:dd:b7:46:60:8a:ab:37:c2: 00:9a:97:ea:d1:99:9e:16:b6:e4:91:8b:b8:34:e2: 2c:78:ee:88:ec:11:d0:65:11:b4:4c:aa:52:fd:5e: a2:e1:e3:dd:a3:ae:bf:c7:76:19:12:b3:05:b4:9c: a8:ae:ab:dc:31:a1:00:64:80:05:a0:fd:18:9e:a2: 69:ab:12:55:c8:ee:37:13:d4:a3:be:1b:e9:db:32: 32:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A6:14:B9:06:01:48:52:45:5D:17:3C:4E:44:D4:08:C1:DA:33:64 X509v3 Authority Key Identifier: keyid:2D:88:AC:79:1B:0C:C1:B7:D9:21:EC:E6:60:CD:E0:CF:2E:E8:ED:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:17:94:4a:11:3b:84:48:7f:73:52:f1:de:f2:68:c4:89:9b: 79:a9:9a:76:5d:da:97:d4:2a:51:34:4e:7c:48:fc:43:bd:73: a1:b2:86:d3:ca:29:0e:4c:ea:73:42:68:3a:17:7b:ca:2f:49: 4c:5c:78:51:cb:f2:a2:c4:53:76:eb:78:05:dd:8e:9f:fd:65: b3:6f:cf:46:70:6a:8e:3c:f9:68:98:93:7e:0a:34:75:fe:f5: 68:ba:05:8b:08:31:34:69:a7:c9:f7:9f:de:7e:54:12:fa:65: 18:e8:87:7a:a3:77:b2:68:cc:11:6f:89:ed:34:4b:65:6b:33: c0:60:6c:05:27:78:13:cf:49:5a:93:35:33:52:6a:5d:1c:8e: be:44:93:9c:db:b0:20:37:6b:37:54:9b:11:21:f9:4e:86:1c: 2b:4f:7e:6d:e7:41:02:83:12:f3:b2:9e:e4:a0:e5:13:c9:fa: dd:d4:9b:cb:9f:03:4a:1e:7f:f8:eb:c5:26:b6:aa:f7:6b:be: bb:c3:72:4c:27:d2:6a:d7:26:ef:12:0c:6d:66:08:e3:42:bf: 2a:7e:68:98:36:4d:71:cf:40:88:3e:a4:b0:38:d3:64:12:8b: da:17:b1:bc:ca:11:f8:12:d5:47:c5:ae:18:d3:73:30:1b:91: ff:5d:e7:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC1oYMK0xyN22IvF3uM8nEKHghGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ4OEFDNzkxQjBDQzFCN0Q5MjFFQ0U2NjBDREUwQ0Yy RUU4RUQ3MjAeFw0yNjA2MjAwNjMyNDJaFw0yNjA2MjEwNzM2NDJaMDMxMTAvBgNV BAMTKDY4QTYxNEI5MDYwMTQ4NTI0NTVEMTczQzRFNDRENDA4QzFEQTMzNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6I0aJUDXuXrWCSblH02r4292y UE4oVbrD6R7uY/dEWoF/vRZyH8uJswOSfpmt7IbZ0CAsp5X9wxBXKdHhzymFNkNR M2AUeHZN39OgMWstQSmPJAuXWHHJuaJpSdFRBwxNazTls53pPi/EpyVl4Ey2gKdC oQwxemK41deq7h/fhHrAxrN+2Yk3WSDirf1AzerfYNonljZThZ2+zFUkTQ9foha7 eqsMiM8j5Vndt0Zgiqs3wgCal+rRmZ4WtuSRi7g04ix47ojsEdBlEbRMqlL9XqLh 492jrr/HdhkSswW0nKiuq9wxoQBkgAWg/RieommrElXI7jcT1KO+G+nbMjLVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaKYUuQYBSFJFXRc8TkTUCMHaM2QwHwYDVR0j BBgwFoAULYiseRsMwbfZIezmYM3gzy7o7XIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjMwMjRkMjQtOWZhYS00YWIwLThmYTQtMGNlNjA4YzZkMGEzLzAvMkQ4OEFDNzkx QjBDQzFCN0Q5MjFFQ0U2NjBDREUwQ0YyRUU4RUQ3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDg4QUM3OTFCMENDMUI3RDkyMUVDRTY2MENERTBDRjJFRThF RDcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjMwMjRkMjQtOWZhYS00YWIwLThm YTQtMGNlNjA4YzZkMGEzLzAvMkQ4OEFDNzkxQjBDQzFCN0Q5MjFFQ0U2NjBDREUw Q0YyRUU4RUQ3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQXlEoRO4RIf3NS8d7yaMSJm3mpmnZd2pfU KlE0TnxI/EO9c6GyhtPKKQ5M6nNCaDoXe8ovSUxceFHL8qLEU3breAXdjp/9ZbNv z0Zwao48+WiYk34KNHX+9Wi6BYsIMTRpp8n3n95+VBL6ZRjoh3qjd7JozBFvie00 S2VrM8BgbAUneBPPSVqTNTNSal0cjr5Ek5zbsCA3azdUmxEh+U6GHCtPfm3nQQKD EvOynuSg5RPJ+t3Um8ufA0oef/jrxSa2qvdrvrvDckwn0mrXJu8SDG1mCONCvyp+ aJg2TXHPQIg+pLA402QSi9oXsbzKEfgS1UfFrhjTczAbkf9d57M= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:12 2026 by rpki-client