$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft File: 2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft (raw, json) Hash identifier: HfpnZuX1FZ6lKOP72lLVOhegf49+xce3nDIsSo3pC0U= Subject key identifier: 91:C8:AE:2B:0B:2F:9B:9B:B6:71:0D:CA:A9:9B:65:E3:35:CA:1C:6D Authority key identifier: 2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74 Certificate issuer: /CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274 Certificate serial: 326B3C06AD36EA8E59B4C962BC304195D82C348F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft Manifest number: 1A Signing time: Thu 21 May 2026 09:36:57 +0000 Manifest this update: Thu 21 May 2026 09:31:57 +0000 Manifest next update: Fri 22 May 2026 10:09:57 +0000 Files and hashes: 1: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: V2s2v2zyv88cwsslpUJdds/b+6l6rcgW5NHb7V5SYWY=) 2: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: iezQTzMxWp3Coix5fz9eGS/c/h2ulbbwObi3kCUHkW4=) 3: 2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl (hash: iCEcdvbzbTXhezV0PHvcXufwifa1uG71xYFxx8NuBnY=) 4: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: 1IjnkMC3ga8KbKp+1i4junuLJGtmG26jgGjukZ4rmxk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 10:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:6b:3c:06:ad:36:ea:8e:59:b4:c9:62:bc:30:41:95:d8:2c:34:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274 Validity Not Before: May 21 09:31:57 2026 GMT Not After : May 22 10:09:57 2026 GMT Subject: CN=91C8AE2B0B2F9B9BB6710DCAA99B65E335CA1C6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:41:97:5b:1f:ed:17:70:f4:ae:f9:91:c3:4c: a2:da:a9:ed:58:53:6e:ec:8e:b7:73:2c:51:84:34: 99:da:5e:79:09:f4:32:03:e5:88:21:27:56:5d:61: 3f:c9:ef:eb:ac:76:95:f0:61:c0:14:d4:ac:04:34: fb:51:58:01:bd:59:4b:01:78:2f:55:97:15:a1:64: 70:2b:f4:dd:7d:ab:b8:21:9f:0d:c4:92:03:6e:b2: 7d:c2:14:f8:7e:fc:29:52:7b:37:41:fa:9d:53:7e: f1:18:74:48:a2:ea:ab:11:84:52:fb:a2:80:e4:fb: e5:35:6d:2a:52:7c:e3:2b:36:e4:4e:8d:e4:fc:c6: ba:02:48:59:00:61:83:68:da:06:11:1d:fa:b3:7f: 4b:33:81:a4:b4:c7:42:b6:66:0d:93:aa:b3:ab:59: 44:da:09:9c:6e:47:d5:79:00:aa:a8:70:97:2f:ad: 5d:49:a4:e2:c8:c7:13:38:10:a5:10:d9:6a:0f:51: fe:94:4c:cf:e2:07:eb:18:b1:3c:da:de:52:ca:29: d3:5f:89:0b:1e:5a:ec:a1:c3:88:b5:2b:6b:94:9a: 82:0d:cf:cb:9e:5e:7d:4e:7e:2d:01:d6:89:a7:fa: eb:92:7e:cf:e9:c0:6e:8a:98:18:e8:d9:30:40:cb: 8b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C8:AE:2B:0B:2F:9B:9B:B6:71:0D:CA:A9:9B:65:E3:35:CA:1C:6D X509v3 Authority Key Identifier: keyid:2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b9:25:1a:d2:da:d3:6b:bf:a2:20:70:1a:c9:7c:63:0d:f8: 9a:0a:85:91:1f:92:b0:46:21:07:08:1a:16:0e:8b:a9:47:c3: ef:1d:de:8a:8e:52:7d:65:a2:69:ec:ca:69:7a:5e:df:6c:7e: 3f:75:92:19:32:32:32:5e:aa:11:f0:87:23:46:de:1d:3d:0a: ac:29:c0:1b:0f:52:0d:ea:a8:06:08:b8:6f:c5:cf:3b:07:ca: 8d:04:ea:29:9f:97:d3:dc:12:0a:58:11:e7:a5:c7:e7:17:6a: af:63:8d:50:56:f2:5b:e8:8e:b6:e6:d0:c9:70:58:1a:a2:07: a8:51:bc:4e:e0:af:91:9c:2e:9f:f3:a8:77:7f:75:f0:72:a3: 01:45:ba:4c:cd:95:e8:d2:5a:38:da:ce:50:9b:48:90:69:eb: 57:47:90:5c:a7:18:b0:95:31:43:9b:b0:55:80:70:18:00:00: a2:c9:40:6c:bc:4f:24:11:8e:14:c2:af:b6:18:72:ca:c0:50: 47:f6:90:f4:d5:af:0a:3c:80:4c:9f:75:ef:f0:2b:be:5e:33: dd:0b:c4:14:c8:02:06:cb:00:ed:27:bc:a9:ff:b2:65:82:51: 83:3b:22:cd:b0:e9:ad:8e:62:3e:aa:b7:67:07:2b:22:e9:2a: 33:01:c1:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMms8Bq026o5ZtMlivDBBldgsNI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2RjE2RTgwQkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0QjBE N0Q5QzI3NDAeFw0yNjA1MjEwOTMxNTdaFw0yNjA1MjIxMDA5NTdaMDMxMTAvBgNV BAMTKDkxQzhBRTJCMEIyRjlCOUJCNjcxMERDQUE5OUI2NUUzMzVDQTFDNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIQZdbH+0XcPSu+ZHDTKLaqe1Y U27sjrdzLFGENJnaXnkJ9DID5YghJ1ZdYT/J7+usdpXwYcAU1KwENPtRWAG9WUsB eC9VlxWhZHAr9N19q7ghnw3EkgNusn3CFPh+/ClSezdB+p1TfvEYdEii6qsRhFL7 ooDk++U1bSpSfOMrNuROjeT8xroCSFkAYYNo2gYRHfqzf0szgaS0x0K2Zg2TqrOr WUTaCZxuR9V5AKqocJcvrV1JpOLIxxM4EKUQ2WoPUf6UTM/iB+sYsTza3lLKKdNf iQseWuyhw4i1K2uUmoINz8ueXn1Ofi0B1omn+uuSfs/pwG6KmBjo2TBAy4vFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkciuKwsvm5u2cQ3KqZtl4zXKHG0wHwYDVR0j BBgwFoAUKm8W6Av9x7TWeXcm+4/UsNfZwnQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E0NjM2MGQtNjYyYi00ZjdkLWJiMTctZDg2MDgyMTUyNDcxLzAvMkE2RjE2RTgw QkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0QjBEN0Q5QzI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTZGMTZFODBCRkRDN0I0RDY3OTc3MjZGQjhGRDRCMEQ3RDlD Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvMkE2RjE2RTgwQkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0 QjBEN0Q5QzI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALa5JRrS2tNrv6IgcBrJfGMN+JoKhZEfkrBG IQcIGhYOi6lHw+8d3oqOUn1lomnsyml6Xt9sfj91khkyMjJeqhHwhyNG3h09Cqwp wBsPUg3qqAYIuG/FzzsHyo0E6imfl9PcEgpYEeelx+cXaq9jjVBW8lvojrbm0Mlw WBqiB6hRvE7gr5GcLp/zqHd/dfByowFFukzNlejSWjjazlCbSJBp61dHkFynGLCV MUObsFWAcBgAAKLJQGy8TyQRjhTCr7YYcsrAUEf2kPTVrwo8gEyfde/wK75eM90L xBTIAgbLAO0nvKn/smWCUYM7Is2w6a2OYj6qt2cHKyLpKjMBwRU= -----END CERTIFICATE-----Generated at Thu May 21 12:32:43 2026 by rpki-client