$ rpki-client -vvf rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft File: 2DFC13D85715AA04782C2A3D86F83844385F896D.mft (raw, json) Hash identifier: 6awF23ORllIrFm283kER7t0dthYJtts4ZikDWUruhcA= Subject key identifier: B9:A5:5B:4B:56:22:FE:2C:54:21:26:A5:B1:48:4A:63:5A:4D:49:06 Authority key identifier: 2D:FC:13:D8:57:15:AA:04:78:2C:2A:3D:86:F8:38:44:38:5F:89:6D Certificate issuer: /CN=2DFC13D85715AA04782C2A3D86F83844385F896D Certificate serial: 12515B27FBAD2B205AA231D7771E42F8BDC7531D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 14:14:06 +0000 Manifest this update: Thu 18 Jun 2026 14:09:06 +0000 Manifest next update: Fri 19 Jun 2026 14:58:06 +0000 Files and hashes: 1: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: 2yToa31P3viNdlJSz6LX8aSdNJBJoeEJaRZoiY3wK8c=) 2: 2DFC13D85715AA04782C2A3D86F83844385F896D.crl (hash: LTtYEo/kpQiOK02hSmrp7rnFpkJGGHdO66kdkoK+/ws=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.crl rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:51:5b:27:fb:ad:2b:20:5a:a2:31:d7:77:1e:42:f8:bd:c7:53:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFC13D85715AA04782C2A3D86F83844385F896D Validity Not Before: Jun 18 14:09:06 2026 GMT Not After : Jun 19 14:58:06 2026 GMT Subject: CN=B9A55B4B5622FE2C542126A5B1484A635A4D4906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fd:ec:f5:0f:75:1a:4a:f5:41:60:92:ad:f1: 16:ff:e9:0b:31:b8:87:5b:1b:58:70:ea:0e:c4:fb: 76:6d:95:ae:2a:6a:3d:bc:98:9e:25:05:82:bb:07: 05:f1:5a:12:80:e0:f2:74:94:b2:1c:ac:7d:24:b7: a5:a6:92:7b:76:9b:dd:71:04:c8:99:be:20:83:b8: 63:c0:e5:7c:d1:34:c3:0a:c2:ae:dc:86:67:86:45: b5:c3:88:2f:5e:ad:df:52:c0:a2:57:54:2f:ae:f0: 2a:66:e1:97:8f:7e:6f:42:65:ea:1a:e2:19:12:36: b5:7f:37:c6:1b:16:f0:8c:5f:06:49:76:f2:fa:87: c8:0d:3e:dd:64:3e:10:65:6d:54:ba:77:85:b4:c8: 20:e2:12:1e:b7:05:9a:83:fd:61:40:95:5a:67:33: 88:cc:c8:69:b1:3a:ba:9d:b5:06:07:1a:49:ed:16: 0e:92:43:30:ce:44:8f:17:af:e3:b3:6d:41:ae:e2: d2:00:80:9c:9f:81:fc:d8:3b:10:03:52:79:27:81: 1b:a0:9c:d1:1c:87:d8:75:7d:19:9e:f8:0b:d0:26: d8:e3:1a:d6:d9:48:78:f5:93:1d:da:7f:1e:fa:cb: 7a:68:9f:78:ad:f0:a8:3f:7f:78:dc:5d:32:e5:50: fa:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A5:5B:4B:56:22:FE:2C:54:21:26:A5:B1:48:4A:63:5A:4D:49:06 X509v3 Authority Key Identifier: keyid:2D:FC:13:D8:57:15:AA:04:78:2C:2A:3D:86:F8:38:44:38:5F:89:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:6d:8f:51:42:20:28:e8:b2:ce:97:62:ba:51:3e:ca:d4:af: 6d:52:75:1b:36:cd:23:af:47:f9:57:4b:c5:61:f5:85:23:df: 6b:f7:31:65:29:c8:04:23:de:7c:57:b9:52:d3:ea:de:bd:26: df:7f:40:da:4f:92:12:ea:98:c6:b6:f5:66:20:e9:01:a9:a5: 40:9d:e3:ea:bb:01:a4:f2:b5:19:b4:70:87:8b:d8:aa:22:b1: 9a:41:07:aa:f3:15:f1:68:20:7d:9d:67:50:ca:72:a7:3c:50: cf:64:e2:70:8f:e7:0f:c2:93:bd:0a:57:49:06:b9:8c:eb:83: c4:cd:52:4a:1a:fe:ec:33:21:ba:92:04:41:0e:33:bd:7b:e8: 71:85:10:a4:bd:6f:c1:78:62:97:49:f9:ed:f1:46:cd:3c:18: 44:05:db:06:23:c4:f3:06:21:9a:6a:a3:8a:ab:d0:cb:17:23: e1:6b:f2:37:b9:4a:c6:5c:42:72:5a:b2:2a:8d:53:f3:20:03: a7:40:0d:36:e7:76:43:f6:9b:6f:e0:ab:c2:45:01:19:9a:19: aa:31:46:d3:b6:7a:e2:3e:e1:9c:63:22:d7:d0:94:69:38:b5: 52:93:80:db:1a:2a:71:37:34:90:95:af:46:a4:ac:04:a1:70: 83:52:2a:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUElFbJ/utKyBaojHXdx5C+L3HUx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQzEzRDg1NzE1QUEwNDc4MkMyQTNEODZGODM4NDQz ODVGODk2RDAeFw0yNjA2MTgxNDA5MDZaFw0yNjA2MTkxNDU4MDZaMDMxMTAvBgNV BAMTKEI5QTU1QjRCNTYyMkZFMkM1NDIxMjZBNUIxNDg0QTYzNUE0RDQ5MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/ez1D3UaSvVBYJKt8Rb/6Qsx uIdbG1hw6g7E+3Ztla4qaj28mJ4lBYK7BwXxWhKA4PJ0lLIcrH0kt6Wmknt2m91x BMiZviCDuGPA5XzRNMMKwq7chmeGRbXDiC9erd9SwKJXVC+u8Cpm4ZePfm9CZeoa 4hkSNrV/N8YbFvCMXwZJdvL6h8gNPt1kPhBlbVS6d4W0yCDiEh63BZqD/WFAlVpn M4jMyGmxOrqdtQYHGkntFg6SQzDORI8Xr+OzbUGu4tIAgJyfgfzYOxADUnkngRug nNEch9h1fRme+AvQJtjjGtbZSHj1kx3afx76y3pon3it8Kg/f3jcXTLlUPopAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuaVbS1Yi/ixUISalsUhKY1pNSQYwHwYDVR0j BBgwFoAULfwT2FcVqgR4LCo9hvg4RDhfiW0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTliMDdhOWUtNjJkZi00ODA4LTlkMmEtYTZlNjg4NGJjYmJiLzAvMkRGQzEzRDg1 NzE1QUEwNDc4MkMyQTNEODZGODM4NDQzODVGODk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yREZDMTNEODU3MTVBQTA0NzgyQzJBM0Q4NkY4Mzg0NDM4NUY4 OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvMkRGQzEzRDg1NzE1QUEwNDc4MkMyQTNEODZGODM4 NDQzODVGODk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9tj1FCICjoss6XYrpRPsrUr21SdRs2zSOv R/lXS8Vh9YUj32v3MWUpyAQj3nxXuVLT6t69Jt9/QNpPkhLqmMa29WYg6QGppUCd 4+q7AaTytRm0cIeL2KoisZpBB6rzFfFoIH2dZ1DKcqc8UM9k4nCP5w/Ck70KV0kG uYzrg8TNUkoa/uwzIbqSBEEOM7176HGFEKS9b8F4YpdJ+e3xRs08GEQF2wYjxPMG IZpqo4qr0MsXI+Fr8je5SsZcQnJasiqNU/MgA6dADTbndkP2m2/gq8JFARmaGaox RtO2euI+4ZxjItfQlGk4tVKTgNsaKnE3NJCVr0akrAShcINSKkE= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:08 2026 by rpki-client