$ rpki-client -vvf rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft File: 2BF94227A09D96F51AE8819B28CA3696003CBC60.mft (raw, json) Hash identifier: 3l3QoA+KZ4cewh0UZWHNBUqMsRO6/+ljrumblQQ5PVo= Subject key identifier: 6D:1D:27:04:33:56:A1:DB:95:A8:E0:74:01:25:70:A7:C2:71:E6:D2 Authority key identifier: 2B:F9:42:27:A0:9D:96:F5:1A:E8:81:9B:28:CA:36:96:00:3C:BC:60 Certificate issuer: /CN=2BF94227A09D96F51AE8819B28CA3696003CBC60 Certificate serial: 196B6062931F6E2DB3A512CCF9004EE1E216A4D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 23:29:21 +0000 Manifest this update: Fri 19 Jun 2026 23:24:21 +0000 Manifest next update: Sun 21 Jun 2026 02:35:21 +0000 Files and hashes: 1: 2BF94227A09D96F51AE8819B28CA3696003CBC60.crl (hash: 6Ubmo0awaZDRY7sp3y++yVeocLuWD1GDvyJZNjJQm/I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.crl rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 02:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:6b:60:62:93:1f:6e:2d:b3:a5:12:cc:f9:00:4e:e1:e2:16:a4:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BF94227A09D96F51AE8819B28CA3696003CBC60 Validity Not Before: Jun 19 23:24:21 2026 GMT Not After : Jun 21 02:35:21 2026 GMT Subject: CN=6D1D27043356A1DB95A8E074012570A7C271E6D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:da:4e:f7:39:73:cb:4a:a4:a7:30:03:99: b5:36:42:6d:f0:35:c0:06:ef:ba:13:69:f4:4d:14: d9:c8:9b:76:1b:6c:9a:81:fb:e5:90:58:5c:2b:fc: 22:ad:3d:e6:19:1e:db:19:d3:27:13:00:25:45:8f: 0b:9d:66:5b:1c:1e:a9:da:a5:e3:03:65:ac:a8:ad: ae:92:ff:79:aa:71:cb:0a:4f:f7:0b:87:59:5a:7b: 8f:d4:81:ba:14:70:29:4e:9f:b1:11:84:99:8e:0c: de:15:03:f2:1d:44:9b:76:7e:52:ac:6e:3c:d4:ac: 33:15:dc:eb:68:e3:4e:27:08:21:29:ab:82:85:f2: d7:1b:4a:ff:d8:e8:b0:e8:19:95:4e:33:57:fe:5e: 9c:5f:8f:67:93:93:fb:60:a0:f0:fd:41:b8:2b:62: 0c:e0:64:27:63:0a:d6:0a:54:72:d6:66:a1:10:5d: 24:19:8b:81:d2:2b:78:ec:6d:c7:b5:af:a8:cf:e4: 01:17:30:92:f1:fd:a7:05:e3:2f:35:44:8d:26:6e: 2c:a2:c0:38:16:35:90:a7:a2:12:a9:e6:2b:f7:6a: 8a:e9:f1:cb:a2:5a:07:3d:91:82:ac:d2:6d:eb:99: a1:cb:52:e4:37:e0:c0:42:3e:34:5a:1e:1e:c8:9e: 7b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1D:27:04:33:56:A1:DB:95:A8:E0:74:01:25:70:A7:C2:71:E6:D2 X509v3 Authority Key Identifier: keyid:2B:F9:42:27:A0:9D:96:F5:1A:E8:81:9B:28:CA:36:96:00:3C:BC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:8d:fb:2e:eb:29:8d:a7:7a:e3:ca:b9:df:21:11:e1:2a:00: 55:f4:34:08:c6:96:dd:a6:7c:2a:54:b1:ff:de:30:b0:df:2e: f3:c0:47:0b:f0:83:bf:a5:9c:59:ba:73:7e:22:c0:89:d7:f0: 96:a9:26:44:60:81:03:62:b7:ef:5e:54:4d:f2:c9:8e:c9:be: 42:cc:ff:6f:ba:2d:60:bb:41:e0:32:63:3a:b7:ca:38:bb:10: 45:4a:60:f1:51:29:03:73:6f:85:b2:30:36:d9:0c:ef:a5:47: 6e:1e:63:03:64:b5:d0:18:98:b3:dc:58:8f:ac:df:68:16:f8: ce:c8:52:54:08:df:97:da:d3:e1:fc:b7:36:3a:56:a8:81:d4: 18:e8:a0:8c:8b:a8:a3:bf:f0:2c:00:34:af:13:9a:7b:44:a1: 0d:8e:34:f4:96:41:9b:5e:b3:ec:a8:50:1c:ad:ba:fd:be:da: a7:52:52:53:52:04:7a:2a:6d:fb:b9:45:be:15:b3:6f:a8:d4: 28:e5:80:1f:64:7b:22:a8:70:f9:13:18:17:b7:b9:d8:a4:0a: 82:1e:8d:55:e8:2a:3c:e1:ae:f2:a5:63:67:fe:38:d1:cc:d5: 85:d2:16:92:de:aa:ad:57:6a:ca:9b:de:9d:08:3b:85:77:42: 3e:70:62:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGWtgYpMfbi2zpRLM+QBO4eIWpNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJGOTQyMjdBMDlEOTZGNTFBRTg4MTlCMjhDQTM2OTYw MDNDQkM2MDAeFw0yNjA2MTkyMzI0MjFaFw0yNjA2MjEwMjM1MjFaMDMxMTAvBgNV BAMTKDZEMUQyNzA0MzM1NkExREI5NUE4RTA3NDAxMjU3MEE3QzI3MUU2RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnE9pO9zlzy0qkpzADmbU2Qm3w NcAG77oTafRNFNnIm3YbbJqB++WQWFwr/CKtPeYZHtsZ0ycTACVFjwudZlscHqna peMDZayora6S/3mqccsKT/cLh1lae4/UgboUcClOn7ERhJmODN4VA/IdRJt2flKs bjzUrDMV3Oto404nCCEpq4KF8tcbSv/Y6LDoGZVOM1f+Xpxfj2eTk/tgoPD9Qbgr YgzgZCdjCtYKVHLWZqEQXSQZi4HSK3jsbce1r6jP5AEXMJLx/acF4y81RI0mbiyi wDgWNZCnohKp5iv3aorp8cuiWgc9kYKs0m3rmaHLUuQ34MBCPjRaHh7Inns1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbR0nBDNWoduVqOB0ASVwp8Jx5tIwHwYDVR0j BBgwFoAUK/lCJ6CdlvUa6IGbKMo2lgA8vGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmFkZmNiNDQtYWU3YS00NDIzLWFlN2QtMDg2NDhiZjFkZWIxLzAvMkJGOTQyMjdB MDlEOTZGNTFBRTg4MTlCMjhDQTM2OTYwMDNDQkM2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQkY5NDIyN0EwOUQ5NkY1MUFFODgxOUIyOENBMzY5NjAwM0NC QzYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmFkZmNiNDQtYWU3YS00NDIzLWFl N2QtMDg2NDhiZjFkZWIxLzAvMkJGOTQyMjdBMDlEOTZGNTFBRTg4MTlCMjhDQTM2 OTYwMDNDQkM2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+N+y7rKY2neuPKud8hEeEqAFX0NAjGlt2m fCpUsf/eMLDfLvPARwvwg7+lnFm6c34iwInX8JapJkRggQNit+9eVE3yyY7JvkLM /2+6LWC7QeAyYzq3yji7EEVKYPFRKQNzb4WyMDbZDO+lR24eYwNktdAYmLPcWI+s 32gW+M7IUlQI35fa0+H8tzY6VqiB1BjooIyLqKO/8CwANK8TmntEoQ2ONPSWQZte s+yoUBytuv2+2qdSUlNSBHoqbfu5Rb4Vs2+o1CjlgB9keyKocPkTGBe3udikCoIe jVXoKjzhrvKlY2f+ONHM1YXSFpLeqq1Xasqb3p0IO4V3Qj5wYls= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:02 2026 by rpki-client