$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft File: 2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft (raw, json) Hash identifier: FISF0fuB72r6mYpzErHOvNyPw9pZia2MBWvGEn9v9Z4= Subject key identifier: 2D:3E:B8:81:80:BE:CC:98:E3:95:D1:BF:F4:13:4B:27:B9:0C:BB:66 Authority key identifier: 2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3 Certificate issuer: /CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3 Certificate serial: 0282B2069150DA06F99FEA1AB2AC9F292DD021A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 18:12:46 +0000 Manifest this update: Fri 19 Jun 2026 18:07:46 +0000 Manifest next update: Sat 20 Jun 2026 19:17:46 +0000 Files and hashes: 1: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: uD4zXPlmJIJvDYKeBCRvwCSXSW9r9c2Pd73kp0tq76c=) 2: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: Fc1cIIy7yp6fwFNt9JFBozT8wGm732U+MIRuBDuRJKc=) 3: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: ba9T7QeA28DMOyzLlfoljNenw5738a58LQmu3hf+TMU=) 4: 2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl (hash: cOP3b7NS/YYDmjgz1om3RTft5zaaJH+iNG+nkn8M3xs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:82:b2:06:91:50:da:06:f9:9f:ea:1a:b2:ac:9f:29:2d:d0:21:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3 Validity Not Before: Jun 19 18:07:46 2026 GMT Not After : Jun 20 19:17:46 2026 GMT Subject: CN=2D3EB88180BECC98E395D1BFF4134B27B90CBB66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:12:ac:96:61:31:fb:a5:71:32:f6:70:2e:9d: 69:ef:b6:bc:6b:04:3b:26:34:fb:90:c1:c5:4e:25: fb:11:9f:25:de:69:ee:e7:3d:6a:c6:62:f7:dc:f6: 59:49:3a:32:95:bc:c2:03:25:e8:51:4d:a2:34:95: 99:73:ff:fd:8c:30:7f:28:53:60:cb:02:6c:c8:c1: 33:42:15:ec:4a:08:55:a3:28:44:23:ee:ed:98:df: ed:13:09:f7:b1:dd:b4:e5:a7:a5:22:3d:15:e8:be: f8:ad:fa:89:38:b6:9b:8d:ff:d1:2b:9f:1e:e7:6d: 0c:b0:a3:86:c5:f4:84:9d:90:03:d4:67:62:1d:bc: fa:ac:33:09:3a:6e:50:38:74:ba:57:09:9f:0f:fe: 85:ef:78:57:1c:93:13:a7:7f:f8:71:03:e4:41:ec: d0:80:31:ed:ed:87:77:88:4c:28:2d:bf:17:1d:eb: 56:c3:9f:8b:46:10:f9:83:d6:f0:ff:4a:6f:dc:40: 2a:d5:db:b8:4c:0a:29:13:ee:e3:0b:c2:8d:01:d9: 3b:8a:cb:a2:7c:4e:17:04:5b:1a:0f:bc:6d:9d:07: c6:c3:25:e3:21:2e:d5:76:ab:56:11:5f:e8:cc:2f: 98:6c:06:6c:6e:2b:99:e2:98:f0:27:7a:bc:a4:46: bc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3E:B8:81:80:BE:CC:98:E3:95:D1:BF:F4:13:4B:27:B9:0C:BB:66 X509v3 Authority Key Identifier: keyid:2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ef:f0:76:0c:b1:b3:15:2c:25:72:a4:ac:ab:db:04:a9:76: a4:98:b2:f7:5d:f0:2e:b9:17:8a:dd:a3:be:28:20:bc:7e:81: ab:dc:8f:2a:59:71:b7:81:ab:df:37:96:e5:cb:5d:21:2c:dd: 12:e2:8a:ba:ed:9e:be:10:e6:ff:0d:de:08:13:75:2f:6b:a8: 14:81:09:6f:43:dc:71:2f:74:e4:ca:59:00:cd:f4:96:58:75: 95:b6:27:85:59:c5:44:c4:30:e7:68:86:2c:c0:56:1c:a4:03: 85:a8:14:a9:90:21:32:06:18:9b:a8:2f:69:45:66:e7:75:62: 1c:c9:ce:25:a8:9e:e9:75:5d:6f:c0:62:35:0e:80:d9:0e:a6: 32:e2:7a:ee:61:a3:06:46:74:5d:f7:28:0c:76:81:65:6c:fa: 6b:9a:e1:e2:ad:26:7a:22:00:e3:73:2f:c6:0d:14:9d:51:5e: 9a:30:b8:4c:f5:c8:85:4d:f1:99:89:03:cc:9f:17:7f:f7:7c: 6b:cd:75:c0:a7:0c:01:1f:2e:61:af:de:3d:91:c6:ae:5f:7b: d9:a1:97:83:a4:db:ed:be:0f:d2:16:69:35:da:f6:db:f1:70: d5:72:2c:f0:cb:8e:6b:01:1b:2d:49:da:cc:6f:8e:7e:d8:ed: 4e:c2:5a:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAoKyBpFQ2gb5n+oasqyfKS3QIaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZGOUQ1MkFEQzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3NzZE Q0I0MzNCMzAeFw0yNjA2MTkxODA3NDZaFw0yNjA2MjAxOTE3NDZaMDMxMTAvBgNV BAMTKDJEM0VCODgxODBCRUNDOThFMzk1RDFCRkY0MTM0QjI3QjkwQ0JCNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEqyWYTH7pXEy9nAunWnvtrxr BDsmNPuQwcVOJfsRnyXeae7nPWrGYvfc9llJOjKVvMIDJehRTaI0lZlz//2MMH8o U2DLAmzIwTNCFexKCFWjKEQj7u2Y3+0TCfex3bTlp6UiPRXovvit+ok4tpuN/9Er nx7nbQywo4bF9ISdkAPUZ2IdvPqsMwk6blA4dLpXCZ8P/oXveFcckxOnf/hxA+RB 7NCAMe3th3eITCgtvxcd61bDn4tGEPmD1vD/Sm/cQCrV27hMCikT7uMLwo0B2TuK y6J8ThcEWxoPvG2dB8bDJeMhLtV2q1YRX+jML5hsBmxuK5nimPAnerykRrxXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULT64gYC+zJjjldG/9BNLJ7kMu2YwHwYDVR0j BBgwFoAUL/nVKtx3f6POUar5RIuHdty0M7MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2MwNzVlZjYtYTI1MS00N2RkLThkZGEtY2FkZmY0OTdhN2U1LzAvMkZGOUQ1MkFE Qzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3NzZEQ0I0MzNCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkY5RDUyQURDNzc3RkEzQ0U1MUFBRjk0NDhCODc3NkRDQjQz M0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMkZGOUQ1MkFEQzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3 NzZEQ0I0MzNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXv8HYMsbMVLCVypKyr2wSpdqSYsvdd8C65 F4rdo74oILx+gavcjypZcbeBq983luXLXSEs3RLiirrtnr4Q5v8N3ggTdS9rqBSB CW9D3HEvdOTKWQDN9JZYdZW2J4VZxUTEMOdohizAVhykA4WoFKmQITIGGJuoL2lF Zud1YhzJziWonul1XW/AYjUOgNkOpjLieu5howZGdF33KAx2gWVs+mua4eKtJnoi AONzL8YNFJ1RXpowuEz1yIVN8ZmJA8yfF3/3fGvNdcCnDAEfLmGv3j2Rxq5fe9mh l4Ok2+2+D9IWaTXa9tvxcNVyLPDLjmsBGy1J2sxvjn7Y7U7CWuw= -----END CERTIFICATE-----Generated at Sat Jun 20 08:57:15 2026 by rpki-client