$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft File: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft (raw, json) Hash identifier: DShD2RIyTJUmTTG0VhQRqXlNTofVmun0mmVpnsMfvPI= Subject key identifier: 01:60:E3:C8:D9:6E:D3:97:73:86:2D:A2:66:66:E5:09:6E:B2:E1:7E Authority key identifier: 2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 Certificate issuer: /CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Certificate serial: 72EDD75EEFF00754D7148C7144446C26918EF24C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft Manifest number: 38 Signing time: Fri 12 Jun 2026 10:58:38 +0000 Manifest this update: Fri 12 Jun 2026 10:53:38 +0000 Manifest next update: Sat 13 Jun 2026 13:41:38 +0000 Files and hashes: 1: 3130332e3133312e3130372e302f32342d3234203d3e20313338313139.roa (hash: cKDgVoSVAFZfl4hgrIHwI1J4tBbCiwmqXmahxpGLx8I=) 2: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl (hash: zalaZojBlAjd+h63ieGQDazu/ZcwqZ+ojkFbVzd3ZLU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 13:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ed:d7:5e:ef:f0:07:54:d7:14:8c:71:44:44:6c:26:91:8e:f2:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Validity Not Before: Jun 12 10:53:38 2026 GMT Not After : Jun 13 13:41:38 2026 GMT Subject: CN=0160E3C8D96ED39773862DA26666E5096EB2E17E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:88:3d:24:49:14:78:29:7c:6d:7c:e7:cf:d9: 49:a8:41:9c:ba:24:06:a0:df:18:6e:09:a7:9a:58: be:85:13:3c:40:3f:bd:c9:f1:ff:7d:d9:bb:bc:07: 3c:c5:b9:c2:a7:b0:00:6d:6d:01:8f:56:66:ce:ea: 3d:c1:e0:99:34:9b:a2:df:9a:52:31:bd:78:01:ab: fe:d8:e5:99:7e:ce:74:f2:71:df:53:9f:4e:d7:96: 33:86:93:54:82:f9:f1:21:a4:81:84:e0:72:de:d8: 12:4e:af:0f:19:bb:cf:c6:9d:99:5c:de:9e:f4:10: 62:b0:f2:84:93:8a:3a:cd:d5:26:84:ee:8f:2f:4d: cb:c9:49:a5:a5:0c:9d:e2:ff:80:c3:d9:55:32:be: 5d:36:b1:ce:d8:6a:dd:32:c3:dd:a6:8b:01:04:57: 08:ec:ab:12:ce:b5:29:a1:d9:42:f4:16:8c:9b:02: 7a:d4:c2:0d:b7:d0:8d:d4:dd:fa:28:a7:58:f4:a6: 6d:29:de:ff:4b:43:4a:04:ff:5b:d0:bf:8f:5a:8f: 03:40:87:c0:ef:95:6f:cc:7c:15:17:e6:0c:4a:6a: ef:13:c9:6c:c9:8e:86:73:36:44:dd:be:fb:92:a5: 33:95:98:74:36:68:3e:5b:1f:2f:72:3f:90:08:48: 44:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:60:E3:C8:D9:6E:D3:97:73:86:2D:A2:66:66:E5:09:6E:B2:E1:7E X509v3 Authority Key Identifier: keyid:2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:fa:88:b0:da:00:4f:01:f4:cb:39:fa:0e:08:19:b2:43:59: 79:67:03:ac:65:98:20:4f:77:db:6b:e9:38:03:e2:e3:64:31: 95:94:db:79:51:6f:2e:2b:df:f3:f4:72:77:41:41:94:36:08: fa:c9:d3:cf:ab:aa:4e:b6:67:bf:a6:53:b0:14:a6:c1:08:1c: 94:54:de:cd:59:6e:f3:98:89:9b:66:31:03:42:13:cb:b9:41: bc:73:44:eb:59:2a:c1:3b:87:2b:d0:f2:70:b5:a2:b3:19:44: 8c:e2:a0:0b:25:1b:37:5d:2a:4b:03:64:18:eb:c6:77:ee:18: 13:48:26:0d:7d:30:7c:ec:20:54:97:90:25:cc:aa:36:fd:32: fc:40:89:04:47:7c:7b:99:25:fd:be:d1:63:91:2c:c4:6f:33: e9:a4:20:91:46:d9:90:bf:14:d0:06:08:3c:4b:e1:2f:35:60: 88:2b:78:9f:78:15:2a:fa:86:14:73:2a:83:c5:ff:5c:17:92: 67:c3:4e:16:ad:51:37:5b:63:d8:d1:4b:3d:9b:d8:19:a1:d4: 34:88:c1:0c:12:bf:98:c0:51:26:15:09:f8:20:8a:4f:53:bf: aa:29:73:e0:47:d4:b9:9f:3a:18:17:a8:39:68:9f:83:c9:f5: c2:15:e1:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcu3XXu/wB1TXFIxxRERsJpGO8kwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFFMTRBQkJENTE2MUJBMENBREIzQzQwQzFGOURGQ0JD OUNGMzQ3MDAeFw0yNjA2MTIxMDUzMzhaFw0yNjA2MTMxMzQxMzhaMDMxMTAvBgNV BAMTKDAxNjBFM0M4RDk2RUQzOTc3Mzg2MkRBMjY2NjZFNTA5NkVCMkUxN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3iD0kSRR4KXxtfOfP2UmoQZy6 JAag3xhuCaeaWL6FEzxAP73J8f992bu8BzzFucKnsABtbQGPVmbO6j3B4Jk0m6Lf mlIxvXgBq/7Y5Zl+znTycd9Tn07XljOGk1SC+fEhpIGE4HLe2BJOrw8Zu8/GnZlc 3p70EGKw8oSTijrN1SaE7o8vTcvJSaWlDJ3i/4DD2VUyvl02sc7Yat0yw92miwEE VwjsqxLOtSmh2UL0FoybAnrUwg230I3U3foop1j0pm0p3v9LQ0oE/1vQv49ajwNA h8DvlW/MfBUX5gxKau8TyWzJjoZzNkTdvvuSpTOVmHQ2aD5bHy9yP5AISEQ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAWDjyNlu05dzhi2iZmblCW6y4X4wHwYDVR0j BBgwFoAUKuFKu9UWG6DK2zxAwfnfy8nPNHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkyNDM5NTAtM2ZkZi00OWFiLWJmZGMtZjU4NjQ1MzcwNGM2LzAvMkFFMTRBQkJE NTE2MUJBMENBREIzQzQwQzFGOURGQ0JDOUNGMzQ3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUUxNEFCQkQ1MTYxQkEwQ0FEQjNDNDBDMUY5REZDQkM5Q0Yz NDcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkyNDM5NTAtM2ZkZi00OWFiLWJm ZGMtZjU4NjQ1MzcwNGM2LzAvMkFFMTRBQkJENTE2MUJBMENBREIzQzQwQzFGOURG Q0JDOUNGMzQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKn6iLDaAE8B9Ms5+g4IGbJDWXlnA6xlmCBP d9tr6TgD4uNkMZWU23lRby4r3/P0cndBQZQ2CPrJ08+rqk62Z7+mU7AUpsEIHJRU 3s1ZbvOYiZtmMQNCE8u5QbxzROtZKsE7hyvQ8nC1orMZRIzioAslGzddKksDZBjr xnfuGBNIJg19MHzsIFSXkCXMqjb9MvxAiQRHfHuZJf2+0WORLMRvM+mkIJFG2ZC/ FNAGCDxL4S81YIgreJ94FSr6hhRzKoPF/1wXkmfDThatUTdbY9jRSz2b2Bmh1DSI wQwSv5jAUSYVCfggik9Tv6opc+BH1LmfOhgXqDlon4PJ9cIV4dg= -----END CERTIFICATE-----Generated at Sat Jun 13 02:10:32 2026 by rpki-client