$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft File: 2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft (raw, json) Hash identifier: /LuG0egRMs7YAviXdGRJWVR37GvtZKEuGOAEaYBN9kY= Subject key identifier: BD:2C:6F:F0:98:A0:12:B9:5A:6D:6C:E4:9B:AD:83:1B:89:3E:8B:90 Authority key identifier: 2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88 Certificate issuer: /CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88 Certificate serial: 029493681BBC5A8FD0B425FD4920C214209CC235 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft Manifest number: 48 Signing time: Wed 24 Jun 2026 11:18:58 +0000 Manifest this update: Wed 24 Jun 2026 11:13:58 +0000 Manifest next update: Thu 25 Jun 2026 12:26:58 +0000 Files and hashes: 1: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: BwjnFjz5sFQQdxCMf3i5N8Aax7h3Sveq3upFP+p+HDs=) 2: 2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl (hash: XKjPXQkWKv3EwhsgIrN7dTQe0uW4x+7jwNfMdrTHdWM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 06:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:94:93:68:1b:bc:5a:8f:d0:b4:25:fd:49:20:c2:14:20:9c:c2:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88 Validity Not Before: Jun 24 11:13:58 2026 GMT Not After : Jun 25 12:26:58 2026 GMT Subject: CN=BD2C6FF098A012B95A6D6CE49BAD831B893E8B90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:49:3f:21:5e:d1:5c:52:b0:9f:37:8c:cc:a5: 17:98:42:bd:c3:96:13:3d:36:9b:3a:e1:f3:7f:71: c9:f8:6d:ee:a0:1f:db:1e:dd:26:e0:07:4f:23:cc: da:89:cf:57:f1:91:03:04:92:cf:f2:75:fd:b0:77: fb:b4:19:4c:09:0c:d6:36:a5:3a:cf:86:59:02:22: 20:8b:7e:88:f9:52:b4:55:e6:ad:11:87:24:8d:a6: 80:65:f9:f7:a5:6a:55:45:1f:94:fc:87:7a:8f:e3: 7c:3a:40:cc:83:c2:f0:b6:54:97:61:37:86:f0:eb: 1c:94:4d:09:e7:91:3c:df:a6:bb:3a:06:5a:58:c2: ba:8e:9e:45:10:86:e9:4b:34:52:cb:f4:10:ff:76: 85:76:2a:40:da:90:fb:7e:d2:91:67:15:78:46:86: 27:b7:5f:42:2f:c8:9b:4d:62:dd:37:71:8c:b1:d9: 6b:5b:23:3e:09:10:95:f3:a5:f4:34:84:a8:e5:b9: 75:ae:c4:41:d5:c4:11:15:2b:6e:cb:34:df:e2:c3: cd:cc:bf:53:f7:20:e8:96:ff:8d:21:5b:80:be:84: 75:f8:be:77:38:69:36:23:69:0c:6c:f0:f0:c1:6b: ee:f5:9a:79:8f:b9:aa:4a:dc:35:bb:6c:51:58:c8: b7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2C:6F:F0:98:A0:12:B9:5A:6D:6C:E4:9B:AD:83:1B:89:3E:8B:90 X509v3 Authority Key Identifier: keyid:2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:8b:c9:e2:f2:fb:96:d5:78:eb:f9:4a:ae:d6:44:40:24:ee: 2b:80:b8:b4:8f:d4:67:c6:f7:18:17:c1:55:d2:2b:ca:11:21: a8:d9:c5:51:86:65:15:19:fc:8a:48:50:e0:fc:07:e5:78:2e: 6e:3d:46:7e:f3:ac:b3:c5:f0:76:b8:b4:01:bf:d1:b1:11:ee: 72:7b:06:4a:fb:9b:67:45:47:8b:bc:7e:51:31:e8:2d:df:a0: 9d:ee:42:10:da:5b:91:bc:3d:13:25:85:64:6e:f4:ac:b0:48: 68:e1:83:fa:a5:ee:ed:08:16:b1:0f:3e:82:f5:d3:8f:07:69: 0d:c5:ac:8a:2d:3a:65:aa:4d:a5:fe:70:31:45:e7:7c:3f:e9: e4:3e:9b:c7:4b:28:63:57:c1:18:69:67:1b:b3:71:09:2f:28: 9b:0b:ed:52:19:9c:0d:2e:ff:13:0e:ea:0f:a2:ed:6c:89:99: 99:d2:48:d9:6e:a8:d5:13:f6:e2:0d:c7:bf:25:08:9b:89:9e: fd:bd:51:58:47:3e:87:aa:ca:10:fb:81:f6:51:97:81:72:06: aa:fc:a0:15:ed:63:1a:42:d9:f4:03:b7:ae:cf:a5:b8:63:49: ea:57:70:b2:79:76:8a:2d:72:a7:9f:17:4d:3a:57:c9:d6:16: 2e:9e:2a:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUApSTaBu8Wo/QtCX9SSDCFCCcwjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVCOENCRTdBNDc5Mjc3QUMwM0VFODBGMzY1REQ4ODNC RTM4REQ4ODAeFw0yNjA2MjQxMTEzNThaFw0yNjA2MjUxMjI2NThaMDMxMTAvBgNV BAMTKEJEMkM2RkYwOThBMDEyQjk1QTZENkNFNDlCQUQ4MzFCODkzRThCOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkST8hXtFcUrCfN4zMpReYQr3D lhM9Nps64fN/ccn4be6gH9se3SbgB08jzNqJz1fxkQMEks/ydf2wd/u0GUwJDNY2 pTrPhlkCIiCLfoj5UrRV5q0RhySNpoBl+felalVFH5T8h3qP43w6QMyDwvC2VJdh N4bw6xyUTQnnkTzfprs6BlpYwrqOnkUQhulLNFLL9BD/doV2KkDakPt+0pFnFXhG hie3X0IvyJtNYt03cYyx2WtbIz4JEJXzpfQ0hKjluXWuxEHVxBEVK27LNN/iw83M v1P3IOiW/40hW4C+hHX4vnc4aTYjaQxs8PDBa+71mnmPuapK3DW7bFFYyLe9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvSxv8JigErlabWzkm62DG4k+i5AwHwYDVR0j BBgwFoAULrjL56R5J3rAPugPNl3Yg7443YgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRiOTJlODktOTJkNS00MDY0LTk1MTEtMDY3ZTM1MzY3OWNlLzAvMkVCOENCRTdB NDc5Mjc3QUMwM0VFODBGMzY1REQ4ODNCRTM4REQ4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRUI4Q0JFN0E0NzkyNzdBQzAzRUU4MEYzNjVERDg4M0JFMzhE RDg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvMkVCOENCRTdBNDc5Mjc3QUMwM0VFODBGMzY1REQ4 ODNCRTM4REQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmLyeLy+5bVeOv5Sq7WREAk7iuAuLSP1GfG 9xgXwVXSK8oRIajZxVGGZRUZ/IpIUOD8B+V4Lm49Rn7zrLPF8Ha4tAG/0bER7nJ7 Bkr7m2dFR4u8flEx6C3foJ3uQhDaW5G8PRMlhWRu9KywSGjhg/ql7u0IFrEPPoL1 048HaQ3FrIotOmWqTaX+cDFF53w/6eQ+m8dLKGNXwRhpZxuzcQkvKJsL7VIZnA0u /xMO6g+i7WyJmZnSSNluqNUT9uINx78lCJuJnv29UVhHPoeqyhD7gfZRl4FyBqr8 oBXtYxpC2fQDt67PpbhjSepXcLJ5dootcqefF006V8nWFi6eKjY= -----END CERTIFICATE-----Generated at Wed Jun 24 15:38:18 2026 by rpki-client