$ rpki-client -vvf rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft File: 2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft (raw, json) Hash identifier: eTWRHLl5MzRmOZW5vYfbrrOcysrIDvivHVSngi/50x0= Subject key identifier: 45:89:D3:A2:E3:6D:CE:95:AB:40:FA:81:69:8B:81:72:05:4C:92:73 Authority key identifier: 2F:37:45:DB:26:30:B1:D0:4A:3E:69:E4:9A:12:ED:7D:D5:65:CC:82 Certificate issuer: /CN=2F3745DB2630B1D04A3E69E49A12ED7DD565CC82 Certificate serial: 5A9A152B346641C6EF4B9A1BEE24CE63B38FF9B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 06:02:02 +0000 Manifest this update: Sat 20 Jun 2026 05:57:02 +0000 Manifest next update: Sun 21 Jun 2026 06:37:02 +0000 Files and hashes: 1: 2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl (hash: JcCUcAXjkOW5HOYOebh3EhyUQhJ5g8vGUBRIx4uhA1I=) 2: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: hXr95hFUQi4QPei7lbvEDGK3/fJ8wC4HwUseAin+nsU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:9a:15:2b:34:66:41:c6:ef:4b:9a:1b:ee:24:ce:63:b3:8f:f9:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F3745DB2630B1D04A3E69E49A12ED7DD565CC82 Validity Not Before: Jun 20 05:57:02 2026 GMT Not After : Jun 21 06:37:02 2026 GMT Subject: CN=4589D3A2E36DCE95AB40FA81698B8172054C9273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:05:99:b9:01:63:c5:01:e1:66:a6:4f:8c:38: d1:c3:b0:87:fc:a5:42:a1:47:f8:8d:3f:8b:44:bc: 4b:ff:f8:12:2b:fd:5f:dd:09:b4:8d:d4:da:5d:4c: 83:2d:b0:ea:40:ef:c0:26:c7:19:d0:05:a4:92:2e: 1c:58:ff:8c:7f:40:4e:ec:3a:1e:a4:e5:b0:bc:df: de:bc:a3:ed:fe:6e:2f:e3:f2:e4:20:eb:4b:5a:fb: 86:03:70:5a:f7:ad:e2:ad:6d:ec:c9:99:66:62:bb: ca:e9:b6:2e:c3:09:52:3e:4c:33:c2:fd:a8:99:63: 38:75:01:43:f2:89:53:d3:75:42:cd:82:e5:85:59: 32:e3:0c:f9:57:64:9f:78:f2:a7:94:b1:25:d6:0f: 6b:ee:6f:cb:cc:5b:c7:67:09:bf:d4:60:91:8a:3b: 2e:4c:ec:3e:04:b1:d6:2c:dc:dd:14:d4:46:e6:e0: fe:6d:b7:1e:ce:bc:36:b9:15:c2:8f:5a:5f:6f:02: 59:d9:f6:73:74:70:2c:d3:11:b9:51:0a:76:51:c7: bc:5d:6b:ab:7c:ad:6c:41:21:21:7f:30:87:a3:5f: 05:e3:b8:17:db:96:e9:32:17:73:dc:12:a0:ec:15: ab:16:b8:93:11:22:30:71:0b:bf:be:a0:28:ff:87: b4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:89:D3:A2:E3:6D:CE:95:AB:40:FA:81:69:8B:81:72:05:4C:92:73 X509v3 Authority Key Identifier: keyid:2F:37:45:DB:26:30:B1:D0:4A:3E:69:E4:9A:12:ED:7D:D5:65:CC:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:7e:0c:b8:4f:bb:89:6d:5a:3a:4b:0d:d8:6f:e2:33:58:e6: 88:5b:02:7d:94:ef:f8:4c:a3:77:09:12:e9:67:a3:f6:0b:29: d0:ad:fe:61:5a:7a:93:82:36:7d:cf:c2:5e:62:be:9f:3d:b0: a9:ca:c2:f5:a7:05:53:a4:eb:0b:ff:15:dc:fd:d8:8d:b1:6a: fd:cd:af:6f:4c:65:09:c9:48:95:3b:0d:65:af:a4:71:06:23: e3:41:fe:29:b1:d2:c2:2a:12:37:00:37:76:aa:d6:46:e3:59: cf:52:26:1d:c0:ba:a7:30:c3:0d:cb:5b:27:4a:ca:4f:b5:e5: 4d:dd:26:c3:a0:c5:1f:06:76:8d:b4:56:86:38:f9:3f:9a:f9: 56:f9:19:ff:1d:d5:79:25:6b:79:90:64:26:91:c4:86:c8:a4: 8c:51:8e:f9:93:3c:89:71:b3:63:a7:09:86:b0:90:81:37:2a: 92:8c:57:a0:1c:a4:23:8f:bb:36:56:b0:d3:aa:6b:25:03:77: 1c:e4:d9:b6:c6:c0:65:99:22:dc:d4:03:10:11:a4:a0:21:19: a4:01:3c:94:04:6d:9c:c9:f2:c7:77:1c:a2:4f:b6:47:2e:7e: 52:19:f1:6e:7a:e8:c0:dd:64:12:60:97:9a:61:51:35:71:5f: e7:ca:62:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWpoVKzRmQcbvS5ob7iTOY7OP+bkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYzNzQ1REIyNjMwQjFEMDRBM0U2OUU0OUExMkVEN0RE NTY1Q0M4MjAeFw0yNjA2MjAwNTU3MDJaFw0yNjA2MjEwNjM3MDJaMDMxMTAvBgNV BAMTKDQ1ODlEM0EyRTM2RENFOTVBQjQwRkE4MTY5OEI4MTcyMDU0QzkyNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0BZm5AWPFAeFmpk+MONHDsIf8 pUKhR/iNP4tEvEv/+BIr/V/dCbSN1NpdTIMtsOpA78AmxxnQBaSSLhxY/4x/QE7s Oh6k5bC83968o+3+bi/j8uQg60ta+4YDcFr3reKtbezJmWZiu8rpti7DCVI+TDPC /aiZYzh1AUPyiVPTdULNguWFWTLjDPlXZJ948qeUsSXWD2vub8vMW8dnCb/UYJGK Oy5M7D4EsdYs3N0U1Ebm4P5ttx7OvDa5FcKPWl9vAlnZ9nN0cCzTEblRCnZRx7xd a6t8rWxBISF/MIejXwXjuBfblukyF3PcEqDsFasWuJMRIjBxC7++oCj/h7TtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURYnTouNtzpWrQPqBaYuBcgVMknMwHwYDVR0j BBgwFoAULzdF2yYwsdBKPmnkmhLtfdVlzIIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTc4YThiMzktM2FlMy00ZGU3LTkzNjYtMjFmOWVhMDQzMjVhLzAvMkYzNzQ1REIy NjMwQjFEMDRBM0U2OUU0OUExMkVEN0RENTY1Q0M4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRjM3NDVEQjI2MzBCMUQwNEEzRTY5RTQ5QTEyRUQ3REQ1NjVD QzgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTc4YThiMzktM2FlMy00ZGU3LTkz NjYtMjFmOWVhMDQzMjVhLzAvMkYzNzQ1REIyNjMwQjFEMDRBM0U2OUU0OUExMkVE N0RENTY1Q0M4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAt+DLhPu4ltWjpLDdhv4jNY5ohbAn2U7/hM o3cJEulno/YLKdCt/mFaepOCNn3Pwl5ivp89sKnKwvWnBVOk6wv/Fdz92I2xav3N r29MZQnJSJU7DWWvpHEGI+NB/imx0sIqEjcAN3aq1kbjWc9SJh3Auqcwww3LWydK yk+15U3dJsOgxR8Gdo20VoY4+T+a+Vb5Gf8d1Xkla3mQZCaRxIbIpIxRjvmTPIlx s2OnCYawkIE3KpKMV6AcpCOPuzZWsNOqayUDdxzk2bbGwGWZItzUAxARpKAhGaQB PJQEbZzJ8sd3HKJPtkcuflIZ8W566MDdZBJgl5phUTVxX+fKYpY= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:04 2026 by rpki-client