$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft File: C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft (raw, json) Hash identifier: 0OneWLvARQ13pZkJOaQZ2su9TcV0GBRsbpCkEbXfOys= Subject key identifier: 58:F3:70:4A:93:28:F1:BE:51:70:29:04:32:B9:1D:4B:8E:6B:90:91 Authority key identifier: C2:D6:F5:B6:33:70:10:04:FE:FA:E2:24:34:8B:98:C8:C5:AF:5D:E4 Certificate issuer: /CN=C2D6F5B633701004FEFAE224348B98C8C5AF5DE4 Certificate serial: 78EACCA161C28B313120AFEDF75E07BA8B318306 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft Manifest number: 2C Signing time: Wed 03 Jun 2026 19:33:01 +0000 Manifest this update: Wed 03 Jun 2026 19:28:01 +0000 Manifest next update: Thu 04 Jun 2026 23:02:01 +0000 Files and hashes: 1: C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl (hash: mX0UaYm7iLPK/J2Oir/9YdRW/bxk8co6arTr9bmSVN0=) 2: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: Ufj1irifhgIIf9Z+cJ8JRj8meHiqH+Kv6sNyd7Vy/bM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 17:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ea:cc:a1:61:c2:8b:31:31:20:af:ed:f7:5e:07:ba:8b:31:83:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D6F5B633701004FEFAE224348B98C8C5AF5DE4 Validity Not Before: Jun 3 19:28:01 2026 GMT Not After : Jun 4 23:02:01 2026 GMT Subject: CN=58F3704A9328F1BE5170290432B91D4B8E6B9091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d5:86:be:1a:28:1c:67:33:fb:4d:e3:93:4f: b6:52:1d:db:a2:ae:aa:51:6a:f2:53:27:64:e4:89: 9f:fe:7f:9b:55:cc:a5:3e:cd:27:69:4f:7e:a5:69: 00:08:2e:5e:67:1b:c4:bc:e0:8c:86:00:49:38:9d: 50:ba:ae:bc:0d:c5:2a:78:5a:42:33:44:7e:2f:f1: 0d:2e:bf:02:0e:18:5e:f9:10:4a:79:0b:7b:58:07: da:5e:92:9f:04:9f:b2:40:12:17:c7:7d:47:e8:00: 4f:b2:47:00:69:f6:1a:cd:cc:5f:9d:c0:58:24:aa: b4:4a:48:9a:60:87:26:42:19:37:10:6f:cb:40:35: 17:32:6a:37:31:1f:15:0a:c0:cc:a4:6f:8b:bc:83: 7b:53:9e:85:dd:3e:8e:07:9e:88:67:0b:26:d9:f6: 17:2f:26:59:07:66:2e:4d:a6:a2:4e:9d:18:1b:99: dc:11:23:c0:b9:e8:5d:43:81:60:27:10:3d:35:21: 16:bc:5e:48:61:f1:05:dd:8e:e4:f5:bc:0f:be:ff: 2e:3a:66:8a:0c:a1:c6:74:e1:67:7c:14:f1:f0:57: b7:cf:44:dd:0d:77:b0:c1:34:51:23:77:00:49:57: 23:a8:68:8a:41:4f:d8:6b:64:ef:ba:87:87:5f:f4: c2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F3:70:4A:93:28:F1:BE:51:70:29:04:32:B9:1D:4B:8E:6B:90:91 X509v3 Authority Key Identifier: keyid:C2:D6:F5:B6:33:70:10:04:FE:FA:E2:24:34:8B:98:C8:C5:AF:5D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:7c:07:ff:c1:c6:79:aa:e7:ad:ff:aa:ba:28:d4:56:58:3a: 4c:70:6f:a2:8d:31:ef:8b:3f:a9:57:68:ac:fd:51:96:4a:f8: 1e:da:71:85:8c:8c:a5:2c:09:81:11:9e:ff:f1:63:63:8f:a6: 64:00:f5:2d:71:fe:08:4f:91:c8:17:39:29:11:6e:bb:88:c5: 67:4c:88:dd:65:1d:80:42:ec:62:31:92:7c:7c:66:03:4b:81: 90:b8:08:3f:93:71:29:49:43:15:fb:13:31:80:ad:02:01:69: cb:46:ea:f7:e4:9d:71:07:ca:b1:9e:17:1a:c0:47:bf:90:ab: 2d:45:1e:35:49:b8:dc:b6:0a:86:4b:26:cd:d4:f2:f1:38:64: a6:19:65:9a:6c:bb:3e:e8:af:db:33:35:f8:f4:79:63:7e:02: 1e:9e:f3:f4:00:9e:bc:94:44:fe:e9:ec:40:2e:26:c9:eb:ea: 67:64:36:f2:22:17:0a:f3:1e:8d:42:f4:60:85:3b:cb:4f:36: ed:d7:0b:f0:29:55:45:52:44:eb:ad:2a:d1:5e:4d:69:ab:44: 63:b7:69:ca:c3:6e:22:68:52:56:98:02:94:4d:7d:5d:bb:61: 03:91:bb:9f:82:51:f7:95:be:1f:55:6b:e0:6b:c3:c7:ef:de: 57:84:a5:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeOrMoWHCizExIK/t914HuosxgwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENkY1QjYzMzcwMTAwNEZFRkFFMjI0MzQ4Qjk4QzhD NUFGNURFNDAeFw0yNjA2MDMxOTI4MDFaFw0yNjA2MDQyMzAyMDFaMDMxMTAvBgNV BAMTKDU4RjM3MDRBOTMyOEYxQkU1MTcwMjkwNDMyQjkxRDRCOEU2QjkwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01Ya+GigcZzP7TeOTT7ZSHdui rqpRavJTJ2TkiZ/+f5tVzKU+zSdpT36laQAILl5nG8S84IyGAEk4nVC6rrwNxSp4 WkIzRH4v8Q0uvwIOGF75EEp5C3tYB9pekp8En7JAEhfHfUfoAE+yRwBp9hrNzF+d wFgkqrRKSJpghyZCGTcQb8tANRcyajcxHxUKwMykb4u8g3tTnoXdPo4HnohnCybZ 9hcvJlkHZi5NpqJOnRgbmdwRI8C56F1DgWAnED01IRa8Xkhh8QXdjuT1vA++/y46 ZooMocZ04Wd8FPHwV7fPRN0Nd7DBNFEjdwBJVyOoaIpBT9hrZO+6h4df9MI3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWPNwSpMo8b5RcCkEMrkdS45rkJEwHwYDVR0j BBgwFoAUwtb1tjNwEAT++uIkNIuYyMWvXeQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA5NzZlMjYtOTUxMy00OGZmLTlmN2YtZWEzZmRjZjNlMmU4LzAvQzJENkY1QjYz MzcwMTAwNEZFRkFFMjI0MzQ4Qjk4QzhDNUFGNURFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkQ2RjVCNjMzNzAxMDA0RkVGQUUyMjQzNDhCOThDOEM1QUY1 REU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA5NzZlMjYtOTUxMy00OGZmLTlm N2YtZWEzZmRjZjNlMmU4LzAvQzJENkY1QjYzMzcwMTAwNEZFRkFFMjI0MzQ4Qjk4 QzhDNUFGNURFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZ8B//Bxnmq563/qroo1FZYOkxwb6KNMe+L P6lXaKz9UZZK+B7acYWMjKUsCYERnv/xY2OPpmQA9S1x/ghPkcgXOSkRbruIxWdM iN1lHYBC7GIxknx8ZgNLgZC4CD+TcSlJQxX7EzGArQIBactG6vfknXEHyrGeFxrA R7+Qqy1FHjVJuNy2CoZLJs3U8vE4ZKYZZZpsuz7or9szNfj0eWN+Ah6e8/QAnryU RP7p7EAuJsnr6mdkNvIiFwrzHo1C9GCFO8tPNu3XC/ApVUVSROutKtFeTWmrRGO3 acrDbiJoUlaYApRNfV27YQORu5+CUfeVvh9Va+Brw8fv3leEpW8= -----END CERTIFICATE-----Generated at Thu Jun 4 07:55:36 2026 by rpki-client