$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft File: 2A494FAEE44F13448E6C43136F825053CE977009.mft (raw, json) Hash identifier: Y9B6IGF5+qtWY73Xq5RS6U9bIEqpCmhEGUwJQpNgcTk= Subject key identifier: 5D:FF:7C:3F:0C:0C:58:E4:DF:77:9C:61:F3:BC:5B:97:DA:45:EC:80 Authority key identifier: 2A:49:4F:AE:E4:4F:13:44:8E:6C:43:13:6F:82:50:53:CE:97:70:09 Certificate issuer: /CN=2A494FAEE44F13448E6C43136F825053CE977009 Certificate serial: 144E46C5C89E5F870E9AA63261F92ACA4CFCDC75 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 20:56:15 +0000 Manifest this update: Fri 19 Jun 2026 20:51:15 +0000 Manifest next update: Sat 20 Jun 2026 23:28:15 +0000 Files and hashes: 1: 3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa (hash: SSSkCi1zJkML5HF5+O+odxp65ltRBIRj0krRoe9GJqI=) 2: 3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (hash: t2vA65s4Rw0JpR4oPJfjFnJ3dyjvcRRBFrdNUp3Bo2M=) 3: 2A494FAEE44F13448E6C43136F825053CE977009.crl (hash: 3qic24SSlHm4CNWomB8mJqfQguUd7yX6cWSRsZAPoC4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.crl rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 23:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:4e:46:c5:c8:9e:5f:87:0e:9a:a6:32:61:f9:2a:ca:4c:fc:dc:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A494FAEE44F13448E6C43136F825053CE977009 Validity Not Before: Jun 19 20:51:15 2026 GMT Not After : Jun 20 23:28:15 2026 GMT Subject: CN=5DFF7C3F0C0C58E4DF779C61F3BC5B97DA45EC80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8f:e7:ac:9d:21:82:39:36:96:ae:1a:2b:9d: b3:0c:95:dd:ed:ba:38:de:bd:f6:47:26:df:96:03: c8:98:6e:a2:16:38:0c:ec:aa:22:3b:03:15:9e:08: b0:b2:e2:93:99:3a:90:a0:f2:16:ed:b0:ea:86:aa: db:c3:8d:19:e1:79:be:46:cd:30:a1:8b:40:b0:b1: f5:46:83:a5:b2:b1:88:47:40:50:a4:2d:ec:17:96: 5e:6f:88:13:26:ca:44:f4:16:9b:85:bb:78:24:42: 77:49:e3:b2:17:97:14:f7:c6:58:f6:d0:35:1b:52: 95:b9:46:8d:72:dd:2e:e2:58:c9:f2:1b:2f:46:f6: a7:c1:aa:0f:1c:36:a6:be:70:09:bf:31:51:79:58: 97:cf:98:48:85:6d:e4:0c:cf:b2:f7:fe:55:ec:bf: 2e:58:cd:0f:f2:11:ab:ba:cb:36:f2:1f:65:bf:03: c3:fb:92:d4:47:58:4c:fb:53:80:29:0e:32:bd:cc: 67:43:fc:3f:81:6b:e6:91:16:b4:6c:0d:23:8d:bd: 05:bf:e4:8a:23:c4:88:92:11:92:50:07:a2:cb:a4: a5:87:27:85:2f:ca:5e:98:6b:e6:23:f9:7a:f5:4d: 36:24:3e:7e:ff:3b:d5:1b:db:e9:0b:f4:d7:36:6b: 5a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FF:7C:3F:0C:0C:58:E4:DF:77:9C:61:F3:BC:5B:97:DA:45:EC:80 X509v3 Authority Key Identifier: keyid:2A:49:4F:AE:E4:4F:13:44:8E:6C:43:13:6F:82:50:53:CE:97:70:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:47:64:0b:6d:2c:0f:fe:f0:ad:60:58:06:a1:88:56:ca:8b: 1f:d9:6c:71:b3:2c:52:5b:ad:93:0c:60:14:4e:1f:46:2a:79: 69:84:af:14:29:89:a3:e2:65:71:70:47:b4:c7:6a:53:82:ae: 9a:38:6a:ca:af:b7:c2:d2:84:ab:10:79:98:16:28:27:59:7e: 35:c9:ba:fe:dd:4c:f7:4d:ae:f5:b9:50:52:66:5a:02:6d:57: b8:30:f9:8e:c9:bc:a2:1b:1f:80:b5:f1:bf:28:cb:91:ca:73: 97:6e:86:ff:ee:82:9b:21:8f:4d:76:b3:5a:52:da:37:d5:4e: ff:86:ae:69:3c:51:d3:e2:bc:56:b5:cd:e2:21:2c:88:0b:04: 73:9f:b6:8b:c8:2a:ad:83:af:89:71:23:61:af:af:da:41:49: a3:25:0e:82:c1:3f:5b:64:04:41:06:ac:dd:18:50:bb:39:35: e2:5c:20:8d:53:60:51:f8:df:fb:01:41:3f:68:05:fb:80:a3: f1:2d:75:51:b0:f3:db:a6:bd:bd:bb:fe:05:5e:37:d0:41:4b: 18:5f:d2:97:21:40:3f:8f:a0:f1:98:94:e3:5f:3c:27:0b:1c: 62:28:8f:50:cb:1c:ba:ea:0f:15:69:94:cd:9b:e6:64:73:8d: 40:06:8a:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFE5GxcieX4cOmqYyYfkqykz83HUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE0OTRGQUVFNDRGMTM0NDhFNkM0MzEzNkY4MjUwNTND RTk3NzAwOTAeFw0yNjA2MTkyMDUxMTVaFw0yNjA2MjAyMzI4MTVaMDMxMTAvBgNV BAMTKDVERkY3QzNGMEMwQzU4RTRERjc3OUM2MUYzQkM1Qjk3REE0NUVDODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMj+esnSGCOTaWrhornbMMld3t ujjevfZHJt+WA8iYbqIWOAzsqiI7AxWeCLCy4pOZOpCg8hbtsOqGqtvDjRnheb5G zTChi0CwsfVGg6WysYhHQFCkLewXll5viBMmykT0FpuFu3gkQndJ47IXlxT3xlj2 0DUbUpW5Ro1y3S7iWMnyGy9G9qfBqg8cNqa+cAm/MVF5WJfPmEiFbeQMz7L3/lXs vy5YzQ/yEau6yzbyH2W/A8P7ktRHWEz7U4ApDjK9zGdD/D+Ba+aRFrRsDSONvQW/ 5IojxIiSEZJQB6LLpKWHJ4Uvyl6Ya+Yj+Xr1TTYkPn7/O9Ub2+kL9Nc2a1pLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXf98PwwMWOTfd5xh87xbl9pF7IAwHwYDVR0j BBgwFoAUKklPruRPE0SObEMTb4JQU86XcAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBkYzEyODMtMWNlMi00MWE1LWFmZTYtZjBiZTMxZTliMTBkLzAvMkE0OTRGQUVF NDRGMTM0NDhFNkM0MzEzNkY4MjUwNTNDRTk3NzAwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTQ5NEZBRUU0NEYxMzQ0OEU2QzQzMTM2RjgyNTA1M0NFOTc3 MDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBkYzEyODMtMWNlMi00MWE1LWFm ZTYtZjBiZTMxZTliMTBkLzAvMkE0OTRGQUVFNDRGMTM0NDhFNkM0MzEzNkY4MjUw NTNDRTk3NzAwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlHZAttLA/+8K1gWAahiFbKix/ZbHGzLFJb rZMMYBROH0YqeWmErxQpiaPiZXFwR7THalOCrpo4asqvt8LShKsQeZgWKCdZfjXJ uv7dTPdNrvW5UFJmWgJtV7gw+Y7JvKIbH4C18b8oy5HKc5duhv/ugpshj012s1pS 2jfVTv+Grmk8UdPivFa1zeIhLIgLBHOftovIKq2Dr4lxI2Gvr9pBSaMlDoLBP1tk BEEGrN0YULs5NeJcII1TYFH43/sBQT9oBfuAo/EtdVGw89umvb27/gVeN9BBSxhf 0pchQD+PoPGYlONfPCcLHGIoj1DLHLrqDxVplM2b5mRzjUAGisA= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:36 2026 by rpki-client