$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft File: 2BD3626FA7C4C8A787225E35241AD5992151D359.mft (raw, json) Hash identifier: jVMKfMe7dmsvWT0JHP4q0vkkw5BIxFbq9fn8DKgpbdc= Subject key identifier: 20:61:4D:EB:D1:9E:F8:15:2D:11:AE:E1:3B:E7:3D:98:41:65:C6:8C Authority key identifier: 2B:D3:62:6F:A7:C4:C8:A7:87:22:5E:35:24:1A:D5:99:21:51:D3:59 Certificate issuer: /CN=2BD3626FA7C4C8A787225E35241AD5992151D359 Certificate serial: 6AB3A11B09136B0A1FD4487F70CA3524610F17BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft Manifest number: 05 Signing time: Tue 05 May 2026 06:29:42 +0000 Manifest this update: Tue 05 May 2026 06:24:42 +0000 Manifest next update: Wed 06 May 2026 07:40:42 +0000 Files and hashes: 1: 2BD3626FA7C4C8A787225E35241AD5992151D359.crl (hash: rKjG4KuPFV+Ek9K1O4fFVntko3TA94sABQUqcY/5MPs=) 2: 3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa (hash: Lts+nDghqdeOjHPLJupIS91t89Hz46DHGxSYyuVdlFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.crl rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 07:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b3:a1:1b:09:13:6b:0a:1f:d4:48:7f:70:ca:35:24:61:0f:17:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BD3626FA7C4C8A787225E35241AD5992151D359 Validity Not Before: May 5 06:24:42 2026 GMT Not After : May 6 07:40:42 2026 GMT Subject: CN=20614DEBD19EF8152D11AEE13BE73D984165C68C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d8:c6:a0:03:02:32:e9:4f:01:cf:d1:7c:a7: 0c:f3:3f:c2:39:4f:96:c9:a2:fe:31:bd:fa:23:d4: 3e:e6:bc:d8:70:f3:53:fe:78:1a:cd:aa:fe:5e:ea: 01:1b:4f:74:a5:90:81:7a:11:7e:b2:95:22:15:5b: 22:ac:69:58:1b:7b:bf:d5:1c:af:2f:88:1f:ea:33: f7:07:20:0a:fd:62:d5:af:0e:c9:00:19:8c:d0:d4: 5d:a4:93:40:31:b1:e5:96:b1:fb:41:86:90:07:2a: d2:ce:1c:d7:25:1f:76:d5:ca:b3:16:3f:ab:a6:57: 4e:0f:87:68:05:43:2c:a8:cf:83:f0:6b:64:6d:b2: 66:4a:f4:1e:f1:68:77:d7:c9:1d:19:d7:58:7a:cf: 13:86:42:7b:13:3a:d6:43:2a:46:37:fc:58:d2:f2: 9e:87:f4:65:fa:58:68:6a:08:38:91:7b:ff:93:95: 65:a7:fe:e8:25:e1:58:f3:a8:ed:77:7f:e1:92:55: b4:92:c2:76:30:e8:a0:1c:ec:92:9c:30:11:e7:a4: 4a:82:0e:00:44:c8:4f:11:0e:96:7e:05:12:a5:51: 26:b3:d4:cb:0a:82:83:da:4a:61:3a:f4:5c:48:c1: 61:16:2b:5f:0d:27:39:d6:cd:3e:99:2b:6b:e0:01: 11:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:61:4D:EB:D1:9E:F8:15:2D:11:AE:E1:3B:E7:3D:98:41:65:C6:8C X509v3 Authority Key Identifier: keyid:2B:D3:62:6F:A7:C4:C8:A7:87:22:5E:35:24:1A:D5:99:21:51:D3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:2e:e2:fe:17:65:75:7c:57:aa:c6:b6:87:6b:96:ca:9a:91: cc:7f:2d:21:c6:c1:8c:c4:79:57:4a:30:fc:77:9e:5c:30:de: b0:39:82:71:85:cb:37:fb:47:9d:de:77:48:eb:2a:f1:d2:9d: 58:1f:b6:48:24:c7:46:04:72:cb:61:54:48:e7:c1:35:5e:79: 20:d8:7d:da:19:11:3c:0c:22:6f:c7:83:f9:df:ce:a5:ef:9a: af:7d:29:8e:4e:22:4a:13:ed:f4:57:64:49:fa:57:9c:31:51: 85:d3:f7:b8:98:49:fd:d4:14:57:ec:07:5d:3a:62:85:72:35: e7:aa:f4:eb:51:4f:73:40:f7:59:a0:4f:94:58:cf:c8:bd:3b: 52:89:2a:09:f8:6a:67:55:0f:ee:05:1b:8a:e8:a9:83:2f:a1: e4:ff:92:8b:9c:c9:59:f0:a8:e8:11:d1:26:15:a0:40:a5:3f: 61:d1:79:60:c0:cc:7f:63:6e:ba:48:38:d9:9c:60:68:86:ba: 50:ed:f4:2b:20:c0:84:f0:45:16:97:e3:38:46:b0:25:ed:4d: d3:3d:56:85:bc:f5:26:f9:e5:38:f9:05:e5:61:4a:f9:82:0b: da:bc:65:89:90:8d:08:f4:52:fb:f2:a0:eb:a1:f2:8b:6f:8c: 0c:d1:89:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUarOhGwkTawof1Eh/cMo1JGEPF7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJEMzYyNkZBN0M0QzhBNzg3MjI1RTM1MjQxQUQ1OTky MTUxRDM1OTAeFw0yNjA1MDUwNjI0NDJaFw0yNjA1MDYwNzQwNDJaMDMxMTAvBgNV BAMTKDIwNjE0REVCRDE5RUY4MTUyRDExQUVFMTNCRTczRDk4NDE2NUM2OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp2MagAwIy6U8Bz9F8pwzzP8I5 T5bJov4xvfoj1D7mvNhw81P+eBrNqv5e6gEbT3SlkIF6EX6ylSIVWyKsaVgbe7/V HK8viB/qM/cHIAr9YtWvDskAGYzQ1F2kk0AxseWWsftBhpAHKtLOHNclH3bVyrMW P6umV04Ph2gFQyyoz4Pwa2RtsmZK9B7xaHfXyR0Z11h6zxOGQnsTOtZDKkY3/FjS 8p6H9GX6WGhqCDiRe/+TlWWn/ugl4VjzqO13f+GSVbSSwnYw6KAc7JKcMBHnpEqC DgBEyE8RDpZ+BRKlUSaz1MsKgoPaSmE69FxIwWEWK18NJznWzT6ZK2vgARGrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIGFN69Ge+BUtEa7hO+c9mEFlxowwHwYDVR0j BBgwFoAUK9Nib6fEyKeHIl41JBrVmSFR01kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjI3NDRkZGUtN2MxZi00Y2JhLTkzYzAtOWYwNjY5ZWVlZDkyLzAvMkJEMzYyNkZB N0M0QzhBNzg3MjI1RTM1MjQxQUQ1OTkyMTUxRDM1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQkQzNjI2RkE3QzRDOEE3ODcyMjVFMzUyNDFBRDU5OTIxNTFE MzU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjI3NDRkZGUtN2MxZi00Y2JhLTkz YzAtOWYwNjY5ZWVlZDkyLzAvMkJEMzYyNkZBN0M0QzhBNzg3MjI1RTM1MjQxQUQ1 OTkyMTUxRDM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAu4v4XZXV8V6rGtodrlsqakcx/LSHGwYzE eVdKMPx3nlww3rA5gnGFyzf7R53ed0jrKvHSnVgftkgkx0YEcsthVEjnwTVeeSDY fdoZETwMIm/Hg/nfzqXvmq99KY5OIkoT7fRXZEn6V5wxUYXT97iYSf3UFFfsB106 YoVyNeeq9OtRT3NA91mgT5RYz8i9O1KJKgn4amdVD+4FG4roqYMvoeT/koucyVnw qOgR0SYVoEClP2HReWDAzH9jbrpIONmcYGiGulDt9CsgwITwRRaX4zhGsCXtTdM9 VoW89Sb55Tj5BeVhSvmCC9q8ZYmQjQj0UvvyoOuh8otvjAzRifM= -----END CERTIFICATE-----Generated at Tue May 5 10:41:58 2026 by rpki-client