$ rpki-client -vvf rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft File: 2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft (raw, json) Hash identifier: 7RGtiTSaUy7AZvpdDL1kpftyJbhnyd6ZGSz/vFKd+2A= Subject key identifier: C8:52:EF:1A:B0:85:23:3F:D3:22:5A:8D:B3:6B:B6:96:4B:A2:B1:9F Authority key identifier: 2E:1A:4B:EC:A1:A3:FE:AE:F0:C7:92:4E:EE:B4:50:3F:88:5A:87:7C Certificate issuer: /CN=2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C Certificate serial: 14FDA8DEE0F4440B90889D407FEA8A7103340B47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:26:17 +0000 Manifest this update: Thu 23 Jul 2026 21:21:17 +0000 Manifest next update: Sat 25 Jul 2026 00:28:17 +0000 Files and hashes: 1: 2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl (hash: MqOmo23KITxzKVV9R8UdCDSIrPQLQsv0fZBIKHfWobg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:fd:a8:de:e0:f4:44:0b:90:88:9d:40:7f:ea:8a:71:03:34:0b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C Validity Not Before: Jul 23 21:21:17 2026 GMT Not After : Jul 25 00:28:17 2026 GMT Subject: CN=C852EF1AB085233FD3225A8DB36BB6964BA2B19F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:e9:0e:1c:bc:27:4f:c9:fb:09:b4:08:43: 10:05:51:a2:9b:dd:5c:08:88:81:d3:56:96:c4:ae: e5:0f:7d:2a:ca:47:ce:d5:62:a0:69:53:6b:1d:e4: e3:03:47:07:b1:ed:0d:bf:d0:46:9a:b4:2f:b4:fe: fb:ee:8d:58:d3:53:a7:18:1f:ad:fb:e0:90:89:2a: e3:0d:64:5d:22:12:2d:15:14:6a:0a:f1:6b:21:65: 2d:e4:96:14:c0:04:66:08:03:48:4d:48:c9:28:a2: ea:0c:96:44:79:f0:ce:d2:67:d7:ce:21:41:80:7e: 45:d7:87:a1:15:33:b6:90:04:09:f8:1c:64:d2:91: 70:7e:03:a3:84:49:63:c0:69:a7:83:fe:84:98:9d: a0:cc:a7:ab:45:bd:94:b9:a4:52:86:a2:7a:ea:4d: 2f:37:d5:4e:98:5f:c8:cb:0e:dd:9c:a5:8b:1c:1f: 12:19:a6:b5:11:d5:32:35:64:cd:3d:cd:70:6c:85: bc:9d:8f:b5:4b:30:70:78:7d:0f:39:bd:b9:a3:dd: b3:a7:62:ee:41:b7:31:38:01:e6:69:12:2d:bd:95: 92:8f:24:49:0a:e6:3f:a1:40:c9:65:87:a5:e9:7d: 95:7b:86:09:93:be:df:47:e0:5c:2f:c5:3d:f3:47: d6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:52:EF:1A:B0:85:23:3F:D3:22:5A:8D:B3:6B:B6:96:4B:A2:B1:9F X509v3 Authority Key Identifier: keyid:2E:1A:4B:EC:A1:A3:FE:AE:F0:C7:92:4E:EE:B4:50:3F:88:5A:87:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:4a:a6:15:70:78:e6:a4:71:c7:90:7f:7b:7c:49:56:82:3d: ae:31:9e:b3:b4:15:00:c5:1c:cd:bb:d6:cb:31:1e:32:42:eb: 91:3f:9f:f7:17:64:21:26:2c:64:c7:98:90:81:e3:ab:d6:3c: b0:4f:62:bd:38:57:2f:b9:73:d5:ef:c5:fc:f5:ec:02:01:d7: 3f:85:ac:60:b7:d5:18:30:7c:81:ff:6e:ee:87:e8:f1:2a:dd: 3e:2e:b5:2e:91:7b:84:78:03:21:3a:fc:d2:e4:f3:ae:08:8d: 99:63:38:94:8e:f6:37:fb:8b:df:f1:85:db:ba:89:46:0a:0a: f7:67:9d:8b:13:b1:fe:c3:06:b9:fe:89:aa:ed:bc:65:df:74: 0e:53:39:8b:56:42:03:ef:1d:0f:1a:b0:ed:d9:0c:7f:77:6f: 80:e0:7c:82:b3:f2:b3:c4:92:9d:96:94:1a:7a:92:a3:e3:4b: e6:91:22:a5:80:67:a6:19:1e:7b:79:25:57:aa:6f:59:29:0f: 47:1c:f6:92:db:30:b8:76:ca:13:bf:ff:1b:1f:88:c2:89:1c: 97:be:42:b3:06:ae:bb:06:d1:b1:71:67:fb:98:57:5c:8c:a0: 4f:33:d0:3f:98:2b:82:72:7a:ed:97:06:60:1c:67:b2:a4:3b: 26:5e:ed:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFP2o3uD0RAuQiJ1Af+qKcQM0C0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxQTRCRUNBMUEzRkVBRUYwQzc5MjRFRUVCNDUwM0Y4 ODVBODc3QzAeFw0yNjA3MjMyMTIxMTdaFw0yNjA3MjUwMDI4MTdaMDMxMTAvBgNV BAMTKEM4NTJFRjFBQjA4NTIzM0ZEMzIyNUE4REIzNkJCNjk2NEJBMkIxOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKOkOHLwnT8n7CbQIQxAFUaKb 3VwIiIHTVpbEruUPfSrKR87VYqBpU2sd5OMDRwex7Q2/0EaatC+0/vvujVjTU6cY H6374JCJKuMNZF0iEi0VFGoK8WshZS3klhTABGYIA0hNSMkoouoMlkR58M7SZ9fO IUGAfkXXh6EVM7aQBAn4HGTSkXB+A6OESWPAaaeD/oSYnaDMp6tFvZS5pFKGonrq TS831U6YX8jLDt2cpYscHxIZprUR1TI1ZM09zXBshbydj7VLMHB4fQ85vbmj3bOn Yu5BtzE4AeZpEi29lZKPJEkK5j+hQMllh6XpfZV7hgmTvt9H4FwvxT3zR9aFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyFLvGrCFIz/TIlqNs2u2lkuisZ8wHwYDVR0j BBgwFoAULhpL7KGj/q7wx5JO7rRQP4hah3wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDEzNjhhZTMtZGQxMi00YWEzLTg5NDgtNTQ2ZGUwNGM1MWU0LzAvMkUxQTRCRUNB MUEzRkVBRUYwQzc5MjRFRUVCNDUwM0Y4ODVBODc3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yRTFBNEJFQ0ExQTNGRUFFRjBDNzkyNEVFRUI0NTAzRjg4NUE4 NzdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDEzNjhhZTMtZGQxMi00YWEzLTg5 NDgtNTQ2ZGUwNGM1MWU0LzAvMkUxQTRCRUNBMUEzRkVBRUYwQzc5MjRFRUVCNDUw M0Y4ODVBODc3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpKphVweOakcceQf3t8SVaCPa4xnrO0FQDF HM271ssxHjJC65E/n/cXZCEmLGTHmJCB46vWPLBPYr04Vy+5c9Xvxfz17AIB1z+F rGC31RgwfIH/bu6H6PEq3T4utS6Re4R4AyE6/NLk864IjZljOJSO9jf7i9/xhdu6 iUYKCvdnnYsTsf7DBrn+iartvGXfdA5TOYtWQgPvHQ8asO3ZDH93b4DgfIKz8rPE kp2WlBp6kqPjS+aRIqWAZ6YZHnt5JVeqb1kpD0cc9pLbMLh2yhO//xsfiMKJHJe+ QrMGrrsG0bFxZ/uYV1yMoE8z0D+YK4Jyeu2XBmAcZ7KkOyZe7fk= -----END CERTIFICATE-----Generated at Fri Jul 24 05:35:55 2026 by rpki-client