$ rpki-client -vvf rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft File: 2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft (raw, json) Hash identifier: G9G6wSqS4qW/OnwxPlUmbsfMLXSu/7ZVX13LptQ8NdU= Subject key identifier: 4F:C5:07:A4:04:23:38:C8:76:06:11:C9:BB:4B:07:6F:EA:D1:F5:06 Authority key identifier: 2C:F0:62:4C:97:05:2A:18:8B:12:C2:D8:DF:D6:92:56:BE:AE:A0:A3 Certificate issuer: /CN=2CF0624C97052A188B12C2D8DFD69256BEAEA0A3 Certificate serial: 304D589D853F2B6A3387D26EE0E84F4F6A3B16F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 09:16:10 +0000 Manifest this update: Thu 23 Jul 2026 09:11:10 +0000 Manifest next update: Fri 24 Jul 2026 11:05:10 +0000 Files and hashes: 1: 2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl (hash: IsoDVqtaFsS8LyBXka7jVokj5TFozCp1eL469cyRNYw=) 2: 3131372e3132312e3230312e302f32342d3234203d3e203436303239.roa (hash: Gt77/DpvHcyfECJ/rzUv8b/LftlAsDwob9ro6Az9CBg=) 3: 3131372e3132312e3230372e302f32342d3234203d3e203436303239.roa (hash: 5qjiHCREo3yTZVwviMFSFaOdgsJ0Wu7pJnWioBrnUw8=) 4: 3131372e3132312e3230332e302f32342d3234203d3e203436303239.roa (hash: khNOf5qfeVAtCDmI+P0qU0wtTsenc+owEXE7IuCFTL4=) 5: 3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa (hash: JklHOE9UnXIvsKlW/PC+ZLgav3mgVpKETno9/XOSONo=) 6: 3131372e3132312e3230302e302f32342d3234203d3e203436303239.roa (hash: jjDQyLwOLFkeP+V5865OD4J5ZSFyfyGf7kRLTYcgAUA=) 7: 3131372e3132312e3230342e302f32342d3234203d3e203436303239.roa (hash: 9xyVMpzGgMxzPTr0/YEPxhsOk4K0WU7VoWYP2UAihTY=) 8: 3131372e3132312e3230322e302f32342d3234203d3e203436303239.roa (hash: G6layxH6VqJ35uHJZhmjgga72kPwjzbEYW/yD2TBIJU=) 9: 3131372e3132312e3230352e302f32342d3234203d3e203436303239.roa (hash: UH+sfXi3uyUzmqtZ5a3kiK88kT3KnsNHU+6St14pVbU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 11:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:4d:58:9d:85:3f:2b:6a:33:87:d2:6e:e0:e8:4f:4f:6a:3b:16:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CF0624C97052A188B12C2D8DFD69256BEAEA0A3 Validity Not Before: Jul 23 09:11:10 2026 GMT Not After : Jul 24 11:05:10 2026 GMT Subject: CN=4FC507A4042338C8760611C9BB4B076FEAD1F506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:04:8a:53:0e:91:76:69:ce:37:79:ce:15: 8a:01:c8:2b:fb:54:70:d9:fc:40:d9:81:33:7e:98: 5a:bc:0e:86:52:b5:3e:af:7a:3d:c9:80:39:15:6c: 75:c7:cd:37:fb:49:14:07:8c:cd:90:7a:75:02:b8: 94:8b:ad:ff:aa:d1:11:17:85:1c:7f:2f:92:98:d6: fa:c9:34:2c:bc:5e:b6:c6:d7:fd:8c:1e:4b:21:08: 97:bd:7c:2d:b4:6f:14:f8:ee:29:c5:a9:ef:6c:e1: be:a2:5d:51:41:dd:e4:52:dd:4c:67:72:7e:f7:f8: 7e:8d:8f:1d:e2:3a:ab:9a:81:63:4f:14:c0:d3:09: 5f:29:69:07:00:86:59:75:0d:13:38:47:79:04:74: 9a:1f:96:c8:74:8a:16:fb:30:8a:86:a7:d2:f4:41: c4:43:45:ef:18:b9:99:4f:7c:d3:ee:ab:e8:40:ee: 83:7e:64:3e:53:5e:0b:be:a8:da:39:08:f4:11:8f: ae:5f:c5:c2:10:d8:c5:b2:19:00:29:42:50:6c:d2: fc:3b:25:87:37:a8:32:f0:8e:4a:30:a3:d4:12:40: 35:bd:37:d6:ed:2f:2a:00:71:2d:c7:a3:5f:14:c7: fe:b3:34:64:c0:2d:6d:26:bf:79:92:5f:e2:6b:f9: 52:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C5:07:A4:04:23:38:C8:76:06:11:C9:BB:4B:07:6F:EA:D1:F5:06 X509v3 Authority Key Identifier: keyid:2C:F0:62:4C:97:05:2A:18:8B:12:C2:D8:DF:D6:92:56:BE:AE:A0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f1:5f:91:89:72:74:a0:6b:77:df:43:c1:ee:65:c1:ef:95: 8f:77:0b:05:df:25:eb:98:56:a9:ad:02:25:0c:47:f5:ad:f7: 59:da:c4:79:32:6c:3d:c1:9a:66:9b:5b:2b:75:eb:ab:9a:05: 34:41:23:39:f9:74:b9:64:79:cc:c8:8c:04:b2:37:eb:1e:d4: ba:7a:15:85:58:b5:70:b5:df:41:7d:e0:49:62:d7:44:ca:1b: cf:6a:c7:11:da:7c:49:95:40:98:77:5d:28:6f:90:82:de:85: 50:d6:0a:d7:12:19:1c:fb:77:a9:e6:00:f0:e9:dc:ac:c2:b8: 79:0e:75:a9:12:fc:f8:48:34:cc:2e:b9:d3:f7:bc:02:20:0c: a0:6d:74:3c:0c:32:9a:d0:b5:8c:4b:6a:7f:00:74:81:32:89: 0d:7b:f0:e0:29:60:7b:60:a4:6f:3b:02:36:fc:ce:53:f2:7a: 60:54:cf:77:68:d9:a7:ba:ea:e0:9f:37:d4:88:1b:0a:75:b3: 88:da:53:e3:8a:bb:40:3c:20:cb:d2:98:5b:b9:b7:d3:78:d3: 65:69:7f:d7:50:e0:50:7a:9c:cc:ff:bf:1d:71:33:b5:55:9d: 1d:1c:61:cd:af:e2:b2:a7:7f:75:28:f6:99:f0:1f:bb:38:08: 84:ff:0f:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUME1YnYU/K2ozh9Ju4OhPT2o7FvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGMDYyNEM5NzA1MkExODhCMTJDMkQ4REZENjkyNTZC RUFFQTBBMzAeFw0yNjA3MjMwOTExMTBaFw0yNjA3MjQxMTA1MTBaMDMxMTAvBgNV BAMTKDRGQzUwN0E0MDQyMzM4Qzg3NjA2MTFDOUJCNEIwNzZGRUFEMUY1MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgYASKUw6RdmnON3nOFYoByCv7 VHDZ/EDZgTN+mFq8DoZStT6vej3JgDkVbHXHzTf7SRQHjM2QenUCuJSLrf+q0REX hRx/L5KY1vrJNCy8XrbG1/2MHkshCJe9fC20bxT47inFqe9s4b6iXVFB3eRS3Uxn cn73+H6Njx3iOquagWNPFMDTCV8paQcAhll1DRM4R3kEdJoflsh0ihb7MIqGp9L0 QcRDRe8YuZlPfNPuq+hA7oN+ZD5TXgu+qNo5CPQRj65fxcIQ2MWyGQApQlBs0vw7 JYc3qDLwjkowo9QSQDW9N9btLyoAcS3Ho18Ux/6zNGTALW0mv3mSX+Jr+VIbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT8UHpAQjOMh2BhHJu0sHb+rR9QYwHwYDVR0j BBgwFoAULPBiTJcFKhiLEsLY39aSVr6uoKMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTUzYjA2N2MtZWNjOS00ZGNhLTk4N2QtYjk1NzY4MTVmODU1LzAvMkNGMDYyNEM5 NzA1MkExODhCMTJDMkQ4REZENjkyNTZCRUFFQTBBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0YwNjI0Qzk3MDUyQTE4OEIxMkMyRDhERkQ2OTI1NkJFQUVB MEEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTUzYjA2N2MtZWNjOS00ZGNhLTk4 N2QtYjk1NzY4MTVmODU1LzAvMkNGMDYyNEM5NzA1MkExODhCMTJDMkQ4REZENjky NTZCRUFFQTBBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3xX5GJcnSga3ffQ8HuZcHvlY93CwXfJeuY VqmtAiUMR/Wt91naxHkybD3BmmabWyt166uaBTRBIzn5dLlkeczIjASyN+se1Lp6 FYVYtXC130F94Eli10TKG89qxxHafEmVQJh3XShvkILehVDWCtcSGRz7d6nmAPDp 3KzCuHkOdakS/PhINMwuudP3vAIgDKBtdDwMMprQtYxLan8AdIEyiQ178OApYHtg pG87Ajb8zlPyemBUz3do2ae66uCfN9SIGwp1s4jaU+OKu0A8IMvSmFu5t9N402Vp f9dQ4FB6nMz/vx1xM7VVnR0cYc2v4rKnf3Uo9pnwH7s4CIT/D+Y= -----END CERTIFICATE-----Generated at Fri Jul 24 03:58:53 2026 by rpki-client