$ rpki-client -vvf rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft File: 2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft (raw, json) Hash identifier: 3JxX52xdxMmMCEG+heqtGSMdUdELlL4l9MT8Y7gZZzs= Subject key identifier: F7:4A:D3:89:44:D7:D3:68:05:04:84:19:0A:CC:BB:67:B6:0A:D1:20 Authority key identifier: 2A:3B:71:13:CD:87:30:2B:2B:15:C0:36:DA:BB:55:A1:C6:1A:4B:C7 Certificate issuer: /CN=2A3B7113CD87302B2B15C036DABB55A1C61A4BC7 Certificate serial: 7B005E10FDF49474AFFF4B5A979ABC9E62C3D4F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:21:20 +0000 Manifest this update: Thu 23 Jul 2026 13:16:20 +0000 Manifest next update: Fri 24 Jul 2026 13:32:20 +0000 Files and hashes: 1: 3130332e31362e3131382e302f32332d3233203d3e20313530323234.roa (hash: cHWRS9jvMLPJtfkGwJTsPEjSAtpAq4obnCko3LPwDM4=) 2: 3130332e31362e3131382e302f32342d3234203d3e20313530323234.roa (hash: DmsqvgbVPNfcNdfJtucN0xsEHJ0/UNUr4pV2Ej4ylVY=) 3: 3130332e31362e3131392e302f32342d3234203d3e20313530323234.roa (hash: I2YIeew2oZSIPdct3GSYzDNuqJxTOhVzByMVv86tq2I=) 4: 2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl (hash: Vnq+LfgtqonFb3rGzOOf3JWUza3QiA4vhcB1oHdfDfA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:00:5e:10:fd:f4:94:74:af:ff:4b:5a:97:9a:bc:9e:62:c3:d4:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A3B7113CD87302B2B15C036DABB55A1C61A4BC7 Validity Not Before: Jul 23 13:16:20 2026 GMT Not After : Jul 24 13:32:20 2026 GMT Subject: CN=F74AD38944D7D368050484190ACCBB67B60AD120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e3:f5:a7:6f:60:c6:aa:ba:2b:d2:f9:a1:3d: ef:7a:5f:8b:5a:c4:94:02:be:24:48:9b:53:93:95: ce:e4:6c:54:53:3b:ae:33:08:16:d4:f1:3f:d9:f7: 07:0e:61:57:5e:fb:a1:f3:55:b2:8d:89:42:6a:f7: 5f:ee:3a:c7:14:14:ac:dd:4d:d8:95:11:cf:aa:43: 5f:22:a5:d5:ca:50:a1:0e:9e:7b:70:f3:b5:08:60: b0:aa:31:24:27:11:6b:45:a0:10:d0:21:fc:74:9f: a1:6c:7f:36:bd:5c:06:63:56:69:ff:7f:84:e4:ab: 6a:17:25:62:71:ed:2b:2c:7b:6a:2d:32:e1:aa:fc: 07:f1:e3:69:3e:56:c9:b5:ab:ff:4c:14:1f:23:e9: 01:c4:10:fb:f0:8d:9e:a9:d0:d0:26:69:ea:be:01: 4d:ff:dd:05:98:31:d9:fd:ce:29:b6:f3:b4:d5:b6: 0a:37:8f:db:d5:ec:b5:87:ff:d6:b3:af:a2:fa:29: 7b:96:e1:13:5f:c7:3f:81:d9:1d:70:d8:20:b7:27: c4:2c:06:f1:fd:8c:f9:e4:78:c5:80:85:5b:c6:48: 3c:8b:2f:24:44:81:a9:89:7a:54:e9:a9:25:cc:62: 86:92:9f:91:e1:20:7c:9b:99:62:3e:27:f2:f8:06: d4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:4A:D3:89:44:D7:D3:68:05:04:84:19:0A:CC:BB:67:B6:0A:D1:20 X509v3 Authority Key Identifier: keyid:2A:3B:71:13:CD:87:30:2B:2B:15:C0:36:DA:BB:55:A1:C6:1A:4B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:8a:62:30:44:2f:f3:47:9a:44:80:78:65:05:89:e8:0f:e2: cc:02:c1:21:15:f7:ac:d8:8c:c5:57:b1:d6:7a:97:f2:b7:2f: 7a:ac:ba:6f:fe:db:91:5f:68:c3:6e:08:32:dd:a1:17:41:06: 0f:c5:6e:40:c6:c7:d2:e3:32:97:30:58:03:b3:92:a4:91:62: c0:1e:e5:fd:08:09:56:a5:96:30:d5:2f:5e:fa:a5:63:19:5c: 7e:fb:6b:5d:7b:4a:25:fb:b1:e5:5f:ed:9c:72:07:75:64:4e: 5b:bd:50:fe:4e:e9:22:8c:3f:b5:55:ee:a2:40:b2:fa:79:ac: fc:cd:3c:06:6a:8b:9f:38:79:11:92:01:5b:bc:ea:f1:7e:c1: 5a:60:18:fc:dd:46:65:82:c0:f7:c3:40:d3:6c:f3:b2:8c:85: cc:3e:0b:cb:51:63:e4:32:e5:c7:9d:a3:0c:59:d2:4c:79:d9: 36:f0:dd:76:94:df:d2:a4:ac:15:2e:30:60:92:7b:57:9f:5e: f1:84:b4:b3:ad:f3:f5:7e:80:46:e4:d4:68:07:ce:f7:73:ee: b2:63:af:e0:a3:ea:e0:38:c8:2f:f7:11:15:d4:4a:c1:9d:c5: 40:da:55:02:52:f7:a8:3f:42:4d:5f:2a:ac:ca:04:df:fb:e6: ca:96:3f:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUewBeEP30lHSv/0tal5q8nmLD1PcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzQjcxMTNDRDg3MzAyQjJCMTVDMDM2REFCQjU1QTFD NjFBNEJDNzAeFw0yNjA3MjMxMzE2MjBaFw0yNjA3MjQxMzMyMjBaMDMxMTAvBgNV BAMTKEY3NEFEMzg5NDREN0QzNjgwNTA0ODQxOTBBQ0NCQjY3QjYwQUQxMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94/Wnb2DGqror0vmhPe96X4ta xJQCviRIm1OTlc7kbFRTO64zCBbU8T/Z9wcOYVde+6HzVbKNiUJq91/uOscUFKzd TdiVEc+qQ18ipdXKUKEOnntw87UIYLCqMSQnEWtFoBDQIfx0n6Fsfza9XAZjVmn/ f4Tkq2oXJWJx7Ssse2otMuGq/Afx42k+Vsm1q/9MFB8j6QHEEPvwjZ6p0NAmaeq+ AU3/3QWYMdn9zim287TVtgo3j9vV7LWH/9azr6L6KXuW4RNfxz+B2R1w2CC3J8Qs BvH9jPnkeMWAhVvGSDyLLyREgamJelTpqSXMYoaSn5HhIHybmWI+J/L4BtRpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU90rTiUTX02gFBIQZCsy7Z7YK0SAwHwYDVR0j BBgwFoAUKjtxE82HMCsrFcA22rtVocYaS8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTk4Nzk3NDQtYjgxOC00NmRjLThkOWYtOWMzNTc5M2Y0Y2JiLzAvMkEzQjcxMTND RDg3MzAyQjJCMTVDMDM2REFCQjU1QTFDNjFBNEJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTNCNzExM0NEODczMDJCMkIxNUMwMzZEQUJCNTVBMUM2MUE0 QkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTk4Nzk3NDQtYjgxOC00NmRjLThk OWYtOWMzNTc5M2Y0Y2JiLzAvMkEzQjcxMTNDRDg3MzAyQjJCMTVDMDM2REFCQjU1 QTFDNjFBNEJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWKYjBEL/NHmkSAeGUFiegP4swCwSEV96zY jMVXsdZ6l/K3L3qsum/+25FfaMNuCDLdoRdBBg/FbkDGx9LjMpcwWAOzkqSRYsAe 5f0ICValljDVL176pWMZXH77a117SiX7seVf7ZxyB3VkTlu9UP5O6SKMP7VV7qJA svp5rPzNPAZqi584eRGSAVu86vF+wVpgGPzdRmWCwPfDQNNs87KMhcw+C8tRY+Qy 5cedowxZ0kx52Tbw3XaU39KkrBUuMGCSe1efXvGEtLOt8/V+gEbk1GgHzvdz7rJj r+Cj6uA4yC/3ERXUSsGdxUDaVQJS96g/Qk1fKqzKBN/75sqWP8I= -----END CERTIFICATE-----Generated at Fri Jul 24 03:06:13 2026 by rpki-client