$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft File: 2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft (raw, json) Hash identifier: ozxofSDq2THX9TtxCQM+OAcYEJRYbc42wJQpLs3fQJc= Subject key identifier: 8F:C1:38:A1:04:93:E9:00:D2:8E:FC:19:58:E8:53:F1:07:09:8B:19 Authority key identifier: 2E:5B:4D:91:9A:E6:E0:98:45:4A:21:D8:3B:EE:48:9C:0A:1D:F6:87 Certificate issuer: /CN=2E5B4D919AE6E098454A21D83BEE489C0A1DF687 Certificate serial: 5B9B8E40A854FDDDE42FC2D2B6BA2424A4053504 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 11:34:13 +0000 Manifest this update: Thu 23 Jul 2026 11:29:13 +0000 Manifest next update: Fri 24 Jul 2026 15:04:13 +0000 Files and hashes: 1: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: hXYZBw+zcNWgfpkr4qfi2P6UAXZrhjOtAH+ubipVz38=) 2: 2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl (hash: 2saYrN9EnK2uEqK2QQedN6vFYDkF3uYAYfCkCuIJIOo=) 3: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: w0l4Z0QTqPW7n9jh4ktHZnj4TWLQC1w9BHsCnnP0SC0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9b:8e:40:a8:54:fd:dd:e4:2f:c2:d2:b6:ba:24:24:a4:05:35:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E5B4D919AE6E098454A21D83BEE489C0A1DF687 Validity Not Before: Jul 23 11:29:13 2026 GMT Not After : Jul 24 15:04:13 2026 GMT Subject: CN=8FC138A10493E900D28EFC1958E853F107098B19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cc:ab:cb:6e:8e:b8:05:49:7c:38:7a:71:34: ce:a4:fa:1c:94:87:46:89:50:6e:6b:b2:ed:88:6b: 8a:09:e3:1a:1b:0f:81:f7:32:4a:74:c2:65:3e:c3: 6d:18:d4:50:1d:1f:5e:90:9a:a1:6a:14:fc:fd:a5: 8f:e9:47:7f:58:3c:32:c3:33:fb:fb:ad:4e:d6:4b: 65:52:d5:76:db:6f:9f:5d:05:bd:ea:bf:b7:94:a4: d2:75:92:59:f0:9c:5d:79:be:75:53:8b:6e:21:7d: 4a:e7:04:a1:ce:45:71:dd:d4:98:09:d5:fc:b9:76: 6a:84:11:7e:42:79:ac:2e:12:4f:b2:08:6f:c7:3a: 2a:73:26:81:f1:a2:c8:6e:91:ca:a8:36:25:49:91: e7:b8:6b:8a:d5:db:c0:2e:6f:c0:6f:be:2d:3f:5a: d3:2f:10:fd:65:08:4f:ff:80:84:fd:cf:85:77:51: ee:52:48:7b:dd:ab:e2:52:24:e8:45:06:1f:52:bf: 34:ef:12:f3:40:d2:f5:85:94:03:65:e1:8d:0d:d8: e8:62:10:b6:29:c3:d6:12:48:ec:b4:f1:51:36:0b: 16:07:b3:f2:25:a2:36:73:80:e7:ff:af:c1:f1:07: 07:25:98:fe:92:06:ae:ba:6e:06:a3:1b:56:ee:ae: 04:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C1:38:A1:04:93:E9:00:D2:8E:FC:19:58:E8:53:F1:07:09:8B:19 X509v3 Authority Key Identifier: keyid:2E:5B:4D:91:9A:E6:E0:98:45:4A:21:D8:3B:EE:48:9C:0A:1D:F6:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:58:25:40:03:3a:ae:b1:ee:f4:fd:70:97:ae:28:5d:9e:53: 25:31:3f:51:4e:fa:ac:c7:a5:bf:9a:64:c3:6c:a1:b9:1f:03: e3:8c:ec:2c:b7:2a:c1:77:8a:55:bc:ac:33:b9:1c:41:51:11: 23:e3:96:9a:56:52:77:01:a2:29:08:31:55:78:8d:12:06:37: e0:be:84:a9:23:1c:2d:14:05:05:f2:d5:dc:59:5e:c6:f7:51: b8:48:d4:b7:bf:9b:2d:66:f7:4a:17:1a:de:b9:db:90:9f:21: 55:6f:5a:9d:3d:0c:53:80:42:c2:93:9c:58:a5:97:ec:38:f1: 89:55:3e:cf:8f:37:54:b4:ed:07:8e:cc:4a:dc:d0:42:22:15: 6f:c0:c7:6e:f4:e4:37:fb:9e:7d:f6:56:26:f6:5e:56:33:47: d9:a6:d4:0e:fe:17:a3:9f:92:f0:67:05:53:d8:fa:bc:d9:fb: a7:ae:2f:04:32:f7:29:0c:66:f4:c5:a5:f3:1d:59:d6:d2:e1: 52:83:5e:ec:1a:f4:06:c9:96:14:27:a3:b3:f9:a8:6f:fa:93: c6:32:30:4f:9f:9c:83:ff:69:8f:fe:a2:29:1f:c6:ef:11:c3: 25:c2:28:6b:56:a5:28:f6:22:c6:fa:41:62:6a:ec:4e:c9:00: 65:fd:d8:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW5uOQKhU/d3kL8LStrokJKQFNQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU1QjREOTE5QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4OUMw QTFERjY4NzAeFw0yNjA3MjMxMTI5MTNaFw0yNjA3MjQxNTA0MTNaMDMxMTAvBgNV BAMTKDhGQzEzOEExMDQ5M0U5MDBEMjhFRkMxOTU4RTg1M0YxMDcwOThCMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqzKvLbo64BUl8OHpxNM6k+hyU h0aJUG5rsu2Ia4oJ4xobD4H3Mkp0wmU+w20Y1FAdH16QmqFqFPz9pY/pR39YPDLD M/v7rU7WS2VS1Xbbb59dBb3qv7eUpNJ1klnwnF15vnVTi24hfUrnBKHORXHd1JgJ 1fy5dmqEEX5CeawuEk+yCG/HOipzJoHxoshukcqoNiVJkee4a4rV28Aub8Bvvi0/ WtMvEP1lCE//gIT9z4V3Ue5SSHvdq+JSJOhFBh9SvzTvEvNA0vWFlANl4Y0N2Ohi ELYpw9YSSOy08VE2CxYHs/IlojZzgOf/r8HxBwclmP6SBq66bgajG1burgRvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj8E4oQST6QDSjvwZWOhT8QcJixkwHwYDVR0j BBgwFoAULltNkZrm4JhFSiHYO+5InAod9ocwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkM2RkNzktODYzNS00ODU3LThhM2MtOTg1OTU0NTE2ZjllLzAvMkU1QjREOTE5 QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4OUMwQTFERjY4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTVCNEQ5MTlBRTZFMDk4NDU0QTIxRDgzQkVFNDg5QzBBMURG Njg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkM2RkNzktODYzNS00ODU3LThh M2MtOTg1OTU0NTE2ZjllLzAvMkU1QjREOTE5QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4 OUMwQTFERjY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxYJUADOq6x7vT9cJeuKF2eUyUxP1FO+qzH pb+aZMNsobkfA+OM7Cy3KsF3ilW8rDO5HEFRESPjlppWUncBoikIMVV4jRIGN+C+ hKkjHC0UBQXy1dxZXsb3UbhI1Le/my1m90oXGt6525CfIVVvWp09DFOAQsKTnFil l+w48YlVPs+PN1S07QeOzErc0EIiFW/Ax2705Df7nn32Vib2XlYzR9mm1A7+F6Of kvBnBVPY+rzZ+6euLwQy9ykMZvTFpfMdWdbS4VKDXuwa9AbJlhQno7P5qG/6k8Yy ME+fnIP/aY/+oikfxu8RwyXCKGtWpSj2Isb6QWJq7E7JAGX92Bw= -----END CERTIFICATE-----Generated at Fri Jul 24 01:32:41 2026 by rpki-client