$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft File: 2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft (raw, json) Hash identifier: QtzY0qZGDUr0dweEuPaKYdWtKcjZYbTWSeUzhNHxY2I= Subject key identifier: 54:46:70:EB:80:A7:41:68:F5:89:80:1C:FD:20:6A:FA:EA:C5:C6:B9 Authority key identifier: 2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5 Certificate issuer: /CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5 Certificate serial: 75B41303DC7DBBF4FE3A16EDD614C491A1D4F8B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 23:38:44 +0000 Manifest this update: Thu 23 Jul 2026 23:33:44 +0000 Manifest next update: Sat 25 Jul 2026 02:53:44 +0000 Files and hashes: 1: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: K2AeuLRVAE8BPE4wuWW8WhZGZyYvk9GHwxpL0SCIDfk=) 2: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: 8N1ryLqGS1Ck4AODHf8NX/rVMxyMRb5QCwGLiIIXGg8=) 3: 2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl (hash: kIDjZxe302RRNFx0SLcCCwaTN135kngGHODNf/ampdE=) 4: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: 8wKUF9NYC7pRZOxvlEf5LxZ2nZECYvwr1BSS5u1G+4Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b4:13:03:dc:7d:bb:f4:fe:3a:16:ed:d6:14:c4:91:a1:d4:f8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5 Validity Not Before: Jul 23 23:33:44 2026 GMT Not After : Jul 25 02:53:44 2026 GMT Subject: CN=544670EB80A74168F589801CFD206AFAEAC5C6B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:64:6a:9d:a8:8a:b8:9b:16:bd:bf:ff:4b:f8: f1:a7:39:6b:e3:12:8f:8f:7a:5d:4e:cb:5c:7a:2e: c0:5a:c3:8d:f9:00:82:ce:bc:1d:34:c8:ea:2b:a9: b0:1a:ec:43:4c:0d:67:b5:bd:c1:fe:7c:e8:78:41: d3:cb:87:6f:ab:0a:99:82:6b:32:33:08:38:c0:46: fc:1d:83:05:93:1c:a4:d8:86:19:6e:26:d7:d0:2b: e5:96:69:9c:57:df:0e:8b:08:09:59:b6:06:42:77: 3a:54:a6:51:8a:96:9b:40:a8:4c:9b:ec:f0:08:d2: 0a:5f:2f:8d:4b:4b:8e:1e:05:2e:0c:ab:73:d2:8a: e5:a6:c7:a4:6d:8c:24:88:d1:08:4a:a7:86:14:6d: 4c:45:bb:c8:06:1b:ee:78:45:a8:ba:41:7b:7d:16: a7:a1:1f:f8:99:ae:c1:56:5a:91:94:1b:de:14:bc: 40:54:7b:73:14:2e:88:28:5d:0e:77:02:b3:a2:61: af:f3:93:cd:88:1c:17:c3:b5:ec:ed:32:c2:c9:05: 9e:fb:da:c8:b7:63:98:76:ef:b9:0b:3e:8b:3c:ec: 22:97:fe:d4:5b:ef:f2:bc:95:1c:aa:11:89:86:dd: 32:f5:d9:d0:39:b1:f6:9a:e6:76:4a:a1:27:be:f0: 89:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:46:70:EB:80:A7:41:68:F5:89:80:1C:FD:20:6A:FA:EA:C5:C6:B9 X509v3 Authority Key Identifier: keyid:2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:21:c1:08:b4:01:94:d0:60:6a:3c:28:ff:89:4e:fc:d2:34: 3f:ac:59:e5:ec:bf:e4:08:d8:0b:51:a6:08:69:d6:64:f5:e3: 1d:89:ff:ec:ce:89:19:7e:80:c8:be:d2:06:71:ce:43:f7:5f: b5:9d:93:08:ce:eb:48:22:d9:53:36:09:8f:e3:ba:81:d2:4f: c9:41:b9:3c:ca:2b:b2:04:40:72:03:cb:20:98:6a:7b:5d:a0: fc:eb:9b:c4:f2:a8:1e:99:f2:2c:d5:98:68:bb:6c:aa:9c:47: 56:40:30:f2:b4:af:44:d9:1c:13:a2:97:e3:2c:9f:e8:cb:eb: 55:bd:90:e4:ac:db:a0:7d:21:53:9b:b5:bb:e7:98:58:09:6a: a1:d7:bc:e9:b9:8f:40:10:29:fa:11:4c:77:1a:b7:8f:66:45: f5:df:f6:d0:13:5c:a1:b9:24:bf:a0:36:c3:7d:c3:36:a2:87: b7:1b:cb:1b:31:42:f1:e7:62:a0:8a:da:8b:e6:49:f5:43:c1: 62:0f:c7:7b:84:a0:54:6a:41:91:4b:fe:95:e6:6a:65:5b:35: c3:01:9e:88:49:5a:88:3a:4d:f3:6f:cb:45:40:98:4d:f2:09: 41:0f:be:78:13:ba:c5:ba:ab:54:cd:d7:63:2c:f1:fc:d8:a5: f9:5d:68:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdbQTA9x9u/T+Ohbt1hTEkaHU+LgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFFMTQzM0JCODJGMjc3MTZERjUyNkRBRENDQzRDMkIz NzU4OUNBNTAeFw0yNjA3MjMyMzMzNDRaFw0yNjA3MjUwMjUzNDRaMDMxMTAvBgNV BAMTKDU0NDY3MEVCODBBNzQxNjhGNTg5ODAxQ0ZEMjA2QUZBRUFDNUM2QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbZGqdqIq4mxa9v/9L+PGnOWvj Eo+Pel1Oy1x6LsBaw435AILOvB00yOorqbAa7ENMDWe1vcH+fOh4QdPLh2+rCpmC azIzCDjARvwdgwWTHKTYhhluJtfQK+WWaZxX3w6LCAlZtgZCdzpUplGKlptAqEyb 7PAI0gpfL41LS44eBS4Mq3PSiuWmx6RtjCSI0QhKp4YUbUxFu8gGG+54Rai6QXt9 FqehH/iZrsFWWpGUG94UvEBUe3MULogoXQ53ArOiYa/zk82IHBfDteztMsLJBZ77 2si3Y5h277kLPos87CKX/tRb7/K8lRyqEYmG3TL12dA5sfaa5nZKoSe+8Il5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVEZw64CnQWj1iYAc/SBq+urFxrkwHwYDVR0j BBgwFoAUKuFDO7gvJ3Ft9Sba3MxMKzdYnKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQwMTFhMWMtYTBhZC00ZDkzLTg2YWYtM2YwYWFkZDk2ODRmLzAvMkFFMTQzM0JC ODJGMjc3MTZERjUyNkRBRENDQzRDMkIzNzU4OUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yQUUxNDMzQkI4MkYyNzcxNkRGNTI2REFEQ0NDNEMyQjM3NTg5 Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvMkFFMTQzM0JCODJGMjc3MTZERjUyNkRBRENDQzRD MkIzNzU4OUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJchwQi0AZTQYGo8KP+JTvzSND+sWeXsv+QI 2AtRpghp1mT14x2J/+zOiRl+gMi+0gZxzkP3X7WdkwjO60gi2VM2CY/juoHST8lB uTzKK7IEQHIDyyCYantdoPzrm8TyqB6Z8izVmGi7bKqcR1ZAMPK0r0TZHBOil+Ms n+jL61W9kOSs26B9IVObtbvnmFgJaqHXvOm5j0AQKfoRTHcat49mRfXf9tATXKG5 JL+gNsN9wzaih7cbyxsxQvHnYqCK2ovmSfVDwWIPx3uEoFRqQZFL/pXmamVbNcMB nohJWog6TfNvy0VAmE3yCUEPvngTusW6q1TN12Ms8fzYpfldaFg= -----END CERTIFICATE-----Generated at Fri Jul 24 05:18:06 2026 by rpki-client