$ rpki-client -vvf rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft File: 2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft (raw, json) Hash identifier: RWj+43oNRByYFyMAO+PYOEXrqEJKZoKbUPfTS7nfzsw= Subject key identifier: A4:77:D3:1C:14:3F:28:3F:85:44:01:50:AC:77:0F:78:24:9C:7C:2B Authority key identifier: 2C:7A:30:2B:26:8D:C5:40:59:CE:B8:8F:7A:C2:19:8D:98:52:CB:D3 Certificate issuer: /CN=2C7A302B268DC54059CEB88F7AC2198D9852CBD3 Certificate serial: 59A6668C73CEA80EF5A35C93AC7EC3E513D66166 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 23:13:10 +0000 Manifest this update: Thu 23 Jul 2026 23:08:10 +0000 Manifest next update: Sat 25 Jul 2026 00:11:10 +0000 Files and hashes: 1: 2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl (hash: laz9pub+HvZQ8+w3/jvcTDAvRvkvB0dh6ut0JwcatPY=) 2: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: bJqqtyMrUB6ove5aksmXoGy9PsBIFYzerBlsfdZy7oQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:11:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a6:66:8c:73:ce:a8:0e:f5:a3:5c:93:ac:7e:c3:e5:13:d6:61:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C7A302B268DC54059CEB88F7AC2198D9852CBD3 Validity Not Before: Jul 23 23:08:10 2026 GMT Not After : Jul 25 00:11:10 2026 GMT Subject: CN=A477D31C143F283F85440150AC770F78249C7C2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1c:09:ac:01:aa:14:55:42:22:08:e9:b7:de: 94:3b:58:a7:24:66:27:bc:66:5e:50:1e:f2:d8:93: fc:c4:56:f6:d9:f0:8e:c0:de:7a:69:c1:00:a3:a6: 96:c7:02:73:41:63:cc:97:09:8c:31:e0:93:9e:c0: 8e:45:87:90:e3:4f:44:ab:92:6c:4e:54:89:7c:8c: 35:09:b0:31:75:9f:97:61:c4:20:5e:5d:c1:54:51: 19:25:d4:8c:5d:7c:c2:75:2d:67:7e:f6:36:67:e4: a9:92:66:c4:5e:8f:48:4c:51:e0:c8:a2:76:22:9c: 69:11:27:7b:f0:9f:97:a4:c2:f7:39:1f:98:9b:2f: 8f:bf:e3:f0:34:bf:78:c6:21:6d:07:4f:4f:3a:cb: f8:ed:fb:6a:27:01:e1:46:b4:cc:ae:fc:77:e3:85: 2f:8f:d6:61:06:f7:31:a2:3d:e6:61:a3:29:85:5f: 9b:0a:14:42:12:e1:f2:ea:7c:4d:73:74:ff:e2:39: 07:60:9e:60:16:83:24:b4:0c:88:89:06:22:46:7b: 72:67:4b:19:96:4f:22:85:b0:cb:ee:af:1c:43:92: 49:c7:ca:e0:4a:18:7b:6e:2a:ff:e1:b0:92:20:17: 23:c4:a6:20:16:ae:15:72:bd:72:b2:1b:31:5d:24: 58:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:77:D3:1C:14:3F:28:3F:85:44:01:50:AC:77:0F:78:24:9C:7C:2B X509v3 Authority Key Identifier: keyid:2C:7A:30:2B:26:8D:C5:40:59:CE:B8:8F:7A:C2:19:8D:98:52:CB:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:58:0f:4d:ac:9c:b6:a4:ca:df:af:a2:6d:50:be:f7:8a:a1: 60:d3:c8:35:3e:de:e9:2f:72:31:eb:14:35:05:47:8b:ab:ca: 54:b0:7d:a6:11:64:07:f4:a5:cd:10:ae:20:5d:01:b5:2f:76: fa:56:09:c9:1f:3c:32:85:d9:c5:14:46:28:15:a2:ff:5b:65: 7a:c1:26:b4:82:03:4e:b3:2b:26:8e:fe:3f:61:b6:a9:72:86: fe:24:d0:bd:76:e6:0a:71:c9:62:62:c2:86:97:a3:72:19:9d: d3:64:cd:55:92:2f:f0:75:a0:6e:93:f3:75:fe:98:37:03:8a: fc:68:c5:ba:16:b0:18:8d:db:41:c0:4b:36:90:a3:27:58:6d: f4:19:8c:17:9f:d7:81:49:1c:90:a2:c6:63:68:d7:fe:11:5f: b1:51:43:19:94:d6:f1:3d:b1:13:85:b8:55:c0:a5:b5:18:53: 1e:0d:ab:f9:3b:99:40:93:23:67:7f:27:aa:3f:76:e5:9b:f4: 34:7c:d5:2b:33:9a:c5:84:b8:d3:cd:1b:4d:50:56:ea:57:4e: f5:b6:30:8b:df:fd:1d:7a:f6:9c:d3:c9:eb:f9:51:5f:6b:78: 22:7a:ea:96:b3:de:71:4f:82:7b:2c:ac:58:c5:e9:ce:54:90: fb:37:44:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWaZmjHPOqA71o1yTrH7D5RPWYWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM3QTMwMkIyNjhEQzU0MDU5Q0VCODhGN0FDMjE5OEQ5 ODUyQ0JEMzAeFw0yNjA3MjMyMzA4MTBaFw0yNjA3MjUwMDExMTBaMDMxMTAvBgNV BAMTKEE0NzdEMzFDMTQzRjI4M0Y4NTQ0MDE1MEFDNzcwRjc4MjQ5QzdDMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcHAmsAaoUVUIiCOm33pQ7WKck Zie8Zl5QHvLYk/zEVvbZ8I7A3nppwQCjppbHAnNBY8yXCYwx4JOewI5Fh5DjT0Sr kmxOVIl8jDUJsDF1n5dhxCBeXcFUURkl1IxdfMJ1LWd+9jZn5KmSZsRej0hMUeDI onYinGkRJ3vwn5ekwvc5H5ibL4+/4/A0v3jGIW0HT086y/jt+2onAeFGtMyu/Hfj hS+P1mEG9zGiPeZhoymFX5sKFEIS4fLqfE1zdP/iOQdgnmAWgyS0DIiJBiJGe3Jn SxmWTyKFsMvurxxDkknHyuBKGHtuKv/hsJIgFyPEpiAWrhVyvXKyGzFdJFj3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpHfTHBQ/KD+FRAFQrHcPeCScfCswHwYDVR0j BBgwFoAULHowKyaNxUBZzriPesIZjZhSy9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA1YWY4MjItYmVhOS00OGYzLWFhMTItYjI3MzcxNjJmYzQyLzAvMkM3QTMwMkIy NjhEQzU0MDU5Q0VCODhGN0FDMjE5OEQ5ODUyQ0JEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQzdBMzAyQjI2OERDNTQwNTlDRUI4OEY3QUMyMTk4RDk4NTJD QkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA1YWY4MjItYmVhOS00OGYzLWFh MTItYjI3MzcxNjJmYzQyLzAvMkM3QTMwMkIyNjhEQzU0MDU5Q0VCODhGN0FDMjE5 OEQ5ODUyQ0JEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdYD02snLakyt+vom1QvveKoWDTyDU+3ukv cjHrFDUFR4urylSwfaYRZAf0pc0QriBdAbUvdvpWCckfPDKF2cUURigVov9bZXrB JrSCA06zKyaO/j9htqlyhv4k0L125gpxyWJiwoaXo3IZndNkzVWSL/B1oG6T83X+ mDcDivxoxboWsBiN20HASzaQoydYbfQZjBef14FJHJCixmNo1/4RX7FRQxmU1vE9 sROFuFXApbUYUx4Nq/k7mUCTI2d/J6o/duWb9DR81SszmsWEuNPNG01QVupXTvW2 MIvf/R169pzTyev5UV9reCJ66paz3nFPgnssrFjF6c5UkPs3RNk= -----END CERTIFICATE-----Generated at Fri Jul 24 01:32:21 2026 by rpki-client