$ rpki-client -vvf rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft File: 2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft (raw, json) Hash identifier: YW0FXVbVPqA4jOUI1/kwWh365/BMlrNHEFAxMznX/T8= Subject key identifier: 5F:8D:45:3A:BA:C1:FB:BF:0A:38:54:3B:90:57:00:47:D0:FC:2B:C7 Authority key identifier: 2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14 Certificate issuer: /CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714 Certificate serial: 67433FEF6C428671CF007383EAF9C2436B2FEDA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 05:15:56 +0000 Manifest this update: Fri 24 Jul 2026 05:10:56 +0000 Manifest next update: Sat 25 Jul 2026 06:27:56 +0000 Files and hashes: 1: 3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa (hash: hq7t6IGdrToWC5Y/u0/ln3majWig7C7xPRHwOMHho0s=) 2: 3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (hash: HyudSDnKB8bCiy0S2RrKH+D8dZ2RY7de+E6PViymOWI=) 3: 3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (hash: ib7HPEQ/1sTUx6nXpMyLf2LdpmFve2tZtQrzXQVTi5I=) 4: 2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl (hash: 6uMVNaAUhMFQ1sbFlJdb2ctoCkKf43gxON2uftukC1E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:43:3f:ef:6c:42:86:71:cf:00:73:83:ea:f9:c2:43:6b:2f:ed:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714 Validity Not Before: Jul 24 05:10:56 2026 GMT Not After : Jul 25 06:27:56 2026 GMT Subject: CN=5F8D453ABAC1FBBF0A38543B90570047D0FC2BC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:81:86:39:06:89:fd:0c:77:5b:7a:ce:51:a2: 42:fc:22:8d:a3:43:a0:b2:7b:dd:df:ce:c7:38:9b: 87:a3:94:f8:4e:47:b9:e1:59:fe:cd:b8:f2:0c:c2: 42:46:f8:4b:2d:15:89:b2:a2:03:7e:cc:e1:b9:31: 37:bc:66:ca:7c:17:30:15:4a:6b:d1:0c:32:8b:f8: 2c:de:43:d6:91:3e:78:1a:cb:03:8a:d6:fb:34:00: 86:89:d7:fe:ce:a8:27:c6:fc:49:5b:de:4f:cc:a8: ec:02:5c:00:e5:06:56:36:c3:c3:e4:76:e9:45:fc: 01:41:96:90:e0:ab:9e:26:8b:78:dc:e8:ef:39:c3: ef:5b:b3:72:1e:b1:4c:3b:48:c1:51:63:b6:29:9f: 38:62:76:5b:47:12:7a:1a:50:6b:10:1b:47:e6:d7: 00:f8:50:b7:33:43:93:c3:b2:f5:9b:85:62:95:6e: 5e:46:40:4c:1f:98:d9:dc:ee:bb:1e:d6:a9:ac:4d: 7d:ac:6f:8a:f6:84:6c:54:6b:73:6c:14:01:17:f7: a7:5d:05:01:76:32:f5:7c:da:cf:8c:35:78:77:4c: 63:22:47:03:ed:18:ee:79:c2:57:a3:b1:42:88:20: 10:a2:22:2c:08:5b:2a:d9:13:f9:9e:67:b9:3d:67: 20:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8D:45:3A:BA:C1:FB:BF:0A:38:54:3B:90:57:00:47:D0:FC:2B:C7 X509v3 Authority Key Identifier: keyid:2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:fe:15:34:de:96:03:90:2e:60:05:5a:f5:38:4a:02:ee:64: 60:de:ba:b0:3f:d1:e9:f1:62:d7:5d:d5:48:be:35:85:8e:b4: 7b:71:68:41:8f:df:84:27:00:0b:9e:ad:ba:2d:74:72:20:b9: 8c:99:d2:ad:17:86:89:57:8c:81:c0:a3:8e:3e:e6:22:c0:dc: 1f:10:6a:cc:3b:33:53:47:30:61:12:bb:73:03:26:e9:36:09: 6d:e9:b2:00:2d:17:2a:68:0d:27:97:5e:bb:b1:af:77:d1:69: 1a:a8:64:54:64:be:50:9f:16:f5:31:b2:0f:d8:02:73:2d:fe: e4:bc:b0:90:a2:a7:19:10:6c:93:22:85:7e:94:aa:97:a9:d8: b5:9d:db:3f:ea:37:a9:d0:b4:d2:d8:1c:5e:24:8d:36:f3:54: 50:4e:f2:57:3a:fe:5f:83:47:f9:54:d7:77:94:6f:92:9a:24: 3d:f2:ac:5b:17:8b:cd:2b:dc:97:37:64:f5:34:f4:21:a0:25: c8:03:c7:bc:e2:08:7c:b5:0f:9d:1c:51:0e:77:b5:81:fc:7d: 58:07:ba:8e:35:e1:1d:62:0d:2c:3e:1d:8e:59:04:87:09:83: 10:a5:76:2f:94:17:96:f2:84:57:ba:61:9c:6b:b1:cd:71:5a: 79:64:24:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ0M/72xChnHPAHOD6vnCQ2sv7aAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRBRkMyNTAzMDUwOUFENzEyNkJCRDkzQUJDQ0I5NUU3 QTE4NjcxNDAeFw0yNjA3MjQwNTEwNTZaFw0yNjA3MjUwNjI3NTZaMDMxMTAvBgNV BAMTKDVGOEQ0NTNBQkFDMUZCQkYwQTM4NTQzQjkwNTcwMDQ3RDBGQzJCQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZgYY5Bon9DHdbes5RokL8Io2j Q6Cye93fzsc4m4ejlPhOR7nhWf7NuPIMwkJG+EstFYmyogN+zOG5MTe8Zsp8FzAV SmvRDDKL+CzeQ9aRPngaywOK1vs0AIaJ1/7OqCfG/Elb3k/MqOwCXADlBlY2w8Pk dulF/AFBlpDgq54mi3jc6O85w+9bs3IesUw7SMFRY7YpnzhidltHEnoaUGsQG0fm 1wD4ULczQ5PDsvWbhWKVbl5GQEwfmNnc7rse1qmsTX2sb4r2hGxUa3NsFAEX96dd BQF2MvV82s+MNXh3TGMiRwPtGO55wlejsUKIIBCiIiwIWyrZE/meZ7k9ZyAVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX41FOrrB+78KOFQ7kFcAR9D8K8cwHwYDVR0j BBgwFoAULa/CUDBQmtcSa72Tq8y5XnoYZxQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0YmI0YzgtNmZjZi00ZmZmLWJkY2MtZmUxZmNjZWUxMDQ1LzAvMkRBRkMyNTAz MDUwOUFENzEyNkJCRDkzQUJDQ0I5NUU3QTE4NjcxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREFGQzI1MDMwNTA5QUQ3MTI2QkJEOTNBQkNDQjk1RTdBMTg2 NzE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0YmI0YzgtNmZjZi00ZmZmLWJk Y2MtZmUxZmNjZWUxMDQ1LzAvMkRBRkMyNTAzMDUwOUFENzEyNkJCRDkzQUJDQ0I5 NUU3QTE4NjcxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJn+FTTelgOQLmAFWvU4SgLuZGDeurA/0enx Ytdd1Ui+NYWOtHtxaEGP34QnAAuerbotdHIguYyZ0q0XholXjIHAo44+5iLA3B8Q asw7M1NHMGESu3MDJuk2CW3psgAtFypoDSeXXruxr3fRaRqoZFRkvlCfFvUxsg/Y AnMt/uS8sJCipxkQbJMihX6Uqpep2LWd2z/qN6nQtNLYHF4kjTbzVFBO8lc6/l+D R/lU13eUb5KaJD3yrFsXi80r3Jc3ZPU09CGgJcgDx7ziCHy1D50cUQ53tYH8fVgH uo414R1iDSw+HY5ZBIcJgxCldi+UF5byhFe6YZxrsc1xWnlkJL0= -----END CERTIFICATE-----Generated at Fri Jul 24 12:19:22 2026 by rpki-client