$ rpki-client -vvf rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft File: 2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft (raw, json) Hash identifier: SKrlyZHa4d5EFxJhl6f9/6l7c7UzxzlSJ/cSnKPVVAk= Subject key identifier: CA:97:D5:59:71:8A:06:71:4D:3B:11:95:62:C8:C6:10:4C:A2:41:7F Authority key identifier: 2D:88:AC:79:1B:0C:C1:B7:D9:21:EC:E6:60:CD:E0:CF:2E:E8:ED:72 Certificate issuer: /CN=2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72 Certificate serial: 73E38426368B6E53D74AF6499DB8E90ED934B0FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:36:40 +0000 Manifest this update: Thu 23 Jul 2026 13:31:40 +0000 Manifest next update: Fri 24 Jul 2026 16:46:40 +0000 Files and hashes: 1: 2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl (hash: PWi2G19k6ovunHcroKtb6R1jXrSzau4yY6IPV3+EdqA=) 2: 3130332e3136322e3234302e302f32332d3234203d3e20313431363731.roa (hash: 4S3CjwY52E8pJFph27PsS9L2iHBVLGusILVU9iKtoiI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e3:84:26:36:8b:6e:53:d7:4a:f6:49:9d:b8:e9:0e:d9:34:b0:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72 Validity Not Before: Jul 23 13:31:40 2026 GMT Not After : Jul 24 16:46:40 2026 GMT Subject: CN=CA97D559718A06714D3B119562C8C6104CA2417F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:37:28:c3:d2:cc:cc:b7:f0:49:0a:ce:e7: 29:9f:51:60:27:e1:95:62:64:fc:7b:0f:83:49:59: 30:af:a7:d1:3c:4b:ee:18:21:10:e9:92:2e:43:4d: a0:1d:54:10:37:cc:a3:42:62:a4:5a:eb:59:7b:b6: 96:ac:3e:01:18:13:2c:f7:ac:34:cf:94:18:b4:8a: 66:d9:ce:04:c7:8e:2e:67:c1:71:39:4f:c4:19:8f: 24:e3:4d:8f:32:03:11:8d:7f:29:b2:9e:98:16:bb: 3f:02:98:e9:e4:d6:af:16:d7:4c:77:7b:41:2a:0e: 69:85:9e:f0:4e:db:9b:8d:a1:24:66:c0:ec:27:bc: 64:55:b4:6d:e5:ef:13:be:a4:05:99:9e:77:04:3d: ea:d8:a9:48:2f:d8:7c:0e:4c:fb:2d:53:e0:ca:c7: 28:c5:48:38:43:17:af:d2:67:c3:55:e9:99:b5:81: e6:ba:75:8e:aa:73:fa:a8:60:2b:6b:97:0f:fc:03: 39:f4:3d:f9:c3:0d:fe:31:32:73:6e:e5:6e:5d:08: eb:39:9a:64:2e:df:0b:1f:b1:2d:8b:9e:dc:6e:91: e3:fe:b2:22:b4:16:26:88:2f:a5:96:d1:5a:70:66: b9:d2:59:69:80:41:26:95:89:ef:07:33:27:f7:3d: 61:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:97:D5:59:71:8A:06:71:4D:3B:11:95:62:C8:C6:10:4C:A2:41:7F X509v3 Authority Key Identifier: keyid:2D:88:AC:79:1B:0C:C1:B7:D9:21:EC:E6:60:CD:E0:CF:2E:E8:ED:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:dd:ce:27:90:53:99:ae:72:89:10:f0:e5:c7:c3:71:64:91: e7:4d:ae:06:1d:17:b0:f4:3c:71:fa:dd:71:23:8b:38:dc:55: 87:67:d2:de:73:dd:40:7f:c8:3a:23:a7:3e:df:d0:83:72:10: fe:3d:57:89:fd:61:14:84:fc:57:31:c2:77:a9:b9:b1:bc:ca: 4b:32:5f:6e:7d:16:ed:40:89:bb:b0:46:67:37:b1:4e:3b:8b: 79:71:62:81:74:5a:70:dd:2a:90:0d:40:55:4a:35:64:10:7b: 64:21:b3:ab:d4:75:88:1d:6c:a1:c5:e6:74:cc:4a:ae:59:62: 3a:13:62:06:87:db:76:f4:22:6a:cb:63:8c:9f:5b:96:30:6d: 1a:4c:ee:8a:97:17:ee:b0:a5:6a:87:88:06:3d:39:a9:ec:24: b9:33:f9:13:15:77:3a:1a:33:4c:cc:0e:1f:b0:85:b8:62:cf: ec:b8:cc:cb:d6:d8:7d:f9:bd:1f:4a:2b:26:b2:07:0c:ca:7b: d6:60:86:1b:3d:ca:f5:0f:e9:b5:ea:5f:7c:ad:5c:f2:36:76: c7:e5:fe:a9:74:01:11:26:68:85:eb:b4:23:b7:f8:75:0c:5e: d9:7c:b0:15:c5:5f:a9:05:c2:e7:01:50:a8:94:d5:0c:9a:47: 79:f6:34:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc+OEJjaLblPXSvZJnbjpDtk0sP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ4OEFDNzkxQjBDQzFCN0Q5MjFFQ0U2NjBDREUwQ0Yy RUU4RUQ3MjAeFw0yNjA3MjMxMzMxNDBaFw0yNjA3MjQxNjQ2NDBaMDMxMTAvBgNV BAMTKENBOTdENTU5NzE4QTA2NzE0RDNCMTE5NTYyQzhDNjEwNENBMjQxN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ijcow9LMzLfwSQrO5ymfUWAn 4ZViZPx7D4NJWTCvp9E8S+4YIRDpki5DTaAdVBA3zKNCYqRa61l7tpasPgEYEyz3 rDTPlBi0imbZzgTHji5nwXE5T8QZjyTjTY8yAxGNfymynpgWuz8CmOnk1q8W10x3 e0EqDmmFnvBO25uNoSRmwOwnvGRVtG3l7xO+pAWZnncEPerYqUgv2HwOTPstU+DK xyjFSDhDF6/SZ8NV6Zm1gea6dY6qc/qoYCtrlw/8Azn0PfnDDf4xMnNu5W5dCOs5 mmQu3wsfsS2LntxukeP+siK0FiaIL6WW0VpwZrnSWWmAQSaVie8HMyf3PWHjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUypfVWXGKBnFNOxGVYsjGEEyiQX8wHwYDVR0j BBgwFoAULYiseRsMwbfZIezmYM3gzy7o7XIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjMwMjRkMjQtOWZhYS00YWIwLThmYTQtMGNlNjA4YzZkMGEzLzAvMkQ4OEFDNzkx QjBDQzFCN0Q5MjFFQ0U2NjBDREUwQ0YyRUU4RUQ3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDg4QUM3OTFCMENDMUI3RDkyMUVDRTY2MENERTBDRjJFRThF RDcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjMwMjRkMjQtOWZhYS00YWIwLThm YTQtMGNlNjA4YzZkMGEzLzAvMkQ4OEFDNzkxQjBDQzFCN0Q5MjFFQ0U2NjBDREUw Q0YyRUU4RUQ3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDdzieQU5mucokQ8OXHw3FkkedNrgYdF7D0 PHH63XEjizjcVYdn0t5z3UB/yDojpz7f0INyEP49V4n9YRSE/FcxwnepubG8yksy X259Fu1AibuwRmc3sU47i3lxYoF0WnDdKpANQFVKNWQQe2Qhs6vUdYgdbKHF5nTM Sq5ZYjoTYgaH23b0ImrLY4yfW5YwbRpM7oqXF+6wpWqHiAY9OansJLkz+RMVdzoa M0zMDh+whbhiz+y4zMvW2H35vR9KKyayBwzKe9Zghhs9yvUP6bXqX3ytXPI2dsfl /ql0AREmaIXrtCO3+HUMXtl8sBXFX6kFwucBUKiU1QyaR3n2NEY= -----END CERTIFICATE-----Generated at Fri Jul 24 07:43:23 2026 by rpki-client