$ rpki-client -vvf rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft File: 2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft (raw, json) Hash identifier: ljnvm0vL5ypg9SwJmvfYsElu9NnS89QsGlF5EfO6tpE= Subject key identifier: A4:27:82:B5:6A:30:61:7A:15:51:8D:1D:1C:B8:EF:43:5B:99:9B:44 Authority key identifier: 2F:F2:8E:C3:1F:A9:59:5D:4C:93:72:E0:37:8B:12:7B:FC:07:D5:43 Certificate issuer: /CN=2FF28EC31FA9595D4C9372E0378B127BFC07D543 Certificate serial: 5684F00AD8E3100B38AD590B2A44D09155952F7E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 20:35:08 +0000 Manifest this update: Thu 23 Jul 2026 20:30:08 +0000 Manifest next update: Fri 24 Jul 2026 22:01:08 +0000 Files and hashes: 1: 3130332e37382e3135382e302f32342d3234203d3e20313530323438.roa (hash: WBevjDBrr8T3lRgtMCROWKCPpKkw27Bp5qV284oO8bo=) 2: 2FF28EC31FA9595D4C9372E0378B127BFC07D543.crl (hash: /+5+xouAKLec6JHRT83ngtMM46oDXaA+xnP+tSnNIzk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.crl rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:84:f0:0a:d8:e3:10:0b:38:ad:59:0b:2a:44:d0:91:55:95:2f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FF28EC31FA9595D4C9372E0378B127BFC07D543 Validity Not Before: Jul 23 20:30:08 2026 GMT Not After : Jul 24 22:01:08 2026 GMT Subject: CN=A42782B56A30617A15518D1D1CB8EF435B999B44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b8:ae:88:2a:80:4e:c7:ba:2c:9b:f9:b0:4f: b3:c5:67:98:f6:26:48:62:67:da:3a:15:db:7a:f6: 4b:d7:dc:f3:3c:55:bb:76:00:ef:c4:59:1d:7a:f7: 50:06:7b:23:df:db:37:c3:d1:4e:88:91:9d:d1:0c: 05:72:7a:b3:2f:65:75:71:c1:c7:45:00:bc:47:a8: 04:7c:17:32:8b:f3:2d:91:54:22:1f:5f:10:45:33: 7e:a1:18:9f:41:3d:be:88:4e:6d:7e:30:25:22:6c: a4:60:c7:80:66:ad:60:37:44:1b:72:6b:6e:c3:74: a1:a6:cb:f1:5f:58:40:05:39:18:73:9b:50:30:33: f8:4f:a0:2e:16:e1:cd:b1:4a:03:08:b3:00:a4:dc: 4a:05:80:c2:34:a2:b3:41:69:db:90:e4:12:cb:4f: ef:72:6c:72:a2:03:71:46:b1:cf:61:c3:13:7e:ae: ee:6f:61:66:d8:25:1e:75:c9:ea:e2:2e:83:61:34: 2d:57:79:22:b1:4e:61:89:eb:d1:28:da:4d:2e:2d: 7b:cd:1e:60:34:a9:c7:44:94:ec:7d:cb:0b:3b:9d: a8:e1:84:04:cd:4b:70:0b:de:f4:a8:ff:53:6e:7d: 05:e9:83:56:c5:16:14:3f:9c:03:2d:f9:1b:ff:1d: 4d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:27:82:B5:6A:30:61:7A:15:51:8D:1D:1C:B8:EF:43:5B:99:9B:44 X509v3 Authority Key Identifier: keyid:2F:F2:8E:C3:1F:A9:59:5D:4C:93:72:E0:37:8B:12:7B:FC:07:D5:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f4:b6:9e:fd:76:20:7b:62:0d:5b:b1:8b:84:90:5c:57:ff: 3d:8b:1f:20:e3:bb:83:fc:0b:c2:8b:26:67:b8:68:5e:eb:3b: d9:bc:c7:03:4c:99:19:fc:5f:d5:43:16:29:9c:5d:02:43:76: 8e:f9:0d:df:c2:89:70:d3:9c:a2:54:a9:cc:8e:87:f2:21:57: 38:c6:3e:d9:8d:1a:a8:4e:e1:37:6a:32:2c:b5:3b:ff:58:3b: b8:b1:f0:55:ed:32:93:79:32:c0:a1:90:ac:d0:39:73:b3:fa: 72:c2:7d:df:59:a2:fd:04:00:6e:a7:ab:fa:cf:c0:d9:60:57: ea:ae:c6:2a:a8:d8:76:56:66:b3:08:c5:db:28:55:30:da:ac: bf:09:76:52:31:4e:36:f4:a0:c6:5f:92:a2:75:26:8a:fe:ac: 9c:f6:4e:4b:e7:ae:9a:e9:34:1f:ee:bf:ca:05:d1:4d:e0:2b: db:7c:e3:ed:b3:5e:97:5e:ae:d5:f0:e4:53:53:49:61:6e:7c: 33:f5:6e:cd:7e:0a:8c:c5:de:05:e7:4e:29:85:b0:9e:fd:43: a6:31:df:7a:d8:61:5e:cc:a4:16:59:c9:36:35:b2:a5:a3:09: a3:80:de:ac:3f:ae:66:2b:d2:f8:f1:e7:09:25:dc:2c:59:3d: a7:38:85:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVoTwCtjjEAs4rVkLKkTQkVWVL34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZGMjhFQzMxRkE5NTk1RDRDOTM3MkUwMzc4QjEyN0JG QzA3RDU0MzAeFw0yNjA3MjMyMDMwMDhaFw0yNjA3MjQyMjAxMDhaMDMxMTAvBgNV BAMTKEE0Mjc4MkI1NkEzMDYxN0ExNTUxOEQxRDFDQjhFRjQzNUI5OTlCNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsuK6IKoBOx7osm/mwT7PFZ5j2 JkhiZ9o6Fdt69kvX3PM8Vbt2AO/EWR1691AGeyPf2zfD0U6IkZ3RDAVyerMvZXVx wcdFALxHqAR8FzKL8y2RVCIfXxBFM36hGJ9BPb6ITm1+MCUibKRgx4BmrWA3RBty a27DdKGmy/FfWEAFORhzm1AwM/hPoC4W4c2xSgMIswCk3EoFgMI0orNBaduQ5BLL T+9ybHKiA3FGsc9hwxN+ru5vYWbYJR51yeriLoNhNC1XeSKxTmGJ69Eo2k0uLXvN HmA0qcdElOx9yws7najhhATNS3AL3vSo/1NufQXpg1bFFhQ/nAMt+Rv/HU19AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpCeCtWowYXoVUY0dHLjvQ1uZm0QwHwYDVR0j BBgwFoAUL/KOwx+pWV1Mk3LgN4sSe/wH1UMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjZjMDYwZmItZTkzNi00YTIzLWJiZTItOTQ0NTdiZjcwOWJmLzAvMkZGMjhFQzMx RkE5NTk1RDRDOTM3MkUwMzc4QjEyN0JGQzA3RDU0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkYyOEVDMzFGQTk1OTVENEM5MzcyRTAzNzhCMTI3QkZDMDdE NTQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjZjMDYwZmItZTkzNi00YTIzLWJi ZTItOTQ0NTdiZjcwOWJmLzAvMkZGMjhFQzMxRkE5NTk1RDRDOTM3MkUwMzc4QjEy N0JGQzA3RDU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/0tp79diB7Yg1bsYuEkFxX/z2LHyDju4P8 C8KLJme4aF7rO9m8xwNMmRn8X9VDFimcXQJDdo75Dd/CiXDTnKJUqcyOh/IhVzjG PtmNGqhO4TdqMiy1O/9YO7ix8FXtMpN5MsChkKzQOXOz+nLCfd9Zov0EAG6nq/rP wNlgV+quxiqo2HZWZrMIxdsoVTDarL8JdlIxTjb0oMZfkqJ1Jor+rJz2Tkvnrprp NB/uv8oF0U3gK9t84+2zXpdertXw5FNTSWFufDP1bs1+CozF3gXnTimFsJ79Q6Yx 33rYYV7MpBZZyTY1sqWjCaOA3qw/rmYr0vjx5wkl3CxZPac4haM= -----END CERTIFICATE-----Generated at Fri Jul 24 09:57:34 2026 by rpki-client