$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft File: C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft (raw, json) Hash identifier: 4wyzIxGZxSb3Ya9WIFNo27qrQaprz7LzKWExS6YD4G8= Subject key identifier: CF:0E:C3:DA:4D:01:BB:0A:51:E8:52:12:96:B1:D4:68:66:E3:F8:2A Authority key identifier: C2:D3:13:86:7B:0B:49:66:C3:72:AB:0F:92:BE:8E:E8:78:20:EF:88 Certificate issuer: /CN=C2D313867B0B4966C372AB0F92BE8EE87820EF88 Certificate serial: 0F803262816276000713F714D8A8E01ECF13A0EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 12:19:35 +0000 Manifest this update: Fri 24 Jul 2026 12:14:35 +0000 Manifest next update: Sat 25 Jul 2026 15:27:35 +0000 Files and hashes: 1: 3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa (hash: Y+vREFE/EG16t2/cwbDbHoF+QrWyIBN3buYGvhuls/U=) 2: C2D313867B0B4966C372AB0F92BE8EE87820EF88.crl (hash: CbFgnACDzUv28DRZQ45QKqFGkWLDbzkYpC3O4ih2iIY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.crl rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:80:32:62:81:62:76:00:07:13:f7:14:d8:a8:e0:1e:cf:13:a0:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D313867B0B4966C372AB0F92BE8EE87820EF88 Validity Not Before: Jul 24 12:14:35 2026 GMT Not After : Jul 25 15:27:35 2026 GMT Subject: CN=CF0EC3DA4D01BB0A51E8521296B1D46866E3F82A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:24:d0:6b:11:a6:38:da:cb:1e:f1:73:84:a4: 04:63:92:8d:34:7e:ed:d8:c9:31:e2:a8:6d:f8:88: ff:8b:5a:79:7a:a6:9b:bf:98:47:07:38:4b:19:01: 75:bc:43:18:ab:90:1e:42:d7:4a:4c:ca:b8:e8:23: 42:6b:85:b8:fa:dc:e3:51:80:45:ba:ff:39:8f:19: 28:42:7c:0e:69:64:4e:32:5e:21:7d:08:48:6c:9e: 31:d4:a6:75:33:f0:ad:d9:e1:ee:39:96:7f:1a:9e: 42:fc:6b:6c:ae:be:13:c3:19:03:db:60:da:2d:a3: 9f:23:21:e0:3a:e8:29:f2:53:ec:dd:f2:15:9e:f1: 9e:04:e4:01:aa:d1:0b:03:ce:9a:60:34:55:21:c6: e5:19:d4:07:be:88:45:72:67:77:fb:3f:e4:c1:29: 28:0d:cf:70:c0:b4:6b:1e:94:c7:2e:9d:93:6b:c6: 82:6b:73:bf:b1:da:c9:b9:64:e7:ff:e0:d5:ad:2e: 16:77:ae:14:3a:cb:6e:2c:b4:4a:94:01:17:04:97: 05:1b:f4:fc:3f:6e:f1:15:d8:16:20:41:a4:ee:3e: 0f:bc:09:ef:d1:27:f1:39:e1:69:65:8e:9f:c6:ea: c7:f4:08:01:7b:15:6a:35:3c:f1:b6:c4:c7:a8:ee: 6e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0E:C3:DA:4D:01:BB:0A:51:E8:52:12:96:B1:D4:68:66:E3:F8:2A X509v3 Authority Key Identifier: keyid:C2:D3:13:86:7B:0B:49:66:C3:72:AB:0F:92:BE:8E:E8:78:20:EF:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:05:6e:5a:0a:38:52:80:63:86:14:e7:3c:88:17:cf:bc:53: 7e:a3:62:47:ef:52:35:79:53:4b:7c:56:42:9d:41:b8:f8:77: 97:e5:d7:15:74:d2:3f:e8:5a:fc:5a:b6:60:94:74:e8:5f:d9: 59:b3:51:34:c0:b7:dc:d6:cf:cf:77:34:5b:6a:96:24:02:42: aa:c6:da:2d:54:de:17:13:39:b9:0c:ac:1d:12:96:be:05:51: 56:8c:a8:a3:cb:1d:40:b4:ea:80:3f:20:e6:dd:2a:b3:af:ff: c5:2b:7c:e7:7d:30:fd:50:b3:af:16:65:14:41:de:da:47:ab: cf:a9:e1:7e:ae:cc:06:24:e2:cc:65:67:af:51:fd:90:ea:d9: ee:b2:68:6a:73:24:3e:eb:ec:4a:1f:e2:71:eb:d3:57:b5:cc: f8:a5:3f:d4:d6:6b:82:18:8f:c3:fc:b6:af:cb:12:39:b1:6c: c4:cd:15:93:eb:8a:d0:7d:de:4f:1d:6e:96:65:e7:aa:cf:ac: e5:40:65:ad:95:e8:29:70:d5:2f:6e:bd:89:d1:5b:c1:24:59: 97:ed:64:3e:26:fb:33:9e:be:54:d6:d9:c6:c4:12:69:52:db: 49:bd:54:59:88:9b:fd:4e:0f:10:5f:60:9b:cd:f9:f4:e5:50: 67:f6:19:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD4AyYoFidgAHE/cU2KjgHs8ToOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJEMzEzODY3QjBCNDk2NkMzNzJBQjBGOTJCRThFRTg3 ODIwRUY4ODAeFw0yNjA3MjQxMjE0MzVaFw0yNjA3MjUxNTI3MzVaMDMxMTAvBgNV BAMTKENGMEVDM0RBNEQwMUJCMEE1MUU4NTIxMjk2QjFENDY4NjZFM0Y4MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJNBrEaY42sse8XOEpARjko00 fu3YyTHiqG34iP+LWnl6ppu/mEcHOEsZAXW8QxirkB5C10pMyrjoI0Jrhbj63ONR gEW6/zmPGShCfA5pZE4yXiF9CEhsnjHUpnUz8K3Z4e45ln8ankL8a2yuvhPDGQPb YNoto58jIeA66CnyU+zd8hWe8Z4E5AGq0QsDzppgNFUhxuUZ1Ae+iEVyZ3f7P+TB KSgNz3DAtGselMcunZNrxoJrc7+x2sm5ZOf/4NWtLhZ3rhQ6y24stEqUARcElwUb 9Pw/bvEV2BYgQaTuPg+8Ce/RJ/E54Wlljp/G6sf0CAF7FWo1PPG2xMeo7m6VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzw7D2k0BuwpR6FISlrHUaGbj+CowHwYDVR0j BBgwFoAUwtMThnsLSWbDcqsPkr6O6Hgg74gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMxNzM2OWEtYmNjMS00MmJjLWI4YjItZjk2ZDUwZDM3NDlkLzAvQzJEMzEzODY3 QjBCNDk2NkMzNzJBQjBGOTJCRThFRTg3ODIwRUY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkQzMTM4NjdCMEI0OTY2QzM3MkFCMEY5MkJFOEVFODc4MjBF Rjg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMxNzM2OWEtYmNjMS00MmJjLWI4 YjItZjk2ZDUwZDM3NDlkLzAvQzJEMzEzODY3QjBCNDk2NkMzNzJBQjBGOTJCRThF RTg3ODIwRUY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQFbloKOFKAY4YU5zyIF8+8U36jYkfvUjV5 U0t8VkKdQbj4d5fl1xV00j/oWvxatmCUdOhf2VmzUTTAt9zWz893NFtqliQCQqrG 2i1U3hcTObkMrB0Slr4FUVaMqKPLHUC06oA/IObdKrOv/8UrfOd9MP1Qs68WZRRB 3tpHq8+p4X6uzAYk4sxlZ69R/ZDq2e6yaGpzJD7r7Eof4nHr01e1zPilP9TWa4IY j8P8tq/LEjmxbMTNFZPritB93k8dbpZl56rPrOVAZa2V6Clw1S9uvYnRW8EkWZft ZD4m+zOevlTW2cbEEmlS20m9VFmIm/1ODxBfYJvN+fTlUGf2GUU= -----END CERTIFICATE-----Generated at Fri Jul 24 17:50:11 2026 by rpki-client