$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft File: C2F21005CDD8F19E492720297D0BA5C66395653F.mft (raw, json) Hash identifier: 3+Wzq7RtyDdNHQ0MEZ7pa7nYRnNWQzTgFoaAPReL3S8= Subject key identifier: 4E:89:94:88:23:F0:1A:BF:44:AB:14:B8:67:FA:D8:49:1D:31:F3:78 Authority key identifier: C2:F2:10:05:CD:D8:F1:9E:49:27:20:29:7D:0B:A5:C6:63:95:65:3F Certificate issuer: /CN=C2F21005CDD8F19E492720297D0BA5C66395653F Certificate serial: 4F71393C6D46650C133B695D3FD3386295F0A678 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 15:33:58 +0000 Manifest this update: Thu 23 Jul 2026 15:28:58 +0000 Manifest next update: Fri 24 Jul 2026 17:01:58 +0000 Files and hashes: 1: C2F21005CDD8F19E492720297D0BA5C66395653F.crl (hash: V7WXua7BnQUoNN+wM+7q1jWjxAKZlB5JYzqVDwmUXps=) 2: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: 4WF38lDugkx4g5GWHdzVk5hRBqpGlU+mntDxAYWnRfU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.crl rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:71:39:3c:6d:46:65:0c:13:3b:69:5d:3f:d3:38:62:95:f0:a6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2F21005CDD8F19E492720297D0BA5C66395653F Validity Not Before: Jul 23 15:28:58 2026 GMT Not After : Jul 24 17:01:58 2026 GMT Subject: CN=4E89948823F01ABF44AB14B867FAD8491D31F378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:39:e5:44:e2:60:c8:6c:e8:9a:ba:c9:e1: 5c:e2:9d:d6:44:35:ee:77:f5:5c:92:d5:41:01:d9: dd:2f:05:b3:81:a3:3b:8b:e8:03:85:e3:2f:77:9b: a8:1d:86:55:69:12:14:57:44:06:ff:a6:1b:c9:b8: 90:a3:ac:d0:1a:96:9e:e3:be:7b:3a:d2:68:cd:41: e8:1f:ab:54:66:61:f9:dd:45:38:2f:f3:be:ce:54: ab:4b:e7:0d:fa:e4:d3:04:e3:f0:bc:b9:14:15:ed: 98:57:e9:85:3e:28:3c:26:75:cd:c6:d2:3a:9e:88: 10:10:b5:6b:e0:12:04:62:ae:1b:5f:f0:50:11:34: f5:bc:fc:98:c2:7b:3d:e5:33:c2:c3:b7:08:f6:78: dd:35:cc:61:8a:6b:20:e2:c7:70:4e:f2:a1:35:f4: 06:c2:2c:fb:6f:da:0b:bc:6c:6f:8c:1f:10:25:07: 09:11:85:7a:7f:05:c6:75:09:9b:87:fe:64:fb:07: 98:31:bc:97:20:4c:c8:ab:85:79:13:47:df:f6:e5: 09:b5:25:d3:7c:96:48:0f:eb:ab:66:27:c5:4c:00: 5f:92:57:30:71:73:fe:45:57:dd:6a:ba:cf:fe:f5: 28:85:52:b0:48:d6:49:ba:89:2c:73:85:b3:7c:e4: 83:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:89:94:88:23:F0:1A:BF:44:AB:14:B8:67:FA:D8:49:1D:31:F3:78 X509v3 Authority Key Identifier: keyid:C2:F2:10:05:CD:D8:F1:9E:49:27:20:29:7D:0B:A5:C6:63:95:65:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ad:fb:b3:22:ef:9a:e3:dc:a7:55:e6:da:b8:d3:2e:e0:ab: 4b:d8:64:8a:02:4c:45:cd:f4:89:ab:9c:eb:c5:58:40:eb:9a: 49:9b:bd:e5:d0:3e:92:08:78:59:ab:ba:4f:89:92:56:ee:93: 44:b4:02:00:a8:be:40:0c:99:0e:d5:1c:04:14:8b:a3:5b:e4: 3e:ad:16:21:22:95:6d:ba:8e:9e:12:5f:e5:6b:2c:f8:96:30: 8a:39:4f:f1:ca:bd:49:06:5a:cd:d2:07:aa:65:7b:10:b8:df: dd:35:1e:73:de:38:0f:d7:66:a9:6e:64:ed:01:20:3d:41:78: 4a:0b:2d:1a:05:09:2b:36:8d:ad:ec:40:29:6e:d9:27:92:77: 9b:ce:89:08:fe:47:60:aa:a4:6e:5f:00:37:60:68:b9:30:9a: 05:39:d9:e0:a7:96:c8:5c:44:b1:47:0b:e1:3c:3d:1f:ee:97: d7:56:53:0a:16:a0:4c:85:56:a6:64:34:6e:4a:0a:3e:c6:4e: bf:ba:8f:af:3b:f9:10:09:68:62:73:61:48:8f:9c:61:16:36: 20:b7:a8:31:e4:0a:5f:8d:f5:25:bc:d4:6f:a3:c7:d2:e7:a3: ae:66:c0:69:7b:73:67:8a:09:68:5c:2a:f2:41:a0:cd:42:d2: be:01:c3:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT3E5PG1GZQwTO2ldP9M4YpXwpngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJGMjEwMDVDREQ4RjE5RTQ5MjcyMDI5N0QwQkE1QzY2 Mzk1NjUzRjAeFw0yNjA3MjMxNTI4NThaFw0yNjA3MjQxNzAxNThaMDMxMTAvBgNV BAMTKDRFODk5NDg4MjNGMDFBQkY0NEFCMTRCODY3RkFEODQ5MUQzMUYzNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHjnlROJgyGzomrrJ4VzindZE Ne539VyS1UEB2d0vBbOBozuL6AOF4y93m6gdhlVpEhRXRAb/phvJuJCjrNAalp7j vns60mjNQegfq1RmYfndRTgv877OVKtL5w365NME4/C8uRQV7ZhX6YU+KDwmdc3G 0jqeiBAQtWvgEgRirhtf8FARNPW8/JjCez3lM8LDtwj2eN01zGGKayDix3BO8qE1 9AbCLPtv2gu8bG+MHxAlBwkRhXp/BcZ1CZuH/mT7B5gxvJcgTMirhXkTR9/25Qm1 JdN8lkgP66tmJ8VMAF+SVzBxc/5FV91qus/+9SiFUrBI1km6iSxzhbN85INlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTomUiCPwGr9EqxS4Z/rYSR0x83gwHwYDVR0j BBgwFoAUwvIQBc3Y8Z5JJyApfQulxmOVZT8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZmYmFmNzEtMmQ1Ny00ZTRhLTkxZDAtY2FjOGFiMGFjZWZlLzAvQzJGMjEwMDVD REQ4RjE5RTQ5MjcyMDI5N0QwQkE1QzY2Mzk1NjUzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkYyMTAwNUNERDhGMTlFNDkyNzIwMjk3RDBCQTVDNjYzOTU2 NTNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvQzJGMjEwMDVDREQ4RjE5RTQ5MjcyMDI5N0QwQkE1 QzY2Mzk1NjUzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2t+7Mi75rj3KdV5tq40y7gq0vYZIoCTEXN 9ImrnOvFWEDrmkmbveXQPpIIeFmruk+Jklbuk0S0AgCovkAMmQ7VHAQUi6Nb5D6t FiEilW26jp4SX+VrLPiWMIo5T/HKvUkGWs3SB6plexC43901HnPeOA/XZqluZO0B ID1BeEoLLRoFCSs2ja3sQClu2SeSd5vOiQj+R2CqpG5fADdgaLkwmgU52eCnlshc RLFHC+E8PR/ul9dWUwoWoEyFVqZkNG5KCj7GTr+6j687+RAJaGJzYUiPnGEWNiC3 qDHkCl+N9SW81G+jx9Lno65mwGl7c2eKCWhcKvJBoM1C0r4Bwxc= -----END CERTIFICATE-----Generated at Fri Jul 24 05:14:14 2026 by rpki-client