$ rpki-client -vvf rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft File: 2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft (raw, json) Hash identifier: p5ruNEZb8QPqj0JqM5z3Ml/+xBGRN/jQjGrJfkDr9Ic= Subject key identifier: E3:3D:AB:F5:1A:27:0C:AC:96:CA:D0:3B:55:54:C1:D2:00:EE:7F:2C Authority key identifier: 2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63 Certificate issuer: /CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463 Certificate serial: 15B0A3BEA9AF8F36025449EE34EFBFE1E2AEAF34 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 09:41:13 +0000 Manifest this update: Fri 24 Jul 2026 09:36:13 +0000 Manifest next update: Sat 25 Jul 2026 10:47:13 +0000 Files and hashes: 1: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: iJm4NhgPbIn9ZoK9MCrx0LzGYq+XRWtI9oNHEB41bTw=) 2: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: 6lFtnPCNARkQq8uMVyUcH9X2yfQ7BRCjGYYqyfiHjKo=) 3: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: i83P/tWxpN7+zDb3L4rKQFgIev7DrUCxoADIDDyJE9U=) 4: 2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl (hash: Cq2+ShB8+g5nZip2z0wxzsuwGy5p3xBLMBIoJQKU3Uo=) 5: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: 6oOlCIxGneY8XQmzJaSA+rXwKrW4Xz1wcUf44XfKjgk=) 6: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: JbxVAMh0l8cOOEqUdkvkAwk1Vty1kRSyKXbV2pl/yFg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:b0:a3:be:a9:af:8f:36:02:54:49:ee:34:ef:bf:e1:e2:ae:af:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463 Validity Not Before: Jul 24 09:36:13 2026 GMT Not After : Jul 25 10:47:13 2026 GMT Subject: CN=E33DABF51A270CAC96CAD03B5554C1D200EE7F2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6f:3c:f3:74:e1:b1:ca:50:d1:ab:4a:b7:dc: e4:7f:88:87:9f:b3:0e:da:27:83:53:dd:15:ea:09: 81:52:85:b9:49:6e:07:b5:33:ed:c0:a2:d9:10:23: a8:7c:f4:2d:90:4f:d2:b8:8e:83:82:2b:66:ca:54: 9b:4b:71:cd:37:6b:ab:18:3f:fb:fe:43:3e:19:fd: c1:9d:64:74:0c:63:16:21:f3:4b:4c:15:2b:1c:a6: f1:e1:66:00:ca:5d:f8:05:60:f2:50:85:b1:bb:57: 0b:5d:6f:c0:5f:94:a0:3e:b9:c2:c2:75:0b:3b:a1: 72:c4:e0:6a:62:5a:db:38:60:5d:34:fc:51:40:0d: 45:1b:ea:da:e5:48:e9:3c:ed:a9:09:ca:03:cc:af: 92:e8:40:94:f7:58:f7:ad:6d:96:8b:db:8b:5c:fd: c5:68:72:79:93:19:8b:d1:04:7e:b1:8d:e1:5a:8b: cf:32:43:49:5d:1e:e2:52:92:c9:b1:ef:8c:8c:37: 73:6e:eb:5c:68:eb:b2:21:af:c0:39:d3:4f:ba:78: c6:10:19:47:fd:43:21:52:f7:50:67:ba:d7:8f:97: 20:ba:8f:9d:8a:c5:3e:41:b5:1d:63:d7:82:6c:21: 41:2a:d5:94:dd:d1:f4:6f:eb:ce:c4:d6:c9:67:03: bb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3D:AB:F5:1A:27:0C:AC:96:CA:D0:3B:55:54:C1:D2:00:EE:7F:2C X509v3 Authority Key Identifier: keyid:2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:11:5d:6e:4d:8e:1d:11:99:93:f0:c6:eb:c0:c1:35:be:f8: 6b:cc:6a:c9:4d:7a:69:55:5e:a3:63:14:13:80:7e:c5:d7:75: be:9c:92:a5:e1:3e:bd:27:79:7c:ee:08:a6:80:e7:7e:72:8d: 6e:4d:77:c0:4e:ca:29:0d:3a:1f:f8:f3:91:4c:6d:e2:74:6b: ec:a3:fd:1b:28:c0:85:55:96:06:5e:00:cb:65:3f:e6:8d:0f: 9d:07:ba:e4:23:98:aa:4e:b9:85:3d:4b:b4:64:0c:56:8a:67: 8e:f1:96:8c:2b:2a:f7:70:d3:45:57:6a:b1:4b:ae:57:ac:7e: 2e:4b:90:9f:7d:e5:52:3e:b0:ea:1b:a7:3a:9f:4f:84:f9:06: 44:ed:de:0d:f4:47:0d:ee:f4:7d:e4:09:1c:54:ff:28:55:2b: 00:6b:4c:fa:28:cc:d5:20:9c:a5:ff:61:2f:00:37:57:c8:d1: 1c:02:c0:6e:42:5a:23:a5:e6:02:13:11:c2:b2:e7:cc:3b:e8: 92:ee:18:eb:3e:41:f6:64:70:dc:64:14:be:e4:f8:85:d0:e9: 7b:1c:39:fb:79:f3:e7:cb:da:28:b1:c4:ee:56:39:f5:8e:0f: b2:0f:ad:24:ab:05:66:2d:38:98:34:fa:0a:2a:93:1f:f9:72: 51:f0:c3:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFbCjvqmvjzYCVEnuNO+/4eKurzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzMTM3RUVGNzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3 MkUyQzQ2MzAeFw0yNjA3MjQwOTM2MTNaFw0yNjA3MjUxMDQ3MTNaMDMxMTAvBgNV BAMTKEUzM0RBQkY1MUEyNzBDQUM5NkNBRDAzQjU1NTRDMUQyMDBFRTdGMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEbzzzdOGxylDRq0q33OR/iIef sw7aJ4NT3RXqCYFShblJbge1M+3AotkQI6h89C2QT9K4joOCK2bKVJtLcc03a6sY P/v+Qz4Z/cGdZHQMYxYh80tMFSscpvHhZgDKXfgFYPJQhbG7Vwtdb8BflKA+ucLC dQs7oXLE4GpiWts4YF00/FFADUUb6trlSOk87akJygPMr5LoQJT3WPetbZaL24tc /cVocnmTGYvRBH6xjeFai88yQ0ldHuJSksmx74yMN3Nu61xo67Ihr8A500+6eMYQ GUf9QyFS91BnutePlyC6j52KxT5BtR1j14JsIUEq1ZTd0fRv687E1slnA7vJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4z2r9RonDKyWytA7VVTB0gDufywwHwYDVR0j BBgwFoAUKjE37vd/GvFvehLdbTaUTHLixGMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI4ZWVjNWItNTMyNC00NDIyLWEzMmYtOWIxZGNlZDM3NTlmLzAvMkEzMTM3RUVG NzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3MkUyQzQ2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTMxMzdFRUY3N0YxQUYxNkY3QTEyREQ2RDM2OTQ0QzcyRTJD NDYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMkEzMTM3RUVGNzdGMUFGMTZGN0ExMkRENkQzNjk0 NEM3MkUyQzQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgRXW5Njh0RmZPwxuvAwTW++GvMaslNemlV XqNjFBOAfsXXdb6ckqXhPr0neXzuCKaA535yjW5Nd8BOyikNOh/485FMbeJ0a+yj /RsowIVVlgZeAMtlP+aND50HuuQjmKpOuYU9S7RkDFaKZ47xlowrKvdw00VXarFL rlesfi5LkJ995VI+sOobpzqfT4T5BkTt3g30Rw3u9H3kCRxU/yhVKwBrTPoozNUg nKX/YS8AN1fI0RwCwG5CWiOl5gITEcKy58w76JLuGOs+QfZkcNxkFL7k+IXQ6Xsc Oft58+fL2iixxO5WOfWOD7IPrSSrBWYtOJg0+goqkx/5clHww2Q= -----END CERTIFICATE-----Generated at Fri Jul 24 13:52:00 2026 by rpki-client