$ rpki-client -vvf rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft File: 2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft (raw, json) Hash identifier: VYZmi9gnqI9Zqy/5fcpqXdWIRf2WUqn8yLE+2pSj1tQ= Subject key identifier: C8:85:6D:0D:81:57:48:4B:4C:7A:69:05:2A:32:01:10:DD:4D:97:28 Authority key identifier: 2E:06:9E:30:CF:7B:24:CD:D7:7C:20:65:50:B0:BD:BD:B0:16:83:AF Certificate issuer: /CN=2E069E30CF7B24CDD77C206550B0BDBDB01683AF Certificate serial: 388DC8D6ED38833A3C5DB12300B3EBA6A6F0434C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:21:19 +0000 Manifest this update: Thu 23 Jul 2026 13:16:19 +0000 Manifest next update: Fri 24 Jul 2026 15:45:19 +0000 Files and hashes: 1: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: njSBQKxaBf8FgxYd9UzVWcsd+7NkvHs45etGgjIxXxw=) 2: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: R//K7f8SQ84W/WhpHi/GP3kDl7olX9IsyMdmQ8qFKuk=) 3: 2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl (hash: D5sezrHzghvhXJ1i0i4JzMSJIxTqj8bdYJ8DRYHB4Ds=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:8d:c8:d6:ed:38:83:3a:3c:5d:b1:23:00:b3:eb:a6:a6:f0:43:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E069E30CF7B24CDD77C206550B0BDBDB01683AF Validity Not Before: Jul 23 13:16:19 2026 GMT Not After : Jul 24 15:45:19 2026 GMT Subject: CN=C8856D0D8157484B4C7A69052A320110DD4D9728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a0:ec:28:65:ae:e0:e0:41:85:22:75:3b:e2: 5d:98:f2:64:5c:c4:f8:69:98:f1:d3:13:0a:ac:e2: a9:de:b7:00:d3:26:c3:9e:a7:0b:80:71:c0:de:5f: e5:66:2c:8a:28:c8:78:7e:a0:bf:16:dc:7c:79:67: 5c:0f:cf:4c:2b:7f:98:e1:72:d6:94:b9:4f:5f:7c: 75:7f:0e:e6:3e:fc:20:15:34:dd:e4:1c:bb:a5:c9: 36:19:a6:b4:4e:38:2d:99:47:26:bd:52:67:b7:a4: 1e:4c:a5:f2:dd:c2:51:8a:df:88:fa:89:a4:d0:b7: e7:bf:ca:d6:2d:b9:43:97:1f:9b:37:fe:74:d3:00: ed:e0:0e:5c:40:0c:9e:c7:47:2e:ae:c7:92:b5:d8: 0c:3b:15:77:3a:12:94:ed:ec:7f:07:06:ad:d6:7f: de:84:48:49:f5:41:03:06:90:c2:cd:4d:0b:a8:db: 47:52:0f:58:0c:28:c8:03:e6:ca:74:e9:1b:06:32: 82:39:dc:7c:38:74:55:da:89:6c:1f:b6:d5:f8:00: 33:3e:40:08:a7:06:2e:31:2f:06:a5:01:1b:c8:f7: 3d:bc:38:8e:86:c8:11:4d:b5:cc:1e:d9:71:f4:48: 2a:2a:9e:04:28:16:1f:12:15:16:21:b5:18:d3:8b: 0a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:85:6D:0D:81:57:48:4B:4C:7A:69:05:2A:32:01:10:DD:4D:97:28 X509v3 Authority Key Identifier: keyid:2E:06:9E:30:CF:7B:24:CD:D7:7C:20:65:50:B0:BD:BD:B0:16:83:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ac:38:fc:47:ab:74:78:3e:ad:57:6b:01:dd:ff:17:8c:ad: c9:c1:63:5b:23:a5:11:4f:66:b5:20:06:e6:fc:b4:bc:1a:e8: b8:c6:89:52:c9:39:e0:89:7d:9a:8b:05:13:3a:8b:25:b1:c9: 6c:35:12:9a:20:0e:46:09:aa:40:2a:68:f4:1f:96:5d:95:02: 4d:d6:cd:bf:43:ad:7f:59:97:3a:ac:bf:e2:bf:e1:1f:3b:2f: a8:02:15:32:45:07:2b:b1:57:88:8a:be:c0:5c:8a:8b:84:c8: 85:4c:15:7a:71:62:4c:03:fd:6a:9c:95:8e:fd:81:d0:e2:8a: f9:f1:40:75:0f:ce:8e:94:ca:67:51:ef:0e:2d:8b:dc:0b:8c: 69:a5:a0:17:ae:ca:c9:3d:bf:61:b3:9b:21:97:b4:d5:90:4b: a3:96:be:f1:99:dd:a8:18:d5:ad:c7:8c:6d:49:c2:61:e9:dc: 77:a0:7a:a6:bd:00:4d:6c:3f:b6:65:2f:64:c2:60:c7:2b:9d: a8:25:1a:92:ef:d8:1e:c9:5c:32:4c:1c:3e:5e:1a:c7:4f:12: 24:6e:b4:6a:33:dc:da:c7:5c:05:b4:b3:2a:b5:a3:eb:84:ac: 16:b7:8b:6b:2f:7e:ed:26:3b:80:ae:b9:5e:35:6e:95:eb:6f: 4c:47:45:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOI3I1u04gzo8XbEjALPrpqbwQ0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUwNjlFMzBDRjdCMjRDREQ3N0MyMDY1NTBCMEJEQkRC MDE2ODNBRjAeFw0yNjA3MjMxMzE2MTlaFw0yNjA3MjQxNTQ1MTlaMDMxMTAvBgNV BAMTKEM4ODU2RDBEODE1NzQ4NEI0QzdBNjkwNTJBMzIwMTEwREQ0RDk3MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOoOwoZa7g4EGFInU74l2Y8mRc xPhpmPHTEwqs4qnetwDTJsOepwuAccDeX+VmLIooyHh+oL8W3Hx5Z1wPz0wrf5jh ctaUuU9ffHV/DuY+/CAVNN3kHLulyTYZprROOC2ZRya9Ume3pB5MpfLdwlGK34j6 iaTQt+e/ytYtuUOXH5s3/nTTAO3gDlxADJ7HRy6ux5K12Aw7FXc6EpTt7H8HBq3W f96ESEn1QQMGkMLNTQuo20dSD1gMKMgD5sp06RsGMoI53Hw4dFXaiWwfttX4ADM+ QAinBi4xLwalARvI9z28OI6GyBFNtcwe2XH0SCoqngQoFh8SFRYhtRjTiwqzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyIVtDYFXSEtMemkFKjIBEN1NlygwHwYDVR0j BBgwFoAULgaeMM97JM3XfCBlULC9vbAWg68wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzUyMWU1ZWUtNTg4Mi00OTQzLWI0MDgtNDNjMzc1ODJmYjBiLzAvMkUwNjlFMzBD RjdCMjRDREQ3N0MyMDY1NTBCMEJEQkRCMDE2ODNBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTA2OUUzMENGN0IyNENERDc3QzIwNjU1MEIwQkRCREIwMTY4 M0FGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzUyMWU1ZWUtNTg4Mi00OTQzLWI0 MDgtNDNjMzc1ODJmYjBiLzAvMkUwNjlFMzBDRjdCMjRDREQ3N0MyMDY1NTBCMEJE QkRCMDE2ODNBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIisOPxHq3R4Pq1XawHd/xeMrcnBY1sjpRFP ZrUgBub8tLwa6LjGiVLJOeCJfZqLBRM6iyWxyWw1EpogDkYJqkAqaPQfll2VAk3W zb9DrX9Zlzqsv+K/4R87L6gCFTJFByuxV4iKvsBciouEyIVMFXpxYkwD/WqclY79 gdDiivnxQHUPzo6UymdR7w4ti9wLjGmloBeuysk9v2GzmyGXtNWQS6OWvvGZ3agY 1a3HjG1JwmHp3Hegeqa9AE1sP7ZlL2TCYMcrnaglGpLv2B7JXDJMHD5eGsdPEiRu tGoz3NrHXAW0syq1o+uErBa3i2svfu0mO4CuuV41bpXrb0xHRX4= -----END CERTIFICATE-----Generated at Fri Jul 24 08:47:24 2026 by rpki-client