$ rpki-client -vvf rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft File: 2111C1DE0964BA3363560863B0A6338C56E44B27.mft (raw, json) Hash identifier: rlLLnkIKcqCWNn8MMSDeMxFH+NcwUpVhwKhCPAiSuxI= Subject key identifier: 85:DF:F4:D3:2D:89:CC:F7:96:33:AB:76:F8:8A:C9:C9:F9:B3:1C:56 Authority key identifier: 21:11:C1:DE:09:64:BA:33:63:56:08:63:B0:A6:33:8C:56:E4:4B:27 Certificate issuer: /CN=2111C1DE0964BA3363560863B0A6338C56E44B27 Certificate serial: 5229836B6F02EAC9F79568F002F879D85C217344 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 19:22:56 +0000 Manifest this update: Fri 24 Jul 2026 19:17:56 +0000 Manifest next update: Sat 25 Jul 2026 22:07:56 +0000 Files and hashes: 1: 3130332e3136322e3130352e302f32342d3234203d3e20313337333136.roa (hash: reUfW2xUZcOA3UU73tVnYqvdrqLkl2f35VFNF05Zufw=) 2: 2111C1DE0964BA3363560863B0A6338C56E44B27.crl (hash: mBV2HE0V70Gk7e2KqvWq9y0QKjwAv7jxB7bXUlOrauc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.crl rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:29:83:6b:6f:02:ea:c9:f7:95:68:f0:02:f8:79:d8:5c:21:73:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2111C1DE0964BA3363560863B0A6338C56E44B27 Validity Not Before: Jul 24 19:17:56 2026 GMT Not After : Jul 25 22:07:56 2026 GMT Subject: CN=85DFF4D32D89CCF79633AB76F88AC9C9F9B31C56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c2:06:67:41:fc:87:6a:bd:52:ef:16:86:d3: 50:56:cf:bb:55:ec:12:b9:8d:a2:f5:29:f9:46:71: 16:20:79:ec:e5:47:90:6c:2f:a5:6f:b6:12:9a:39: 78:dd:27:a5:47:98:ba:68:b3:e0:5c:a7:17:c5:fc: e7:3b:1b:10:8c:5f:71:93:3b:42:da:9a:fa:ee:d5: e9:54:2e:38:a1:f1:ac:7c:02:4b:b7:f6:3d:37:b4: ff:8e:eb:27:85:1c:66:5f:42:2e:e6:8a:36:f7:6f: 18:20:25:30:b3:20:d9:7d:db:77:46:c1:54:14:bd: 98:6b:88:0a:67:79:04:aa:59:b2:a7:69:39:c2:a3: a0:fe:9f:f0:a7:51:1d:0d:e9:86:f1:38:bc:11:6c: 2c:87:a2:5a:5b:45:6c:65:a2:a0:ae:de:6c:36:2a: b6:4e:5a:dc:76:3f:ae:e1:04:60:ba:8b:17:dd:2c: a8:b9:2d:20:93:f9:dc:41:e2:45:67:21:60:4b:10: fe:0b:90:dd:a1:b4:d8:b4:9d:08:6d:4c:9a:38:9d: 36:51:32:e6:03:62:2c:07:f3:d8:19:ed:20:2e:f8: 4b:de:d5:2d:1c:08:1c:63:e3:e2:75:41:c3:c2:99: 3f:16:ec:d0:84:80:53:b0:59:81:71:0b:1f:2f:b0: 2c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DF:F4:D3:2D:89:CC:F7:96:33:AB:76:F8:8A:C9:C9:F9:B3:1C:56 X509v3 Authority Key Identifier: keyid:21:11:C1:DE:09:64:BA:33:63:56:08:63:B0:A6:33:8C:56:E4:4B:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:ad:56:38:8b:9f:52:8d:34:36:6d:53:0a:6d:cc:58:36:be: b9:b1:f6:32:ea:67:48:22:97:f2:07:d4:98:da:c4:5c:32:19: e4:9d:65:e1:eb:89:c1:99:97:97:f4:5f:cc:34:50:4e:c9:10: d8:98:3a:98:c0:f4:c8:6e:77:a7:da:de:be:8a:71:d1:00:14: f6:dd:7f:ec:ee:86:db:81:d5:9f:b9:91:d0:4c:66:42:a4:e1: 3b:3c:20:80:62:67:d7:a3:e1:a6:c3:e4:25:80:e9:dc:0e:48: 76:72:98:2a:c1:0f:f4:7e:68:b4:22:5c:67:bf:31:7c:fb:ae: 65:d0:18:e2:2e:d6:54:32:c9:dc:2c:8d:12:1b:d1:bb:f6:95: a2:e8:72:54:ab:3e:18:f5:67:23:4b:97:25:45:a7:7d:3f:39: 3a:1b:49:6a:ac:a0:95:83:1c:82:7b:df:25:55:c4:53:fa:25: 14:93:5a:82:94:5a:82:ab:4c:66:bb:eb:31:81:fa:ba:9c:36: 00:22:01:6b:5a:46:b4:6c:a7:03:1c:4b:2f:77:8c:ef:f9:ab: 80:79:14:b2:86:71:63:3a:8c:b1:2e:ab:2b:67:dc:b6:dd:db: 96:46:fb:6d:85:5a:ba:f1:18:85:e5:2e:1b:be:e5:99:91:20: 63:28:ad:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUimDa28C6sn3lWjwAvh52Fwhc0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExMUMxREUwOTY0QkEzMzYzNTYwODYzQjBBNjMzOEM1 NkU0NEIyNzAeFw0yNjA3MjQxOTE3NTZaFw0yNjA3MjUyMjA3NTZaMDMxMTAvBgNV BAMTKDg1REZGNEQzMkQ4OUNDRjc5NjMzQUI3NkY4OEFDOUM5RjlCMzFDNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdwgZnQfyHar1S7xaG01BWz7tV 7BK5jaL1KflGcRYgeezlR5BsL6VvthKaOXjdJ6VHmLpos+BcpxfF/Oc7GxCMX3GT O0Lamvru1elULjih8ax8Aku39j03tP+O6yeFHGZfQi7mijb3bxggJTCzINl923dG wVQUvZhriApneQSqWbKnaTnCo6D+n/CnUR0N6YbxOLwRbCyHolpbRWxloqCu3mw2 KrZOWtx2P67hBGC6ixfdLKi5LSCT+dxB4kVnIWBLEP4LkN2htNi0nQhtTJo4nTZR MuYDYiwH89gZ7SAu+Eve1S0cCBxj4+J1QcPCmT8W7NCEgFOwWYFxCx8vsCwJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhd/00y2JzPeWM6t2+IrJyfmzHFYwHwYDVR0j BBgwFoAUIRHB3glkujNjVghjsKYzjFbkSycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzcyMjQzNjAtMjQ1ZC00YTFhLWFmMzYtZjliZWZjZGI3MGI3LzAvMjExMUMxREUw OTY0QkEzMzYzNTYwODYzQjBBNjMzOEM1NkU0NEIyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMTExQzFERTA5NjRCQTMzNjM1NjA4NjNCMEE2MzM4QzU2RTQ0 QjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzcyMjQzNjAtMjQ1ZC00YTFhLWFm MzYtZjliZWZjZGI3MGI3LzAvMjExMUMxREUwOTY0QkEzMzYzNTYwODYzQjBBNjMz OEM1NkU0NEIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKStVjiLn1KNNDZtUwptzFg2vrmx9jLqZ0gi l/IH1JjaxFwyGeSdZeHricGZl5f0X8w0UE7JENiYOpjA9Mhud6fa3r6KcdEAFPbd f+zuhtuB1Z+5kdBMZkKk4Ts8IIBiZ9ej4abD5CWA6dwOSHZymCrBD/R+aLQiXGe/ MXz7rmXQGOIu1lQyydwsjRIb0bv2laLoclSrPhj1ZyNLlyVFp30/OTobSWqsoJWD HIJ73yVVxFP6JRSTWoKUWoKrTGa76zGB+rqcNgAiAWtaRrRspwMcSy93jO/5q4B5 FLKGcWM6jLEuqytn3Lbd25ZG+22FWrrxGIXlLhu+5ZmRIGMorW4= -----END CERTIFICATE-----Generated at Fri Jul 24 22:23:09 2026 by rpki-client