$ rpki-client -vvf rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft File: 2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft (raw, json) Hash identifier: R4qBxZmu/Finai5M+lPU9a9SLn82eF3wX7xnzT7HwJQ= Subject key identifier: C8:21:F5:D7:83:90:C4:1D:16:AF:66:C7:2A:DF:E7:88:2A:9F:2C:F6 Authority key identifier: 2A:0F:66:41:16:FB:E2:E0:71:7E:83:DF:D4:F2:B6:ED:EB:09:E1:7E Certificate issuer: /CN=2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E Certificate serial: DE2909F9324BF210D24B1E427DE499BFCCEE3C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:54:24 +0000 Manifest this update: Thu 23 Jul 2026 19:49:24 +0000 Manifest next update: Fri 24 Jul 2026 20:06:24 +0000 Files and hashes: 1: 323030313a6466333a316363303a3a2f34382d3438203d3e20313532303035.roa (hash: 6lgQliV3qWJWSqE96iH08yO2bxxIknhiUKxtAeSrcOo=) 2: 3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (hash: /Da4Pm0aCGjoevGiiRcx0Xt7whtWvoaG8WYvVgD2NtQ=) 3: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (hash: MDqOFg62hmCAUHW4Muj3krYCTsgPpqhMHNl5EdSS1rQ=) 4: 3130332e36372e39302e302f32342d3234203d3e20313532303035.roa (hash: D74+LFtaiM6p1bNo+g/DP+Bfx1wgVTvyGuc6jRnjUKM=) 5: 2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl (hash: EQus2T2jiQUqPDvqM1Pz2B8rXmvekERgfrDJ+rw06Xw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: de:29:09:f9:32:4b:f2:10:d2:4b:1e:42:7d:e4:99:bf:cc:ee:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E Validity Not Before: Jul 23 19:49:24 2026 GMT Not After : Jul 24 20:06:24 2026 GMT Subject: CN=C821F5D78390C41D16AF66C72ADFE7882A9F2CF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f2:77:12:5c:db:08:4a:a8:d2:d4:5f:67:5d: ba:7d:61:e8:a8:79:9c:11:66:a5:9f:1f:80:43:c0: 06:5b:4d:9e:a3:3a:21:f7:4a:1b:9a:1c:2d:98:f7: 42:e9:23:0e:58:fb:75:79:d1:8d:fc:3d:c7:58:73: aa:fe:f3:01:fa:2d:8f:31:5c:95:ed:03:52:d5:92: 4e:e8:49:11:c5:22:bd:b5:40:5e:ae:54:92:4f:23: 47:1e:6a:bf:44:e6:8d:76:bf:b7:c3:e0:24:06:35: 45:7c:64:95:28:e8:d2:7a:32:16:20:47:f8:ec:1e: 13:2e:24:08:0e:4b:9f:0f:bb:14:a7:73:2e:b7:4e: 6a:79:c7:e9:20:ea:bd:ed:bf:a4:82:e2:ce:fd:eb: a0:4d:4c:f8:13:ad:23:27:87:bf:01:34:e6:7f:f0: 32:bf:bc:53:52:a6:7b:39:a1:4d:bb:1e:9c:27:d8: db:cd:d3:70:9b:29:2e:ad:1f:3f:19:7f:ba:4e:2d: a9:88:c9:7f:e8:dd:d8:ba:b7:47:7f:ad:f8:44:ee: b2:24:6c:87:a8:d7:af:f6:50:76:61:b2:18:8f:44: 78:c4:db:4e:86:c6:d2:29:90:f3:3a:27:3e:08:f3: 2f:8c:77:62:77:c8:a1:03:0c:ef:b9:25:2c:f6:b3: 3c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:21:F5:D7:83:90:C4:1D:16:AF:66:C7:2A:DF:E7:88:2A:9F:2C:F6 X509v3 Authority Key Identifier: keyid:2A:0F:66:41:16:FB:E2:E0:71:7E:83:DF:D4:F2:B6:ED:EB:09:E1:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:35:ad:0d:5a:0c:4a:b1:34:a6:a2:da:74:da:96:6a:f6:1a: 47:c0:c4:11:85:95:f3:3b:28:d3:ab:4d:40:1a:b4:ce:bc:99: a2:e9:0f:6f:d3:66:49:f8:d0:ab:c9:08:8b:d8:d8:49:2a:89: 75:2d:9b:59:32:e3:9e:23:46:8d:2f:99:be:99:36:01:a6:a6: 5e:26:5f:60:0a:5d:f2:64:66:63:91:8c:10:b5:8a:44:f6:03: cf:61:24:f1:47:dd:d4:35:f8:16:00:93:91:39:bd:23:9b:06: a2:c9:3a:e8:0a:36:50:b8:85:4f:14:00:8b:ca:4b:e2:4f:4c: c3:05:c6:6c:81:9d:57:9c:18:3d:4b:b4:fd:c6:07:be:ca:2c: 93:ba:85:70:7b:8d:dc:b1:af:66:31:96:81:f1:1a:1e:cb:1c: 46:2e:4c:a4:68:ba:28:a3:7a:51:3f:e6:2a:96:4d:a6:ed:d4: 13:37:5a:35:13:6f:5a:f0:0e:19:f4:c9:f8:b6:21:e2:89:b9: 28:e3:a0:14:83:15:a4:d3:43:0c:04:d1:cc:c3:54:b2:e9:d9: 71:70:91:fe:11:f3:a7:dd:4f:b4:26:25:8b:03:d0:0f:a6:ed: c6:88:d4:dc:05:0e:04:21:1c:ae:c8:3b:7b:7f:f2:60:ac:6b: 49:ff:66:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAN4pCfkyS/IQ0kseQn3kmb/M7jwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwRjY2NDExNkZCRTJFMDcxN0U4M0RGRDRGMkI2RURF QjA5RTE3RTAeFw0yNjA3MjMxOTQ5MjRaFw0yNjA3MjQyMDA2MjRaMDMxMTAvBgNV BAMTKEM4MjFGNUQ3ODM5MEM0MUQxNkFGNjZDNzJBREZFNzg4MkE5RjJDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn8ncSXNsISqjS1F9nXbp9Yeio eZwRZqWfH4BDwAZbTZ6jOiH3ShuaHC2Y90LpIw5Y+3V50Y38PcdYc6r+8wH6LY8x XJXtA1LVkk7oSRHFIr21QF6uVJJPI0cear9E5o12v7fD4CQGNUV8ZJUo6NJ6MhYg R/jsHhMuJAgOS58PuxSncy63Tmp5x+kg6r3tv6SC4s7966BNTPgTrSMnh78BNOZ/ 8DK/vFNSpns5oU27Hpwn2NvN03CbKS6tHz8Zf7pOLamIyX/o3di6t0d/rfhE7rIk bIeo16/2UHZhshiPRHjE206GxtIpkPM6Jz4I8y+Md2J3yKEDDO+5JSz2szxxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyCH114OQxB0Wr2bHKt/niCqfLPYwHwYDVR0j BBgwFoAUKg9mQRb74uBxfoPf1PK27esJ4X4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg0ODg1MTktOGYwNC00NGY1LTgzMTItOGQ5ZDM2MTZkMGQ5LzAvMkEwRjY2NDEx NkZCRTJFMDcxN0U4M0RGRDRGMkI2RURFQjA5RTE3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTBGNjY0MTE2RkJFMkUwNzE3RTgzREZENEYyQjZFREVCMDlF MTdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg0ODg1MTktOGYwNC00NGY1LTgz MTItOGQ5ZDM2MTZkMGQ5LzAvMkEwRjY2NDExNkZCRTJFMDcxN0U4M0RGRDRGMkI2 RURFQjA5RTE3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIA1rQ1aDEqxNKai2nTalmr2GkfAxBGFlfM7 KNOrTUAatM68maLpD2/TZkn40KvJCIvY2EkqiXUtm1ky454jRo0vmb6ZNgGmpl4m X2AKXfJkZmORjBC1ikT2A89hJPFH3dQ1+BYAk5E5vSObBqLJOugKNlC4hU8UAIvK S+JPTMMFxmyBnVecGD1LtP3GB77KLJO6hXB7jdyxr2YxloHxGh7LHEYuTKRouiij elE/5iqWTabt1BM3WjUTb1rwDhn0yfi2IeKJuSjjoBSDFaTTQwwE0czDVLLp2XFw kf4R86fdT7QmJYsD0A+m7caI1NwFDgQhHK7IO3t/8mCsa0n/Zoo= -----END CERTIFICATE-----Generated at Fri Jul 24 07:40:43 2026 by rpki-client