$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft File: 2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft (raw, json) Hash identifier: EGHbS1DK3N8gIFRNtwV6djvws+Ngq5lkav7E+SpMcZg= Subject key identifier: 21:E8:DC:E5:83:19:D0:10:BC:C6:1F:70:C2:FF:C0:6E:E2:0A:17:9F Authority key identifier: 2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74 Certificate issuer: /CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274 Certificate serial: 5426B6A40E2C86EC4991BE9E6637E1FBE49D41FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 16:19:48 +0000 Manifest this update: Thu 23 Jul 2026 16:14:48 +0000 Manifest next update: Fri 24 Jul 2026 17:37:48 +0000 Files and hashes: 1: 2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl (hash: 00Nolh8FwwT+oND+WasprdDsLA+KWS9BMykum4RyoJ4=) 2: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: iezQTzMxWp3Coix5fz9eGS/c/h2ulbbwObi3kCUHkW4=) 3: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: V2s2v2zyv88cwsslpUJdds/b+6l6rcgW5NHb7V5SYWY=) 4: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: 1IjnkMC3ga8KbKp+1i4junuLJGtmG26jgGjukZ4rmxk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:26:b6:a4:0e:2c:86:ec:49:91:be:9e:66:37:e1:fb:e4:9d:41:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274 Validity Not Before: Jul 23 16:14:48 2026 GMT Not After : Jul 24 17:37:48 2026 GMT Subject: CN=21E8DCE58319D010BCC61F70C2FFC06EE20A179F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3e:8a:db:e7:39:cd:2a:f1:4b:5e:b2:b3:3d: 50:46:6a:8e:21:89:72:45:1b:b2:4f:85:29:1d:31: 39:81:ab:ee:12:05:3c:c7:ef:8d:9e:83:2c:c8:1b: ce:2a:28:f2:17:b4:70:bf:0a:ac:64:a4:8f:7a:56: 40:34:4b:e2:d0:bd:d7:fb:5b:49:c3:f1:ca:e1:46: 97:6b:4d:e9:76:0d:34:56:08:fd:a9:b6:c8:71:08: fb:f3:9e:37:d9:a1:88:f5:a8:df:9d:f5:02:be:99: 0f:a5:b9:8b:d4:ba:57:5b:16:76:ec:47:b4:25:9e: 54:e7:61:6d:6b:f9:c9:9d:48:14:d0:ad:20:15:f4: ae:03:ea:c0:c4:7a:f4:04:9c:f2:43:74:6b:48:f0: 4b:40:ab:73:a5:cd:d1:64:e0:4c:c5:24:2c:d8:e8: 17:29:0f:48:cd:7d:92:5c:47:81:26:6e:8d:3f:7e: 37:ba:8e:36:12:e9:ea:e3:8c:4d:98:c2:1a:94:a3: 51:25:53:99:48:e7:3a:7b:97:8b:bd:08:07:ea:85: 05:88:9a:cf:a4:1c:5d:5a:cc:10:32:57:d8:86:b1: 43:81:b5:59:fc:64:a4:e4:31:68:fb:ec:52:d3:cb: f7:6d:de:a7:67:8a:19:6c:9a:55:8f:dc:55:7c:bc: 3b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E8:DC:E5:83:19:D0:10:BC:C6:1F:70:C2:FF:C0:6E:E2:0A:17:9F X509v3 Authority Key Identifier: keyid:2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:fa:09:25:7e:48:31:7e:50:ee:14:7f:c4:ff:c9:50:65:a0: 2e:18:a1:3c:d0:e9:c7:ea:53:b7:5a:a4:4a:d6:c8:0e:bd:b2: 52:22:a6:3b:89:04:9f:e6:06:88:35:93:84:95:a8:25:c7:8e: 15:8b:30:85:7c:09:21:c6:02:42:a8:20:23:f8:fe:19:0b:35: 9b:10:85:8e:e2:3e:d3:57:e9:23:f5:ea:e3:fa:ce:8e:0c:a0: e9:75:e0:d9:d3:2e:79:d9:08:fc:56:cb:f5:44:86:ab:85:56: 36:f8:f2:ab:5f:9f:2d:15:46:a6:df:c6:c3:2e:45:e2:78:9a: 6a:54:d7:a8:a1:d5:f1:f5:9c:ac:20:e0:74:33:31:aa:21:cb: ea:25:a6:3f:b8:4e:52:93:9d:51:04:33:c3:20:34:44:2a:e6: 51:9e:ce:11:65:79:35:a8:95:75:31:4f:0c:17:fe:ea:63:5d: dc:2b:5b:b4:2a:71:3a:5d:67:76:52:82:da:f0:b0:b0:ff:88: 6b:ed:91:21:71:9b:b9:6b:db:f0:81:50:46:36:1b:e3:14:27: 18:3b:e9:a1:64:6e:94:b4:e5:7b:88:e2:95:bc:da:5d:13:fd: 44:b9:4c:42:10:85:03:11:9a:9e:68:55:5b:54:79:e8:42:50: 50:87:c6:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCa2pA4shuxJkb6eZjfh++SdQfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2RjE2RTgwQkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0QjBE N0Q5QzI3NDAeFw0yNjA3MjMxNjE0NDhaFw0yNjA3MjQxNzM3NDhaMDMxMTAvBgNV BAMTKDIxRThEQ0U1ODMxOUQwMTBCQ0M2MUY3MEMyRkZDMDZFRTIwQTE3OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjPorb5znNKvFLXrKzPVBGao4h iXJFG7JPhSkdMTmBq+4SBTzH742egyzIG84qKPIXtHC/CqxkpI96VkA0S+LQvdf7 W0nD8crhRpdrTel2DTRWCP2ptshxCPvznjfZoYj1qN+d9QK+mQ+luYvUuldbFnbs R7QlnlTnYW1r+cmdSBTQrSAV9K4D6sDEevQEnPJDdGtI8EtAq3OlzdFk4EzFJCzY 6BcpD0jNfZJcR4Embo0/fje6jjYS6erjjE2YwhqUo1ElU5lI5zp7l4u9CAfqhQWI ms+kHF1azBAyV9iGsUOBtVn8ZKTkMWj77FLTy/dt3qdnihlsmlWP3FV8vDsdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIejc5YMZ0BC8xh9wwv/AbuIKF58wHwYDVR0j BBgwFoAUKm8W6Av9x7TWeXcm+4/UsNfZwnQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E0NjM2MGQtNjYyYi00ZjdkLWJiMTctZDg2MDgyMTUyNDcxLzAvMkE2RjE2RTgw QkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0QjBEN0Q5QzI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTZGMTZFODBCRkRDN0I0RDY3OTc3MjZGQjhGRDRCMEQ3RDlD Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvMkE2RjE2RTgwQkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0 QjBEN0Q5QzI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGP6CSV+SDF+UO4Uf8T/yVBloC4YoTzQ6cfq U7dapErWyA69slIipjuJBJ/mBog1k4SVqCXHjhWLMIV8CSHGAkKoICP4/hkLNZsQ hY7iPtNX6SP16uP6zo4MoOl14NnTLnnZCPxWy/VEhquFVjb48qtfny0VRqbfxsMu ReJ4mmpU16ih1fH1nKwg4HQzMaohy+olpj+4TlKTnVEEM8MgNEQq5lGezhFleTWo lXUxTwwX/upjXdwrW7QqcTpdZ3ZSgtrwsLD/iGvtkSFxm7lr2/CBUEY2G+MUJxg7 6aFkbpS05XuI4pW82l0T/US5TEIQhQMRmp5oVVtUeehCUFCHxss= -----END CERTIFICATE-----Generated at Fri Jul 24 02:44:59 2026 by rpki-client