$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft File: 2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft (raw, json) Hash identifier: 7C6NFFev/S8Qj2FlpFvTJPEr0eYApNjpnu7fd22TmUQ= Subject key identifier: 48:3B:E8:52:43:3C:EC:84:B7:51:A5:C6:77:87:9E:27:32:24:35:8B Authority key identifier: 2A:C4:B9:21:8D:44:A8:AF:6A:89:3D:00:D5:F2:8F:34:AD:B8:3E:ED Certificate issuer: /CN=2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED Certificate serial: 2D6E53D86EC2C856547356D46371151C4B825D0D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:00:18 +0000 Manifest this update: Fri 24 Jul 2026 00:55:18 +0000 Manifest next update: Sat 25 Jul 2026 04:45:18 +0000 Files and hashes: 1: 2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl (hash: OEwcDqkYfJMlfkoGDPOkCzYJPuu/ast5Q+L5PxG8Y8Q=) 2: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: Yu7TLcR1tuusuhDSrYnM4of9BN5qOWkNLvH5+MvtCeE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:6e:53:d8:6e:c2:c8:56:54:73:56:d4:63:71:15:1c:4b:82:5d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED Validity Not Before: Jul 24 00:55:18 2026 GMT Not After : Jul 25 04:45:18 2026 GMT Subject: CN=483BE852433CEC84B751A5C677879E273224358B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ba:0f:4f:ef:0d:b8:1a:4d:55:bf:98:1b:b1: e8:76:4d:87:38:2d:d8:d0:55:4f:bf:fa:90:d5:3f: 17:a3:32:83:81:0d:da:a3:21:67:0a:c1:3c:1e:08: bf:52:37:e8:06:73:54:3b:e5:5e:8a:08:40:77:29: f9:b2:53:0c:05:c9:9b:3d:ed:1f:9e:4d:a9:91:fa: 38:84:f5:3a:a5:c7:44:4e:0a:c0:71:69:f7:78:8a: 96:68:cd:f5:27:18:a6:f0:d2:0a:31:81:f6:40:ce: 18:b6:86:d3:d9:66:3e:83:0b:2e:96:fa:04:71:c4: 78:38:d1:39:b1:64:73:a9:b3:28:ba:d4:ab:34:77: 4d:d1:53:ec:0a:9a:30:de:c4:dc:3c:ae:b6:e4:b6: c8:57:44:cf:7a:c1:f1:72:a4:b2:cb:c1:58:ca:38: 01:a8:d9:07:57:e8:4a:a4:9c:1a:32:db:99:c9:61: 6b:2f:a8:fe:fa:ab:ef:e2:04:c9:e3:5a:d5:bd:5b: 20:77:0a:ce:fc:18:7b:68:96:bc:b5:ff:13:18:ff: 23:54:4f:ac:64:16:56:bd:f7:3d:a0:af:9f:f9:36: b4:72:59:51:e0:3f:e8:ed:4c:f4:91:0f:05:09:49: 61:28:ea:ac:64:a8:1c:b9:69:70:81:da:9c:82:21: fe:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3B:E8:52:43:3C:EC:84:B7:51:A5:C6:77:87:9E:27:32:24:35:8B X509v3 Authority Key Identifier: keyid:2A:C4:B9:21:8D:44:A8:AF:6A:89:3D:00:D5:F2:8F:34:AD:B8:3E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:46:0c:d0:aa:2c:2c:e4:c9:3e:ea:bd:20:60:d8:ad:22:c6: 21:23:6c:b0:15:29:a5:34:0d:c3:cf:a0:f7:b3:74:1a:b1:d4: f8:01:90:24:87:d0:b5:b3:7a:e5:94:44:2a:d6:ed:9d:f8:af: 7a:74:32:b9:40:b7:b3:b2:59:df:a0:88:03:4d:4d:dd:b5:a3: 29:f8:06:39:1d:97:d0:4f:65:f2:10:00:94:b0:00:21:22:bd: e8:a3:f3:80:65:f1:95:69:c6:78:f8:73:90:da:0b:29:0a:81: dc:1b:96:2e:5c:cf:81:e3:09:8e:f3:77:d5:b7:6c:54:fd:e3: 52:50:4f:d9:cd:9d:9e:08:dc:0e:df:9a:2d:7d:92:3a:ab:37: d8:9f:76:da:48:6f:bc:db:e1:18:3a:2d:3a:a5:de:75:ce:bc: 8b:15:69:f9:b0:5a:98:5d:52:ee:06:c8:70:4a:59:b2:dc:6a: ed:e3:b8:e8:9e:c9:d0:57:f1:d5:f3:3d:59:db:96:b5:88:9a: 66:11:7f:fb:46:dc:5f:bd:ce:cc:38:cd:b6:87:a3:ba:3f:59: 14:7e:19:82:28:73:c8:7c:fa:3b:d9:f1:0a:19:5e:09:3b:79: 3f:45:f1:5f:47:79:71:d0:ee:c5:99:f1:75:1c:49:06:ec:4a: 00:01:8f:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULW5T2G7CyFZUc1bUY3EVHEuCXQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFDNEI5MjE4RDQ0QThBRjZBODkzRDAwRDVGMjhGMzRB REI4M0VFRDAeFw0yNjA3MjQwMDU1MThaFw0yNjA3MjUwNDQ1MThaMDMxMTAvBgNV BAMTKDQ4M0JFODUyNDMzQ0VDODRCNzUxQTVDNjc3ODc5RTI3MzIyNDM1OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoug9P7w24Gk1Vv5gbseh2TYc4 LdjQVU+/+pDVPxejMoOBDdqjIWcKwTweCL9SN+gGc1Q75V6KCEB3KfmyUwwFyZs9 7R+eTamR+jiE9Tqlx0ROCsBxafd4ipZozfUnGKbw0goxgfZAzhi2htPZZj6DCy6W +gRxxHg40TmxZHOpsyi61Ks0d03RU+wKmjDexNw8rrbktshXRM96wfFypLLLwVjK OAGo2QdX6EqknBoy25nJYWsvqP76q+/iBMnjWtW9WyB3Cs78GHtolry1/xMY/yNU T6xkFla99z2gr5/5NrRyWVHgP+jtTPSRDwUJSWEo6qxkqBy5aXCB2pyCIf7nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSDvoUkM87IS3UaXGd4eeJzIkNYswHwYDVR0j BBgwFoAUKsS5IY1EqK9qiT0A1fKPNK24Pu0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4NmNiNWQtZjA3ZC00MjZhLThlNWUtYTc3YTk3OGRkMmVlLzAvMkFDNEI5MjE4 RDQ0QThBRjZBODkzRDAwRDVGMjhGMzRBREI4M0VFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUM0QjkyMThENDRBOEFGNkE4OTNEMDBENUYyOEYzNEFEQjgz RUVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvMkFDNEI5MjE4RDQ0QThBRjZBODkzRDAwRDVGMjhG MzRBREI4M0VFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1GDNCqLCzkyT7qvSBg2K0ixiEjbLAVKaU0 DcPPoPezdBqx1PgBkCSH0LWzeuWURCrW7Z34r3p0MrlAt7OyWd+giANNTd21oyn4 Bjkdl9BPZfIQAJSwACEiveij84Bl8ZVpxnj4c5DaCykKgdwbli5cz4HjCY7zd9W3 bFT941JQT9nNnZ4I3A7fmi19kjqrN9ifdtpIb7zb4Rg6LTql3nXOvIsVafmwWphd Uu4GyHBKWbLcau3juOieydBX8dXzPVnblrWImmYRf/tG3F+9zsw4zbaHo7o/WRR+ GYIoc8h8+jvZ8QoZXgk7eT9F8V9HeXHQ7sWZ8XUcSQbsSgABj+s= -----END CERTIFICATE-----Generated at Fri Jul 24 03:52:36 2026 by rpki-client