$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft File: 2E714C194A9AD07684B017C191F12805054E1FC8.mft (raw, json) Hash identifier: CIJvQdrY0kLwz4XQqJTDyV/PKp60z6tU6ssG0O+8LcU= Subject key identifier: 1C:63:11:36:B1:97:CB:D5:F8:0F:5F:B2:50:03:19:67:D0:61:2D:81 Authority key identifier: 2E:71:4C:19:4A:9A:D0:76:84:B0:17:C1:91:F1:28:05:05:4E:1F:C8 Certificate issuer: /CN=2E714C194A9AD07684B017C191F12805054E1FC8 Certificate serial: 62B55CE9AC43E72BC6C892280CBD147F0002BC19 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:52:02 +0000 Manifest this update: Thu 23 Jul 2026 13:47:02 +0000 Manifest next update: Fri 24 Jul 2026 17:29:02 +0000 Files and hashes: 1: 3130332e3136302e3139332e302f32342d3234203d3e20313530353433.roa (hash: pi7opShYJXpPoFXhyGT9aMrMLC59BMPBUsNaZoHvFnY=) 2: 2E714C194A9AD07684B017C191F12805054E1FC8.crl (hash: XC8T+PuNng4zhxkzCvaVLG3Mz9MCjTcM1L+Cuy/SOls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.crl rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b5:5c:e9:ac:43:e7:2b:c6:c8:92:28:0c:bd:14:7f:00:02:bc:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E714C194A9AD07684B017C191F12805054E1FC8 Validity Not Before: Jul 23 13:47:02 2026 GMT Not After : Jul 24 17:29:02 2026 GMT Subject: CN=1C631136B197CBD5F80F5FB250031967D0612D81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8e:f2:59:e4:27:1f:0f:b3:14:45:06:e0:c0: 56:d8:70:ba:cc:04:45:c4:bc:93:a7:62:cc:36:49: 4d:48:8a:cc:68:4b:08:e4:73:1e:bc:8d:21:cf:7d: 86:41:75:e9:93:e7:5c:07:24:f8:ec:1e:d9:2d:ce: 04:15:d9:96:11:62:12:dc:40:df:92:ec:68:f8:d9: 5d:fc:9d:17:e6:24:3f:c3:9c:1b:24:8c:6e:1a:2f: 0c:09:3f:84:7c:fb:b2:79:20:1e:07:67:81:0b:72: 51:cd:a1:a8:37:78:5f:18:6d:a5:93:79:e4:01:cb: 6a:e4:fc:9a:36:eb:0d:f5:d0:ea:08:ea:9e:a6:31: 5a:1b:b7:96:58:2e:b0:d7:f2:92:64:eb:27:c7:2b: 39:d1:52:65:c8:9e:fc:57:18:4c:50:cd:4b:fa:ce: f6:20:57:b1:56:98:bf:48:bd:20:8c:27:ef:08:bf: 82:a2:7b:c4:d7:ea:c4:d6:ac:90:16:63:56:30:db: ac:dd:93:0d:48:65:7e:c2:16:c5:27:50:a9:ec:ae: 4c:86:b5:92:64:7b:a7:2d:f3:19:4c:a3:9b:98:96: 25:4c:b6:01:9a:ac:f9:82:46:66:5e:5a:13:38:82: c8:d2:25:1e:04:c2:ee:31:eb:04:f3:b8:bf:ed:d6: 4a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:63:11:36:B1:97:CB:D5:F8:0F:5F:B2:50:03:19:67:D0:61:2D:81 X509v3 Authority Key Identifier: keyid:2E:71:4C:19:4A:9A:D0:76:84:B0:17:C1:91:F1:28:05:05:4E:1F:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:0c:92:2a:19:69:cf:3c:26:24:97:7d:9d:79:30:11:12:d5: e7:ff:43:d4:f7:3e:53:91:5e:1a:79:a8:db:a6:6f:96:61:7f: 3d:fe:c5:dc:2b:91:9a:ee:70:b8:ef:5e:44:3c:1f:22:51:0c: 42:93:f3:e3:d9:c0:bc:61:5e:cb:a9:d8:e1:63:87:39:b4:8a: 84:38:fb:d5:1f:cb:18:80:f4:94:4e:f4:4c:ae:e6:ba:f2:f5: 32:40:78:db:0c:5a:be:4f:86:02:c8:2f:2a:02:98:a5:58:49: f7:23:56:11:65:99:ae:d9:cb:fc:20:c0:a7:56:eb:70:d2:14: 34:10:17:c1:67:1b:06:a0:52:fb:15:c3:ce:dc:5c:74:3d:ab: d3:85:3f:45:ea:84:21:82:dd:da:86:b2:c0:70:ee:d0:45:7e: f2:b8:0f:ad:dc:a6:b9:68:6c:18:b4:4c:d5:f0:87:22:52:d1: 42:7f:31:42:b9:04:50:e1:43:da:b3:6b:2c:2e:52:2f:b7:e6: 0b:02:97:9c:9a:9f:40:a3:db:68:26:53:91:57:56:d2:9e:e0: 5a:a3:87:cf:12:e5:3e:dd:5e:df:c5:79:0b:1c:1c:85:18:5a: 9c:f7:f5:42:0a:41:d1:02:e2:c8:78:34:96:25:5c:cd:6a:c1: 39:14:92:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYrVc6axD5yvGyJIoDL0UfwACvBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU3MTRDMTk0QTlBRDA3Njg0QjAxN0MxOTFGMTI4MDUw NTRFMUZDODAeFw0yNjA3MjMxMzQ3MDJaFw0yNjA3MjQxNzI5MDJaMDMxMTAvBgNV BAMTKDFDNjMxMTM2QjE5N0NCRDVGODBGNUZCMjUwMDMxOTY3RDA2MTJEODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtjvJZ5CcfD7MURQbgwFbYcLrM BEXEvJOnYsw2SU1IisxoSwjkcx68jSHPfYZBdemT51wHJPjsHtktzgQV2ZYRYhLc QN+S7Gj42V38nRfmJD/DnBskjG4aLwwJP4R8+7J5IB4HZ4ELclHNoag3eF8YbaWT eeQBy2rk/Jo26w310OoI6p6mMVobt5ZYLrDX8pJk6yfHKznRUmXInvxXGExQzUv6 zvYgV7FWmL9IvSCMJ+8Iv4Kie8TX6sTWrJAWY1Yw26zdkw1IZX7CFsUnUKnsrkyG tZJke6ct8xlMo5uYliVMtgGarPmCRmZeWhM4gsjSJR4Ewu4x6wTzuL/t1koRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHGMRNrGXy9X4D1+yUAMZZ9BhLYEwHwYDVR0j BBgwFoAULnFMGUqa0HaEsBfBkfEoBQVOH8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NiM2IwMGItYWQ3Yi00ODQ5LWIwYjItZTI0OWEyZmE2MDRhLzAvMkU3MTRDMTk0 QTlBRDA3Njg0QjAxN0MxOTFGMTI4MDUwNTRFMUZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTcxNEMxOTRBOUFEMDc2ODRCMDE3QzE5MUYxMjgwNTA1NEUx RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NiM2IwMGItYWQ3Yi00ODQ5LWIw YjItZTI0OWEyZmE2MDRhLzAvMkU3MTRDMTk0QTlBRDA3Njg0QjAxN0MxOTFGMTI4 MDUwNTRFMUZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUMkioZac88JiSXfZ15MBES1ef/Q9T3PlOR Xhp5qNumb5Zhfz3+xdwrkZrucLjvXkQ8HyJRDEKT8+PZwLxhXsup2OFjhzm0ioQ4 +9UfyxiA9JRO9Eyu5rry9TJAeNsMWr5PhgLILyoCmKVYSfcjVhFlma7Zy/wgwKdW 63DSFDQQF8FnGwagUvsVw87cXHQ9q9OFP0XqhCGC3dqGssBw7tBFfvK4D63cprlo bBi0TNXwhyJS0UJ/MUK5BFDhQ9qzaywuUi+35gsCl5yan0Cj22gmU5FXVtKe4Fqj h88S5T7dXt/FeQscHIUYWpz39UIKQdEC4sh4NJYlXM1qwTkUkvA= -----END CERTIFICATE-----Generated at Fri Jul 24 02:40:42 2026 by rpki-client