$ rpki-client -vvf rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft File: 2DFA9ABE82F079690092186CFE591462760D0F8A.mft (raw, json) Hash identifier: NkJkrLigLpgP5HhbPGus+diPqOop2ydDolhIWPBqNuo= Subject key identifier: 89:5C:F4:04:94:C3:51:99:A9:A6:26:09:AE:71:65:03:C5:9D:F4:06 Authority key identifier: 2D:FA:9A:BE:82:F0:79:69:00:92:18:6C:FE:59:14:62:76:0D:0F:8A Certificate issuer: /CN=2DFA9ABE82F079690092186CFE591462760D0F8A Certificate serial: 1DDC1F31FB9D11BC9BB8D5460C0D2DDC03DB955C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 06:47:37 +0000 Manifest this update: Fri 24 Jul 2026 06:42:37 +0000 Manifest next update: Sat 25 Jul 2026 07:36:37 +0000 Files and hashes: 1: 2DFA9ABE82F079690092186CFE591462760D0F8A.crl (hash: xfx2GtFmBfld/R21jq30Uv0jALifIjqQkBm2jrE7mrc=) 2: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: W/hw+IjAyZrPFulBFkYLnFPX3SzGksOOsryB2xI+HDo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.crl rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:dc:1f:31:fb:9d:11:bc:9b:b8:d5:46:0c:0d:2d:dc:03:db:95:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFA9ABE82F079690092186CFE591462760D0F8A Validity Not Before: Jul 24 06:42:37 2026 GMT Not After : Jul 25 07:36:37 2026 GMT Subject: CN=895CF40494C35199A9A62609AE716503C59DF406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:94:fb:09:79:31:35:c4:6d:16:97:f7:e7:ce: 10:8d:96:70:32:3f:33:07:16:79:75:92:8f:ff:ab: ec:79:2e:f6:d2:51:b6:a9:6e:87:f0:4d:4d:b5:5f: f9:11:cf:e2:0f:ee:aa:5e:70:98:06:3a:74:53:d4: 25:be:10:5c:88:52:8c:b4:28:ed:ac:62:db:62:40: 4c:6a:58:94:c1:06:2f:ee:0e:fe:98:5a:d0:59:57: 23:76:34:82:e5:b4:c5:8a:4b:44:20:47:1a:68:98: 1c:ef:18:09:9f:36:ce:ac:09:ae:5f:e1:3d:8d:51: 2f:13:2c:94:63:c1:5b:bd:da:88:0f:fa:a3:20:92: ca:84:b0:67:00:e7:f8:4d:36:88:b9:de:03:04:8b: 7a:62:ba:e6:0b:53:8c:b6:21:e2:22:bc:fa:0c:50: a2:99:b3:2f:45:49:72:7d:3d:39:f6:8b:c6:f2:61: 81:9c:b7:a2:e5:e3:b8:90:91:68:a3:db:c6:63:f2: 1f:1e:36:97:53:b7:a9:ad:10:27:86:f5:96:2d:7b: 48:59:17:3c:73:cf:07:22:77:1d:f7:82:5a:fd:5b: bf:27:21:96:0a:4f:48:09:5d:8e:2c:dd:cb:ce:18: 6e:b0:7c:6d:e1:65:8b:0b:59:07:9b:79:54:62:c5: cb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5C:F4:04:94:C3:51:99:A9:A6:26:09:AE:71:65:03:C5:9D:F4:06 X509v3 Authority Key Identifier: keyid:2D:FA:9A:BE:82:F0:79:69:00:92:18:6C:FE:59:14:62:76:0D:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ec:b2:81:5f:bf:ad:9c:fa:bb:fb:d4:32:a7:d1:12:fa:ac: a8:08:d1:ef:2e:67:98:e4:c8:7d:9c:a9:ed:36:2a:a0:03:ab: ca:f8:ae:2b:0e:bb:2f:be:b9:3f:b0:f0:57:55:c1:cf:be:39: 02:c5:48:f8:dc:19:46:9f:f7:47:db:e8:e5:81:cb:91:3d:3d: 49:a6:66:ca:bf:de:2d:a6:ce:8d:5c:2b:34:d0:ee:98:ca:24: 4d:f0:78:69:f7:5e:02:7b:d7:f1:b5:4b:4e:34:55:56:b1:8c: a0:e4:86:d7:f1:af:47:e6:fc:76:03:f2:94:c6:1e:1c:98:ba: 23:8d:68:e6:a9:82:d0:c5:88:22:ea:32:3e:3b:f7:20:54:62: 42:63:c3:5a:e0:d9:07:53:bf:80:a2:61:38:fe:4f:2c:98:c7: b3:b7:73:d5:6e:3c:ec:76:d2:98:dd:2c:6d:ef:a7:51:23:9f: 3e:5a:01:c9:f6:24:4d:c9:0a:5b:38:ce:c1:a7:2b:b1:c5:66: 7c:b9:79:db:2a:02:60:76:e8:1f:50:e7:b5:44:9b:a8:a8:c6: 32:59:f6:ea:93:e5:6a:ee:d9:cd:cb:68:1b:41:cc:cd:3c:80: 52:1e:2e:75:3f:3a:26:53:45:37:70:9f:19:de:99:ce:50:24: 73:41:ee:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHdwfMfudEbybuNVGDA0t3APblVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQTlBQkU4MkYwNzk2OTAwOTIxODZDRkU1OTE0NjI3 NjBEMEY4QTAeFw0yNjA3MjQwNjQyMzdaFw0yNjA3MjUwNzM2MzdaMDMxMTAvBgNV BAMTKDg5NUNGNDA0OTRDMzUxOTlBOUE2MjYwOUFFNzE2NTAzQzU5REY0MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDilPsJeTE1xG0Wl/fnzhCNlnAy PzMHFnl1ko//q+x5LvbSUbapbofwTU21X/kRz+IP7qpecJgGOnRT1CW+EFyIUoy0 KO2sYttiQExqWJTBBi/uDv6YWtBZVyN2NILltMWKS0QgRxpomBzvGAmfNs6sCa5f 4T2NUS8TLJRjwVu92ogP+qMgksqEsGcA5/hNNoi53gMEi3piuuYLU4y2IeIivPoM UKKZsy9FSXJ9PTn2i8byYYGct6Ll47iQkWij28Zj8h8eNpdTt6mtECeG9ZYte0hZ Fzxzzwcidx33glr9W78nIZYKT0gJXY4s3cvOGG6wfG3hZYsLWQebeVRixcvhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiVz0BJTDUZmppiYJrnFlA8Wd9AYwHwYDVR0j BBgwFoAULfqavoLweWkAkhhs/lkUYnYND4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGNjYzJhZjQtYTYyZC00NzA4LWI2ODgtMTg5MjU5NGJhOTg5LzAvMkRGQTlBQkU4 MkYwNzk2OTAwOTIxODZDRkU1OTE0NjI3NjBEMEY4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREZBOUFCRTgyRjA3OTY5MDA5MjE4NkNGRTU5MTQ2Mjc2MEQw RjhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvMkRGQTlBQkU4MkYwNzk2OTAwOTIxODZDRkU1OTE0 NjI3NjBEMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfssoFfv62c+rv71DKn0RL6rKgI0e8uZ5jk yH2cqe02KqADq8r4risOuy++uT+w8FdVwc++OQLFSPjcGUaf90fb6OWBy5E9PUmm Zsq/3i2mzo1cKzTQ7pjKJE3weGn3XgJ71/G1S040VVaxjKDkhtfxr0fm/HYD8pTG HhyYuiONaOapgtDFiCLqMj479yBUYkJjw1rg2QdTv4CiYTj+TyyYx7O3c9VuPOx2 0pjdLG3vp1Ejnz5aAcn2JE3JCls4zsGnK7HFZny5edsqAmB26B9Q57VEm6ioxjJZ 9uqT5Wru2c3LaBtBzM08gFIeLnU/OiZTRTdwnxnemc5QJHNB7i8= -----END CERTIFICATE-----Generated at Fri Jul 24 09:46:57 2026 by rpki-client