$ rpki-client -vvf rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft File: 2C1233B548C07507C6EF58E2A03DD8309F820753.mft (raw, json) Hash identifier: E9c4l+yHOIWALjYLzL1pSPCK/28lrfUQxrxc056kG88= Subject key identifier: D5:85:C4:D9:B9:88:AD:42:E6:FC:2E:B8:CF:45:10:C5:BD:B4:E2:2E Authority key identifier: 2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53 Certificate issuer: /CN=2C1233B548C07507C6EF58E2A03DD8309F820753 Certificate serial: 2BF0F1DFAA40809B1FD2DD121645A0662C7FF155 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 20:14:44 +0000 Manifest this update: Thu 23 Jul 2026 20:09:44 +0000 Manifest next update: Fri 24 Jul 2026 21:40:44 +0000 Files and hashes: 1: 2C1233B548C07507C6EF58E2A03DD8309F820753.crl (hash: JEdkUbudvnls0ZAmy9b1GWRcOrLi/eca94VGhqQSelI=) 2: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: /6iiyBTTzA+gJYo5W8sFnueJYX/K6dQcso0XDUc2u/0=) 3: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 0GUMhzS+5NIthW1wvl37lL5c5ztTRVnrHP+oCvOX4MA=) 4: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: bvFzrT6armN3+NSh25eEAeVsS6vGdsFIsCLC0MUnl3s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f0:f1:df:aa:40:80:9b:1f:d2:dd:12:16:45:a0:66:2c:7f:f1:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C1233B548C07507C6EF58E2A03DD8309F820753 Validity Not Before: Jul 23 20:09:44 2026 GMT Not After : Jul 24 21:40:44 2026 GMT Subject: CN=D585C4D9B988AD42E6FC2EB8CF4510C5BDB4E22E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:20:ab:71:9d:95:00:69:39:94:53:ad:fd:c5: b0:24:52:49:61:b6:ae:a4:9c:c8:27:c3:2d:b9:81: cf:9d:a0:10:43:96:59:a8:50:85:27:38:3d:55:6d: 42:2d:4b:84:a8:84:f6:a0:d4:a2:b7:c6:fa:3c:29: 2d:f7:ad:4c:9b:cc:1f:c9:41:03:f8:9e:a2:71:30: e2:a9:f1:37:54:90:83:24:a4:24:89:36:bc:5d:06: 27:76:b9:2c:42:4d:5f:93:a9:07:ff:41:8c:92:69: 64:8a:81:99:e5:a0:13:e6:8c:b8:a6:92:3c:cf:91: 77:f1:20:0c:fe:34:b0:1d:c8:68:4a:83:53:c4:07: c4:b7:98:18:01:04:f3:65:72:1b:0a:d6:2c:08:91: 6c:89:fe:84:32:c9:82:ff:19:fb:94:d1:9b:8c:db: d1:11:0b:4c:a6:a6:89:eb:01:9e:95:82:d4:1a:77: 6c:6c:86:ea:61:82:30:25:6e:90:2e:d8:90:26:ec: d9:10:8c:8b:9a:37:28:81:ec:6f:23:c4:25:21:f2: c3:19:0f:0a:44:51:4c:f9:ff:c1:4d:d9:d0:e9:b1: e0:90:8d:d2:df:29:5c:ca:30:6b:88:fb:d3:03:b8: 0a:0a:88:16:8e:5f:b7:db:4e:a4:b8:c3:8b:08:59: 4b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:85:C4:D9:B9:88:AD:42:E6:FC:2E:B8:CF:45:10:C5:BD:B4:E2:2E X509v3 Authority Key Identifier: keyid:2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:f9:c1:c9:3a:7f:18:1b:47:2f:78:0a:39:e8:a1:b5:40:eb: 31:79:56:34:ad:c3:40:35:01:ef:a9:41:e0:e3:c8:31:36:6d: b7:51:f8:8d:19:d2:24:09:ea:4e:71:9b:0c:69:4c:48:ec:0d: a4:5a:b3:a9:80:ab:2f:0c:b3:18:29:17:08:5f:d0:b0:c9:a1: ee:e6:49:23:ae:81:58:62:2d:89:79:de:ba:17:f5:bf:74:ab: ee:b6:da:fa:eb:34:72:c0:65:5e:b7:44:94:b4:29:42:72:24: 4f:58:58:18:05:ad:81:25:d6:aa:79:a6:46:64:9c:76:90:3e: 9c:71:64:3b:53:88:13:00:1d:40:bf:45:88:02:2f:6d:6b:6b: 91:2e:b9:2a:7c:83:6e:14:5b:e1:d7:40:b5:37:e5:80:b8:60: 41:a6:a1:1e:ba:bb:69:16:4e:54:4c:f5:c2:9d:8d:02:25:9b: d5:9f:a7:e9:b8:3d:ae:49:bc:ca:6c:06:c2:14:d3:71:c1:0e: 84:5e:ee:a6:5f:ac:6d:d3:a4:cd:40:36:e3:44:53:15:5b:01: cf:8b:62:3a:2f:dc:0d:09:d8:48:49:d4:c5:10:8f:c3:ba:77: b0:a4:b8:97:f7:d6:c1:45:68:05:71:e6:ba:5c:1b:cb:18:ff: 85:69:c8:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK/Dx36pAgJsf0t0SFkWgZix/8VUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMxMjMzQjU0OEMwNzUwN0M2RUY1OEUyQTAzREQ4MzA5 RjgyMDc1MzAeFw0yNjA3MjMyMDA5NDRaFw0yNjA3MjQyMTQwNDRaMDMxMTAvBgNV BAMTKEQ1ODVDNEQ5Qjk4OEFENDJFNkZDMkVCOENGNDUxMEM1QkRCNEUyMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoIKtxnZUAaTmUU639xbAkUklh tq6knMgnwy25gc+doBBDllmoUIUnOD1VbUItS4SohPag1KK3xvo8KS33rUybzB/J QQP4nqJxMOKp8TdUkIMkpCSJNrxdBid2uSxCTV+TqQf/QYySaWSKgZnloBPmjLim kjzPkXfxIAz+NLAdyGhKg1PEB8S3mBgBBPNlchsK1iwIkWyJ/oQyyYL/GfuU0ZuM 29ERC0ymponrAZ6VgtQad2xshuphgjAlbpAu2JAm7NkQjIuaNyiB7G8jxCUh8sMZ DwpEUUz5/8FN2dDpseCQjdLfKVzKMGuI+9MDuAoKiBaOX7fbTqS4w4sIWUsXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1YXE2bmIrULm/C64z0UQxb204i4wHwYDVR0j BBgwFoAULBIztUjAdQfG71jioD3YMJ+CB1MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTFlOTQyNDMtODdmMC00MjZmLWE5Y2EtNGMxOWVkYjA2YjQyLzAvMkMxMjMzQjU0 OEMwNzUwN0M2RUY1OEUyQTAzREQ4MzA5RjgyMDc1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQzEyMzNCNTQ4QzA3NTA3QzZFRjU4RTJBMDNERDgzMDlGODIw NzUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5 Y2EtNGMxOWVkYjA2YjQyLzAvMkMxMjMzQjU0OEMwNzUwN0M2RUY1OEUyQTAzREQ4 MzA5RjgyMDc1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/5wck6fxgbRy94CjnoobVA6zF5VjStw0A1 Ae+pQeDjyDE2bbdR+I0Z0iQJ6k5xmwxpTEjsDaRas6mAqy8MsxgpFwhf0LDJoe7m SSOugVhiLYl53roX9b90q+622vrrNHLAZV63RJS0KUJyJE9YWBgFrYEl1qp5pkZk nHaQPpxxZDtTiBMAHUC/RYgCL21ra5EuuSp8g24UW+HXQLU35YC4YEGmoR66u2kW TlRM9cKdjQIlm9Wfp+m4Pa5JvMpsBsIU03HBDoRe7qZfrG3TpM1ANuNEUxVbAc+L Yjov3A0J2EhJ1MUQj8O6d7CkuJf31sFFaAVx5rpcG8sY/4VpyL4= -----END CERTIFICATE-----Generated at Fri Jul 24 07:39:01 2026 by rpki-client