$ rpki-client -vvf rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft File: 2BF94227A09D96F51AE8819B28CA3696003CBC60.mft (raw, json) Hash identifier: nctdQcpXsYBqwq8M2ELzmdYWuyCNC3UZ7PmO9e8gyVA= Subject key identifier: D8:C9:24:6A:87:6D:74:A8:08:68:1C:08:42:9C:A8:7A:E0:AA:5A:87 Authority key identifier: 2B:F9:42:27:A0:9D:96:F5:1A:E8:81:9B:28:CA:36:96:00:3C:BC:60 Certificate issuer: /CN=2BF94227A09D96F51AE8819B28CA3696003CBC60 Certificate serial: 468BD6465079DBA07CC22E6C94EE516BB0351B68 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 19:39:08 +0000 Manifest this update: Thu 23 Jul 2026 19:34:08 +0000 Manifest next update: Fri 24 Jul 2026 19:43:08 +0000 Files and hashes: 1: 2BF94227A09D96F51AE8819B28CA3696003CBC60.crl (hash: 4wFlMAYJz0pCred/6iNM+ji2UK0PxXL5sEj7h+dndFY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.crl rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:8b:d6:46:50:79:db:a0:7c:c2:2e:6c:94:ee:51:6b:b0:35:1b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BF94227A09D96F51AE8819B28CA3696003CBC60 Validity Not Before: Jul 23 19:34:08 2026 GMT Not After : Jul 24 19:43:08 2026 GMT Subject: CN=D8C9246A876D74A808681C08429CA87AE0AA5A87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:44:59:3c:55:c7:12:bb:b9:ce:3e:8b:f2:47: 09:77:f6:df:d8:1f:a8:fe:47:f9:59:1f:63:66:f8: a2:27:59:69:66:a8:a8:ab:9a:45:20:57:42:93:2f: 5f:2f:9e:6e:8b:28:ff:df:6d:c9:5c:82:46:ff:7d: 80:a7:11:74:ea:05:6a:07:fe:fd:32:80:8a:a4:27: 3a:9a:09:d5:c4:30:ad:a6:6a:28:f8:24:57:30:4b: 0d:1b:8b:ed:0f:6d:c7:b3:32:bf:5c:08:eb:3f:00: 23:53:a1:c1:c1:c7:b9:ab:fe:ce:16:31:61:1f:90: b0:90:3f:22:66:d3:d4:62:77:3f:69:cb:10:86:a5: 51:a0:5f:6e:cc:8b:b3:53:c2:d8:01:7f:54:30:0b: 89:5d:dc:02:19:36:c6:27:1a:98:51:eb:91:bf:14: 17:e0:01:01:73:c9:2c:32:4c:af:e0:0b:2c:26:8a: 45:19:f4:67:70:b5:36:e5:a1:18:55:a6:2b:76:38: af:71:44:11:b9:10:a9:a8:6f:7a:f9:e5:53:46:a1: 87:1d:12:3b:35:41:16:28:72:4b:f4:4d:04:e8:a4: 95:46:a9:cd:46:81:91:0c:c1:8d:36:0b:4b:3b:bf: 14:77:30:14:8c:25:d4:ec:35:46:5e:d4:8b:fa:b1: a2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C9:24:6A:87:6D:74:A8:08:68:1C:08:42:9C:A8:7A:E0:AA:5A:87 X509v3 Authority Key Identifier: keyid:2B:F9:42:27:A0:9D:96:F5:1A:E8:81:9B:28:CA:36:96:00:3C:BC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f3:95:33:85:1e:02:c8:67:49:23:09:cd:b8:54:fa:9f:23: f3:7b:2a:e3:6a:8d:4b:96:e4:f4:89:d7:ad:50:73:e3:47:f6: a0:eb:3b:ee:34:2e:8a:a1:11:17:5c:82:0e:f7:32:97:b0:4d: 9d:14:fd:59:72:b4:d0:70:ba:87:24:27:02:04:51:02:a6:e0: 27:af:cd:a1:ac:1d:5a:05:61:7b:ef:8f:75:77:67:f4:7f:a9: 76:e6:36:6a:5d:85:86:41:2b:93:fa:47:60:70:45:45:11:2f: e2:76:e0:44:24:5d:ee:e1:9d:11:46:95:c7:1d:b6:3b:66:a9: b4:ea:99:16:8e:29:8e:b3:d4:70:b0:aa:06:e5:7e:66:5b:3c: 98:da:e1:d4:e9:a1:46:04:8d:74:a6:b0:41:de:cb:52:fd:ea: c1:1e:05:a1:10:c4:11:2b:3b:2f:c1:03:2c:f0:d7:8e:30:82: 87:d5:54:c2:d7:fc:3a:05:68:8d:60:b8:5f:9c:73:18:b4:9b: 6a:72:34:56:b8:e7:13:9f:62:e3:90:54:bd:b7:2b:4b:e4:c7: bb:ed:e4:3a:e7:c7:b9:eb:97:4d:e2:38:fd:18:ea:9b:95:63: f6:f0:a5:28:7d:af:59:59:f4:a9:41:19:62:c2:62:fd:ed:95: b1:f8:bc:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURovWRlB526B8wi5slO5Ra7A1G2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJGOTQyMjdBMDlEOTZGNTFBRTg4MTlCMjhDQTM2OTYw MDNDQkM2MDAeFw0yNjA3MjMxOTM0MDhaFw0yNjA3MjQxOTQzMDhaMDMxMTAvBgNV BAMTKEQ4QzkyNDZBODc2RDc0QTgwODY4MUMwODQyOUNBODdBRTBBQTVBODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcRFk8VccSu7nOPovyRwl39t/Y H6j+R/lZH2Nm+KInWWlmqKirmkUgV0KTL18vnm6LKP/fbclcgkb/fYCnEXTqBWoH /v0ygIqkJzqaCdXEMK2maij4JFcwSw0bi+0PbcezMr9cCOs/ACNTocHBx7mr/s4W MWEfkLCQPyJm09Ridz9pyxCGpVGgX27Mi7NTwtgBf1QwC4ld3AIZNsYnGphR65G/ FBfgAQFzySwyTK/gCywmikUZ9GdwtTbloRhVpit2OK9xRBG5EKmob3r55VNGoYcd Ejs1QRYockv0TQTopJVGqc1GgZEMwY02C0s7vxR3MBSMJdTsNUZe1Iv6saL9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2MkkaodtdKgIaBwIQpyoeuCqWocwHwYDVR0j BBgwFoAUK/lCJ6CdlvUa6IGbKMo2lgA8vGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmFkZmNiNDQtYWU3YS00NDIzLWFlN2QtMDg2NDhiZjFkZWIxLzAvMkJGOTQyMjdB MDlEOTZGNTFBRTg4MTlCMjhDQTM2OTYwMDNDQkM2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQkY5NDIyN0EwOUQ5NkY1MUFFODgxOUIyOENBMzY5NjAwM0NC QzYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmFkZmNiNDQtYWU3YS00NDIzLWFl N2QtMDg2NDhiZjFkZWIxLzAvMkJGOTQyMjdBMDlEOTZGNTFBRTg4MTlCMjhDQTM2 OTYwMDNDQkM2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDzlTOFHgLIZ0kjCc24VPqfI/N7KuNqjUuW 5PSJ161Qc+NH9qDrO+40LoqhERdcgg73MpewTZ0U/VlytNBwuockJwIEUQKm4Cev zaGsHVoFYXvvj3V3Z/R/qXbmNmpdhYZBK5P6R2BwRUURL+J24EQkXe7hnRFGlccd tjtmqbTqmRaOKY6z1HCwqgblfmZbPJja4dTpoUYEjXSmsEHey1L96sEeBaEQxBEr Oy/BAyzw144wgofVVMLX/DoFaI1guF+ccxi0m2pyNFa45xOfYuOQVL23K0vkx7vt 5Drnx7nrl03iOP0Y6puVY/bwpSh9r1lZ9KlBGWLCYv3tlbH4vIk= -----END CERTIFICATE-----Generated at Fri Jul 24 05:42:25 2026 by rpki-client