$ rpki-client -vvf rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft File: 2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft (raw, json) Hash identifier: jnrcO219Uzh0Ocrd4CeJLgyMRo3zzqofza3KxUXo1HY= Subject key identifier: F2:53:68:79:F6:14:74:6A:D1:35:3A:C4:F7:CE:EA:34:C2:34:55:1A Authority key identifier: 2D:FC:5C:3D:38:82:FE:6E:7F:9A:9E:FE:2F:6B:96:55:5F:F5:2D:D7 Certificate issuer: /CN=2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7 Certificate serial: 57CF0D260E520C7FCA677BB9DFF0187FF00054A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 07:18:15 +0000 Manifest this update: Fri 24 Jul 2026 07:13:15 +0000 Manifest next update: Sat 25 Jul 2026 08:34:15 +0000 Files and hashes: 1: 2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl (hash: mkZmjthLcnwF6Pq5hR0nCd4S0FzZ/uicdY1kcc+zDM0=) 2: 3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (hash: KyTDN/npdCxMnf6sB8d1UiCU7Ow9yE5T+dZIKGap4fI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:cf:0d:26:0e:52:0c:7f:ca:67:7b:b9:df:f0:18:7f:f0:00:54:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7 Validity Not Before: Jul 24 07:13:15 2026 GMT Not After : Jul 25 08:34:15 2026 GMT Subject: CN=F2536879F614746AD1353AC4F7CEEA34C234551A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:26:da:78:35:4e:5c:38:6d:ab:32:39:65:86: a1:e6:4f:32:6c:71:be:21:56:ce:78:00:a5:bd:db: 26:f6:cf:56:5d:33:cf:5c:64:1a:a5:84:3c:10:e9: cf:5c:6f:4b:98:f7:ee:30:1e:99:51:28:15:b3:18: 59:a2:51:60:77:e1:c3:22:9c:c9:1d:af:e3:fc:da: c4:5f:13:46:23:d7:35:83:ab:d8:3a:3a:39:ca:82: da:dc:56:46:23:b4:c9:cf:d4:0c:a0:78:3d:31:f9: 88:13:90:29:4b:4f:68:9a:4f:85:9f:dd:bf:8a:f8: 91:4d:89:ab:ad:2e:19:b1:80:d2:a5:a8:c4:33:7e: ea:6e:ab:7c:05:ba:1b:7c:33:10:2b:1d:77:12:95: 84:c8:bc:75:65:91:c8:a3:5a:be:db:79:2d:e2:7a: 0f:23:f2:28:37:b9:2e:fb:8e:15:53:5d:38:47:6e: 36:42:2a:23:92:79:64:41:2f:ae:90:e6:b5:61:43: 57:d3:a8:45:47:c2:3b:9b:68:a5:73:37:22:f1:76: 0a:5e:04:90:ea:86:11:32:71:80:5a:9d:64:3f:5d: 6e:62:a6:1e:24:5b:8c:dc:40:32:a0:12:63:75:6c: df:9c:50:7c:3b:30:e0:27:a0:ac:7f:db:83:a1:15: 55:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:53:68:79:F6:14:74:6A:D1:35:3A:C4:F7:CE:EA:34:C2:34:55:1A X509v3 Authority Key Identifier: keyid:2D:FC:5C:3D:38:82:FE:6E:7F:9A:9E:FE:2F:6B:96:55:5F:F5:2D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:82:f3:6c:18:cf:4f:ae:76:44:a5:7d:44:ba:91:fd:ea:e8: 46:e8:da:e5:b6:cb:16:12:a4:77:82:41:fc:d5:6c:c5:e1:a2: 5d:3f:ab:91:97:0b:14:c7:39:9e:8b:1d:ec:f0:53:77:2e:42: 7c:68:37:81:3e:60:9b:d7:bc:4b:89:eb:33:c9:25:e0:68:ca: d0:ea:35:5a:d3:ca:33:60:ed:7f:50:79:a5:71:d9:7b:de:88: 65:63:14:ab:a9:00:47:5b:d5:48:6c:65:af:e7:7c:d6:b7:0a: c2:c9:97:9b:df:15:8f:fb:3a:06:c7:6d:6a:a0:6b:0a:a4:53: c9:31:4d:9d:98:7e:f5:69:b6:24:86:b7:2a:de:70:ae:ad:1e: 28:87:eb:5e:cd:7d:08:40:d8:dc:b9:29:84:ff:df:0a:b0:0f: d3:b7:bc:2a:52:fd:f6:65:d8:14:d5:43:83:3e:3a:0a:3f:6d: 6c:06:6b:73:9a:39:82:2d:8c:bf:15:c0:65:50:5c:92:6a:fe: 05:ed:bd:5f:28:f9:22:b1:3f:aa:c5:15:de:58:49:9a:53:b9: a9:dc:16:fc:0d:02:84:27:e3:c2:3a:39:00:04:43:38:5b:d1: a1:2e:3b:62:f5:f4:bb:77:07:75:1a:50:7c:69:2c:b0:39:a4: 36:3f:ec:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV88NJg5SDH/KZ3u53/AYf/AAVKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQzVDM0QzODgyRkU2RTdGOUE5RUZFMkY2Qjk2NTU1 RkY1MkRENzAeFw0yNjA3MjQwNzEzMTVaFw0yNjA3MjUwODM0MTVaMDMxMTAvBgNV BAMTKEYyNTM2ODc5RjYxNDc0NkFEMTM1M0FDNEY3Q0VFQTM0QzIzNDU1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Jtp4NU5cOG2rMjllhqHmTzJs cb4hVs54AKW92yb2z1ZdM89cZBqlhDwQ6c9cb0uY9+4wHplRKBWzGFmiUWB34cMi nMkdr+P82sRfE0Yj1zWDq9g6OjnKgtrcVkYjtMnP1AygeD0x+YgTkClLT2iaT4Wf 3b+K+JFNiautLhmxgNKlqMQzfupuq3wFuht8MxArHXcSlYTIvHVlkcijWr7beS3i eg8j8ig3uS77jhVTXThHbjZCKiOSeWRBL66Q5rVhQ1fTqEVHwjubaKVzNyLxdgpe BJDqhhEycYBanWQ/XW5iph4kW4zcQDKgEmN1bN+cUHw7MOAnoKx/24OhFVVxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8lNoefYUdGrRNTrE987qNMI0VRowHwYDVR0j BBgwFoAULfxcPTiC/m5/mp7+L2uWVV/1LdcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVmMDAxM2ItNTlhNi00NzMzLTg5ZjgtMjhmYTNkODg1NzlmLzAvMkRGQzVDM0Qz ODgyRkU2RTdGOUE5RUZFMkY2Qjk2NTU1RkY1MkRENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREZDNUMzRDM4ODJGRTZFN0Y5QTlFRkUyRjZCOTY1NTVGRjUy REQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmVmMDAxM2ItNTlhNi00NzMzLTg5 ZjgtMjhmYTNkODg1NzlmLzAvMkRGQzVDM0QzODgyRkU2RTdGOUE5RUZFMkY2Qjk2 NTU1RkY1MkRENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECC82wYz0+udkSlfUS6kf3q6Ebo2uW2yxYS pHeCQfzVbMXhol0/q5GXCxTHOZ6LHezwU3cuQnxoN4E+YJvXvEuJ6zPJJeBoytDq NVrTyjNg7X9QeaVx2XveiGVjFKupAEdb1UhsZa/nfNa3CsLJl5vfFY/7OgbHbWqg awqkU8kxTZ2YfvVptiSGtyrecK6tHiiH617NfQhA2Ny5KYT/3wqwD9O3vCpS/fZl 2BTVQ4M+Ogo/bWwGa3OaOYItjL8VwGVQXJJq/gXtvV8o+SKxP6rFFd5YSZpTuanc FvwNAoQn48I6OQAEQzhb0aEuO2L19Lt3B3UaUHxpLLA5pDY/7Dc= -----END CERTIFICATE-----Generated at Fri Jul 24 12:34:55 2026 by rpki-client