$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft File: 2479BECD79D87972D2E64A75818044EA49B2F7AB.mft (raw, json) Hash identifier: csaUjCuVGwLFBEYInU1sRdL3IPpaf2w0jZ1GXX/xsWI= Subject key identifier: 9B:8A:7F:1B:A0:64:CC:F9:7E:63:10:25:B7:AB:59:E1:64:8F:87:F1 Authority key identifier: 24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB Certificate issuer: /CN=2479BECD79D87972D2E64A75818044EA49B2F7AB Certificate serial: 0D3FE202E1B84A83F85596DB0FB8AE320A87153F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 00:24:35 +0000 Manifest this update: Fri 24 Jul 2026 00:19:35 +0000 Manifest next update: Sat 25 Jul 2026 03:23:35 +0000 Files and hashes: 1: 3130332e3131322e3134342e302f32332d3233203d3e20313534343130.roa (hash: EBSYxoW+DLXOqCY+Bl9yoeDsBygUGPhlM9cqjS/xpGk=) 2: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: W/8+xRtFQTktxO0fuk7MAz6L6AHwxOnMCS8RTW7dGss=) 3: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: /gZ4/45D54iPNl3rFwLqcXjfv+fGeCZ/kGOEYCstAaw=) 4: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: aop58br7cTbLrX5Ig76Wb88/Xv5ZLtq0WiG+kxtdBWw=) 5: 2479BECD79D87972D2E64A75818044EA49B2F7AB.crl (hash: gFE8GocX3wC5pfF47VNdXNnbK11ExglRhtGINZ0y5BM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:3f:e2:02:e1:b8:4a:83:f8:55:96:db:0f:b8:ae:32:0a:87:15:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2479BECD79D87972D2E64A75818044EA49B2F7AB Validity Not Before: Jul 24 00:19:35 2026 GMT Not After : Jul 25 03:23:35 2026 GMT Subject: CN=9B8A7F1BA064CCF97E631025B7AB59E1648F87F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f2:3f:45:8c:24:3c:35:ed:41:5a:9f:db:b7: cd:ca:b9:39:44:bc:a9:3f:94:de:8a:e3:13:0c:41: 8d:90:ab:c8:6b:53:1a:e0:b6:0c:9e:84:32:19:ae: f4:d9:a8:58:50:e9:1c:82:75:ed:8b:2b:27:34:77: 64:18:97:f3:e1:44:71:19:c2:ab:ba:b0:04:7e:e5: 7f:21:c6:4a:48:a8:fb:b3:d0:6a:b6:2d:3e:75:b8: bb:66:01:2f:cc:5a:50:be:ae:3d:40:9b:77:35:99: 43:3f:1f:60:d1:75:06:59:f7:6b:b2:7c:6f:37:58: 2a:17:54:79:72:35:f6:21:8b:18:9f:36:98:26:b3: 5f:3e:30:d6:27:77:44:60:60:24:0a:50:2f:77:76: 36:c5:9f:38:f9:a7:6a:0f:58:fa:94:41:6c:5f:f1: 4a:70:c3:c2:df:b7:01:56:24:ad:b3:14:57:ef:7d: e4:b4:22:fd:7f:ce:ec:1d:57:d2:66:d1:a9:38:70: 0b:80:42:b9:67:8d:01:a2:6e:4f:50:61:78:e3:ae: cc:1d:93:f1:c5:93:8d:aa:76:d9:7d:ba:91:03:ae: eb:35:19:bb:04:38:d7:6f:cb:98:43:87:c7:68:0c: 60:97:9f:31:51:ab:70:6e:33:e7:e7:36:b4:5e:0a: 98:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8A:7F:1B:A0:64:CC:F9:7E:63:10:25:B7:AB:59:E1:64:8F:87:F1 X509v3 Authority Key Identifier: keyid:24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:b5:22:b4:d2:05:a4:ae:f0:87:25:53:af:98:c9:5e:62:e6: 1f:5c:d7:a9:25:79:19:60:8c:fa:54:65:59:7f:df:eb:8a:78: 53:00:ac:b7:73:40:84:03:1f:ed:73:84:76:f7:09:2d:36:97: 9f:e6:1b:86:4d:2d:52:54:76:94:4d:1b:6f:34:5d:48:88:d8: 67:cb:99:32:39:d2:de:ee:6f:8e:c1:0c:8c:61:79:6c:24:a9: 89:00:0b:c3:8d:12:6b:46:4c:2b:97:fd:02:45:d4:b0:cf:25: 9a:ea:c0:31:3a:7f:b3:2f:fd:d0:36:ec:0c:f6:fe:e4:4a:2d: eb:93:d0:cf:2d:56:b1:44:c8:bf:e9:25:c3:24:ba:af:42:64: 3e:c3:de:4f:d8:d4:5b:04:a7:bc:c8:84:4d:52:e0:f4:4c:89: 34:cd:24:b4:74:f9:6a:74:02:66:7d:95:23:90:fd:1b:71:a2: bc:b7:76:cb:27:61:53:36:9e:c2:8d:a3:d9:c8:06:f2:87:ec: d2:81:9f:80:9b:02:eb:ef:60:96:a9:95:1e:20:50:bd:c1:2c: e6:27:c3:ca:54:e2:76:d9:ff:21:a4:9b:93:38:32:66:3e:71: a1:82:00:75:0d:fd:25:9b:b2:0f:b0:cf:20:01:be:f7:8f:be: f0:da:07:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDT/iAuG4SoP4VZbbD7iuMgqHFT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3OUJFQ0Q3OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0RUE0 OUIyRjdBQjAeFw0yNjA3MjQwMDE5MzVaFw0yNjA3MjUwMzIzMzVaMDMxMTAvBgNV BAMTKDlCOEE3RjFCQTA2NENDRjk3RTYzMTAyNUI3QUI1OUUxNjQ4Rjg3RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd8j9FjCQ8Ne1BWp/bt83KuTlE vKk/lN6K4xMMQY2Qq8hrUxrgtgyehDIZrvTZqFhQ6RyCde2LKyc0d2QYl/PhRHEZ wqu6sAR+5X8hxkpIqPuz0Gq2LT51uLtmAS/MWlC+rj1Am3c1mUM/H2DRdQZZ92uy fG83WCoXVHlyNfYhixifNpgms18+MNYnd0RgYCQKUC93djbFnzj5p2oPWPqUQWxf 8Upww8LftwFWJK2zFFfvfeS0Iv1/zuwdV9Jm0ak4cAuAQrlnjQGibk9QYXjjrswd k/HFk42qdtl9upEDrus1GbsEONdvy5hDh8doDGCXnzFRq3BuM+fnNrReCpiXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm4p/G6BkzPl+YxAlt6tZ4WSPh/EwHwYDVR0j BBgwFoAUJHm+zXnYeXLS5kp1gYBE6kmy96swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNkMDhlYjMtOTM3ZC00MzA0LTkxNjctNDYzZDdjNThkNWU0LzAvMjQ3OUJFQ0Q3 OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0RUE0OUIyRjdBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDc5QkVDRDc5RDg3OTcyRDJFNjRBNzU4MTgwNDRFQTQ5QjJG N0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGNkMDhlYjMtOTM3ZC00MzA0LTkx NjctNDYzZDdjNThkNWU0LzAvMjQ3OUJFQ0Q3OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0 RUE0OUIyRjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJG1IrTSBaSu8IclU6+YyV5i5h9c16kleRlg jPpUZVl/3+uKeFMArLdzQIQDH+1zhHb3CS02l5/mG4ZNLVJUdpRNG280XUiI2GfL mTI50t7ub47BDIxheWwkqYkAC8ONEmtGTCuX/QJF1LDPJZrqwDE6f7Mv/dA27Az2 /uRKLeuT0M8tVrFEyL/pJcMkuq9CZD7D3k/Y1FsEp7zIhE1S4PRMiTTNJLR0+Wp0 AmZ9lSOQ/Rtxory3dssnYVM2nsKNo9nIBvKH7NKBn4CbAuvvYJaplR4gUL3BLOYn w8pU4nbZ/yGkm5M4MmY+caGCAHUN/SWbsg+wzyABvvePvvDaBzI= -----END CERTIFICATE-----Generated at Fri Jul 24 10:01:18 2026 by rpki-client