$ rpki-client -vvf rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft File: 2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft (raw, json) Hash identifier: R0/3Z4dy4nUy3QE4fKtGKyPWNywQYfNsu7SBKENPnQA= Subject key identifier: 9E:E8:36:B3:B7:BF:2E:60:D9:EA:C5:C7:34:E1:A0:B5:C0:81:43:0E Authority key identifier: 2D:81:47:AB:32:AE:34:FE:05:99:30:1C:39:9B:A4:31:CB:D9:6A:E2 Certificate issuer: /CN=2D8147AB32AE34FE0599301C399BA431CBD96AE2 Certificate serial: 5EF39B8C8AE096BF70F7EE8050EAD235140928BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:32:43 +0000 Manifest this update: Thu 23 Jul 2026 18:27:43 +0000 Manifest next update: Fri 24 Jul 2026 22:28:43 +0000 Files and hashes: 1: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: OX/hSObmRCzkD1qVckzfWkKuBPC5Pdod9YDgySPz4C8=) 2: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: YTcLxO+mbdwk1sv6hkGjyOE34UWEs5shSWT+DleZD5E=) 3: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: RnobRsvxkM1MTdlV59E6oBUzJE/tUaI5t4eU9X2Ihxg=) 4: 2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl (hash: WKd696ZmdarAipYWLHBpjcbZoGAGGTgEDanWNVcS8pc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f3:9b:8c:8a:e0:96:bf:70:f7:ee:80:50:ea:d2:35:14:09:28:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D8147AB32AE34FE0599301C399BA431CBD96AE2 Validity Not Before: Jul 23 18:27:43 2026 GMT Not After : Jul 24 22:28:43 2026 GMT Subject: CN=9EE836B3B7BF2E60D9EAC5C734E1A0B5C081430E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:64:96:34:33:17:b1:17:4f:39:c3:c2:09:ee: 5f:12:89:f8:21:2f:ac:8b:33:6d:d0:36:89:56:86: be:5a:14:56:b4:b5:5a:77:20:47:1e:11:29:82:36: 90:02:0d:cb:36:4e:fe:1b:1d:d5:97:81:8b:fd:43: f3:1e:bf:87:3a:14:27:60:70:bb:72:44:b6:1a:cd: a5:8c:10:2b:8a:34:93:c0:ce:a4:47:c4:57:a9:e2: ec:69:42:c6:bc:59:e1:28:79:a5:ee:38:22:ec:c3: b2:5c:98:d1:f3:19:b2:61:7d:b3:78:16:65:ab:2e: c3:a3:fd:77:c2:1a:2e:af:f0:62:e3:0a:e2:cb:7b: 67:6c:d5:ae:d7:d9:eb:3b:2f:dd:ee:80:0e:d8:87: 91:7b:3d:39:8e:dd:36:73:19:05:cd:e6:4a:ae:1a: 44:5e:74:15:d6:2f:59:2c:0c:bf:fb:1a:e1:0f:2e: cf:0f:f2:52:66:15:d0:4f:7f:bf:9c:65:03:57:bc: 83:6d:79:45:82:5d:46:9c:58:33:74:dd:51:7a:12: c1:af:3a:5b:50:fa:64:b7:51:c2:7b:91:f4:cc:5c: b0:c9:a6:a3:5b:8d:fb:84:70:d0:55:ca:94:42:58: fd:19:a6:da:2f:ac:ba:cf:b2:a7:a0:a2:80:7a:24: a9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E8:36:B3:B7:BF:2E:60:D9:EA:C5:C7:34:E1:A0:B5:C0:81:43:0E X509v3 Authority Key Identifier: keyid:2D:81:47:AB:32:AE:34:FE:05:99:30:1C:39:9B:A4:31:CB:D9:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:72:61:56:06:81:24:39:0c:ad:6d:f5:6c:ad:78:59:77:cf: bc:67:39:64:4e:a8:17:de:6b:7e:95:12:b0:f6:dd:95:d1:52: 85:bf:2c:71:ec:39:3a:a7:97:e7:c7:25:14:4d:83:b8:46:fb: 9b:68:bf:be:7f:57:59:c1:8d:d7:ed:24:90:9b:5b:a9:4f:12: a0:05:5a:8f:ca:fb:bd:76:e5:4d:37:57:8d:0a:0a:a2:27:3b: e4:aa:ff:cd:3d:a5:09:7e:47:9f:9a:ad:7b:63:bc:91:ee:ea: 6b:95:ce:94:93:e4:55:f5:76:01:92:34:17:72:d0:0a:6d:9b: ed:d4:1d:3e:ee:34:0e:66:88:67:8a:90:b6:9c:df:a1:af:69: 2a:5b:f4:fa:dc:b8:e3:aa:e7:b2:74:15:32:ed:ad:45:b3:e8: cd:b4:36:e3:93:77:c9:07:15:d1:3b:54:53:40:df:23:09:b2: ff:73:08:54:48:2e:87:b1:49:f2:79:c3:16:b1:e8:75:38:4f: f1:b2:81:c3:d3:c6:e4:a4:4e:81:24:12:e3:f7:c5:eb:fe:ca: 38:8a:be:75:b3:5e:fd:0e:89:bc:f2:6f:08:27:a2:c9:e0:87: fe:6a:5a:be:7f:b1:2b:19:7f:0b:f6:1d:2f:96:2c:c2:c7:bc: 43:fb:5c:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXvObjIrglr9w9+6AUOrSNRQJKL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ4MTQ3QUIzMkFFMzRGRTA1OTkzMDFDMzk5QkE0MzFD QkQ5NkFFMjAeFw0yNjA3MjMxODI3NDNaFw0yNjA3MjQyMjI4NDNaMDMxMTAvBgNV BAMTKDlFRTgzNkIzQjdCRjJFNjBEOUVBQzVDNzM0RTFBMEI1QzA4MTQzMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAZJY0MxexF085w8IJ7l8Sifgh L6yLM23QNolWhr5aFFa0tVp3IEceESmCNpACDcs2Tv4bHdWXgYv9Q/Mev4c6FCdg cLtyRLYazaWMECuKNJPAzqRHxFep4uxpQsa8WeEoeaXuOCLsw7JcmNHzGbJhfbN4 FmWrLsOj/XfCGi6v8GLjCuLLe2ds1a7X2es7L93ugA7Yh5F7PTmO3TZzGQXN5kqu GkRedBXWL1ksDL/7GuEPLs8P8lJmFdBPf7+cZQNXvINteUWCXUacWDN03VF6EsGv OltQ+mS3UcJ7kfTMXLDJpqNbjfuEcNBVypRCWP0ZptovrLrPsqegooB6JKlJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnug2s7e/LmDZ6sXHNOGgtcCBQw4wHwYDVR0j BBgwFoAULYFHqzKuNP4FmTAcOZukMcvZauIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFkYTIzZTktODRiZS00YTU0LWJjYTAtZTlhMGNhZmQxNmZlLzAvMkQ4MTQ3QUIz MkFFMzRGRTA1OTkzMDFDMzk5QkE0MzFDQkQ5NkFFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yRDgxNDdBQjMyQUUzNEZFMDU5OTMwMUMzOTlCQTQzMUNCRDk2 QUUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFkYTIzZTktODRiZS00YTU0LWJj YTAtZTlhMGNhZmQxNmZlLzAvMkQ4MTQ3QUIzMkFFMzRGRTA1OTkzMDFDMzk5QkE0 MzFDQkQ5NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNyYVYGgSQ5DK1t9WyteFl3z7xnOWROqBfe a36VErD23ZXRUoW/LHHsOTqnl+fHJRRNg7hG+5tov75/V1nBjdftJJCbW6lPEqAF Wo/K+7125U03V40KCqInO+Sq/809pQl+R5+arXtjvJHu6muVzpST5FX1dgGSNBdy 0Aptm+3UHT7uNA5miGeKkLac36GvaSpb9PrcuOOq57J0FTLtrUWz6M20NuOTd8kH FdE7VFNA3yMJsv9zCFRILoexSfJ5wxax6HU4T/GygcPTxuSkToEkEuP3xev+yjiK vnWzXv0Oibzybwgnosngh/5qWr5/sSsZfwv2HS+WLMLHvEP7XGQ= -----END CERTIFICATE-----Generated at Fri Jul 24 03:51:15 2026 by rpki-client