$ rpki-client -vvf rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft File: 2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft (raw, json) Hash identifier: dCVw0nuwDfExj8w3shv48Y9ACrI3ZNtGqafRd9Quq84= Subject key identifier: 74:29:D0:64:33:EE:8E:0D:40:0C:E2:27:90:28:B8:4B:CE:66:D9:49 Authority key identifier: 2D:30:C3:00:58:7F:6D:81:BE:9B:55:44:3E:A8:EE:94:22:9F:CF:34 Certificate issuer: /CN=2D30C300587F6D81BE9B55443EA8EE94229FCF34 Certificate serial: 2D7D32438E33B3B4E0496CD85B5EBC0972C7FD0B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 01:20:54 +0000 Manifest this update: Fri 24 Jul 2026 01:15:54 +0000 Manifest next update: Sat 25 Jul 2026 03:26:54 +0000 Files and hashes: 1: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: /HZ9PgBcY1v+LICUOzB+p9dmjd1y9vMbbZwrBhVjk44=) 2: 2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl (hash: Bvgnt8B7Wv2OGbBIPRzoWd8DiJ4oVzSLMY23j0rRzuA=) 3: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: tFodUbzYC2MyevsY+1U3r+nqHy3x7yy2dunKYq9vZuc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:7d:32:43:8e:33:b3:b4:e0:49:6c:d8:5b:5e:bc:09:72:c7:fd:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D30C300587F6D81BE9B55443EA8EE94229FCF34 Validity Not Before: Jul 24 01:15:54 2026 GMT Not After : Jul 25 03:26:54 2026 GMT Subject: CN=7429D06433EE8E0D400CE2279028B84BCE66D949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:30:ff:b9:86:22:2c:51:cc:c0:45:2e:e3:64: 02:20:69:c2:1a:77:22:11:b7:f6:16:c5:b1:9a:93: 50:b6:de:9e:7d:32:69:08:63:d9:30:a1:99:53:8c: 5d:a8:c1:23:84:4a:5a:d5:4f:df:8e:37:8d:1f:57: 5b:5c:d1:bf:59:a7:40:93:df:e0:73:34:19:d5:03: e6:6c:79:60:ba:8b:f7:d6:90:4f:ad:8a:bf:e4:20: b2:07:77:17:ab:02:1d:bc:70:24:25:8d:de:e1:f2: 32:da:15:87:f4:79:40:94:f5:0f:ef:88:df:d4:b9: 52:43:3a:ae:0b:22:0f:86:f2:c1:ef:8d:72:cc:5f: b4:a2:79:21:aa:3f:54:23:4c:ae:4d:71:e5:73:db: ff:c4:73:14:75:00:f4:56:a7:a7:f7:ab:80:03:39: e4:b7:1f:71:a6:8f:d2:b5:e0:88:be:e0:47:2b:1b: e7:4c:7b:f7:e4:9a:b2:33:0c:e2:a4:03:f1:57:c6: 65:b4:0a:a0:51:42:c1:9a:51:53:90:15:1a:45:65: 56:5a:18:4d:e4:4c:cb:95:fe:a9:27:b1:18:ed:1b: f9:ba:cc:41:8c:f9:44:69:02:0d:d4:5d:b2:ef:53: 3d:a5:18:d6:7f:b2:cb:2c:61:44:06:1e:7f:19:aa: f6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:29:D0:64:33:EE:8E:0D:40:0C:E2:27:90:28:B8:4B:CE:66:D9:49 X509v3 Authority Key Identifier: keyid:2D:30:C3:00:58:7F:6D:81:BE:9B:55:44:3E:A8:EE:94:22:9F:CF:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b5:61:14:39:46:56:35:c7:63:20:3d:ff:51:4f:3c:ce:cc: 7c:16:c2:ac:86:77:6b:b5:e2:4d:11:bf:b6:8a:ac:7c:85:cb: cc:ad:e8:78:41:70:95:b1:23:b8:93:3e:ea:83:65:43:ff:21: f0:4b:86:25:ef:21:93:64:27:aa:6e:e3:64:40:a9:f8:c8:02: 4e:6b:26:53:e0:7a:6b:01:13:40:04:4f:64:a3:02:52:fb:1a: fe:7c:93:40:34:37:35:d4:04:d0:35:95:32:d1:75:57:4d:c3: 24:57:e4:92:d6:58:9a:40:d6:9b:3b:c4:9e:39:29:5d:1e:40: c3:0d:ef:cd:21:fc:57:54:8b:01:54:42:37:10:51:a8:60:03: 74:96:8a:f2:19:65:ec:6e:3d:0f:e6:53:15:6f:65:fb:58:58: f2:af:46:c4:8f:fa:8e:74:90:4b:4e:31:5b:af:76:65:ea:f9: 76:f5:6d:d3:11:ec:0d:59:8e:2a:55:67:22:8d:9e:00:18:48: ec:62:a3:65:92:85:4f:d9:ee:6a:f0:46:0d:33:da:e3:61:63: e4:09:a3:51:56:97:77:6e:c1:ae:00:fc:9f:ac:3a:8a:d8:91: df:06:ed:4b:cd:d3:dc:d7:cb:9e:e1:aa:99:71:ae:d9:56:82: 00:35:f2:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULX0yQ44zs7TgSWzYW168CXLH/QswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQzMEMzMDA1ODdGNkQ4MUJFOUI1NTQ0M0VBOEVFOTQy MjlGQ0YzNDAeFw0yNjA3MjQwMTE1NTRaFw0yNjA3MjUwMzI2NTRaMDMxMTAvBgNV BAMTKDc0MjlEMDY0MzNFRThFMEQ0MDBDRTIyNzkwMjhCODRCQ0U2NkQ5NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjMP+5hiIsUczARS7jZAIgacIa dyIRt/YWxbGak1C23p59MmkIY9kwoZlTjF2owSOESlrVT9+ON40fV1tc0b9Zp0CT 3+BzNBnVA+ZseWC6i/fWkE+tir/kILIHdxerAh28cCQljd7h8jLaFYf0eUCU9Q/v iN/UuVJDOq4LIg+G8sHvjXLMX7SieSGqP1QjTK5NceVz2//EcxR1APRWp6f3q4AD OeS3H3Gmj9K14Ii+4EcrG+dMe/fkmrIzDOKkA/FXxmW0CqBRQsGaUVOQFRpFZVZa GE3kTMuV/qknsRjtG/m6zEGM+URpAg3UXbLvUz2lGNZ/ssssYUQGHn8ZqvalAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdCnQZDPujg1ADOInkCi4S85m2UkwHwYDVR0j BBgwFoAULTDDAFh/bYG+m1VEPqjulCKfzzQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTRkY2VmNjUtNWRlMy00MTI5LWFjMjctNzcwNmQ3MjY2MDAxLzAvMkQzMEMzMDA1 ODdGNkQ4MUJFOUI1NTQ0M0VBOEVFOTQyMjlGQ0YzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDMwQzMwMDU4N0Y2RDgxQkU5QjU1NDQzRUE4RUU5NDIyOUZD RjM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMkQzMEMzMDA1ODdGNkQ4MUJFOUI1NTQ0M0VBOEVF OTQyMjlGQ0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFu1YRQ5RlY1x2MgPf9RTzzOzHwWwqyGd2u1 4k0Rv7aKrHyFy8yt6HhBcJWxI7iTPuqDZUP/IfBLhiXvIZNkJ6pu42RAqfjIAk5r JlPgemsBE0AET2SjAlL7Gv58k0A0NzXUBNA1lTLRdVdNwyRX5JLWWJpA1ps7xJ45 KV0eQMMN780h/FdUiwFUQjcQUahgA3SWivIZZexuPQ/mUxVvZftYWPKvRsSP+o50 kEtOMVuvdmXq+Xb1bdMR7A1ZjipVZyKNngAYSOxio2WShU/Z7mrwRg0z2uNhY+QJ o1FWl3duwa4A/J+sOorYkd8G7UvN09zXy57hqplxrtlWggA18gY= -----END CERTIFICATE-----Generated at Fri Jul 24 13:55:50 2026 by rpki-client