$ rpki-client -vvf rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft File: 2CE9A084598867F6677FDE09C272DA8D05C480FC.mft (raw, json) Hash identifier: brZhOQ7DXnQHYuYpRErghyTidRZWjnbC9s97UltIlr8= Subject key identifier: E4:AA:C1:36:0C:23:57:28:2D:FB:5F:1A:CF:75:23:B7:48:50:85:AE Authority key identifier: 2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC Certificate issuer: /CN=2CE9A084598867F6677FDE09C272DA8D05C480FC Certificate serial: 721BDA79BD881EEAFAB21120697DECBF8265553E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:42:56 +0000 Manifest this update: Thu 23 Jul 2026 18:37:56 +0000 Manifest next update: Fri 24 Jul 2026 22:02:56 +0000 Files and hashes: 1: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: 7nMz4s5YYhUtNRJIR+ORKIg42vTypWbintD4uEN6yZw=) 2: 2CE9A084598867F6677FDE09C272DA8D05C480FC.crl (hash: x6o8GBYlLUzYTqvLmKFPi+qNXhLimxO3CgyoBgxE7dM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:1b:da:79:bd:88:1e:ea:fa:b2:11:20:69:7d:ec:bf:82:65:55:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CE9A084598867F6677FDE09C272DA8D05C480FC Validity Not Before: Jul 23 18:37:56 2026 GMT Not After : Jul 24 22:02:56 2026 GMT Subject: CN=E4AAC1360C2357282DFB5F1ACF7523B7485085AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d2:6b:08:b2:c2:5c:38:a9:51:b9:96:f3:9a: e9:eb:04:71:1b:66:27:ad:dd:34:57:e5:4c:58:e0: e3:d6:63:fa:2b:2e:64:1b:cd:6e:79:86:67:91:f4: 68:85:86:84:c6:b7:93:fc:9a:b6:4d:7d:b0:b4:1b: 00:5c:98:27:e5:dc:7a:26:dc:cd:92:de:8d:8f:33: f7:ce:a0:b4:7f:00:26:f6:ee:5a:fb:3a:ed:21:4e: c1:a3:d1:b5:16:5c:59:b8:7c:5f:10:ee:35:ea:c4: 58:33:01:b4:ec:fe:a3:a9:6b:73:e8:36:31:1c:84: 7f:77:62:54:5a:e4:82:6d:bc:0a:3a:08:ab:8d:f4: 85:d8:df:26:77:ec:9d:3a:c2:c1:9d:a7:a9:7b:10: e0:eb:2e:02:ae:a7:ea:43:71:15:14:57:4c:a6:44: 39:f1:c2:b0:8a:b2:bb:28:bd:f8:58:2f:60:bb:62: 68:06:21:45:9b:21:c7:8e:f1:2f:53:96:28:8f:d4: ac:2e:de:df:89:61:d6:bb:62:e5:ab:67:21:88:11: a0:eb:22:6e:17:9e:98:24:2e:f8:76:ec:f9:06:a4: 73:60:9c:de:92:6a:a5:58:67:5a:57:1c:d1:be:57: ca:cb:0c:7e:df:56:dd:0c:ad:34:8a:8c:6d:51:62: b4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AA:C1:36:0C:23:57:28:2D:FB:5F:1A:CF:75:23:B7:48:50:85:AE X509v3 Authority Key Identifier: keyid:2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:27:c5:85:ad:b8:39:1d:77:5b:12:85:23:23:5d:d1:9e:d9: c2:1a:8b:40:57:e5:c6:31:32:1f:f9:df:78:9a:89:8d:77:f6: df:72:7b:68:19:06:15:87:f7:ce:43:da:27:d9:80:67:bb:ac: 36:5d:2e:86:15:b5:c4:ca:b8:7c:ab:50:91:53:44:7a:1e:e5: 35:88:9b:a3:51:09:b8:0b:c1:18:4c:97:8a:a1:24:c2:2d:e0: 7e:f8:f2:fa:f3:32:6f:2b:5e:9c:c3:88:fc:71:3b:55:04:41: cc:5e:ae:47:2b:8d:3b:88:1b:d7:02:b0:c9:62:71:30:27:7d: 6f:bd:cc:68:d6:d7:84:d9:b9:90:b3:11:4d:9f:0e:a2:08:df: 7b:28:28:a5:8d:16:6b:6f:88:1a:98:14:52:5f:1b:ab:34:fc: 9d:37:28:97:0b:30:9a:58:8f:2b:eb:2e:9a:93:af:c2:f8:16: 07:19:23:e3:03:42:8e:fd:40:3e:4f:83:d1:91:0e:28:41:6e: ad:f5:d6:34:62:11:47:49:e1:43:cf:04:95:8b:26:4e:4a:f9: 5a:12:c7:99:9e:3e:77:17:34:5a:4c:b4:09:3f:39:d6:25:de: f0:be:8e:26:30:b3:f9:87:fd:1b:e1:ba:f2:fe:33:e8:2d:e8: f4:22:69:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUchvaeb2IHur6shEgaX3sv4JlVT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNFOUEwODQ1OTg4NjdGNjY3N0ZERTA5QzI3MkRBOEQw NUM0ODBGQzAeFw0yNjA3MjMxODM3NTZaFw0yNjA3MjQyMjAyNTZaMDMxMTAvBgNV BAMTKEU0QUFDMTM2MEMyMzU3MjgyREZCNUYxQUNGNzUyM0I3NDg1MDg1QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx0msIssJcOKlRuZbzmunrBHEb Ziet3TRX5UxY4OPWY/orLmQbzW55hmeR9GiFhoTGt5P8mrZNfbC0GwBcmCfl3Hom 3M2S3o2PM/fOoLR/ACb27lr7Ou0hTsGj0bUWXFm4fF8Q7jXqxFgzAbTs/qOpa3Po NjEchH93YlRa5IJtvAo6CKuN9IXY3yZ37J06wsGdp6l7EODrLgKup+pDcRUUV0ym RDnxwrCKsrsovfhYL2C7YmgGIUWbIceO8S9TliiP1Kwu3t+JYda7YuWrZyGIEaDr Im4XnpgkLvh27PkGpHNgnN6SaqVYZ1pXHNG+V8rLDH7fVt0MrTSKjG1RYrQHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5KrBNgwjVygt+18az3Ujt0hQha4wHwYDVR0j BBgwFoAULOmghFmIZ/Znf94JwnLajQXEgPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTliODE1MmUtYWE4Ni00ZDhhLTgxZGEtZTcxMDg2YjI5NTZjLzAvMkNFOUEwODQ1 OTg4NjdGNjY3N0ZERTA5QzI3MkRBOEQwNUM0ODBGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yQ0U5QTA4NDU5ODg2N0Y2Njc3RkRFMDlDMjcyREE4RDA1QzQ4 MEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvMkNFOUEwODQ1OTg4NjdGNjY3N0ZERTA5QzI3MkRB OEQwNUM0ODBGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUnxYWtuDkdd1sShSMjXdGe2cIai0BX5cYx Mh/533iaiY139t9ye2gZBhWH985D2ifZgGe7rDZdLoYVtcTKuHyrUJFTRHoe5TWI m6NRCbgLwRhMl4qhJMIt4H748vrzMm8rXpzDiPxxO1UEQcxerkcrjTuIG9cCsMli cTAnfW+9zGjW14TZuZCzEU2fDqII33soKKWNFmtviBqYFFJfG6s0/J03KJcLMJpY jyvrLpqTr8L4FgcZI+MDQo79QD5Pg9GRDihBbq311jRiEUdJ4UPPBJWLJk5K+VoS x5mePncXNFpMtAk/OdYl3vC+jiYws/mH/RvhuvL+M+gt6PQiaXY= -----END CERTIFICATE-----Generated at Fri Jul 24 05:04:12 2026 by rpki-client