$ rpki-client -vvf rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft File: DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft (raw, json) Hash identifier: NIfAphkN7ibWcOquM84Z/Ow6CZtVeTcVftXxczmLJ4Q= Subject key identifier: 7C:4C:CB:DB:66:9A:C4:EA:20:9F:6E:D9:3F:02:7A:4F:F6:B8:4B:31 Authority key identifier: DC:2E:00:B2:12:67:A4:6B:D6:95:F6:DB:BE:C2:98:9F:48:30:C8:B0 Certificate issuer: /CN=DC2E00B21267A46BD695F6DBBEC2989F4830C8B0 Certificate serial: 12CAAB1F97E9D1501247C0313F342BACF47598B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 03:33:35 +0000 Manifest this update: Fri 24 Jul 2026 03:28:35 +0000 Manifest next update: Sat 25 Jul 2026 05:14:35 +0000 Files and hashes: 1: DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl (hash: UaxvMLG8fFsvXhN3kNCESqoTxncDZ7cd+qtDiIkv69c=) 2: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: 73zmQhG7Zu+0eZu4dZISk1NiR9ExgcKyarQj6CIDk/k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ca:ab:1f:97:e9:d1:50:12:47:c0:31:3f:34:2b:ac:f4:75:98:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC2E00B21267A46BD695F6DBBEC2989F4830C8B0 Validity Not Before: Jul 24 03:28:35 2026 GMT Not After : Jul 25 05:14:35 2026 GMT Subject: CN=7C4CCBDB669AC4EA209F6ED93F027A4FF6B84B31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:a4:b3:54:cc:2f:3e:24:11:a9:cd:f1:98: 3d:1b:fc:57:64:55:01:4b:8e:4f:3b:f6:91:f5:be: e6:3a:99:c9:f2:63:06:0c:1e:99:a9:b1:97:24:4b: 00:35:95:80:00:7f:c3:05:b4:31:42:d3:cb:5e:35: 93:53:fb:19:44:e5:89:3a:c4:54:8d:82:1e:f0:53: 9d:4c:07:bc:8f:e5:60:0f:df:d5:20:c1:ab:e7:db: ad:4a:de:39:e2:b1:22:f1:78:55:b1:df:bc:fc:31: bf:83:7d:5e:ea:94:a8:7a:06:0a:db:5d:48:54:db: 68:8f:22:10:70:24:b6:2a:62:45:3f:53:e3:7d:c5: d2:cb:7e:bd:d6:4a:9f:3a:74:a9:a4:fb:b7:0b:4c: b9:97:50:ae:cd:bd:2f:1d:48:fc:61:7b:d8:80:4a: 79:cc:48:13:f9:eb:4b:69:57:98:4e:33:42:5b:9b: 71:f7:f7:e2:35:47:31:43:6f:9c:90:b3:bd:4e:e5: e5:8e:ca:35:d2:a9:8b:ee:7a:3e:24:6a:18:57:b2: fd:c7:26:05:01:e6:6e:3d:f1:1d:17:9d:e0:cc:70: 43:a7:59:94:1e:02:9f:9f:96:14:51:f1:a6:93:2c: c3:19:9e:08:96:12:d6:78:e6:ac:2a:0b:f3:fa:e6: 03:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4C:CB:DB:66:9A:C4:EA:20:9F:6E:D9:3F:02:7A:4F:F6:B8:4B:31 X509v3 Authority Key Identifier: keyid:DC:2E:00:B2:12:67:A4:6B:D6:95:F6:DB:BE:C2:98:9F:48:30:C8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d2:1c:ed:a0:a9:79:9b:6e:a9:37:7e:41:2f:72:80:0e:f1: bb:c9:47:7f:e9:f1:1c:36:ca:39:a3:21:37:c6:f3:45:83:d6: ac:16:50:b4:ae:fe:2d:f9:0b:af:4d:65:a2:b3:ec:82:47:ad: a0:21:ce:f7:29:35:49:75:11:11:af:23:6d:8a:81:50:8a:1f: 2f:3b:16:fe:55:67:36:45:d0:f9:d7:e7:80:9a:89:58:76:db: 4e:99:42:84:84:ec:5d:74:17:37:b9:f7:55:c8:3d:6a:33:63: 6c:67:03:a8:86:f6:94:ac:53:2e:1d:f0:db:b9:c5:df:47:73: 25:59:a7:b7:03:02:e8:9b:d9:dc:43:2d:e0:3e:74:b8:62:38: 7b:45:b7:62:cb:22:7c:a7:c3:49:04:f1:56:e4:ae:84:0c:f8: 7c:dc:af:9c:b3:a7:0d:dc:71:d8:39:18:d1:1a:ca:d1:df:ec: a4:c9:26:4c:82:0b:a6:8c:51:ca:31:92:f7:02:1d:48:c5:ae: 28:5e:12:f2:bb:07:27:a3:81:02:f6:28:78:ec:d1:5b:20:b6: e5:f5:c6:7a:7b:d0:4d:e9:36:8d:dd:ad:76:2f:43:76:8b:01: 35:ea:f5:92:6e:5e:ef:65:e2:98:9b:5f:a5:37:e3:90:e9:2f: ad:5d:3a:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEsqrH5fp0VASR8AxPzQrrPR1mLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMyRTAwQjIxMjY3QTQ2QkQ2OTVGNkRCQkVDMjk4OUY0 ODMwQzhCMDAeFw0yNjA3MjQwMzI4MzVaFw0yNjA3MjUwNTE0MzVaMDMxMTAvBgNV BAMTKDdDNENDQkRCNjY5QUM0RUEyMDlGNkVEOTNGMDI3QTRGRjZCODRCMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7V6SzVMwvPiQRqc3xmD0b/Fdk VQFLjk879pH1vuY6mcnyYwYMHpmpsZckSwA1lYAAf8MFtDFC08teNZNT+xlE5Yk6 xFSNgh7wU51MB7yP5WAP39Ugwavn261K3jnisSLxeFWx37z8Mb+DfV7qlKh6Bgrb XUhU22iPIhBwJLYqYkU/U+N9xdLLfr3WSp86dKmk+7cLTLmXUK7NvS8dSPxhe9iA SnnMSBP560tpV5hOM0Jbm3H39+I1RzFDb5yQs71O5eWOyjXSqYvuej4kahhXsv3H JgUB5m498R0XneDMcEOnWZQeAp+flhRR8aaTLMMZngiWEtZ45qwqC/P65gOJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfEzL22aaxOogn27ZPwJ6T/a4SzEwHwYDVR0j BBgwFoAU3C4AshJnpGvWlfbbvsKYn0gwyLAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjgxMTdjYTgtYjRlNS00NjdhLTg4YTgtYTRiNjNlNDBjM2VkLzAvREMyRTAwQjIx MjY3QTQ2QkQ2OTVGNkRCQkVDMjk4OUY0ODMwQzhCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQzJFMDBCMjEyNjdBNDZCRDY5NUY2REJCRUMyOTg5RjQ4MzBD OEIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjgxMTdjYTgtYjRlNS00NjdhLTg4 YTgtYTRiNjNlNDBjM2VkLzAvREMyRTAwQjIxMjY3QTQ2QkQ2OTVGNkRCQkVDMjk4 OUY0ODMwQzhCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnSHO2gqXmbbqk3fkEvcoAO8bvJR3/p8Rw2 yjmjITfG80WD1qwWULSu/i35C69NZaKz7IJHraAhzvcpNUl1ERGvI22KgVCKHy87 Fv5VZzZF0PnX54CaiVh2206ZQoSE7F10Fze591XIPWozY2xnA6iG9pSsUy4d8Nu5 xd9HcyVZp7cDAuib2dxDLeA+dLhiOHtFt2LLInynw0kE8VbkroQM+Hzcr5yzpw3c cdg5GNEaytHf7KTJJkyCC6aMUcoxkvcCHUjFriheEvK7ByejgQL2KHjs0VsgtuX1 xnp70E3pNo3drXYvQ3aLATXq9ZJuXu9l4pibX6U345DpL61dOmM= -----END CERTIFICATE-----Generated at Fri Jul 24 05:03:11 2026 by rpki-client