$ rpki-client -vvf rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft File: 2702EC259515C0960B0BFF36647679F0CA781E52.mft (raw, json) Hash identifier: vZuddG8hJvil4+popKS+vH2CSgpIBhImL1+5wZ5lkog= Subject key identifier: CA:49:C5:39:90:40:82:2C:86:26:AC:07:5F:FF:6D:7B:3B:9A:E7:5D Authority key identifier: 27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52 Certificate issuer: /CN=2702EC259515C0960B0BFF36647679F0CA781E52 Certificate serial: 60C8F35F1AE54087F2F7DE8B11436B342A9465AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 14:42:36 +0000 Manifest this update: Fri 24 Jul 2026 14:37:36 +0000 Manifest next update: Sat 25 Jul 2026 18:17:36 +0000 Files and hashes: 1: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: SF5csYZOV6O0/pz/yzpUeG3NGqNwVVPBe+gjRAAxx1w=) 2: 2702EC259515C0960B0BFF36647679F0CA781E52.crl (hash: ZiVILTruIAIBW9paxhWImRT+qlSM0tFsPi19FMBGcks=) 3: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: vNMbKB+jjAGCqgxCSWzjKIMOhXwlS0DnqcWYtGqskho=) 4: 3130332e3133382e36322e302f32342d3234203d3e20313338383433.roa (hash: /lklKRwQXzQQDya+GH3WUkfxs3Rw/gHVRuuz1tcXoUE=) 5: 3130332e3133382e36332e302f32342d3234203d3e20313338383433.roa (hash: MvYURtqKvXgJtHDe+bGVN+qQ+GvO+Bbw/63OedWxccg=) 6: 323430343a636263303a3a2f34302d3430203d3e20313338383433.roa (hash: g1km73POKKg69MSbDnEF0CkpP2rF3ZrF65BD2T6WTQc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.crl rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c8:f3:5f:1a:e5:40:87:f2:f7:de:8b:11:43:6b:34:2a:94:65:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2702EC259515C0960B0BFF36647679F0CA781E52 Validity Not Before: Jul 24 14:37:36 2026 GMT Not After : Jul 25 18:17:36 2026 GMT Subject: CN=CA49C5399040822C8626AC075FFF6D7B3B9AE75D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9b:d4:d4:cd:70:6b:09:94:d8:19:f7:3f:4c: 48:b4:80:63:e0:c2:b2:f0:4f:18:e4:94:c0:1c:a7: 3d:dd:1e:f9:59:af:c6:96:c9:13:a8:b6:1a:b9:b4: 7f:49:31:db:40:70:89:3f:4f:88:7d:57:28:1a:44: b8:7d:f5:a8:c7:52:1a:3f:42:f6:5e:30:75:45:7f: 7f:0c:d2:2a:28:fd:42:25:0b:c3:b3:53:77:04:09: 46:8c:09:6b:b0:6f:cb:b7:88:29:4b:14:7a:67:5a: 7e:70:0b:b3:5f:db:5e:e7:32:65:18:c2:e7:2e:fa: f9:66:d8:58:cc:5a:3d:22:f2:4a:89:54:3b:19:ab: 91:1c:27:bb:a3:3f:53:80:5d:22:1e:fb:d6:f3:06: de:01:89:ed:c3:15:18:02:a7:51:f3:4f:1b:0a:33: 37:26:35:d9:56:af:09:f6:0e:a8:52:a7:23:b2:26: 99:26:16:94:29:ba:b1:69:e9:11:05:19:c9:70:f3: 80:f4:21:9d:a4:16:91:60:32:db:03:3e:e3:38:10: 39:94:6e:22:75:c9:4a:2b:42:36:69:0e:13:34:27: df:9c:40:34:7b:a9:17:6e:9e:c3:1c:3f:31:d5:7d: 31:10:a0:f4:fe:1d:b6:91:b3:e9:09:d0:30:09:26: 82:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:49:C5:39:90:40:82:2C:86:26:AC:07:5F:FF:6D:7B:3B:9A:E7:5D X509v3 Authority Key Identifier: keyid:27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:c9:f0:e5:a8:b1:21:4a:df:32:1a:06:02:bb:5f:d0:d3:4f: 06:84:35:1d:c6:ca:18:3c:36:4a:bc:d1:1a:f5:a9:e3:dd:31: cc:d8:b8:c0:51:3d:90:67:7f:0e:ee:b9:05:d9:c5:b1:47:e8: 2b:52:84:24:5b:68:6c:3e:72:d1:1d:c5:31:bb:d1:f7:f3:ec: 43:20:89:ee:30:ae:db:a5:11:0a:57:e1:7f:5c:2b:66:21:1c: e1:e1:8d:32:a1:8d:74:57:0f:82:b9:85:98:16:1f:4a:25:8f: 2f:28:5d:52:f2:de:65:2e:f1:a2:20:82:79:ca:bf:6f:61:fc: 44:08:f4:10:0f:57:1c:80:f8:2c:c3:d5:ba:06:fd:a7:f4:d9: ab:4d:77:16:89:e6:54:6a:60:69:f9:b9:aa:25:29:37:e4:49: c0:03:79:e0:aa:2f:b5:64:2d:d9:36:5e:9d:92:11:c0:e2:c7: e4:1c:91:73:7b:be:25:15:39:1e:f8:29:c8:78:8e:27:73:d2: 35:5c:65:9f:2d:3d:65:82:55:18:b9:83:aa:11:3b:7d:b7:df: d3:37:ff:1f:c1:0a:5b:0a:cd:1f:1e:f5:ab:5b:98:e7:76:ea: 5e:0d:32:1a:9d:7a:c8:d1:c2:04:65:1a:b6:40:f2:b9:e3:72: b7:c4:98:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYMjzXxrlQIfy996LEUNrNCqUZaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjcwMkVDMjU5NTE1QzA5NjBCMEJGRjM2NjQ3Njc5RjBD QTc4MUU1MjAeFw0yNjA3MjQxNDM3MzZaFw0yNjA3MjUxODE3MzZaMDMxMTAvBgNV BAMTKENBNDlDNTM5OTA0MDgyMkM4NjI2QUMwNzVGRkY2RDdCM0I5QUU3NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrm9TUzXBrCZTYGfc/TEi0gGPg wrLwTxjklMAcpz3dHvlZr8aWyROothq5tH9JMdtAcIk/T4h9VygaRLh99ajHUho/ QvZeMHVFf38M0ioo/UIlC8OzU3cECUaMCWuwb8u3iClLFHpnWn5wC7Nf217nMmUY wucu+vlm2FjMWj0i8kqJVDsZq5EcJ7ujP1OAXSIe+9bzBt4Bie3DFRgCp1HzTxsK MzcmNdlWrwn2DqhSpyOyJpkmFpQpurFp6REFGclw84D0IZ2kFpFgMtsDPuM4EDmU biJ1yUorQjZpDhM0J9+cQDR7qRdunsMcPzHVfTEQoPT+HbaRs+kJ0DAJJoIPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyknFOZBAgiyGJqwHX/9tezua510wHwYDVR0j BBgwFoAUJwLsJZUVwJYLC/82ZHZ58Mp4HlIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmM1ODY3ZDgtM2Q2Zi00ODE2LWI4NGYtZmRkNWM1MDJiNjM0LzAvMjcwMkVDMjU5 NTE1QzA5NjBCMEJGRjM2NjQ3Njc5RjBDQTc4MUU1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNzAyRUMyNTk1MTVDMDk2MEIwQkZGMzY2NDc2NzlGMENBNzgx RTUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmM1ODY3ZDgtM2Q2Zi00ODE2LWI4 NGYtZmRkNWM1MDJiNjM0LzAvMjcwMkVDMjU5NTE1QzA5NjBCMEJGRjM2NjQ3Njc5 RjBDQTc4MUU1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALbJ8OWosSFK3zIaBgK7X9DTTwaENR3Gyhg8 Nkq80Rr1qePdMczYuMBRPZBnfw7uuQXZxbFH6CtShCRbaGw+ctEdxTG70ffz7EMg ie4wrtulEQpX4X9cK2YhHOHhjTKhjXRXD4K5hZgWH0oljy8oXVLy3mUu8aIggnnK v29h/EQI9BAPVxyA+CzD1boG/af02atNdxaJ5lRqYGn5uaolKTfkScADeeCqL7Vk Ldk2Xp2SEcDix+QckXN7viUVOR74Kch4jidz0jVcZZ8tPWWCVRi5g6oRO32339M3 /x/BClsKzR8e9atbmOd26l4NMhqdesjRwgRlGrZA8rnjcrfEmKA= -----END CERTIFICATE-----Generated at Fri Jul 24 21:33:42 2026 by rpki-client