$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft File: 2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft (raw, json) Hash identifier: yOtaOKHGgsPhtcnT2IRc2i3OqVBkoH5sfp5nHpBdqng= Subject key identifier: A6:F6:B6:8E:46:51:E0:14:74:66:DB:F5:E6:80:CE:B0:BE:C5:42:F5 Authority key identifier: 2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3 Certificate issuer: /CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3 Certificate serial: 289C9D60473E23DA45B2F86DB7A676DE21456040 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 05:21:01 +0000 Manifest this update: Fri 24 Jul 2026 05:16:01 +0000 Manifest next update: Sat 25 Jul 2026 07:09:01 +0000 Files and hashes: 1: 2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl (hash: PAgeNKBL1E338h+lrpXaQekSyvEvrrAL2F6DwiGLZr0=) 2: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: Fc1cIIy7yp6fwFNt9JFBozT8wGm732U+MIRuBDuRJKc=) 3: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: ba9T7QeA28DMOyzLlfoljNenw5738a58LQmu3hf+TMU=) 4: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: uD4zXPlmJIJvDYKeBCRvwCSXSW9r9c2Pd73kp0tq76c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:9c:9d:60:47:3e:23:da:45:b2:f8:6d:b7:a6:76:de:21:45:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3 Validity Not Before: Jul 24 05:16:01 2026 GMT Not After : Jul 25 07:09:01 2026 GMT Subject: CN=A6F6B68E4651E0147466DBF5E680CEB0BEC542F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b3:75:32:86:e6:c3:c2:1e:b6:2c:ba:6c:7b: 4e:00:af:cf:42:49:68:6b:fe:66:f9:f8:51:eb:5d: d0:74:2a:d4:04:1d:b6:71:73:97:98:65:c7:45:ae: 3f:a4:8a:ee:39:88:ed:75:04:56:e9:a9:d7:51:a9: 20:69:9d:09:cc:a4:c2:65:01:17:ba:02:64:9f:a0: be:7a:92:03:eb:c6:d3:c5:03:77:79:3c:9c:d1:d1: 44:10:fa:40:21:d1:39:96:37:47:72:01:f7:9e:0a: 1f:82:96:eb:f7:d1:69:a3:33:9d:e3:b2:91:0a:cd: 0b:e5:e9:b0:9a:b7:d3:58:0c:a7:db:01:3c:0e:1e: a1:f2:98:98:57:fd:d4:61:2f:b3:36:ae:35:26:68: 6c:f6:cc:76:7e:1f:fd:53:77:76:b3:25:6d:83:ca: 06:7d:1e:51:65:a9:85:58:8c:29:f1:9d:40:ef:d5: 08:2c:a8:bc:83:56:9e:71:3c:6a:70:17:dc:24:ee: f2:2e:06:e8:aa:8b:f5:de:f2:dd:82:c4:8b:16:30: 81:74:e5:19:27:47:35:dd:c9:63:f6:25:d8:46:b6: 13:5b:e9:31:d6:54:08:ab:93:b3:61:f4:21:ac:e5: 71:c9:8c:45:f1:77:6c:e5:87:e0:cf:30:4a:45:dd: 90:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F6:B6:8E:46:51:E0:14:74:66:DB:F5:E6:80:CE:B0:BE:C5:42:F5 X509v3 Authority Key Identifier: keyid:2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:44:35:c1:ef:51:63:c8:35:14:64:df:79:9d:7b:23:76:fb: db:87:23:8a:89:2e:20:22:6e:c8:c5:23:65:44:00:7c:84:4b: 7a:20:d7:e1:d4:b6:d7:18:24:bf:c5:0c:c6:30:d1:43:8f:8b: a4:b9:17:fa:b4:7b:79:64:bd:d2:ff:63:f7:fb:a0:6d:7e:fa: 2c:b6:b2:09:5e:47:5b:a2:78:79:ed:44:7e:49:54:31:96:d9: f3:2e:db:e1:42:b8:ba:1f:51:b7:ac:29:90:ce:26:3c:7b:a5: 8f:5a:e3:4e:76:5e:f7:04:ca:76:38:2d:3f:b8:70:5c:28:12: 1f:4e:b0:87:2e:b6:b4:79:21:42:b8:8b:e5:be:62:a1:18:d7: 9b:40:13:d0:cd:86:12:4f:af:62:1f:4f:b0:bb:fe:92:a5:8b: e2:d2:1d:6b:8d:fd:7c:d6:bf:d3:53:a7:c6:13:af:64:33:1f: b9:f6:5f:4c:44:72:1a:43:ff:2f:d9:67:5f:5a:77:75:df:04: f4:1a:46:59:ee:f8:c1:0a:0a:f9:25:6d:eb:d8:62:7b:eb:c7: fa:5c:7a:a1:2e:c3:35:6d:62:45:de:36:4a:bb:8b:80:ca:a2: 7b:51:23:37:c7:a9:6f:00:26:36:77:6d:80:c0:c3:b9:32:49: b5:4f:c8:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJydYEc+I9pFsvhtt6Z23iFFYEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZGOUQ1MkFEQzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3NzZE Q0I0MzNCMzAeFw0yNjA3MjQwNTE2MDFaFw0yNjA3MjUwNzA5MDFaMDMxMTAvBgNV BAMTKEE2RjZCNjhFNDY1MUUwMTQ3NDY2REJGNUU2ODBDRUIwQkVDNTQyRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQs3UyhubDwh62LLpse04Ar89C SWhr/mb5+FHrXdB0KtQEHbZxc5eYZcdFrj+kiu45iO11BFbpqddRqSBpnQnMpMJl ARe6AmSfoL56kgPrxtPFA3d5PJzR0UQQ+kAh0TmWN0dyAfeeCh+Cluv30WmjM53j spEKzQvl6bCat9NYDKfbATwOHqHymJhX/dRhL7M2rjUmaGz2zHZ+H/1Td3azJW2D ygZ9HlFlqYVYjCnxnUDv1QgsqLyDVp5xPGpwF9wk7vIuBuiqi/Xe8t2CxIsWMIF0 5RknRzXdyWP2JdhGthNb6THWVAirk7Nh9CGs5XHJjEXxd2zlh+DPMEpF3ZBFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpva2jkZR4BR0Ztv15oDOsL7FQvUwHwYDVR0j BBgwFoAUL/nVKtx3f6POUar5RIuHdty0M7MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2MwNzVlZjYtYTI1MS00N2RkLThkZGEtY2FkZmY0OTdhN2U1LzAvMkZGOUQ1MkFE Qzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3NzZEQ0I0MzNCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkY5RDUyQURDNzc3RkEzQ0U1MUFBRjk0NDhCODc3NkRDQjQz M0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMkZGOUQ1MkFEQzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3 NzZEQ0I0MzNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZENcHvUWPINRRk33mdeyN2+9uHI4qJLiAi bsjFI2VEAHyES3og1+HUttcYJL/FDMYw0UOPi6S5F/q0e3lkvdL/Y/f7oG1++iy2 sgleR1uieHntRH5JVDGW2fMu2+FCuLofUbesKZDOJjx7pY9a4052XvcEynY4LT+4 cFwoEh9OsIcutrR5IUK4i+W+YqEY15tAE9DNhhJPr2IfT7C7/pKli+LSHWuN/XzW v9NTp8YTr2QzH7n2X0xEchpD/y/ZZ19ad3XfBPQaRlnu+MEKCvklbevYYnvrx/pc eqEuwzVtYkXeNkq7i4DKontRIzfHqW8AJjZ3bYDAw7kySbVPyHQ= -----END CERTIFICATE-----Generated at Fri Jul 24 09:58:19 2026 by rpki-client