$ rpki-client -vvf rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft File: 2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft (raw, json) Hash identifier: N2CcfJI55GPiFR8fU5b4lHVjQ32DwH02a8qR+6Jfqrc= Subject key identifier: F0:08:B2:AE:20:D8:E4:D8:09:BE:AA:CB:75:2F:14:A4:5B:46:37:E5 Authority key identifier: 2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA Certificate issuer: /CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA Certificate serial: 1BA03EAE879A3BE2A40129374D564D95210DE9FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 10:47:36 +0000 Manifest this update: Fri 24 Jul 2026 10:42:36 +0000 Manifest next update: Sat 25 Jul 2026 13:28:36 +0000 Files and hashes: 1: 3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa (hash: Jv5U5LGovEDFBhrf2yN8LsratIXrB4UcO/MW+FaftYc=) 2: 2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl (hash: h2bZwvAysIb5RYZcV71P0Eg/lrcI8VncaYAh/x/tpjs=) 3: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: eNG7+LqFPcA2X6MnUSyw57FaBVmmkZ9qB88jQfVFgQw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a0:3e:ae:87:9a:3b:e2:a4:01:29:37:4d:56:4d:95:21:0d:e9:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA Validity Not Before: Jul 24 10:42:36 2026 GMT Not After : Jul 25 13:28:36 2026 GMT Subject: CN=F008B2AE20D8E4D809BEAACB752F14A45B4637E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d2:d2:5e:27:2f:85:2f:57:0f:e9:40:50:28: 97:60:0e:3e:90:69:ea:02:5a:a6:89:57:27:31:ae: a4:79:9a:16:3c:40:ad:aa:89:92:c6:e2:8a:7e:c6: d7:ff:be:21:88:28:b7:7b:90:d2:8b:e4:6a:cd:9e: 8c:c6:f6:2a:e9:66:b3:de:18:64:a4:48:8a:ac:4e: c3:d6:a6:75:0d:da:0a:ab:60:a7:6d:66:4d:2f:94: 20:52:4d:ce:04:1c:63:5d:c5:eb:cc:dc:9e:fd:ad: 87:fb:6a:05:20:75:6b:0c:5e:fb:20:61:87:ee:06: f2:06:41:cc:e8:bd:ee:8e:44:4d:8b:36:11:e6:e7: 15:9f:f6:f8:50:4c:46:75:e6:7a:07:39:46:d6:fe: cb:cd:1b:ff:3d:c4:ef:bc:49:80:fd:4b:4a:c6:44: 5a:9d:ac:04:c2:a1:f7:54:60:13:61:72:4e:5e:48: fc:1b:f6:e2:36:76:df:04:ae:d1:7a:9b:e2:be:3a: fc:46:c8:4e:a2:a7:de:11:73:0c:82:f2:89:74:3a: 01:bc:42:6c:d4:2d:78:23:64:09:4c:5d:c4:31:33: 57:6d:ab:0a:0d:33:1a:e4:d7:74:4b:5a:24:41:76: 07:ff:f6:b5:ac:8f:c5:8c:8a:11:78:69:c9:40:79: ab:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:08:B2:AE:20:D8:E4:D8:09:BE:AA:CB:75:2F:14:A4:5B:46:37:E5 X509v3 Authority Key Identifier: keyid:2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:35:1d:32:98:5a:9a:1f:65:9d:64:be:ed:ef:47:ea:11:a6: 66:c8:0f:d8:9b:2b:3c:94:e7:1e:99:32:db:0d:e2:31:03:ce: 22:dd:33:42:80:51:ba:8d:c9:c9:b7:f2:18:d0:78:f9:6a:e1: 54:7c:1b:d0:95:3e:d4:5d:c8:8b:22:ef:01:c2:a0:12:66:d3: 4c:f5:d0:43:1e:7c:f4:6b:89:18:84:b2:43:d5:54:ce:89:10: 8e:74:f6:16:1a:bc:5e:3c:e9:b5:e5:65:94:18:19:af:d8:c9: 54:0c:08:73:5f:bf:47:a3:7d:b0:e2:37:fe:c3:46:4d:37:0a: 95:8a:31:94:62:4e:2d:d0:99:bb:67:7f:4c:ea:88:1e:aa:89: 7f:8e:ac:d0:95:32:fc:82:44:39:3d:07:03:0d:43:27:01:96: e4:ae:38:dc:ad:53:85:4f:9e:10:76:2f:65:63:2d:8d:e2:6a: a2:76:0d:c6:28:be:41:45:ae:79:bf:5b:1a:94:87:87:34:1d: 6a:3c:74:ed:44:37:e4:2c:bb:fe:23:72:02:c4:73:08:ae:93: 44:2f:7a:d0:dd:f4:4d:2b:04:dc:bd:b8:38:38:6e:db:38:f1: 29:02:05:60:d1:7c:39:a2:2b:41:ee:65:0c:41:62:01:4b:0d: 24:8f:4b:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG6A+roeaO+KkASk3TVZNlSEN6fswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE3RkI4MDE2REEwMDBBOUQxMEM5ODA5QzQ0RURFMkU5 RkRBQjZGQTAeFw0yNjA3MjQxMDQyMzZaFw0yNjA3MjUxMzI4MzZaMDMxMTAvBgNV BAMTKEYwMDhCMkFFMjBEOEU0RDgwOUJFQUFDQjc1MkYxNEE0NUI0NjM3RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0tJeJy+FL1cP6UBQKJdgDj6Q aeoCWqaJVycxrqR5mhY8QK2qiZLG4op+xtf/viGIKLd7kNKL5GrNnozG9irpZrPe GGSkSIqsTsPWpnUN2gqrYKdtZk0vlCBSTc4EHGNdxevM3J79rYf7agUgdWsMXvsg YYfuBvIGQczove6ORE2LNhHm5xWf9vhQTEZ15noHOUbW/svNG/89xO+8SYD9S0rG RFqdrATCofdUYBNhck5eSPwb9uI2dt8ErtF6m+K+OvxGyE6ip94RcwyC8ol0OgG8 QmzULXgjZAlMXcQxM1dtqwoNMxrk13RLWiRBdgf/9rWsj8WMihF4aclAeauVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8AiyriDY5NgJvqrLdS8UpFtGN+UwHwYDVR0j BBgwFoAUKn+4AW2gAKnRDJgJxE7eLp/atvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NhMmUwZGItZTI5My00MWM1LTg1ODMtMzgwMTU3NTg0MjFjLzAvMkE3RkI4MDE2 REEwMDBBOUQxMEM5ODA5QzQ0RURFMkU5RkRBQjZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTdGQjgwMTZEQTAwMEE5RDEwQzk4MDlDNDRFREUyRTlGREFC NkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvMkE3RkI4MDE2REEwMDBBOUQxMEM5ODA5QzQ0RURF MkU5RkRBQjZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEo1HTKYWpofZZ1kvu3vR+oRpmbID9ibKzyU 5x6ZMtsN4jEDziLdM0KAUbqNycm38hjQePlq4VR8G9CVPtRdyIsi7wHCoBJm00z1 0EMefPRriRiEskPVVM6JEI509hYavF486bXlZZQYGa/YyVQMCHNfv0ejfbDiN/7D Rk03CpWKMZRiTi3Qmbtnf0zqiB6qiX+OrNCVMvyCRDk9BwMNQycBluSuONytU4VP nhB2L2VjLY3iaqJ2DcYovkFFrnm/WxqUh4c0HWo8dO1EN+Qsu/4jcgLEcwiuk0Qv etDd9E0rBNy9uDg4bts48SkCBWDRfDmiK0HuZQxBYgFLDSSPS1Q= -----END CERTIFICATE-----Generated at Fri Jul 24 18:02:34 2026 by rpki-client