$ rpki-client -vvf rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft File: 2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft (raw, json) Hash identifier: BVIJFG5em5+Z8puLIaSP7omT70jdqykyKH6aXm9OJ68= Subject key identifier: 60:08:1B:00:08:8E:B4:3E:67:47:A5:2C:C8:09:12:28:6E:6E:B7:33 Authority key identifier: 2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA Certificate issuer: /CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA Certificate serial: 2DE81F62727F78CD4DD8E605A1A2D46975911D77 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 15:59:27 +0000 Manifest this update: Thu 23 Jul 2026 15:54:27 +0000 Manifest next update: Fri 24 Jul 2026 18:46:27 +0000 Files and hashes: 1: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: eNG7+LqFPcA2X6MnUSyw57FaBVmmkZ9qB88jQfVFgQw=) 2: 2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl (hash: T1TyIg2/wf9Zz6Jr3hUXNLB8j49yG9RnkwmCA8EyVWs=) 3: 3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa (hash: Jv5U5LGovEDFBhrf2yN8LsratIXrB4UcO/MW+FaftYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e8:1f:62:72:7f:78:cd:4d:d8:e6:05:a1:a2:d4:69:75:91:1d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA Validity Not Before: Jul 23 15:54:27 2026 GMT Not After : Jul 24 18:46:27 2026 GMT Subject: CN=60081B00088EB43E6747A52CC80912286E6EB733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f9:6e:5a:5d:9e:4d:5b:0a:42:95:72:81:17: b3:9d:bc:71:e7:90:9c:bc:d2:b9:11:50:e8:fb:44: c1:e0:ee:d1:ce:3a:d4:34:d8:55:44:53:8e:a7:94: 4d:a7:3f:57:60:13:5b:10:b3:e1:ca:32:28:14:05: db:a5:14:2e:81:60:06:45:d6:43:07:08:27:de:16: 6b:97:e0:db:14:82:bf:b1:03:ae:4a:cc:c5:18:77: a1:b7:57:e6:28:b2:e5:62:c6:67:e9:e9:fa:c1:9f: 80:cb:95:2a:8e:55:4f:b4:a5:96:be:84:7f:fb:dd: 9f:a0:80:cf:a7:0e:ea:d9:49:50:98:a3:47:e4:51: f4:ab:6d:d8:e8:9e:13:7d:7c:f0:88:fb:28:85:a1: c1:84:2b:28:df:46:74:8e:a2:ed:0e:61:d0:b1:fa: 35:55:7b:4c:3e:46:10:fa:63:48:ec:b6:e4:43:74: b6:f0:96:b8:c4:a5:01:f4:51:c7:bd:63:4c:a9:2d: 28:68:bf:70:54:0f:22:c7:9a:a9:4b:9f:3f:f5:97: 4b:da:49:14:82:49:b1:c1:28:a9:7a:ac:12:ce:d6: 5c:01:05:ef:a8:84:34:81:50:fd:6a:1f:02:2b:e9: 36:00:29:42:50:16:66:78:84:b2:68:3d:02:da:27: 5b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:08:1B:00:08:8E:B4:3E:67:47:A5:2C:C8:09:12:28:6E:6E:B7:33 X509v3 Authority Key Identifier: keyid:2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:7f:a9:ad:d3:d8:94:23:33:a7:c8:b9:ce:49:9e:64:b0:b2: 69:a6:34:1a:ef:d8:c5:d0:24:73:95:18:32:cc:a4:c8:1b:c2: c9:4c:0f:21:88:fb:83:6e:2f:4a:a6:93:cb:9d:13:9c:b3:d8: f0:0c:5d:75:5f:c4:ee:df:d6:f0:ad:b7:56:82:d7:33:a9:a5: 62:1f:1e:46:03:db:82:6a:f7:e1:89:b1:3e:33:65:cc:8c:2d: f4:9e:79:7a:58:ba:b5:c2:27:86:ea:ce:04:c2:bd:91:44:08: bd:0f:b7:b7:47:e7:35:83:86:84:31:da:6e:a8:10:ae:98:a6: 14:a4:65:a1:54:5b:ee:31:ab:a0:41:48:dc:ad:db:15:62:0c: 85:7c:2c:41:5a:a3:49:86:5e:d0:07:ed:96:88:b8:1d:6d:d8: f2:f3:52:0a:93:21:e2:76:a4:5a:57:ac:cd:db:42:8d:3b:3f: c9:77:f5:dc:5f:6c:7c:b6:59:cc:63:28:4b:1f:c8:db:b7:45: d5:c7:18:b0:c4:23:4e:cb:76:f4:42:81:6c:b1:ec:81:8c:e0: 86:89:43:c5:86:84:65:be:6f:de:a2:3a:a7:ad:c9:34:76:20: 8b:e6:b5:6b:ea:5f:16:10:44:b0:fd:b9:43:4e:bc:7a:07:f4: 6f:3d:64:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULegfYnJ/eM1N2OYFoaLUaXWRHXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE3RkI4MDE2REEwMDBBOUQxMEM5ODA5QzQ0RURFMkU5 RkRBQjZGQTAeFw0yNjA3MjMxNTU0MjdaFw0yNjA3MjQxODQ2MjdaMDMxMTAvBgNV BAMTKDYwMDgxQjAwMDg4RUI0M0U2NzQ3QTUyQ0M4MDkxMjI4NkU2RUI3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU+W5aXZ5NWwpClXKBF7OdvHHn kJy80rkRUOj7RMHg7tHOOtQ02FVEU46nlE2nP1dgE1sQs+HKMigUBdulFC6BYAZF 1kMHCCfeFmuX4NsUgr+xA65KzMUYd6G3V+YosuVixmfp6frBn4DLlSqOVU+0pZa+ hH/73Z+ggM+nDurZSVCYo0fkUfSrbdjonhN9fPCI+yiFocGEKyjfRnSOou0OYdCx +jVVe0w+RhD6Y0jstuRDdLbwlrjEpQH0Uce9Y0ypLShov3BUDyLHmqlLnz/1l0va SRSCSbHBKKl6rBLO1lwBBe+ohDSBUP1qHwIr6TYAKUJQFmZ4hLJoPQLaJ1uJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYAgbAAiOtD5nR6UsyAkSKG5utzMwHwYDVR0j BBgwFoAUKn+4AW2gAKnRDJgJxE7eLp/atvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NhMmUwZGItZTI5My00MWM1LTg1ODMtMzgwMTU3NTg0MjFjLzAvMkE3RkI4MDE2 REEwMDBBOUQxMEM5ODA5QzQ0RURFMkU5RkRBQjZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTdGQjgwMTZEQTAwMEE5RDEwQzk4MDlDNDRFREUyRTlGREFC NkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvMkE3RkI4MDE2REEwMDBBOUQxMEM5ODA5QzQ0RURF MkU5RkRBQjZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5/qa3T2JQjM6fIuc5JnmSwsmmmNBrv2MXQ JHOVGDLMpMgbwslMDyGI+4NuL0qmk8udE5yz2PAMXXVfxO7f1vCtt1aC1zOppWIf HkYD24Jq9+GJsT4zZcyMLfSeeXpYurXCJ4bqzgTCvZFECL0Pt7dH5zWDhoQx2m6o EK6YphSkZaFUW+4xq6BBSNyt2xViDIV8LEFao0mGXtAH7ZaIuB1t2PLzUgqTIeJ2 pFpXrM3bQo07P8l39dxfbHy2WcxjKEsfyNu3RdXHGLDEI07LdvRCgWyx7IGM4IaJ Q8WGhGW+b96iOqetyTR2IIvmtWvqXxYQRLD9uUNOvHoH9G89ZN4= -----END CERTIFICATE-----Generated at Fri Jul 24 08:49:25 2026 by rpki-client