$ rpki-client -vvf rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft File: 2CFE6C04191B28EDA13984F5549231D1840AACEC.mft (raw, json) Hash identifier: yaG8bjlokzFs8XvsgWU9N7rWvjNdTWXe6IHX5mTShGI= Subject key identifier: 71:24:A4:D6:23:47:86:69:6C:24:B0:DB:34:01:20:AC:4B:1D:46:8F Authority key identifier: 2C:FE:6C:04:19:1B:28:ED:A1:39:84:F5:54:92:31:D1:84:0A:AC:EC Certificate issuer: /CN=2CFE6C04191B28EDA13984F5549231D1840AACEC Certificate serial: 7207FB7654E69C40B596A262BBAC2E6B9100E1D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:39:11 +0000 Manifest this update: Thu 23 Jul 2026 19:34:11 +0000 Manifest next update: Fri 24 Jul 2026 20:08:11 +0000 Files and hashes: 1: 2CFE6C04191B28EDA13984F5549231D1840AACEC.crl (hash: rXKAab2rB/m0XWZIl+ij/gbYzlGNN5QSiYaZB5vzVx4=) 2: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: dFGJI1S/FQoqvRu6ehr7n/qth/1SKexx3mS7zWvVonM=) 3: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: z7Lqa5CkkfTSXbCBFY/k+Fz/ISz+SJw0HySx4HiNPMc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.crl rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:07:fb:76:54:e6:9c:40:b5:96:a2:62:bb:ac:2e:6b:91:00:e1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFE6C04191B28EDA13984F5549231D1840AACEC Validity Not Before: Jul 23 19:34:11 2026 GMT Not After : Jul 24 20:08:11 2026 GMT Subject: CN=7124A4D6234786696C24B0DB340120AC4B1D468F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ba:a0:2a:63:af:76:40:97:12:b9:0d:a8:2e: 43:21:cb:53:e6:72:57:c9:0e:95:4b:85:ea:bd:f9: 74:92:90:6f:8c:61:7c:d8:d0:f6:93:4e:20:1d:1a: f3:cb:bb:24:69:7f:a1:af:11:6b:7c:cf:5d:41:5d: b3:c5:2e:bb:e8:c0:dd:20:21:aa:33:3d:02:51:f6: 8a:53:f6:0b:fc:eb:31:42:6e:bb:ff:66:aa:b8:ae: 67:bb:01:59:00:d7:db:3e:b5:95:10:34:75:54:4e: 54:89:67:91:db:cd:af:72:13:78:18:da:0c:7d:bd: b9:2a:9e:16:1d:4f:a9:28:9c:ed:ba:27:ec:5b:72: 7f:59:97:c9:a4:d7:29:82:7a:46:3a:6c:22:b3:c2: 0f:8e:7b:a3:43:13:73:3c:9e:4f:20:ba:56:ef:bd: 1b:7e:30:57:f3:97:c4:21:99:d2:27:58:d8:fc:b0: cd:2d:c2:32:66:9f:eb:b0:37:60:a5:fb:f3:82:1a: 37:e6:1c:27:4f:49:c8:1a:69:0a:75:29:ae:10:45: bb:cb:7c:fe:7c:40:ad:ee:8f:66:7d:c0:49:a1:14: fb:b5:1b:f8:f0:e9:ff:f4:44:78:6f:a5:82:6f:2d: 63:16:25:c0:61:82:d0:bd:e9:b3:43:a4:8f:6d:29: fa:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:24:A4:D6:23:47:86:69:6C:24:B0:DB:34:01:20:AC:4B:1D:46:8F X509v3 Authority Key Identifier: keyid:2C:FE:6C:04:19:1B:28:ED:A1:39:84:F5:54:92:31:D1:84:0A:AC:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:dc:e8:23:93:e8:86:11:89:1c:5b:84:92:10:e7:7d:8a:ab: e2:fa:eb:98:70:bb:74:86:73:0b:78:5c:61:6e:29:09:38:83: 88:30:18:6e:a3:e3:8d:eb:ba:69:91:c6:f2:58:db:39:03:4a: 68:ca:ae:08:92:a9:54:44:08:7c:d3:36:93:8c:63:be:05:cc: 56:f8:09:a7:05:3a:c1:3a:8f:72:d1:d7:db:7d:d2:0a:19:5c: 38:40:ed:89:73:97:bb:cd:d7:45:5e:d2:80:d2:85:91:1b:40: 47:d1:3a:a9:90:2d:2f:8e:1b:27:8c:e2:b6:c3:75:06:81:23: e5:f2:ae:a5:ca:4f:3b:55:56:9d:e7:dd:19:52:c8:8d:2d:ac: f6:f3:7a:68:96:17:f7:b4:ed:36:b5:ce:aa:c5:22:a1:eb:54: 6f:f0:d8:7d:52:14:13:7f:b1:d4:59:07:f8:7f:a4:1d:72:96: a4:55:5c:ff:30:45:d6:bc:48:eb:e8:eb:c9:06:62:18:80:ae: 2c:56:83:3e:5b:23:ca:a5:e5:81:9a:ea:7f:34:2e:ca:13:14: 9f:b7:85:6f:ef:22:00:11:1e:bc:83:86:f0:60:2b:8b:9e:d9: 2c:29:11:84:60:be:20:c4:d3:c5:4f:52:c7:be:46:aa:ca:05: 96:0f:6b:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcgf7dlTmnEC1lqJiu6wua5EA4dAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRTZDMDQxOTFCMjhFREExMzk4NEY1NTQ5MjMxRDE4 NDBBQUNFQzAeFw0yNjA3MjMxOTM0MTFaFw0yNjA3MjQyMDA4MTFaMDMxMTAvBgNV BAMTKDcxMjRBNEQ2MjM0Nzg2Njk2QzI0QjBEQjM0MDEyMEFDNEIxRDQ2OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDduqAqY692QJcSuQ2oLkMhy1Pm clfJDpVLheq9+XSSkG+MYXzY0PaTTiAdGvPLuyRpf6GvEWt8z11BXbPFLrvowN0g IaozPQJR9opT9gv86zFCbrv/Zqq4rme7AVkA19s+tZUQNHVUTlSJZ5Hbza9yE3gY 2gx9vbkqnhYdT6konO26J+xbcn9Zl8mk1ymCekY6bCKzwg+Oe6NDE3M8nk8gulbv vRt+MFfzl8QhmdInWNj8sM0twjJmn+uwN2Cl+/OCGjfmHCdPScgaaQp1Ka4QRbvL fP58QK3uj2Z9wEmhFPu1G/jw6f/0RHhvpYJvLWMWJcBhgtC96bNDpI9tKfrpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcSSk1iNHhmlsJLDbNAEgrEsdRo8wHwYDVR0j BBgwFoAULP5sBBkbKO2hOYT1VJIx0YQKrOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU5MDhiODMtN2Y0NC00NmUwLTg1MzUtNmZiODRiNTlkNThhLzAvMkNGRTZDMDQx OTFCMjhFREExMzk4NEY1NTQ5MjMxRDE4NDBBQUNFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0ZFNkMwNDE5MUIyOEVEQTEzOTg0RjU1NDkyMzFEMTg0MEFB Q0VDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU5MDhiODMtN2Y0NC00NmUwLTg1 MzUtNmZiODRiNTlkNThhLzAvMkNGRTZDMDQxOTFCMjhFREExMzk4NEY1NTQ5MjMx RDE4NDBBQUNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvc6COT6IYRiRxbhJIQ532Kq+L665hwu3SG cwt4XGFuKQk4g4gwGG6j443rummRxvJY2zkDSmjKrgiSqVRECHzTNpOMY74FzFb4 CacFOsE6j3LR19t90goZXDhA7Ylzl7vN10Ve0oDShZEbQEfROqmQLS+OGyeM4rbD dQaBI+XyrqXKTztVVp3n3RlSyI0trPbzemiWF/e07Ta1zqrFIqHrVG/w2H1SFBN/ sdRZB/h/pB1ylqRVXP8wRda8SOvo68kGYhiArixWgz5bI8ql5YGa6n80LsoTFJ+3 hW/vIgARHryDhvBgK4ue2SwpEYRgviDE08VPUse+RqrKBZYPa60= -----END CERTIFICATE-----Generated at Fri Jul 24 05:25:22 2026 by rpki-client