$ rpki-client -vvf rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft File: 2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft (raw, json) Hash identifier: Xb6IWPOb5GDww99Vu/cB7f9osp0XTD6X7O5DtkU4aS4= Subject key identifier: D2:AB:0E:81:BF:D2:7F:AB:35:0B:4E:5D:FA:78:1E:48:58:06:28:2B Authority key identifier: 2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32 Certificate issuer: /CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32 Certificate serial: 34FA0C390395561EE8C4B2123CEEB3997209C7D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 23:13:13 +0000 Manifest this update: Thu 23 Jul 2026 23:08:13 +0000 Manifest next update: Sat 25 Jul 2026 01:22:13 +0000 Files and hashes: 1: 3130332e35322e36302e302f32342d3234203d3e20313339343237.roa (hash: oRYTuCJLLdMWXGYdD1e1WCx/FrIV0BiHCyH2sk8DrtM=) 2: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: rpaRQ6pLcg3h8lZWS5mZP3KVaWJuOAbOO/JXcmWKPAY=) 3: 3130332e35322e36302e302f32332d3233203d3e20313339343237.roa (hash: wZpRBXgVxARx5THQhkidt3uYEJCBivcYi7zf6PFHOe8=) 4: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: Ks9YnRvxTe5fupbuzzjnQ7H1k8qTkpLLIojCNDLV9tI=) 5: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: gQZiPSYPZragbcbOQFwUKBcBf5Wr0XRio1UQ/GfXKcY=) 6: 2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl (hash: Eqb50Xa6qXUkj4ruVOjPEtXeoCX4IqdJpc3q0bFr/fQ=) 7: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: WTrF0cDS2UOT2PvqICS4rHLAPEa2DituaEKy6TilvQo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:fa:0c:39:03:95:56:1e:e8:c4:b2:12:3c:ee:b3:99:72:09:c7:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32 Validity Not Before: Jul 23 23:08:13 2026 GMT Not After : Jul 25 01:22:13 2026 GMT Subject: CN=D2AB0E81BFD27FAB350B4E5DFA781E485806282B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c6:dc:c4:67:2c:50:fe:31:61:58:dd:36:8b: 33:74:be:f9:54:59:8e:fd:de:11:8c:ea:de:eb:ae: 28:4d:e1:3b:fc:e5:76:e8:24:95:d0:11:f9:54:1d: 6a:48:ad:50:aa:e0:c3:c8:74:9c:30:51:e6:ac:59: 87:b9:35:16:98:63:aa:07:85:36:94:59:e5:ad:90: 91:b2:cf:ec:f0:8c:ee:f2:67:ae:56:a8:65:ca:99: 8d:e8:74:ee:56:d4:55:3a:1a:01:12:4d:40:43:fc: 35:92:aa:88:04:03:f9:ed:ed:18:3c:25:d6:00:bc: c5:95:22:9d:f3:a5:94:98:de:93:4c:ae:c1:ca:5f: 81:8d:f0:f9:79:b5:83:ec:d6:d2:59:d3:5e:2e:da: df:dc:f3:13:9e:8c:02:b6:2c:34:35:bd:c7:a8:d0: 94:ff:18:11:0b:fd:8c:d8:6b:b3:cc:0a:88:ed:12: 0b:15:e9:e3:d4:79:75:cf:65:a6:b9:c4:a0:56:29: 05:3f:cc:f6:89:1f:f3:22:51:ed:d8:c0:33:5e:06: ba:50:25:16:e0:0b:d1:43:88:79:83:d7:c3:95:ed: f6:1f:58:13:15:7f:7d:98:86:1b:8b:e0:13:4b:5b: 6d:b9:0a:0f:51:a8:25:9a:12:1d:cd:f8:b1:a9:a8: db:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AB:0E:81:BF:D2:7F:AB:35:0B:4E:5D:FA:78:1E:48:58:06:28:2B X509v3 Authority Key Identifier: keyid:2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:51:e0:c0:a1:18:f4:20:25:87:24:7d:82:20:7a:21:0f:13: a4:bd:e5:fa:da:87:fc:1e:11:df:ea:55:7c:1c:ca:bc:b8:87: 7f:cd:89:6e:34:56:f7:8d:52:78:27:6a:d8:de:9b:da:1a:ce: a2:59:17:92:d0:7a:97:52:6f:15:25:5e:10:d8:fd:1d:0e:ff: c2:4e:15:9e:c1:ac:14:84:9b:cf:ea:9f:c8:21:fa:1f:32:6b: fd:5f:39:2b:aa:34:4e:bd:f4:8a:ca:69:f0:5a:6f:56:a4:c8: 35:14:be:2b:f3:3f:99:67:01:e2:88:cb:7c:c6:1c:2b:80:b3: ff:4a:07:4b:59:34:6f:ff:f1:e9:dd:66:ff:50:2d:b6:e9:ee: 5d:44:42:a3:53:82:dc:16:32:79:65:71:48:77:58:bd:31:2d: c1:96:9e:de:c4:09:7f:9c:e4:6a:1f:36:11:d9:13:72:bf:b9: 38:89:50:37:09:b6:60:70:8e:08:d2:65:c3:60:eb:20:95:e8: 4f:78:21:d3:11:73:99:bf:ae:60:ba:9a:84:f6:0e:07:ac:39: 05:d3:52:06:44:91:ee:d9:cf:62:60:81:ba:4e:f6:75:0a:a9: 1c:47:ba:20:93:c4:f9:49:7b:37:86:4d:e7:af:47:3a:8d:c2: d7:dd:b9:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNPoMOQOVVh7oxLISPO6zmXIJx9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCRDgxMjk1RUEzRkEzODY3MDgyMDcyRDFCREU0MUNC RkIzRkIzMjAeFw0yNjA3MjMyMzA4MTNaFw0yNjA3MjUwMTIyMTNaMDMxMTAvBgNV BAMTKEQyQUIwRTgxQkZEMjdGQUIzNTBCNEU1REZBNzgxRTQ4NTgwNjI4MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOxtzEZyxQ/jFhWN02izN0vvlU WY793hGM6t7rrihN4Tv85XboJJXQEflUHWpIrVCq4MPIdJwwUeasWYe5NRaYY6oH hTaUWeWtkJGyz+zwjO7yZ65WqGXKmY3odO5W1FU6GgESTUBD/DWSqogEA/nt7Rg8 JdYAvMWVIp3zpZSY3pNMrsHKX4GN8Pl5tYPs1tJZ014u2t/c8xOejAK2LDQ1vceo 0JT/GBEL/YzYa7PMCojtEgsV6ePUeXXPZaa5xKBWKQU/zPaJH/MiUe3YwDNeBrpQ JRbgC9FDiHmD18OV7fYfWBMVf32YhhuL4BNLW225Cg9RqCWaEh3N+LGpqNufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0qsOgb/Sf6s1C05d+ngeSFgGKCswHwYDVR0j BBgwFoAULL2BKV6j+jhnCCBy0b3kHL+z+zIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDYxYjhjY2MtNmMyMi00MjRlLTk2MTQtOGFiOGFkMjg4NDljLzAvMkNCRDgxMjk1 RUEzRkEzODY3MDgyMDcyRDFCREU0MUNCRkIzRkIzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0JEODEyOTVFQTNGQTM4NjcwODIwNzJEMUJERTQxQ0JGQjNG QjMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDYxYjhjY2MtNmMyMi00MjRlLTk2 MTQtOGFiOGFkMjg4NDljLzAvMkNCRDgxMjk1RUEzRkEzODY3MDgyMDcyRDFCREU0 MUNCRkIzRkIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBR4MChGPQgJYckfYIgeiEPE6S95frah/we Ed/qVXwcyry4h3/NiW40VveNUngnatjem9oazqJZF5LQepdSbxUlXhDY/R0O/8JO FZ7BrBSEm8/qn8gh+h8ya/1fOSuqNE699IrKafBab1akyDUUvivzP5lnAeKIy3zG HCuAs/9KB0tZNG//8endZv9QLbbp7l1EQqNTgtwWMnllcUh3WL0xLcGWnt7ECX+c 5GofNhHZE3K/uTiJUDcJtmBwjgjSZcNg6yCV6E94IdMRc5m/rmC6moT2DgesOQXT UgZEke7Zz2JggbpO9nUKqRxHuiCTxPlJezeGTeevRzqNwtfdubk= -----END CERTIFICATE-----Generated at Fri Jul 24 11:53:19 2026 by rpki-client