$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft File: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft (raw, json) Hash identifier: vbn0SvtzoR/qhwE8uyDrsfbeoGQsKkVAf7D0nNT1yKU= Subject key identifier: 93:FF:5D:28:F5:47:0B:0A:CD:8C:EF:8A:99:D0:82:02:F1:01:EE:EF Authority key identifier: 2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 Certificate issuer: /CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Certificate serial: 0DE5D32CB60E0B2EA57F92B26C212F7CAA295CC1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 20:14:44 +0000 Manifest this update: Thu 23 Jul 2026 20:09:44 +0000 Manifest next update: Fri 24 Jul 2026 20:17:44 +0000 Files and hashes: 1: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl (hash: KTaAVudariqpxZXWxOGVdgQxENbN2Izm8817vKF0t0s=) 2: 3130332e3133312e3130372e302f32342d3234203d3e20313338313139.roa (hash: cKDgVoSVAFZfl4hgrIHwI1J4tBbCiwmqXmahxpGLx8I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e5:d3:2c:b6:0e:0b:2e:a5:7f:92:b2:6c:21:2f:7c:aa:29:5c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Validity Not Before: Jul 23 20:09:44 2026 GMT Not After : Jul 24 20:17:44 2026 GMT Subject: CN=93FF5D28F5470B0ACD8CEF8A99D08202F101EEEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:35:06:a1:e3:9a:b3:78:67:cd:55:20:47:6e: e9:9d:b2:0d:1c:d1:ee:f1:7c:e6:04:c0:d9:05:52: 6b:38:cf:da:33:f9:a7:83:66:8e:fa:32:9b:73:b6: cf:d5:3e:29:2b:1b:0b:bf:9d:82:1c:14:3f:d2:71: 55:5d:39:81:a3:f8:0e:75:d3:ee:67:81:af:ba:b2: 31:2c:bf:5c:75:51:65:de:d7:b5:9b:a4:92:8e:7d: 78:2c:4f:9f:c8:9a:7d:9d:ba:25:34:01:c5:aa:8c: 10:c6:90:d4:7e:9c:d8:84:5b:ef:29:d2:fa:d3:3c: 5f:b2:d4:90:0a:72:c7:c5:1e:76:0b:43:20:4a:bf: 5b:96:69:b3:14:2f:54:0d:8b:61:7e:5e:f1:c7:8a: 2a:f0:16:a9:54:07:ba:b3:2f:74:a2:88:de:42:1c: df:46:14:b0:bb:65:0b:fb:5a:a8:a1:26:58:cf:49: 09:a0:d8:cf:81:8c:e3:c8:00:aa:1c:df:0d:62:f3: 1e:e4:06:db:bc:ff:b5:fd:5d:ea:cb:55:01:f2:5b: c2:13:0b:a2:9f:58:6c:51:7e:74:70:6f:d7:19:b8: 88:ee:f2:02:3d:d9:48:dc:6b:35:21:98:5d:32:bc: f9:19:43:53:45:de:89:94:b5:a4:16:39:08:b0:d4: 71:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FF:5D:28:F5:47:0B:0A:CD:8C:EF:8A:99:D0:82:02:F1:01:EE:EF X509v3 Authority Key Identifier: keyid:2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:23:a4:91:26:bb:44:ca:b5:11:b5:63:21:26:0a:d7:ee:5f: 02:eb:92:42:56:07:2a:b5:c6:4c:98:40:f6:35:6b:c5:0a:93: 1c:54:a5:ef:32:6c:e3:86:66:50:24:47:0f:3e:f2:71:61:79: 11:e6:94:8c:e1:93:69:33:5a:53:e9:4a:64:d2:e6:4f:07:ed: be:35:0f:e8:ba:26:85:45:be:56:52:d8:ba:9b:59:6d:a3:8b: 05:6f:6f:ce:f1:60:34:3b:35:bb:03:b9:0c:d9:d9:cc:87:b9: 46:2f:29:87:4b:53:2a:a4:58:6d:fb:0a:66:36:0b:ec:12:70: 0d:5b:1e:6d:49:b8:63:d9:ca:d8:ad:9f:ab:72:85:bd:13:71: 57:23:7a:73:65:24:e7:29:fe:1e:00:11:fd:db:37:ac:84:9c: 88:64:b4:08:d4:5f:ed:3b:d4:a4:3b:fa:a5:84:1b:07:1b:66: 50:08:3a:c9:e4:d0:7e:63:e0:39:cd:f2:ca:3a:bb:c1:51:9d: 05:3f:ec:f5:c3:69:fe:de:b3:cf:f4:bf:e7:9d:41:6f:a4:e4: 17:f3:ad:bc:1c:ff:82:90:fe:4c:cc:0e:67:14:0c:73:03:25: 71:e4:4c:93:41:d0:a7:7d:09:dc:a6:5f:95:64:83:66:f9:8e: 57:df:cb:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDeXTLLYOCy6lf5KybCEvfKopXMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFFMTRBQkJENTE2MUJBMENBREIzQzQwQzFGOURGQ0JD OUNGMzQ3MDAeFw0yNjA3MjMyMDA5NDRaFw0yNjA3MjQyMDE3NDRaMDMxMTAvBgNV BAMTKDkzRkY1RDI4RjU0NzBCMEFDRDhDRUY4QTk5RDA4MjAyRjEwMUVFRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJNQah45qzeGfNVSBHbumdsg0c 0e7xfOYEwNkFUms4z9oz+aeDZo76Mptzts/VPikrGwu/nYIcFD/ScVVdOYGj+A51 0+5nga+6sjEsv1x1UWXe17WbpJKOfXgsT5/Imn2duiU0AcWqjBDGkNR+nNiEW+8p 0vrTPF+y1JAKcsfFHnYLQyBKv1uWabMUL1QNi2F+XvHHiirwFqlUB7qzL3SiiN5C HN9GFLC7ZQv7WqihJljPSQmg2M+BjOPIAKoc3w1i8x7kBtu8/7X9XerLVQHyW8IT C6KfWGxRfnRwb9cZuIju8gI92UjcazUhmF0yvPkZQ1NF3omUtaQWOQiw1HHRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk/9dKPVHCwrNjO+KmdCCAvEB7u8wHwYDVR0j BBgwFoAUKuFKu9UWG6DK2zxAwfnfy8nPNHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkyNDM5NTAtM2ZkZi00OWFiLWJmZGMtZjU4NjQ1MzcwNGM2LzAvMkFFMTRBQkJE NTE2MUJBMENBREIzQzQwQzFGOURGQ0JDOUNGMzQ3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUUxNEFCQkQ1MTYxQkEwQ0FEQjNDNDBDMUY5REZDQkM5Q0Yz NDcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkyNDM5NTAtM2ZkZi00OWFiLWJm ZGMtZjU4NjQ1MzcwNGM2LzAvMkFFMTRBQkJENTE2MUJBMENBREIzQzQwQzFGOURG Q0JDOUNGMzQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8jpJEmu0TKtRG1YyEmCtfuXwLrkkJWByq1 xkyYQPY1a8UKkxxUpe8ybOOGZlAkRw8+8nFheRHmlIzhk2kzWlPpSmTS5k8H7b41 D+i6JoVFvlZS2LqbWW2jiwVvb87xYDQ7NbsDuQzZ2cyHuUYvKYdLUyqkWG37CmY2 C+wScA1bHm1JuGPZytitn6tyhb0TcVcjenNlJOcp/h4AEf3bN6yEnIhktAjUX+07 1KQ7+qWEGwcbZlAIOsnk0H5j4DnN8so6u8FRnQU/7PXDaf7es8/0v+edQW+k5Bfz rbwc/4KQ/kzMDmcUDHMDJXHkTJNB0Kd9CdymX5Vkg2b5jlffy6o= -----END CERTIFICATE-----Generated at Fri Jul 24 10:01:57 2026 by rpki-client