$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft File: 2FE1FA7D4DD3388355BABAD73020013D485C168C.mft (raw, json) Hash identifier: ZnGoSrrjlelegT+jiSkNG6IuivOaVAMFiFImlWIgFQo= Subject key identifier: CD:EF:C9:E7:6C:50:21:28:70:27:D9:BF:BE:6B:38:72:C9:90:88:B4 Authority key identifier: 2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C Certificate issuer: /CN=2FE1FA7D4DD3388355BABAD73020013D485C168C Certificate serial: 5D7956F03B53D02B867A9C12A4D11C614211D034 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 05:46:29 +0000 Manifest this update: Fri 24 Jul 2026 05:41:29 +0000 Manifest next update: Sat 25 Jul 2026 08:00:29 +0000 Files and hashes: 1: 2FE1FA7D4DD3388355BABAD73020013D485C168C.crl (hash: WAcdQ8qCV6ySiWt4n1Ge97WQ/ZOOZDHS/vsDVG+93O0=) 2: 3130332e39352e32332e302f32342d3234203d3e20313530353537.roa (hash: QUvsonqLXdsih84z12pFdTCBAMOMy8pmVg5n4B/zEOQ=) 3: 3130332e39352e32322e302f32332d3233203d3e20313530353537.roa (hash: aB7QEaSEcJTWbjfIxBku5UcRO6NDRrQsqaho45FCjZI=) 4: 3130332e39352e32322e302f32342d3234203d3e20313530353537.roa (hash: UmfUI05XEmk9hWgPXOd+povgJcvWbtg+6u6rN6Z8bBg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.crl rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:79:56:f0:3b:53:d0:2b:86:7a:9c:12:a4:d1:1c:61:42:11:d0:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FE1FA7D4DD3388355BABAD73020013D485C168C Validity Not Before: Jul 24 05:41:29 2026 GMT Not After : Jul 25 08:00:29 2026 GMT Subject: CN=CDEFC9E76C5021287027D9BFBE6B3872C99088B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2c:bf:ef:ec:0f:6d:f5:76:8a:0f:dd:aa:f3: bc:3c:05:b2:24:8a:27:cf:de:56:bd:ce:b0:d9:5b: a6:3a:fb:0f:24:13:e7:90:58:2c:e3:46:0a:fc:37: ca:09:a8:30:34:f9:83:17:db:51:ab:a9:3c:b8:2b: 29:ed:c3:9b:1e:c1:80:42:a5:37:68:59:50:7b:cf: 8f:96:8d:2a:70:38:db:fb:56:88:a8:8b:ba:68:43: 0a:c5:5d:28:27:88:bf:77:cc:29:39:47:e2:df:dd: 41:6d:27:7a:f0:1d:ae:9f:76:f1:31:50:40:d0:f6: 1e:80:a1:c2:d9:50:cc:cb:b3:2a:40:f7:6b:7f:80: f9:11:4c:28:1c:3f:1d:27:05:c6:aa:e9:f2:8d:70: d4:ab:ce:b1:f0:d7:0b:98:01:59:01:bb:a9:e1:1a: d0:3d:64:5d:6c:ab:57:ce:93:75:76:8e:1d:bf:c9: 6e:55:b8:23:d8:ee:87:a9:e0:96:18:54:eb:41:dc: 50:24:af:8b:3f:99:9b:82:8c:8b:1d:53:87:5b:38: b3:05:69:ff:a3:d8:74:27:48:b0:4e:55:05:6c:c5: 56:a7:80:1e:d3:e1:a3:66:e4:5b:7a:27:ef:04:90: b3:38:d0:a7:b9:61:19:1b:d4:34:fb:df:4a:23:2e: 3f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EF:C9:E7:6C:50:21:28:70:27:D9:BF:BE:6B:38:72:C9:90:88:B4 X509v3 Authority Key Identifier: keyid:2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:75:0e:33:34:be:08:0e:91:70:85:89:48:3d:3f:c8:e8:b5: d0:82:8e:dc:87:35:c5:a7:18:2f:30:83:8c:2a:fb:5a:c4:97: 16:f9:de:a0:df:95:7b:83:5e:c2:70:5a:59:1d:c5:fd:da:0b: f1:d4:77:f0:a0:9a:a0:c0:1e:03:86:d8:d4:49:3a:14:eb:c3: 8a:b5:b5:f1:31:96:b7:b9:a7:a4:23:5a:03:bc:cd:f1:19:fc: fc:4d:3a:c4:c7:19:20:d7:ac:9b:35:0e:b8:ce:9c:1b:49:bb: 46:c3:b9:e6:92:61:df:f6:78:9a:ee:57:10:7e:f1:0a:62:bd: 3e:9c:54:db:04:44:d3:bb:30:3f:6a:c5:41:03:7a:33:13:8b: bd:2b:12:d1:7a:49:42:1c:da:34:db:b0:3c:c1:b1:f0:66:74: aa:dc:d5:57:77:f9:cc:7e:87:c2:47:11:8a:ff:67:c0:d9:28: 2a:f8:b6:c7:71:b4:74:8a:97:e4:6e:fb:82:0a:78:ac:98:f5: 31:90:18:3c:48:ea:3e:0c:c8:8c:a7:36:2a:3c:4c:24:f2:01: c1:48:aa:b8:a8:5f:e7:eb:83:2c:60:2b:f4:ba:6b:c6:76:cd: b4:f9:fa:21:06:cc:09:10:cb:6f:7b:9c:ac:96:83:8b:9c:c6: 49:cd:bf:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXXlW8DtT0CuGepwSpNEcYUIR0DQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZFMUZBN0Q0REQzMzg4MzU1QkFCQUQ3MzAyMDAxM0Q0 ODVDMTY4QzAeFw0yNjA3MjQwNTQxMjlaFw0yNjA3MjUwODAwMjlaMDMxMTAvBgNV BAMTKENERUZDOUU3NkM1MDIxMjg3MDI3RDlCRkJFNkIzODcyQzk5MDg4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCLL/v7A9t9XaKD92q87w8BbIk iifP3la9zrDZW6Y6+w8kE+eQWCzjRgr8N8oJqDA0+YMX21GrqTy4Kyntw5sewYBC pTdoWVB7z4+WjSpwONv7Voioi7poQwrFXSgniL93zCk5R+Lf3UFtJ3rwHa6fdvEx UEDQ9h6AocLZUMzLsypA92t/gPkRTCgcPx0nBcaq6fKNcNSrzrHw1wuYAVkBu6nh GtA9ZF1sq1fOk3V2jh2/yW5VuCPY7oep4JYYVOtB3FAkr4s/mZuCjIsdU4dbOLMF af+j2HQnSLBOVQVsxVangB7T4aNm5Ft6J+8EkLM40Ke5YRkb1DT730ojLj+1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUze/J52xQIShwJ9m/vms4csmQiLQwHwYDVR0j BBgwFoAUL+H6fU3TOINVurrXMCABPUhcFowwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZkNGY4NjktNGRiNi00YjBhLWFhYjYtY2RlNDdiNDQ3ZDc3LzAvMkZFMUZBN0Q0 REQzMzg4MzU1QkFCQUQ3MzAyMDAxM0Q0ODVDMTY4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkUxRkE3RDRERDMzODgzNTVCQUJBRDczMDIwMDEzRDQ4NUMx NjhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZkNGY4NjktNGRiNi00YjBhLWFh YjYtY2RlNDdiNDQ3ZDc3LzAvMkZFMUZBN0Q0REQzMzg4MzU1QkFCQUQ3MzAyMDAx M0Q0ODVDMTY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABN1DjM0vggOkXCFiUg9P8jotdCCjtyHNcWn GC8wg4wq+1rElxb53qDflXuDXsJwWlkdxf3aC/HUd/CgmqDAHgOG2NRJOhTrw4q1 tfExlre5p6QjWgO8zfEZ/PxNOsTHGSDXrJs1DrjOnBtJu0bDueaSYd/2eJruVxB+ 8QpivT6cVNsERNO7MD9qxUEDejMTi70rEtF6SUIc2jTbsDzBsfBmdKrc1Vd3+cx+ h8JHEYr/Z8DZKCr4tsdxtHSKl+Ru+4IKeKyY9TGQGDxI6j4MyIynNio8TCTyAcFI qrioX+frgyxgK/S6a8Z2zbT5+iEGzAkQy297nKyWg4ucxknNv64= -----END CERTIFICATE-----Generated at Fri Jul 24 13:19:29 2026 by rpki-client