$ rpki-client -vvf rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft File: 2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft (raw, json) Hash identifier: 7BuuOoex71T9WmgVOB1O811Ie258lwzbNpvReKdD3GI= Subject key identifier: 9D:92:8A:F1:26:B1:20:CB:AD:64:F6:72:7B:2D:CA:D2:48:B6:56:B6 Authority key identifier: 2C:A6:27:0F:A0:99:DB:2B:77:ED:B7:EA:A9:30:40:FF:23:6B:21:4B Certificate issuer: /CN=2CA6270FA099DB2B77EDB7EAA93040FF236B214B Certificate serial: 142A7E687906E654CC2AF5DBF5D8FDA66BE3C176 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 15:49:18 +0000 Manifest this update: Thu 23 Jul 2026 15:44:18 +0000 Manifest next update: Fri 24 Jul 2026 19:07:18 +0000 Files and hashes: 1: 3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (hash: RYdUas2TasB0Egv36O3FoGBWixKmz+f1qKRhr6wdPhI=) 2: 2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl (hash: XXnjDbroZrZNLH3xdpSGaIjmbIJCNVQ+QH+oQrk5Oic=) 3: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (hash: 5yASRqMJGpH3BlgDiF4qbtYdpHoRGPLyhQdyV1pz60w=) 4: 3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (hash: 7n3FY8Iu2mTaPEdpSsiUuLrwQ3K9YP1KBkJ8ERWrHmg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:2a:7e:68:79:06:e6:54:cc:2a:f5:db:f5:d8:fd:a6:6b:e3:c1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA6270FA099DB2B77EDB7EAA93040FF236B214B Validity Not Before: Jul 23 15:44:18 2026 GMT Not After : Jul 24 19:07:18 2026 GMT Subject: CN=9D928AF126B120CBAD64F6727B2DCAD248B656B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:9f:c4:49:b4:c9:28:6f:fc:10:2c:85:83: 28:f8:9a:32:8c:ce:8a:64:37:34:b0:11:bd:8f:c7: 31:19:e5:14:90:84:48:97:07:54:05:8c:ae:ad:e1: b1:53:89:7e:4f:30:3d:1e:5e:93:a3:42:af:92:e2: 14:b6:64:89:93:81:4c:6e:71:5b:45:2d:f5:21:05: d3:6b:d1:ff:b5:d8:9e:f7:d5:e0:8a:fe:50:d9:14: a0:2c:3f:7d:98:f6:bc:3e:ba:f9:f7:4e:1d:6e:96: 1d:8b:f7:ef:0c:68:78:9e:cd:eb:28:3e:48:a8:e0: eb:2b:fe:a0:91:8a:ff:8a:d5:27:3b:2f:42:83:04: 8e:36:eb:da:d2:90:e4:f4:54:39:7b:21:b4:d1:c1: bf:8c:d9:4e:ea:86:7a:88:e8:46:12:74:92:6e:58: 3b:7e:3e:c0:0e:3b:bf:52:ac:90:24:ea:aa:cc:6a: f2:01:f9:4a:58:a8:5c:7a:67:4c:01:43:fc:39:4e: be:2a:b6:b0:eb:71:2f:ed:29:9f:4b:a6:93:9d:8d: 6e:f5:f8:17:86:de:4f:49:9f:1a:84:b5:aa:27:2f: 95:2e:aa:06:72:6e:61:71:9b:0c:f7:86:81:82:63: 4f:9e:db:97:19:10:7c:06:a6:76:b5:36:51:15:a8: 5b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:92:8A:F1:26:B1:20:CB:AD:64:F6:72:7B:2D:CA:D2:48:B6:56:B6 X509v3 Authority Key Identifier: keyid:2C:A6:27:0F:A0:99:DB:2B:77:ED:B7:EA:A9:30:40:FF:23:6B:21:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:70:c8:39:d7:de:0b:c1:b4:b8:c8:aa:10:8d:cf:9f:c8:0f: 4e:08:0f:e6:73:63:3a:32:cd:a4:77:7e:a7:82:cc:d1:19:a3: bb:88:5c:d1:b5:37:d4:c1:87:b2:93:18:a0:d3:67:44:05:f1: 4e:f9:02:7c:07:ce:c5:c1:ef:52:35:bd:11:aa:01:ea:c3:f5: fa:57:cc:3c:23:f9:4a:47:26:3e:d2:5c:d7:84:63:83:13:b9: 1d:69:e4:c5:6b:ad:1e:12:d4:08:05:3b:99:ed:e4:c0:5d:f4: 6d:a2:93:5e:cb:63:47:c5:af:e3:59:26:96:bb:fa:7d:12:1e: 8b:73:f8:35:3c:54:ac:e8:11:84:a8:46:4c:34:b8:43:cb:34: 91:21:6b:97:9c:1a:8e:4c:a1:ef:0b:4c:a1:0e:b0:7c:e6:67: d3:a1:5e:87:f2:ef:f6:86:ba:95:aa:94:b8:16:9f:60:92:c5: 64:b2:1e:36:30:49:c3:53:26:cb:22:66:11:6c:2b:c1:02:d6: 55:24:3d:e0:39:a2:3b:6c:d3:2e:4a:ec:f6:73:13:d1:fc:44: e6:0e:4a:08:f6:c6:f4:00:a8:b8:2e:6d:37:36:41:09:ef:7a: 65:15:53:71:ae:56:dd:39:3c:64:88:0b:76:3a:13:8a:77:a1: bd:32:68:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFCp+aHkG5lTMKvXb9dj9pmvjwXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNjI3MEZBMDk5REIyQjc3RURCN0VBQTkzMDQwRkYy MzZCMjE0QjAeFw0yNjA3MjMxNTQ0MThaFw0yNjA3MjQxOTA3MThaMDMxMTAvBgNV BAMTKDlEOTI4QUYxMjZCMTIwQ0JBRDY0RjY3MjdCMkRDQUQyNDhCNjU2QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94Z/ESbTJKG/8ECyFgyj4mjKM zopkNzSwEb2PxzEZ5RSQhEiXB1QFjK6t4bFTiX5PMD0eXpOjQq+S4hS2ZImTgUxu cVtFLfUhBdNr0f+12J731eCK/lDZFKAsP32Y9rw+uvn3Th1ulh2L9+8MaHiezeso Pkio4Osr/qCRiv+K1Sc7L0KDBI4269rSkOT0VDl7IbTRwb+M2U7qhnqI6EYSdJJu WDt+PsAOO79SrJAk6qrMavIB+UpYqFx6Z0wBQ/w5Tr4qtrDrcS/tKZ9LppOdjW71 +BeG3k9JnxqEtaonL5UuqgZybmFxmwz3hoGCY0+e25cZEHwGpna1NlEVqFtFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnZKK8SaxIMutZPZyey3K0ki2VrYwHwYDVR0j BBgwFoAULKYnD6CZ2yt37bfqqTBA/yNrIUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY3YTdmMGUtOGQwNy00NWRlLTgyNTItM2JmZmMwNWU1NjQ5LzAvMkNBNjI3MEZB MDk5REIyQjc3RURCN0VBQTkzMDQwRkYyMzZCMjE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0E2MjcwRkEwOTlEQjJCNzdFREI3RUFBOTMwNDBGRjIzNkIy MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTY3YTdmMGUtOGQwNy00NWRlLTgy NTItM2JmZmMwNWU1NjQ5LzAvMkNBNjI3MEZBMDk5REIyQjc3RURCN0VBQTkzMDQw RkYyMzZCMjE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVwyDnX3gvBtLjIqhCNz5/ID04ID+ZzYzoy zaR3fqeCzNEZo7uIXNG1N9TBh7KTGKDTZ0QF8U75AnwHzsXB71I1vRGqAerD9fpX zDwj+UpHJj7SXNeEY4MTuR1p5MVrrR4S1AgFO5nt5MBd9G2ik17LY0fFr+NZJpa7 +n0SHotz+DU8VKzoEYSoRkw0uEPLNJEha5ecGo5Moe8LTKEOsHzmZ9OhXofy7/aG upWqlLgWn2CSxWSyHjYwScNTJssiZhFsK8EC1lUkPeA5ojts0y5K7PZzE9H8ROYO Sgj2xvQAqLgubTc2QQnvemUVU3GuVt05PGSIC3Y6E4p3ob0yaOQ= -----END CERTIFICATE-----Generated at Fri Jul 24 08:52:31 2026 by rpki-client