$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft File: C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft (raw, json) Hash identifier: TFBrgyp5Mztg6d5+WdaYBLvQlQZmUqh1Zm4jYLz9PtA= Subject key identifier: 35:AA:26:48:DC:CE:BB:F1:1A:84:17:D1:C7:CF:7F:53:FE:76:33:9F Authority key identifier: C2:D6:F5:B6:33:70:10:04:FE:FA:E2:24:34:8B:98:C8:C5:AF:5D:E4 Certificate issuer: /CN=C2D6F5B633701004FEFAE224348B98C8C5AF5DE4 Certificate serial: 142109112C75389F1DB2FDDC799B418FF493EE23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 06:32:58 +0000 Manifest this update: Thu 23 Jul 2026 06:27:58 +0000 Manifest next update: Fri 24 Jul 2026 08:27:58 +0000 Files and hashes: 1: C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl (hash: 4gBHvPImCtxvGary89lcbO5QD9lFeL1gplQrYRiimvo=) 2: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: Ufj1irifhgIIf9Z+cJ8JRj8meHiqH+Kv6sNyd7Vy/bM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 08:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:21:09:11:2c:75:38:9f:1d:b2:fd:dc:79:9b:41:8f:f4:93:ee:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D6F5B633701004FEFAE224348B98C8C5AF5DE4 Validity Not Before: Jul 23 06:27:58 2026 GMT Not After : Jul 24 08:27:58 2026 GMT Subject: CN=35AA2648DCCEBBF11A8417D1C7CF7F53FE76339F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:28:0e:01:1a:e9:74:2e:8a:c2:dd:6f:a3: 49:c6:ab:80:bd:fc:ec:98:82:0b:b3:f6:bb:d3:31: f5:3b:98:06:a8:a3:10:f3:25:43:11:09:2b:c3:d4: 43:5c:55:1f:d6:37:83:70:ba:d7:dc:78:f7:06:ad: c2:d4:9d:87:0e:6c:d2:e4:a8:fe:f6:33:0a:10:c2: e5:55:b1:77:77:9a:6e:67:8a:48:86:f6:9b:5a:e9: 9e:14:57:56:bd:04:84:85:3d:5a:eb:68:be:10:03: 2a:f9:0f:c6:f8:93:36:41:2a:ac:13:aa:7c:74:2c: 7a:a1:1d:fb:7b:eb:1e:db:ad:be:cc:e2:57:fd:5a: bc:85:db:f0:af:96:0f:78:0d:b3:f7:e2:7d:81:c3: 16:84:bb:05:be:4c:32:94:54:f7:11:62:af:65:78: 1d:23:11:7c:40:b6:ef:d2:4d:c8:2f:ba:ba:ce:cb: 5b:aa:38:81:f5:20:72:6a:20:e6:2f:0e:77:e1:a1: 90:73:47:7b:f0:aa:7f:46:45:02:a6:df:5a:8e:59: a5:ba:52:67:3d:ad:5d:48:f3:9f:df:33:97:8e:72: d3:2e:1a:26:bd:df:e7:9f:f0:f2:6e:39:d7:11:25: bb:09:a8:ae:bd:57:a6:12:fb:4a:d9:e7:76:f0:b8: 14:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AA:26:48:DC:CE:BB:F1:1A:84:17:D1:C7:CF:7F:53:FE:76:33:9F X509v3 Authority Key Identifier: keyid:C2:D6:F5:B6:33:70:10:04:FE:FA:E2:24:34:8B:98:C8:C5:AF:5D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d9:60:7e:be:42:92:97:e9:6b:a2:52:42:1a:6d:7b:a7:bb: 06:0e:29:88:d8:0c:2f:b9:4c:f4:c5:4b:33:7a:f6:ea:84:f1: c0:0b:c5:c6:ec:e0:42:e5:7e:77:b8:56:ef:da:7f:ec:13:c7: 72:aa:e0:32:23:85:ce:1c:d3:2c:15:8d:ea:11:64:a9:dc:10: 15:ae:0a:01:1c:2d:af:86:50:64:28:3c:6a:4c:6d:c3:94:7a: 91:c5:bf:3b:4c:fb:f2:6d:72:5e:14:94:73:33:03:d6:78:37: b6:28:d8:e5:9f:81:f6:a0:72:45:cf:ce:00:9c:06:48:5e:66: d2:ea:43:b3:7d:9f:9d:87:56:30:a8:4b:20:5e:18:f0:61:7f: ff:51:19:08:93:ad:ea:ff:bd:e5:fe:07:ac:dc:f9:29:1d:d0: 63:fe:c8:fc:d4:68:0b:a6:2a:50:df:66:fa:15:fb:3d:1d:ec: b4:c1:86:89:71:0e:ba:95:df:2f:05:e4:5d:f9:0b:ad:60:fa: 84:3e:de:7d:e1:f0:83:90:76:a2:2c:b6:04:d9:ef:90:bc:09: 14:5d:bd:51:02:a2:5d:f2:ea:2b:d4:cd:04:6d:98:d6:83:1e: 79:de:36:b3:92:0a:01:65:c2:27:1b:a7:7f:f7:d0:fb:fe:c7: 73:4e:4d:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFCEJESx1OJ8dsv3ceZtBj/ST7iMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENkY1QjYzMzcwMTAwNEZFRkFFMjI0MzQ4Qjk4QzhD NUFGNURFNDAeFw0yNjA3MjMwNjI3NThaFw0yNjA3MjQwODI3NThaMDMxMTAvBgNV BAMTKDM1QUEyNjQ4RENDRUJCRjExQTg0MTdEMUM3Q0Y3RjUzRkU3NjMzOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC45CgOARrpdC6Kwt1vo0nGq4C9 /OyYgguz9rvTMfU7mAaooxDzJUMRCSvD1ENcVR/WN4NwutfcePcGrcLUnYcObNLk qP72MwoQwuVVsXd3mm5nikiG9pta6Z4UV1a9BISFPVrraL4QAyr5D8b4kzZBKqwT qnx0LHqhHft76x7brb7M4lf9WryF2/Cvlg94DbP34n2BwxaEuwW+TDKUVPcRYq9l eB0jEXxAtu/STcgvurrOy1uqOIH1IHJqIOYvDnfhoZBzR3vwqn9GRQKm31qOWaW6 Umc9rV1I85/fM5eOctMuGia93+ef8PJuOdcRJbsJqK69V6YS+0rZ53bwuBTPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNaomSNzOu/EahBfRx89/U/52M58wHwYDVR0j BBgwFoAUwtb1tjNwEAT++uIkNIuYyMWvXeQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA5NzZlMjYtOTUxMy00OGZmLTlmN2YtZWEzZmRjZjNlMmU4LzAvQzJENkY1QjYz MzcwMTAwNEZFRkFFMjI0MzQ4Qjk4QzhDNUFGNURFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkQ2RjVCNjMzNzAxMDA0RkVGQUUyMjQzNDhCOThDOEM1QUY1 REU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA5NzZlMjYtOTUxMy00OGZmLTlm N2YtZWEzZmRjZjNlMmU4LzAvQzJENkY1QjYzMzcwMTAwNEZFRkFFMjI0MzQ4Qjk4 QzhDNUFGNURFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3ZYH6+QpKX6WuiUkIabXunuwYOKYjYDC+5 TPTFSzN69uqE8cALxcbs4ELlfne4Vu/af+wTx3Kq4DIjhc4c0ywVjeoRZKncEBWu CgEcLa+GUGQoPGpMbcOUepHFvztM+/Jtcl4UlHMzA9Z4N7Yo2OWfgfagckXPzgCc BkheZtLqQ7N9n52HVjCoSyBeGPBhf/9RGQiTrer/veX+B6zc+Skd0GP+yPzUaAum KlDfZvoV+z0d7LTBholxDrqV3y8F5F35C61g+oQ+3n3h8IOQdqIstgTZ75C8CRRd vVECol3y6ivUzQRtmNaDHnneNrOSCgFlwicbp3/30Pv+x3NOTSE= -----END CERTIFICATE-----Generated at Fri Jul 24 01:39:43 2026 by rpki-client