$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft File: C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft (raw, json) Hash identifier: nfvCMyDdPpmQJv0sJ4geBbeGOMf+R/O9rBvjECmXKPk= Subject key identifier: 28:D5:15:0E:84:21:25:95:8A:05:40:5D:EC:FA:78:C3:BF:3C:1C:65 Authority key identifier: C2:D6:F5:B6:33:70:10:04:FE:FA:E2:24:34:8B:98:C8:C5:AF:5D:E4 Certificate issuer: /CN=C2D6F5B633701004FEFAE224348B98C8C5AF5DE4 Certificate serial: 2DBF8AE86440F16B13254CDB773C4EF689A05BDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 00:29:45 +0000 Manifest this update: Fri 24 Jul 2026 00:24:45 +0000 Manifest next update: Sat 25 Jul 2026 04:25:45 +0000 Files and hashes: 1: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: Ufj1irifhgIIf9Z+cJ8JRj8meHiqH+Kv6sNyd7Vy/bM=) 2: C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl (hash: JsoE0Zz57oy0uCrBaoyPfLwZMX+ZZsCYi1xMvoWZktk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:bf:8a:e8:64:40:f1:6b:13:25:4c:db:77:3c:4e:f6:89:a0:5b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D6F5B633701004FEFAE224348B98C8C5AF5DE4 Validity Not Before: Jul 24 00:24:45 2026 GMT Not After : Jul 25 04:25:45 2026 GMT Subject: CN=28D5150E842125958A05405DECFA78C3BF3C1C65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8d:74:ff:c0:cd:cd:36:18:1e:5c:09:d3:84: 47:37:0b:63:16:02:b2:72:4f:ae:bf:86:6e:6a:7d: eb:c6:5d:2f:f9:4b:37:91:95:6d:ec:ac:be:0a:e9: 30:4e:f4:ff:16:89:19:ec:5b:b6:5d:4a:59:60:b7: 9f:4e:3f:f0:ac:ba:a2:ad:10:b2:8d:11:34:d0:23: 90:8e:cb:9c:bf:5a:13:f1:8f:da:df:97:fe:c7:68: 9b:5d:e3:03:68:f8:27:86:46:1d:21:6b:13:39:18: ed:ee:fe:c9:78:f9:ba:fe:4f:f3:0b:71:88:16:b2: 84:0e:5a:6b:b2:0d:a8:92:37:41:12:64:e6:0a:d6: f9:8a:4e:15:2a:a1:5e:fc:e7:16:79:c3:86:5f:8b: a4:2f:a6:51:94:df:81:b5:09:73:1c:6d:17:16:c9: e3:53:3e:82:4f:ce:b4:be:1b:a1:43:5c:ac:4e:a6: f3:5a:34:de:88:b6:e0:b0:50:f7:01:2f:22:74:67: 43:72:d7:e2:cd:ab:49:bd:00:5f:50:aa:a0:99:d8: d2:72:90:59:30:73:6f:e0:90:7c:fe:8a:d5:09:22: 75:08:9f:f6:35:14:ee:67:8a:01:a1:b5:56:4a:bb: 03:a6:62:cb:d6:31:28:08:73:ff:e3:c2:f5:7c:ae: 6b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D5:15:0E:84:21:25:95:8A:05:40:5D:EC:FA:78:C3:BF:3C:1C:65 X509v3 Authority Key Identifier: keyid:C2:D6:F5:B6:33:70:10:04:FE:FA:E2:24:34:8B:98:C8:C5:AF:5D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f3:40:9b:46:a3:e5:98:bf:6b:cf:b0:cc:55:e9:a2:18:2f: 89:2b:e4:98:10:1c:e9:42:6c:1e:c9:cc:3f:3d:89:b0:a0:4c: 11:1c:e3:d8:79:ba:c2:56:3d:12:02:ad:dc:a8:25:75:a9:30: 79:45:34:8d:14:e4:59:33:fe:22:04:ff:15:cd:c8:81:13:d6: 35:f5:85:3b:78:a8:d6:d7:b3:77:3d:e4:c1:3e:06:ef:36:bb: cd:21:02:79:40:5c:44:87:d5:91:de:d6:c3:2e:41:21:a7:22: c6:70:88:74:2b:71:67:c8:75:49:0b:65:44:3f:8a:9f:d3:e8: 11:7d:5f:41:3a:dd:d8:33:bf:ac:65:3d:a7:2a:14:23:82:1b: f0:72:58:19:55:83:79:db:2b:d8:62:70:cd:26:db:e7:3a:2a: 30:b6:1c:5a:37:b8:6f:c2:5b:fb:10:0c:5a:44:c0:6c:96:fc: 42:7a:00:56:73:7a:81:2f:43:ce:e6:12:84:97:4a:18:0b:6c: db:ac:ea:7c:11:08:eb:5b:b3:f7:e5:14:d1:c2:73:da:3c:51: 87:5a:ed:9d:66:ac:c1:3a:1f:5e:60:72:0f:02:bd:42:54:f5: a0:f1:e6:1d:a3:c6:de:2a:69:f3:7f:dc:a1:92:06:d2:e6:82: cb:70:38:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULb+K6GRA8WsTJUzbdzxO9omgW94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENkY1QjYzMzcwMTAwNEZFRkFFMjI0MzQ4Qjk4QzhD NUFGNURFNDAeFw0yNjA3MjQwMDI0NDVaFw0yNjA3MjUwNDI1NDVaMDMxMTAvBgNV BAMTKDI4RDUxNTBFODQyMTI1OTU4QTA1NDA1REVDRkE3OEMzQkYzQzFDNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQjXT/wM3NNhgeXAnThEc3C2MW ArJyT66/hm5qfevGXS/5SzeRlW3srL4K6TBO9P8WiRnsW7ZdSllgt59OP/CsuqKt ELKNETTQI5COy5y/WhPxj9rfl/7HaJtd4wNo+CeGRh0haxM5GO3u/sl4+br+T/ML cYgWsoQOWmuyDaiSN0ESZOYK1vmKThUqoV785xZ5w4Zfi6QvplGU34G1CXMcbRcW yeNTPoJPzrS+G6FDXKxOpvNaNN6ItuCwUPcBLyJ0Z0Ny1+LNq0m9AF9QqqCZ2NJy kFkwc2/gkHz+itUJInUIn/Y1FO5nigGhtVZKuwOmYsvWMSgIc//jwvV8rmuDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKNUVDoQhJZWKBUBd7Pp4w788HGUwHwYDVR0j BBgwFoAUwtb1tjNwEAT++uIkNIuYyMWvXeQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA5NzZlMjYtOTUxMy00OGZmLTlmN2YtZWEzZmRjZjNlMmU4LzAvQzJENkY1QjYz MzcwMTAwNEZFRkFFMjI0MzQ4Qjk4QzhDNUFGNURFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkQ2RjVCNjMzNzAxMDA0RkVGQUUyMjQzNDhCOThDOEM1QUY1 REU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA5NzZlMjYtOTUxMy00OGZmLTlm N2YtZWEzZmRjZjNlMmU4LzAvQzJENkY1QjYzMzcwMTAwNEZFRkFFMjI0MzQ4Qjk4 QzhDNUFGNURFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/zQJtGo+WYv2vPsMxV6aIYL4kr5JgQHOlC bB7JzD89ibCgTBEc49h5usJWPRICrdyoJXWpMHlFNI0U5Fkz/iIE/xXNyIET1jX1 hTt4qNbXs3c95ME+Bu82u80hAnlAXESH1ZHe1sMuQSGnIsZwiHQrcWfIdUkLZUQ/ ip/T6BF9X0E63dgzv6xlPacqFCOCG/ByWBlVg3nbK9hicM0m2+c6KjC2HFo3uG/C W/sQDFpEwGyW/EJ6AFZzeoEvQ87mEoSXShgLbNus6nwRCOtbs/flFNHCc9o8UYda 7Z1mrME6H15gcg8CvUJU9aDx5h2jxt4qafN/3KGSBtLmgstwOL4= -----END CERTIFICATE-----Generated at Fri Jul 24 05:08:52 2026 by rpki-client