$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft File: 2A494FAEE44F13448E6C43136F825053CE977009.mft (raw, json) Hash identifier: ruAm9gQDJ4WrAdhiOOmYTv+YWE4QQ0AfZls7pz3SzGU= Subject key identifier: FB:58:82:35:EF:83:6C:DB:D1:88:B4:B2:57:B2:05:5F:E5:99:01:D7 Authority key identifier: 2A:49:4F:AE:E4:4F:13:44:8E:6C:43:13:6F:82:50:53:CE:97:70:09 Certificate issuer: /CN=2A494FAEE44F13448E6C43136F825053CE977009 Certificate serial: 31E4EB0375B06EBAD3DF24F6F9FCCDC2B529167D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:46:54 +0000 Manifest this update: Thu 23 Jul 2026 17:41:54 +0000 Manifest next update: Fri 24 Jul 2026 21:09:54 +0000 Files and hashes: 1: 2A494FAEE44F13448E6C43136F825053CE977009.crl (hash: iaGXFMAWMJt/NBZnJ5DC0iBTO3O+G6Eo441dFXPi5+s=) 2: 3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (hash: t2vA65s4Rw0JpR4oPJfjFnJ3dyjvcRRBFrdNUp3Bo2M=) 3: 3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa (hash: SSSkCi1zJkML5HF5+O+odxp65ltRBIRj0krRoe9GJqI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.crl rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e4:eb:03:75:b0:6e:ba:d3:df:24:f6:f9:fc:cd:c2:b5:29:16:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A494FAEE44F13448E6C43136F825053CE977009 Validity Not Before: Jul 23 17:41:54 2026 GMT Not After : Jul 24 21:09:54 2026 GMT Subject: CN=FB588235EF836CDBD188B4B257B2055FE59901D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:92:fd:ef:b3:00:3d:5d:a6:ff:68:bd:4b:42: f5:ce:57:e2:2a:8b:1f:ff:b2:ea:20:fb:b0:c7:b2: dc:5b:c7:fc:56:36:fc:81:c2:96:73:82:f6:94:d9: d5:17:02:ce:f3:f7:44:80:f2:da:2b:f7:a0:fb:2b: c9:3a:38:94:f7:b6:d7:d0:56:df:73:fe:8d:87:47: 6c:71:57:0b:04:58:87:52:95:f1:3e:e4:28:40:0f: 81:50:ee:be:35:69:34:cb:c8:9b:e0:59:e1:c6:17: d9:5e:12:c1:1c:2c:16:a3:70:1a:0c:e6:b9:4c:54: 48:68:b8:b7:8c:0d:d9:d9:4d:11:3a:be:a7:2a:c8: 43:bc:1f:02:57:c0:f8:ff:b2:db:47:ed:e1:4f:3f: 82:ba:39:98:75:e3:5c:64:2d:ef:73:e6:a4:ae:2b: c1:39:09:49:0d:f5:9e:32:7b:c8:52:f7:b2:8d:81: 92:4a:06:ca:2d:de:ba:94:cc:c2:f8:96:0e:4b:bf: 2f:de:9d:bd:87:1e:b1:28:9f:85:56:7f:1f:f6:de: 44:d4:fb:7a:35:89:77:52:32:a9:02:31:ec:20:cc: 57:1b:cb:3f:cc:0e:b9:f0:6c:6c:64:34:78:9b:37: 37:8b:2d:7a:69:8c:87:4a:3b:94:81:30:0c:86:6c: a8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:58:82:35:EF:83:6C:DB:D1:88:B4:B2:57:B2:05:5F:E5:99:01:D7 X509v3 Authority Key Identifier: keyid:2A:49:4F:AE:E4:4F:13:44:8E:6C:43:13:6F:82:50:53:CE:97:70:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:65:5d:6a:a6:75:57:f4:c1:7c:3d:f8:4f:d6:ab:27:d9:c9: 1a:8e:ad:16:06:ae:17:6a:ad:af:2b:93:2b:17:1c:44:14:c6: 40:42:d6:81:83:13:a4:9f:7e:40:b5:9b:73:2a:bc:04:e1:12: 4f:00:e9:a3:49:73:65:08:79:83:9e:47:d1:d3:52:66:aa:a9: f7:a2:3c:d6:47:d8:47:2f:64:3e:8c:8f:e9:1e:cd:86:91:02: c2:65:7c:5e:a6:2d:3f:60:24:b1:d7:eb:48:fb:42:4a:83:12: 08:36:ec:94:6c:e7:ba:2c:1a:66:c0:77:35:3b:67:3a:39:09: b6:94:59:33:a4:31:21:8c:01:1c:ff:fc:9b:0f:52:6b:66:42: 3e:d9:c7:e8:bd:0b:6f:9e:18:b3:35:c2:a0:82:07:57:bc:bd: e4:8a:e7:8c:36:f8:58:64:dc:4f:26:b4:5a:5b:8e:11:0e:d6: 18:c2:2a:ac:74:88:9d:f5:00:e9:b4:e4:18:73:17:88:aa:ce: 2c:85:7b:90:e8:bf:2a:d1:bf:1c:a2:3d:a9:28:f9:be:67:b7: 6d:95:b4:bd:e9:3b:0d:a1:d7:9c:28:72:a0:f3:d1:71:b7:10: a5:6a:2a:97:88:bd:2d:15:bd:1d:0d:88:98:72:ec:e0:0b:50: 1a:90:46:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMeTrA3WwbrrT3yT2+fzNwrUpFn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE0OTRGQUVFNDRGMTM0NDhFNkM0MzEzNkY4MjUwNTND RTk3NzAwOTAeFw0yNjA3MjMxNzQxNTRaFw0yNjA3MjQyMTA5NTRaMDMxMTAvBgNV BAMTKEZCNTg4MjM1RUY4MzZDREJEMTg4QjRCMjU3QjIwNTVGRTU5OTAxRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkv3vswA9Xab/aL1LQvXOV+Iq ix//suog+7DHstxbx/xWNvyBwpZzgvaU2dUXAs7z90SA8tor96D7K8k6OJT3ttfQ Vt9z/o2HR2xxVwsEWIdSlfE+5ChAD4FQ7r41aTTLyJvgWeHGF9leEsEcLBajcBoM 5rlMVEhouLeMDdnZTRE6vqcqyEO8HwJXwPj/sttH7eFPP4K6OZh141xkLe9z5qSu K8E5CUkN9Z4ye8hS97KNgZJKBsot3rqUzML4lg5Lvy/enb2HHrEon4VWfx/23kTU +3o1iXdSMqkCMewgzFcbyz/MDrnwbGxkNHibNzeLLXppjIdKO5SBMAyGbKiJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+1iCNe+DbNvRiLSyV7IFX+WZAdcwHwYDVR0j BBgwFoAUKklPruRPE0SObEMTb4JQU86XcAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBkYzEyODMtMWNlMi00MWE1LWFmZTYtZjBiZTMxZTliMTBkLzAvMkE0OTRGQUVF NDRGMTM0NDhFNkM0MzEzNkY4MjUwNTNDRTk3NzAwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTQ5NEZBRUU0NEYxMzQ0OEU2QzQzMTM2RjgyNTA1M0NFOTc3 MDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBkYzEyODMtMWNlMi00MWE1LWFm ZTYtZjBiZTMxZTliMTBkLzAvMkE0OTRGQUVFNDRGMTM0NDhFNkM0MzEzNkY4MjUw NTNDRTk3NzAwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhlXWqmdVf0wXw9+E/WqyfZyRqOrRYGrhdq ra8rkysXHEQUxkBC1oGDE6SffkC1m3MqvAThEk8A6aNJc2UIeYOeR9HTUmaqqfei PNZH2EcvZD6Mj+kezYaRAsJlfF6mLT9gJLHX60j7QkqDEgg27JRs57osGmbAdzU7 Zzo5CbaUWTOkMSGMARz//JsPUmtmQj7Zx+i9C2+eGLM1wqCCB1e8veSK54w2+Fhk 3E8mtFpbjhEO1hjCKqx0iJ31AOm05BhzF4iqziyFe5DovyrRvxyiPako+b5nt22V tL3pOw2h15wocqDz0XG3EKVqKpeIvS0VvR0NiJhy7OALUBqQRqw= -----END CERTIFICATE-----Generated at Fri Jul 24 10:07:33 2026 by rpki-client