$ rpki-client -vvf rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft File: 2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft (raw, json) Hash identifier: kMjwbJzziNhx+Hl9hlO01MW5TcqdQMTQmxsh+Dd6GX0= Subject key identifier: F0:2F:B0:A5:7B:D8:88:3E:2A:EA:39:B0:85:72:AD:72:7D:6E:C9:FE Authority key identifier: 2A:3B:71:13:CD:87:30:2B:2B:15:C0:36:DA:BB:55:A1:C6:1A:4B:C7 Certificate issuer: /CN=2A3B7113CD87302B2B15C036DABB55A1C61A4BC7 Certificate serial: 05409E6F4F4497AF139F1D4A8BBE628BF32B8778 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 11:56:04 +0000 Manifest this update: Mon 20 Jul 2026 11:51:04 +0000 Manifest next update: Tue 21 Jul 2026 15:20:04 +0000 Files and hashes: 1: 3130332e31362e3131382e302f32332d3233203d3e20313530323234.roa (hash: cHWRS9jvMLPJtfkGwJTsPEjSAtpAq4obnCko3LPwDM4=) 2: 3130332e31362e3131382e302f32342d3234203d3e20313530323234.roa (hash: DmsqvgbVPNfcNdfJtucN0xsEHJ0/UNUr4pV2Ej4ylVY=) 3: 2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl (hash: Q/O1i0VzLnKCI5nAjn96yiUpOf5QqttWMw3ULcJH2+I=) 4: 3130332e31362e3131392e302f32342d3234203d3e20313530323234.roa (hash: I2YIeew2oZSIPdct3GSYzDNuqJxTOhVzByMVv86tq2I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:40:9e:6f:4f:44:97:af:13:9f:1d:4a:8b:be:62:8b:f3:2b:87:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A3B7113CD87302B2B15C036DABB55A1C61A4BC7 Validity Not Before: Jul 20 11:51:04 2026 GMT Not After : Jul 21 15:20:04 2026 GMT Subject: CN=F02FB0A57BD8883E2AEA39B08572AD727D6EC9FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ae:68:87:5d:c3:77:1b:fb:de:2b:f5:ea:5a: a4:a6:4d:8d:0e:80:61:e6:03:a9:25:7d:42:00:56: 4d:af:f7:d2:2b:61:b3:2e:35:86:1c:7b:27:00:33: cd:af:33:70:31:80:37:80:21:71:54:4f:fe:38:3f: c4:3f:75:ff:51:10:3a:48:13:1f:30:f8:fe:6f:64: db:15:ed:76:5e:aa:c0:96:18:a3:aa:61:07:0d:d5: ce:db:a9:52:b6:5c:35:4e:7b:68:bd:1a:9c:22:3c: eb:e1:f6:23:fb:e6:37:69:8c:09:b9:1a:6c:55:66: e6:c1:14:48:fb:5e:4f:b5:fb:05:20:2a:61:4a:a4: eb:10:d5:7b:ac:d6:9c:fc:ce:b2:2f:53:7f:0a:b6: dd:f3:c9:26:f4:dd:86:cc:46:0d:50:8d:ed:30:ae: c1:4f:b1:96:c6:f8:cf:e2:e8:6b:59:90:aa:dd:c2: 7e:fc:ab:39:62:d1:90:94:dd:b8:9b:3e:c9:eb:b1: 44:3f:e3:df:17:73:fb:eb:5c:19:d0:94:cd:45:ce: 55:81:20:48:b9:fe:02:1e:23:7e:57:69:2e:95:90: 24:9c:04:ce:5a:91:44:6c:88:7c:22:10:f1:b5:c0: 80:d0:0b:f5:57:5e:64:2c:db:25:e0:55:0f:58:99: 22:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2F:B0:A5:7B:D8:88:3E:2A:EA:39:B0:85:72:AD:72:7D:6E:C9:FE X509v3 Authority Key Identifier: keyid:2A:3B:71:13:CD:87:30:2B:2B:15:C0:36:DA:BB:55:A1:C6:1A:4B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:34:c8:d6:9f:ba:c0:1c:75:2b:f0:be:51:ed:21:6b:5e:b0: e7:69:66:5b:e5:25:4a:0e:d1:17:75:c4:e3:fa:9f:9d:cf:12: 21:25:59:fe:03:43:65:5f:e1:24:1a:b1:f9:0b:6c:59:f3:db: 3f:e1:36:33:be:f4:bf:eb:22:62:37:fa:0c:3b:ce:91:9b:3f: b9:ec:fe:db:7d:7a:a5:53:dc:64:59:6b:1c:e6:75:53:9c:95: ad:cc:33:60:74:44:b3:fa:f1:42:c8:02:e5:53:c6:d2:d0:f8: c9:63:e1:b2:88:aa:6d:b0:7d:74:55:07:43:bd:07:cd:4e:a2: b1:f7:57:ce:5b:dc:38:f5:2a:e8:84:94:04:57:e1:e8:1f:a4: 4b:ba:56:7a:17:59:06:81:f3:46:73:5c:93:f5:8c:c6:b9:af: 72:de:00:84:73:13:ce:ce:f8:36:c3:cf:d1:f3:2b:22:0d:e9: 09:e1:4e:e9:cb:87:4f:36:4a:15:50:e0:61:b1:5d:e9:23:90: c9:90:6c:7e:0f:de:36:2e:e7:aa:70:ac:08:23:51:e6:37:30: e2:c1:66:57:f1:3b:8f:4b:fc:36:bd:34:ba:df:a4:26:16:14: 95:50:9f:6e:37:d2:54:83:ce:31:d6:29:39:da:57:6d:6e:d5: 14:50:cd:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBUCeb09El68Tnx1Ki75ii/Mrh3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzQjcxMTNDRDg3MzAyQjJCMTVDMDM2REFCQjU1QTFD NjFBNEJDNzAeFw0yNjA3MjAxMTUxMDRaFw0yNjA3MjExNTIwMDRaMDMxMTAvBgNV BAMTKEYwMkZCMEE1N0JEODg4M0UyQUVBMzlCMDg1NzJBRDcyN0Q2RUM5RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCormiHXcN3G/veK/XqWqSmTY0O gGHmA6klfUIAVk2v99IrYbMuNYYceycAM82vM3AxgDeAIXFUT/44P8Q/df9REDpI Ex8w+P5vZNsV7XZeqsCWGKOqYQcN1c7bqVK2XDVOe2i9GpwiPOvh9iP75jdpjAm5 GmxVZubBFEj7Xk+1+wUgKmFKpOsQ1Xus1pz8zrIvU38Ktt3zySb03YbMRg1Qje0w rsFPsZbG+M/i6GtZkKrdwn78qzli0ZCU3bibPsnrsUQ/498Xc/vrXBnQlM1FzlWB IEi5/gIeI35XaS6VkCScBM5akURsiHwiEPG1wIDQC/VXXmQs2yXgVQ9YmSLhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8C+wpXvYiD4q6jmwhXKtcn1uyf4wHwYDVR0j BBgwFoAUKjtxE82HMCsrFcA22rtVocYaS8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTk4Nzk3NDQtYjgxOC00NmRjLThkOWYtOWMzNTc5M2Y0Y2JiLzAvMkEzQjcxMTND RDg3MzAyQjJCMTVDMDM2REFCQjU1QTFDNjFBNEJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTNCNzExM0NEODczMDJCMkIxNUMwMzZEQUJCNTVBMUM2MUE0 QkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTk4Nzk3NDQtYjgxOC00NmRjLThk OWYtOWMzNTc5M2Y0Y2JiLzAvMkEzQjcxMTNDRDg3MzAyQjJCMTVDMDM2REFCQjU1 QTFDNjFBNEJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMU0yNafusAcdSvwvlHtIWtesOdpZlvlJUoO 0Rd1xOP6n53PEiElWf4DQ2Vf4SQasfkLbFnz2z/hNjO+9L/rImI3+gw7zpGbP7ns /tt9eqVT3GRZaxzmdVOcla3MM2B0RLP68ULIAuVTxtLQ+Mlj4bKIqm2wfXRVB0O9 B81OorH3V85b3Dj1KuiElARX4egfpEu6VnoXWQaB80ZzXJP1jMa5r3LeAIRzE87O +DbDz9HzKyIN6QnhTunLh082ShVQ4GGxXekjkMmQbH4P3jYu56pwrAgjUeY3MOLB ZlfxO49L/Da9NLrfpCYWFJVQn2430lSDzjHWKTnaV21u1RRQzT8= -----END CERTIFICATE-----Generated at Tue Jul 21 06:59:08 2026 by rpki-client