$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft File: 2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft (raw, json) Hash identifier: SF5qMbEL1zTqAhYDvqT27cqkwWsibxKRWE6s6R34vpk= Subject key identifier: F8:D6:F7:25:AB:DD:50:57:D3:F8:E1:B9:9E:73:B3:BA:E7:22:E9:8D Authority key identifier: 2E:5B:4D:91:9A:E6:E0:98:45:4A:21:D8:3B:EE:48:9C:0A:1D:F6:87 Certificate issuer: /CN=2E5B4D919AE6E098454A21D83BEE489C0A1DF687 Certificate serial: 2CF51F73F62B78FD9C0B40036F803F23B49B81EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 05:17:22 +0000 Manifest this update: Tue 21 Jul 2026 05:12:22 +0000 Manifest next update: Wed 22 Jul 2026 09:11:22 +0000 Files and hashes: 1: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: hXYZBw+zcNWgfpkr4qfi2P6UAXZrhjOtAH+ubipVz38=) 2: 2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl (hash: fJDby7P6cLeyO6L25GkIc6lGIbRIJ7vaqPXRLUlvRtc=) 3: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: w0l4Z0QTqPW7n9jh4ktHZnj4TWLQC1w9BHsCnnP0SC0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f5:1f:73:f6:2b:78:fd:9c:0b:40:03:6f:80:3f:23:b4:9b:81:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E5B4D919AE6E098454A21D83BEE489C0A1DF687 Validity Not Before: Jul 21 05:12:22 2026 GMT Not After : Jul 22 09:11:22 2026 GMT Subject: CN=F8D6F725ABDD5057D3F8E1B99E73B3BAE722E98D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fd:16:c4:f3:74:0a:f3:2c:52:95:45:c7:09: 7f:45:1a:11:ce:6d:14:21:6e:59:c5:f3:28:c6:2a: 1d:2a:f7:85:7f:88:39:b9:19:9d:20:57:52:a5:4a: 94:de:23:18:56:4e:7c:0b:0b:f6:68:be:8c:e8:71: 4e:5c:b0:01:30:36:28:6c:df:c5:c5:0a:10:9a:9c: 50:00:32:09:ef:17:83:f5:5e:61:15:b2:d4:a0:49: 7a:76:0f:c7:2e:c0:dc:aa:2f:8b:3d:e4:42:ea:b5: 45:37:39:a5:e6:7c:00:0b:e0:f0:a3:df:86:e7:ce: 54:85:24:d0:55:77:e0:5d:28:0a:66:f9:4f:3f:76: 16:60:84:8b:8d:03:48:49:bc:23:82:9a:e5:76:66: 1d:56:ab:db:78:0d:7c:9c:93:0f:b0:9a:13:80:8b: 5f:21:85:bd:9a:77:6e:03:49:7a:ad:bb:52:b4:12: c3:e3:bf:52:0e:b4:a8:6b:e9:59:c5:6e:bf:33:a8: 70:db:1a:5f:82:73:0f:03:41:d7:1d:e1:87:5f:8a: 87:e0:86:d9:6c:31:56:f8:97:73:6d:fc:5e:85:24: 00:d6:31:47:af:f6:be:bf:f2:f4:11:00:d9:65:84: 52:e7:19:5e:44:a2:02:67:71:c3:21:d1:48:3d:18: 27:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D6:F7:25:AB:DD:50:57:D3:F8:E1:B9:9E:73:B3:BA:E7:22:E9:8D X509v3 Authority Key Identifier: keyid:2E:5B:4D:91:9A:E6:E0:98:45:4A:21:D8:3B:EE:48:9C:0A:1D:F6:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:68:93:c8:65:2f:d6:ad:c3:2b:33:c8:68:d8:db:71:34:f5: 68:d3:e3:ef:7e:34:e0:2b:cd:54:a9:93:65:ed:26:1d:10:7c: f2:fb:8d:6d:ad:fd:ff:8a:da:98:93:14:57:41:fd:46:c9:53: c8:b6:97:8f:8b:68:f6:e6:c2:77:b4:8d:6c:b9:00:3f:1d:13: ca:50:ca:db:80:07:e6:d4:91:e0:72:04:7c:01:20:5a:fe:2e: d6:b0:7b:11:09:6d:14:cb:69:25:31:32:bf:54:e8:0b:2a:17: c5:09:d1:61:c1:90:72:18:b5:bb:32:f1:ac:25:7b:6a:48:ba: 98:3c:7e:73:1e:ea:d9:ec:4b:f0:e3:d6:fc:7c:28:cb:75:98: 29:1e:9e:a0:fc:6a:d8:ad:97:9e:98:d3:fb:fb:34:58:e8:4c: a6:ae:8b:fa:c1:37:28:5c:9f:23:6e:4a:e6:13:2a:66:66:1d: 4e:b3:28:e5:58:df:89:de:64:74:67:b7:30:3f:1c:85:81:52: 75:61:ee:52:34:95:2a:40:d7:1e:45:b3:f2:f1:ea:b3:c2:c1: 54:76:37:86:c8:21:f6:28:a5:7e:94:82:18:f0:7b:fa:0a:69: 27:7e:da:2e:c0:5a:42:6f:e3:f6:51:25:d5:1c:66:e2:61:73: d0:63:d9:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULPUfc/YreP2cC0ADb4A/I7SbgeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU1QjREOTE5QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4OUMw QTFERjY4NzAeFw0yNjA3MjEwNTEyMjJaFw0yNjA3MjIwOTExMjJaMDMxMTAvBgNV BAMTKEY4RDZGNzI1QUJERDUwNTdEM0Y4RTFCOTlFNzNCM0JBRTcyMkU5OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm/RbE83QK8yxSlUXHCX9FGhHO bRQhblnF8yjGKh0q94V/iDm5GZ0gV1KlSpTeIxhWTnwLC/ZovozocU5csAEwNihs 38XFChCanFAAMgnvF4P1XmEVstSgSXp2D8cuwNyqL4s95ELqtUU3OaXmfAAL4PCj 34bnzlSFJNBVd+BdKApm+U8/dhZghIuNA0hJvCOCmuV2Zh1Wq9t4DXyckw+wmhOA i18hhb2ad24DSXqtu1K0EsPjv1IOtKhr6VnFbr8zqHDbGl+Ccw8DQdcd4Ydfiofg htlsMVb4l3Nt/F6FJADWMUev9r6/8vQRANllhFLnGV5EogJnccMh0Ug9GCeNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Nb3JavdUFfT+OG5nnOzuuci6Y0wHwYDVR0j BBgwFoAULltNkZrm4JhFSiHYO+5InAod9ocwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkM2RkNzktODYzNS00ODU3LThhM2MtOTg1OTU0NTE2ZjllLzAvMkU1QjREOTE5 QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4OUMwQTFERjY4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTVCNEQ5MTlBRTZFMDk4NDU0QTIxRDgzQkVFNDg5QzBBMURG Njg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkM2RkNzktODYzNS00ODU3LThh M2MtOTg1OTU0NTE2ZjllLzAvMkU1QjREOTE5QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4 OUMwQTFERjY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBok8hlL9atwyszyGjY23E09WjT4+9+NOAr zVSpk2XtJh0QfPL7jW2t/f+K2piTFFdB/UbJU8i2l4+LaPbmwne0jWy5AD8dE8pQ ytuAB+bUkeByBHwBIFr+LtawexEJbRTLaSUxMr9U6AsqF8UJ0WHBkHIYtbsy8awl e2pIupg8fnMe6tnsS/Dj1vx8KMt1mCkenqD8atitl56Y0/v7NFjoTKaui/rBNyhc nyNuSuYTKmZmHU6zKOVY34neZHRntzA/HIWBUnVh7lI0lSpA1x5Fs/Lx6rPCwVR2 N4bIIfYopX6Ughjwe/oKaSd+2i7AWkJv4/ZRJdUcZuJhc9Bj2Qo= -----END CERTIFICATE-----Generated at Tue Jul 21 06:59:07 2026 by rpki-client