$ rpki-client -vvf rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft File: 2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft (raw, json) Hash identifier: XFOgyqqURrFyni75gvmRaYr19RnTJnc2gk/bMXyG0tE= Subject key identifier: 98:EA:5D:9A:A5:07:48:95:0C:B8:14:EE:61:24:34:CF:EB:93:0C:80 Authority key identifier: 2C:7A:30:2B:26:8D:C5:40:59:CE:B8:8F:7A:C2:19:8D:98:52:CB:D3 Certificate issuer: /CN=2C7A302B268DC54059CEB88F7AC2198D9852CBD3 Certificate serial: 17A82188D580A2A94ABD7AE5A06B7E816FB3263D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft Manifest number: 6A Signing time: Tue 21 Jul 2026 00:26:22 +0000 Manifest this update: Tue 21 Jul 2026 00:21:22 +0000 Manifest next update: Wed 22 Jul 2026 03:30:22 +0000 Files and hashes: 1: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: bJqqtyMrUB6ove5aksmXoGy9PsBIFYzerBlsfdZy7oQ=) 2: 2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl (hash: Bq9/IgHITHphE63++h0mj+t/nKqWce84aXMUoM+GwSc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a8:21:88:d5:80:a2:a9:4a:bd:7a:e5:a0:6b:7e:81:6f:b3:26:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C7A302B268DC54059CEB88F7AC2198D9852CBD3 Validity Not Before: Jul 21 00:21:22 2026 GMT Not After : Jul 22 03:30:22 2026 GMT Subject: CN=98EA5D9AA50748950CB814EE612434CFEB930C80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9f:83:50:2d:bc:93:e0:ef:6d:29:1f:66:83: 46:de:fa:29:a0:85:1e:39:38:a8:82:ba:f9:00:00: 31:78:be:77:5a:b9:bf:c2:88:c2:ef:fe:fa:19:b1: d5:cb:2b:c7:65:36:cc:70:7b:7e:e5:37:68:8a:97: d1:6c:b3:de:d2:94:b1:77:ce:cc:c6:39:18:8d:50: ed:78:89:86:8e:e2:3f:21:9e:e6:f8:b5:9e:b6:26: 94:48:97:62:3a:b4:28:9f:1d:db:87:6c:47:6f:2d: 05:8e:3b:c3:ba:51:ff:1e:e5:bf:6b:7c:7d:13:68: 41:dc:dc:0d:f9:e1:ab:33:4e:92:c1:20:2d:74:24: 43:32:fb:0f:da:d1:2a:5f:e3:19:b4:9f:b4:d8:01: d1:d3:49:52:8e:3e:55:7d:b9:91:ff:79:09:f8:72: 47:37:fd:31:83:94:a5:09:02:7b:fe:35:5c:1a:c5: 10:e6:29:82:d7:06:b0:68:58:94:5a:90:f9:b4:97: 2c:48:d0:c3:35:33:1d:ed:34:f8:42:be:a9:97:cc: 1a:0a:76:71:9d:34:04:6b:75:57:1c:94:ae:d4:d8: 41:5f:77:e0:aa:3b:63:46:15:e2:31:50:e1:7f:2f: fd:d5:6c:a2:68:00:78:34:90:4f:c7:c1:b1:d6:56: b5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:EA:5D:9A:A5:07:48:95:0C:B8:14:EE:61:24:34:CF:EB:93:0C:80 X509v3 Authority Key Identifier: keyid:2C:7A:30:2B:26:8D:C5:40:59:CE:B8:8F:7A:C2:19:8D:98:52:CB:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:a8:ac:8c:f9:a7:58:12:f3:4a:ba:01:9c:a1:e7:d6:c7:6d: 5a:27:87:26:d9:d5:57:52:8f:2e:ec:a0:a2:a4:63:ea:2e:b6: 8c:3c:a9:01:e5:17:36:87:51:bc:96:df:fe:bb:5d:77:28:dc: 70:5b:0d:24:3c:5a:2f:2c:67:63:9c:59:44:5a:f1:85:f9:59: 70:d5:49:03:17:ef:47:43:83:da:79:98:f0:c1:2b:99:0a:32: 66:b3:0d:22:86:65:b2:6e:8b:f3:5b:2a:83:9a:58:85:6b:51: e0:4b:b9:7d:0d:34:ca:bf:79:13:b6:ad:19:a1:56:a8:48:7b: d9:34:c6:02:9b:14:85:60:37:64:79:72:f3:be:e3:31:f3:7d: a1:29:f7:0e:6a:39:38:89:de:33:e6:0d:f0:2a:fc:fb:6d:b2: d2:d4:63:2a:a4:f8:c8:d6:52:84:25:8c:69:70:d4:4d:05:91: 85:ef:4a:ab:60:51:45:85:ef:af:18:4a:c4:3f:9f:e1:11:27: b7:78:06:e6:fc:bf:9c:3b:67:8d:11:a2:ea:11:27:75:fa:fa: d1:e6:41:f1:c7:ce:78:5b:bd:57:0e:f1:3e:c3:da:cb:92:9e: 04:b9:3a:44:25:ce:59:47:28:53:54:d7:5b:a5:f9:d7:18:03: 6b:a8:97:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF6ghiNWAoqlKvXrloGt+gW+zJj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM3QTMwMkIyNjhEQzU0MDU5Q0VCODhGN0FDMjE5OEQ5 ODUyQ0JEMzAeFw0yNjA3MjEwMDIxMjJaFw0yNjA3MjIwMzMwMjJaMDMxMTAvBgNV BAMTKDk4RUE1RDlBQTUwNzQ4OTUwQ0I4MTRFRTYxMjQzNENGRUI5MzBDODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFn4NQLbyT4O9tKR9mg0be+img hR45OKiCuvkAADF4vndaub/CiMLv/voZsdXLK8dlNsxwe37lN2iKl9Fss97SlLF3 zszGORiNUO14iYaO4j8hnub4tZ62JpRIl2I6tCifHduHbEdvLQWOO8O6Uf8e5b9r fH0TaEHc3A354aszTpLBIC10JEMy+w/a0Spf4xm0n7TYAdHTSVKOPlV9uZH/eQn4 ckc3/TGDlKUJAnv+NVwaxRDmKYLXBrBoWJRakPm0lyxI0MM1Mx3tNPhCvqmXzBoK dnGdNARrdVcclK7U2EFfd+CqO2NGFeIxUOF/L/3VbKJoAHg0kE/HwbHWVrWdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmOpdmqUHSJUMuBTuYSQ0z+uTDIAwHwYDVR0j BBgwFoAULHowKyaNxUBZzriPesIZjZhSy9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA1YWY4MjItYmVhOS00OGYzLWFhMTItYjI3MzcxNjJmYzQyLzAvMkM3QTMwMkIy NjhEQzU0MDU5Q0VCODhGN0FDMjE5OEQ5ODUyQ0JEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQzdBMzAyQjI2OERDNTQwNTlDRUI4OEY3QUMyMTk4RDk4NTJD QkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA1YWY4MjItYmVhOS00OGYzLWFh MTItYjI3MzcxNjJmYzQyLzAvMkM3QTMwMkIyNjhEQzU0MDU5Q0VCODhGN0FDMjE5 OEQ5ODUyQ0JEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmorIz5p1gS80q6AZyh59bHbVonhybZ1VdS jy7soKKkY+outow8qQHlFzaHUbyW3/67XXco3HBbDSQ8Wi8sZ2OcWURa8YX5WXDV SQMX70dDg9p5mPDBK5kKMmazDSKGZbJui/NbKoOaWIVrUeBLuX0NNMq/eRO2rRmh VqhIe9k0xgKbFIVgN2R5cvO+4zHzfaEp9w5qOTiJ3jPmDfAq/PttstLUYyqk+MjW UoQljGlw1E0FkYXvSqtgUUWF768YSsQ/n+ERJ7d4Bub8v5w7Z40RouoRJ3X6+tHm QfHHznhbvVcO8T7D2suSngS5OkQlzllHKFNU11ul+dcYA2uol5s= -----END CERTIFICATE-----Generated at Tue Jul 21 06:40:52 2026 by rpki-client