$ rpki-client -vvf rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft File: 2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft (raw, json) Hash identifier: 8nURdd+9yxU5bRLMy4ZFRtuv57T+KF5h/Qw2LNHgAhE= Subject key identifier: 61:06:91:99:08:EE:06:D5:47:15:DD:7F:0D:75:94:18:1F:11:40:A9 Authority key identifier: 2F:F2:8E:C3:1F:A9:59:5D:4C:93:72:E0:37:8B:12:7B:FC:07:D5:43 Certificate issuer: /CN=2FF28EC31FA9595D4C9372E0378B127BFC07D543 Certificate serial: 5F2105010CECD7A0B0431D6D1535CC083BD4A641 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 21:37:53 +0000 Manifest this update: Mon 20 Jul 2026 21:32:53 +0000 Manifest next update: Tue 21 Jul 2026 21:59:53 +0000 Files and hashes: 1: 3130332e37382e3135382e302f32342d3234203d3e20313530323438.roa (hash: WBevjDBrr8T3lRgtMCROWKCPpKkw27Bp5qV284oO8bo=) 2: 2FF28EC31FA9595D4C9372E0378B127BFC07D543.crl (hash: c/Wmzkz2QmYU8Dv5Si49azybPL5xZaiddhenPFnetFQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.crl rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 21:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:21:05:01:0c:ec:d7:a0:b0:43:1d:6d:15:35:cc:08:3b:d4:a6:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FF28EC31FA9595D4C9372E0378B127BFC07D543 Validity Not Before: Jul 20 21:32:53 2026 GMT Not After : Jul 21 21:59:53 2026 GMT Subject: CN=6106919908EE06D54715DD7F0D7594181F1140A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3c:2b:b1:69:12:d2:06:6e:89:b0:1f:df:f7: af:b2:ba:c7:43:26:78:3a:50:d3:6a:28:65:94:ac: 0a:b4:b9:5f:74:e2:76:cd:9f:a8:6f:a1:fd:87:b4: 9c:3a:b4:96:4f:1a:00:07:b6:35:23:2b:cf:cf:f4: 15:04:95:d3:a2:d6:af:b8:86:cc:92:1b:31:0d:72: 18:b1:99:c4:d3:48:5c:18:81:05:a9:e1:44:6c:fd: 92:e6:67:0d:0d:4e:d3:8b:6f:7c:a5:22:d1:7b:e9: 51:be:d1:0d:ec:68:3d:06:07:f6:ef:71:dc:b6:15: 21:0c:f0:2a:1b:66:0d:24:98:30:f1:5b:a2:03:27: 06:c0:ae:9c:0f:28:04:f9:5b:d7:6d:8e:fb:4d:5e: 01:5c:9b:46:fe:a3:27:62:8e:fe:d6:05:67:2e:34: bd:c4:80:f0:1d:da:90:03:c8:94:9e:93:b9:03:43: 1b:a6:5a:fe:09:05:51:45:e1:85:1b:57:45:d8:58: 71:c6:00:a1:f1:a0:04:34:5a:cf:2b:fe:42:d3:f9: 2a:7f:d9:64:c4:59:74:3e:b4:88:b6:7a:6f:46:2a: d9:7e:f2:53:40:67:fc:31:45:d4:fc:cf:99:0d:28: 08:31:e9:d5:25:82:9f:f9:a9:9d:45:4a:89:87:02: 20:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:06:91:99:08:EE:06:D5:47:15:DD:7F:0D:75:94:18:1F:11:40:A9 X509v3 Authority Key Identifier: keyid:2F:F2:8E:C3:1F:A9:59:5D:4C:93:72:E0:37:8B:12:7B:FC:07:D5:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f1:c2:e4:e9:79:31:f8:9c:98:84:a5:fb:5b:16:fa:34:6c: e8:40:72:74:eb:c0:c1:53:e1:26:38:54:a9:f3:9c:a2:10:16: c7:2b:d8:3f:76:eb:67:8f:36:d6:1d:b0:ff:16:d2:5a:21:5f: 42:f9:88:77:1a:cb:8e:32:2f:9f:55:c1:fe:6d:43:b7:ec:e5: 3e:a2:b5:1c:16:ff:16:fc:11:7b:dc:c2:fa:f8:41:e5:d8:16: f4:f2:62:42:d9:74:4a:11:a4:5c:92:cb:c0:14:ee:11:b6:2b: e3:51:fa:1c:d9:d8:81:80:ec:f1:ab:61:2a:1a:48:08:42:f0: 93:4d:2e:92:2b:c6:38:fc:f3:e3:19:1b:5d:5b:1f:b7:84:a1: 6f:37:96:bf:61:31:07:3b:53:b5:ee:80:ea:e7:23:5a:13:cc: ab:5d:88:c0:fc:ab:b9:22:63:27:0f:9b:30:5f:b8:20:22:e8: 6d:ac:67:01:c4:97:ae:cd:b9:f7:ec:e4:13:2b:c7:d2:b7:5c: 3b:e8:d3:e9:d2:89:bb:ec:f9:dd:c7:55:2c:a9:35:64:41:3b: e7:df:69:ed:00:f0:df:42:fd:52:91:30:56:b7:0b:3f:71:a8: 5f:b1:c5:73:81:fa:38:2f:cc:be:74:3f:97:a0:8e:ae:52:09: ff:22:44:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXyEFAQzs16CwQx1tFTXMCDvUpkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZGMjhFQzMxRkE5NTk1RDRDOTM3MkUwMzc4QjEyN0JG QzA3RDU0MzAeFw0yNjA3MjAyMTMyNTNaFw0yNjA3MjEyMTU5NTNaMDMxMTAvBgNV BAMTKDYxMDY5MTk5MDhFRTA2RDU0NzE1REQ3RjBENzU5NDE4MUYxMTQwQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmPCuxaRLSBm6JsB/f96+yusdD Jng6UNNqKGWUrAq0uV904nbNn6hvof2HtJw6tJZPGgAHtjUjK8/P9BUEldOi1q+4 hsySGzENchixmcTTSFwYgQWp4URs/ZLmZw0NTtOLb3ylItF76VG+0Q3saD0GB/bv cdy2FSEM8CobZg0kmDDxW6IDJwbArpwPKAT5W9dtjvtNXgFcm0b+oydijv7WBWcu NL3EgPAd2pADyJSek7kDQxumWv4JBVFF4YUbV0XYWHHGAKHxoAQ0Ws8r/kLT+Sp/ 2WTEWXQ+tIi2em9GKtl+8lNAZ/wxRdT8z5kNKAgx6dUlgp/5qZ1FSomHAiALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYQaRmQjuBtVHFd1/DXWUGB8RQKkwHwYDVR0j BBgwFoAUL/KOwx+pWV1Mk3LgN4sSe/wH1UMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjZjMDYwZmItZTkzNi00YTIzLWJiZTItOTQ0NTdiZjcwOWJmLzAvMkZGMjhFQzMx RkE5NTk1RDRDOTM3MkUwMzc4QjEyN0JGQzA3RDU0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkYyOEVDMzFGQTk1OTVENEM5MzcyRTAzNzhCMTI3QkZDMDdE NTQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjZjMDYwZmItZTkzNi00YTIzLWJi ZTItOTQ0NTdiZjcwOWJmLzAvMkZGMjhFQzMxRkE5NTk1RDRDOTM3MkUwMzc4QjEy N0JGQzA3RDU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7xwuTpeTH4nJiEpftbFvo0bOhAcnTrwMFT 4SY4VKnznKIQFscr2D9262ePNtYdsP8W0lohX0L5iHcay44yL59Vwf5tQ7fs5T6i tRwW/xb8EXvcwvr4QeXYFvTyYkLZdEoRpFySy8AU7hG2K+NR+hzZ2IGA7PGrYSoa SAhC8JNNLpIrxjj88+MZG11bH7eEoW83lr9hMQc7U7XugOrnI1oTzKtdiMD8q7ki YycPmzBfuCAi6G2sZwHEl67Nuffs5BMrx9K3XDvo0+nSibvs+d3HVSypNWRBO+ff ae0A8N9C/VKRMFa3Cz9xqF+xxXOB+jgvzL50P5egjq5SCf8iRGQ= -----END CERTIFICATE-----Generated at Tue Jul 21 07:09:44 2026 by rpki-client