$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft File: 7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft (raw, json) Hash identifier: 9ah5BmEh6CTwnEh+4rlua98moyGQbxOa1w0ZU/72iBE= Subject key identifier: 2C:07:E4:53:FB:28:D8:81:7E:2F:F8:F1:9E:44:55:74:D3:3E:CE:2B Authority key identifier: 70:31:10:4F:FC:B4:E1:D0:46:34:76:44:5B:DF:D8:AA:B4:A4:FB:42 Certificate issuer: /CN=7031104FFCB4E1D0463476445BDFD8AAB4A4FB42 Certificate serial: 212A3DD3072C8AED16B685A580184E3B8A41DEF2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 17:12:41 +0000 Manifest this update: Mon 20 Jul 2026 17:07:41 +0000 Manifest next update: Tue 21 Jul 2026 17:54:41 +0000 Files and hashes: 1: 7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl (hash: VvFCMKRFDCa1fPooPBbNuZ+IoJuXotgy6EG0ICqR7js=) 2: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: UMQrtxzU7bwTSmrEo5CM/EREbdAjBsi84Zf8mlGLlNk=) 3: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: UTfVl36IBhOzG0Z82kRsRWQYHXTuWdTZ5yU2IO9JgDg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:2a:3d:d3:07:2c:8a:ed:16:b6:85:a5:80:18:4e:3b:8a:41:de:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7031104FFCB4E1D0463476445BDFD8AAB4A4FB42 Validity Not Before: Jul 20 17:07:41 2026 GMT Not After : Jul 21 17:54:41 2026 GMT Subject: CN=2C07E453FB28D8817E2FF8F19E445574D33ECE2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a8:1f:80:c1:85:af:55:64:94:20:d6:67:bb: 47:ac:ca:29:0b:9a:7d:14:55:7b:14:c9:f1:fd:7b: 00:a9:76:32:23:ba:6c:a8:2c:a2:e3:09:64:0d:69: 2c:36:fb:2f:e9:55:c7:e6:97:bc:0b:90:94:5b:5e: e3:1d:35:ad:84:20:1d:7d:d7:55:a1:a5:2c:13:ac: 90:94:db:a0:b7:67:0f:0b:b4:e6:97:c8:c2:0a:fe: cb:21:4c:e4:65:6c:d2:77:06:88:a9:91:71:71:19: ce:9e:79:fa:18:89:52:bd:6e:45:1f:b7:c0:ee:b5: 15:5d:4f:14:3b:5b:e3:88:69:4f:c0:89:64:14:56: d6:6d:41:37:11:d7:17:e1:d8:b6:c8:54:7d:38:74: 76:c7:58:9b:2f:5a:96:54:91:95:fa:cf:90:80:ef: 32:8b:71:6f:60:fc:6e:5f:6e:71:ed:10:a6:e8:0c: 29:cf:77:da:0b:a4:9b:a6:8f:1d:b6:88:a3:02:53: 6e:8e:23:b9:20:89:22:74:d4:6a:92:d9:52:d1:c5: 83:e2:3f:4c:27:95:cc:63:af:50:60:69:d5:89:fe: d5:2a:96:70:5f:d9:29:c0:2b:0a:59:a2:8d:99:2b: 52:7b:18:3e:40:3c:bf:e2:e3:28:0e:a3:eb:c3:cc: 4b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:07:E4:53:FB:28:D8:81:7E:2F:F8:F1:9E:44:55:74:D3:3E:CE:2B X509v3 Authority Key Identifier: keyid:70:31:10:4F:FC:B4:E1:D0:46:34:76:44:5B:DF:D8:AA:B4:A4:FB:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:9f:37:e0:a1:d9:38:1b:85:8a:43:cc:ef:20:ef:4e:9a:df: 05:b4:cb:69:7d:e8:7a:93:0d:3a:98:f1:26:32:f3:6e:15:be: e1:68:35:c7:15:59:4b:5e:d5:9c:ba:ad:b2:60:7b:9b:77:c4: 74:16:a8:7f:03:f0:29:3d:6d:31:28:e8:a0:24:b7:c8:f1:2c: eb:49:76:27:d7:00:4b:75:c2:c5:1d:58:76:1b:78:5b:46:20: 98:67:3a:58:88:8b:54:87:8e:9f:4c:00:70:ab:0f:9d:fe:f2: d1:0e:c8:79:c1:01:ad:9f:e2:52:80:c5:e2:bf:da:da:93:72: b9:ab:9d:64:ce:5a:06:3d:48:b1:ec:cb:c6:20:44:10:da:63: a2:e3:b1:a2:3f:00:71:67:f6:f4:3b:92:7f:2b:e7:dd:58:3a: 28:64:d7:5d:30:bb:4c:ac:4f:45:c7:6e:c1:f1:10:e0:58:a1: 81:3b:b9:69:83:a5:7c:78:c2:57:bd:90:18:3a:9f:2e:1e:1c: 12:7b:e3:40:8a:f3:57:38:3f:e9:5d:80:d1:32:48:c7:dd:f9: a7:00:07:d9:25:3d:ac:5b:d4:c2:6f:52:3f:06:09:1f:91:e6: f8:1f:92:0f:6f:c8:bf:07:d6:cf:b9:8f:cd:2c:b9:21:f3:e0: 7e:07:4d:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUISo90wcsiu0WtoWlgBhOO4pB3vIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzMTEwNEZGQ0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4QUFC NEE0RkI0MjAeFw0yNjA3MjAxNzA3NDFaFw0yNjA3MjExNzU0NDFaMDMxMTAvBgNV BAMTKDJDMDdFNDUzRkIyOEQ4ODE3RTJGRjhGMTlFNDQ1NTc0RDMzRUNFMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6qB+AwYWvVWSUINZnu0esyikL mn0UVXsUyfH9ewCpdjIjumyoLKLjCWQNaSw2+y/pVcfml7wLkJRbXuMdNa2EIB19 11WhpSwTrJCU26C3Zw8LtOaXyMIK/sshTORlbNJ3BoipkXFxGc6eefoYiVK9bkUf t8DutRVdTxQ7W+OIaU/AiWQUVtZtQTcR1xfh2LbIVH04dHbHWJsvWpZUkZX6z5CA 7zKLcW9g/G5fbnHtEKboDCnPd9oLpJumjx22iKMCU26OI7kgiSJ01GqS2VLRxYPi P0wnlcxjr1BgadWJ/tUqlnBf2SnAKwpZoo2ZK1J7GD5APL/i4ygOo+vDzEuvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULAfkU/so2IF+L/jxnkRVdNM+ziswHwYDVR0j BBgwFoAUcDEQT/y04dBGNHZEW9/YqrSk+0IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJiZTY4MTUtMzEwZS00MjA2LWE1MDAtNmJiOWQzMjYzYWJmLzAvNzAzMTEwNEZG Q0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4QUFCNEE0RkI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDMxMTA0RkZDQjRFMUQwNDYzNDc2NDQ1QkRGRDhBQUI0QTRG QjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJiZTY4MTUtMzEwZS00MjA2LWE1 MDAtNmJiOWQzMjYzYWJmLzAvNzAzMTEwNEZGQ0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4 QUFCNEE0RkI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKfN+Ch2TgbhYpDzO8g706a3wW0y2l96HqT DTqY8SYy824VvuFoNccVWUte1Zy6rbJge5t3xHQWqH8D8Ck9bTEo6KAkt8jxLOtJ difXAEt1wsUdWHYbeFtGIJhnOliIi1SHjp9MAHCrD53+8tEOyHnBAa2f4lKAxeK/ 2tqTcrmrnWTOWgY9SLHsy8YgRBDaY6LjsaI/AHFn9vQ7kn8r591YOihk110wu0ys T0XHbsHxEOBYoYE7uWmDpXx4wle9kBg6ny4eHBJ740CK81c4P+ldgNEySMfd+acA B9klPaxb1MJvUj8GCR+R5vgfkg9vyL8H1s+5j80suSHz4H4HTbI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:05 2026 by rpki-client