$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft File: 2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft (raw, json) Hash identifier: RoK/cob0Z+sGA3l7GBlRD9+QQOmghLV4aJaCCFjZ6Js= Subject key identifier: 88:47:0F:B7:32:99:85:37:48:0C:DC:45:39:A9:EF:1B:01:21:7D:EB Authority key identifier: 2D:4E:F7:6F:F5:F1:DE:08:B9:FB:7C:AE:D4:9A:F7:AD:4C:60:18:35 Certificate issuer: /CN=2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835 Certificate serial: 790C939C63846952F49EBC1F99FFC1218D7FC626 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 20:21:27 +0000 Manifest this update: Mon 20 Jul 2026 20:16:27 +0000 Manifest next update: Tue 21 Jul 2026 23:37:27 +0000 Files and hashes: 1: 2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl (hash: REyYCFx2g5c3WFfKH0ZgIqCvc5OTdMHNNXbKkR4+5Wo=) 2: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: +vElMuoXueIlORLkNX9hNN9LTELx3Cm8ZNhxGm0p8LM=) 3: 3130332e31392e35362e302f32322d3232203d3e20313332363337.roa (hash: JZgdRbJu890tbXcbh9Oxv/c/hndsIuQkwCj004yU0ZY=) 4: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (hash: gCsatGRm4KYeS4xTuGnz+oT2rG5lR5XCvd8UnIJR5JU=) 5: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: abfZiYldhdnO1xBcxOi/v0tih5cS8BcQKFP2Z8xIlZI=) 6: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: Lvw5pO2bg6firYOVJrL24L/mVS2H6b/TJe2TV+FnMQs=) 7: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: Qy2f1Th+IuSFin6EsJuwgkXChR1+TY6gnLgDe+ouGOE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0c:93:9c:63:84:69:52:f4:9e:bc:1f:99:ff:c1:21:8d:7f:c6:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835 Validity Not Before: Jul 20 20:16:27 2026 GMT Not After : Jul 21 23:37:27 2026 GMT Subject: CN=88470FB732998537480CDC4539A9EF1B01217DEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3b:98:64:a2:60:d5:a8:54:75:02:e5:23:0d: c8:42:ef:93:2d:c7:07:ac:14:32:da:eb:d2:9c:db: ba:6d:17:00:4c:54:75:35:50:a1:ba:67:b0:df:c5: 6d:7f:55:cb:cf:f9:47:b5:d3:79:f0:4f:bd:85:41: f2:6a:b8:d8:9c:54:93:87:75:0a:fc:60:cd:21:58: a4:35:05:2a:bc:73:8b:49:52:94:a8:3b:c4:11:88: e2:2e:f4:72:93:d1:5f:db:a3:16:9f:40:1e:e9:d8: 9a:63:03:84:5a:61:fc:9e:aa:73:85:17:9d:02:46: b1:f3:0e:15:f6:6d:a8:a9:9c:ec:8d:87:5d:57:95: 4e:bf:f9:14:a7:39:4f:1b:e4:15:99:35:7c:00:e5: 19:3f:e7:47:6f:9c:2b:02:f9:1f:cc:9f:a5:68:dd: ac:7f:ae:d6:d3:a4:7e:f5:53:a1:98:f7:cb:e1:0e: 03:2a:f1:bf:40:84:4d:80:f4:1f:a3:7e:9d:34:79: 62:3d:95:51:32:31:8b:0c:34:16:3e:93:70:ed:1d: be:fc:c2:cd:b8:e5:d9:83:45:6b:b2:74:40:6d:3a: 79:a0:eb:34:7b:16:71:ae:85:04:ba:b5:52:b3:16: 13:f3:9c:9d:b9:f6:2a:bf:e2:80:d4:61:34:4f:72: f9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:47:0F:B7:32:99:85:37:48:0C:DC:45:39:A9:EF:1B:01:21:7D:EB X509v3 Authority Key Identifier: keyid:2D:4E:F7:6F:F5:F1:DE:08:B9:FB:7C:AE:D4:9A:F7:AD:4C:60:18:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:b7:84:0e:38:f1:f1:a3:b9:a5:d3:0e:c5:e4:d5:40:42:7d: 1b:e3:a2:e6:c6:ac:83:ae:62:cb:0b:74:31:71:02:6e:72:dd: 40:44:ef:1f:b1:46:e9:ee:6c:1b:de:1e:38:08:e5:0d:b2:14: eb:0f:30:9f:51:09:c3:39:bb:d4:e1:58:d3:6a:32:83:c0:1f: e9:fb:93:a1:9d:3b:eb:09:2d:3d:9d:38:f0:64:a5:10:f3:cf: 56:46:24:fa:f6:03:15:6f:88:6e:62:a1:24:de:96:09:61:d2: a6:c5:a5:40:69:ce:19:e6:d4:84:5b:21:61:ac:19:91:56:0a: 20:23:a6:97:45:b7:0a:cd:ba:7d:d9:5b:84:f4:17:b1:b0:f6: 3c:6e:f5:9d:51:7e:12:7c:a8:27:f5:0c:77:8e:75:5d:26:13: 50:4d:42:60:39:42:13:55:05:23:28:f7:69:3d:63:b3:be:b3: 37:ab:1d:e7:0c:0b:50:c3:46:c6:75:ad:9b:20:6d:e0:00:ea: 4f:19:dc:fb:6e:ed:47:ad:5a:ba:3d:3a:94:52:45:5f:46:57: ff:df:b7:36:5e:ec:fc:56:39:37:e9:69:b4:3a:f4:bc:19:43: 27:a2:75:9c:22:47:58:a1:d3:a0:b3:6e:e6:21:5c:fa:1e:b3: 78:18:7e:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQyTnGOEaVL0nrwfmf/BIY1/xiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ0RUY3NkZGNUYxREUwOEI5RkI3Q0FFRDQ5QUY3QUQ0 QzYwMTgzNTAeFw0yNjA3MjAyMDE2MjdaFw0yNjA3MjEyMzM3MjdaMDMxMTAvBgNV BAMTKDg4NDcwRkI3MzI5OTg1Mzc0ODBDREM0NTM5QTlFRjFCMDEyMTdERUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUO5hkomDVqFR1AuUjDchC75Mt xwesFDLa69Kc27ptFwBMVHU1UKG6Z7DfxW1/VcvP+Ue103nwT72FQfJquNicVJOH dQr8YM0hWKQ1BSq8c4tJUpSoO8QRiOIu9HKT0V/boxafQB7p2JpjA4RaYfyeqnOF F50CRrHzDhX2baipnOyNh11XlU6/+RSnOU8b5BWZNXwA5Rk/50dvnCsC+R/Mn6Vo 3ax/rtbTpH71U6GY98vhDgMq8b9AhE2A9B+jfp00eWI9lVEyMYsMNBY+k3DtHb78 ws245dmDRWuydEBtOnmg6zR7FnGuhQS6tVKzFhPznJ259iq/4oDUYTRPcvm9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiEcPtzKZhTdIDNxFOanvGwEhfeswHwYDVR0j BBgwFoAULU73b/Xx3gi5+3yu1Jr3rUxgGDUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQwOTI3ZTYtOGEwYS00ZmE3LTg5NjktOWZiOWQ2OTQzOTdjLzAvMkQ0RUY3NkZG NUYxREUwOEI5RkI3Q0FFRDQ5QUY3QUQ0QzYwMTgzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDRFRjc2RkY1RjFERTA4QjlGQjdDQUVENDlBRjdBRDRDNjAx ODM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQwOTI3ZTYtOGEwYS00ZmE3LTg5 NjktOWZiOWQ2OTQzOTdjLzAvMkQ0RUY3NkZGNUYxREUwOEI5RkI3Q0FFRDQ5QUY3 QUQ0QzYwMTgzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFe3hA448fGjuaXTDsXk1UBCfRvjoubGrIOu YssLdDFxAm5y3UBE7x+xRunubBveHjgI5Q2yFOsPMJ9RCcM5u9ThWNNqMoPAH+n7 k6GdO+sJLT2dOPBkpRDzz1ZGJPr2AxVviG5ioSTelglh0qbFpUBpzhnm1IRbIWGs GZFWCiAjppdFtwrNun3ZW4T0F7Gw9jxu9Z1RfhJ8qCf1DHeOdV0mE1BNQmA5QhNV BSMo92k9Y7O+szerHecMC1DDRsZ1rZsgbeAA6k8Z3Ptu7UetWro9OpRSRV9GV//f tzZe7PxWOTfpabQ69LwZQyeidZwiR1ih06CzbuYhXPoes3gYflo= -----END CERTIFICATE-----Generated at Tue Jul 21 06:35:52 2026 by rpki-client