$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft File: C2F21005CDD8F19E492720297D0BA5C66395653F.mft (raw, json) Hash identifier: 5pjEAQVCSvFgGE9k/1hEIgsPhDYpf42CsRAZfkG+rYw= Subject key identifier: 99:8D:30:3F:4F:2B:A5:3B:3D:66:BC:33:B5:3A:3C:0B:0F:F0:92:B3 Authority key identifier: C2:F2:10:05:CD:D8:F1:9E:49:27:20:29:7D:0B:A5:C6:63:95:65:3F Certificate issuer: /CN=C2F21005CDD8F19E492720297D0BA5C66395653F Certificate serial: 63395F7A057675ECEB32F51A03AD5CDC55E3AF00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 11:50:58 +0000 Manifest this update: Mon 20 Jul 2026 11:45:58 +0000 Manifest next update: Tue 21 Jul 2026 14:15:58 +0000 Files and hashes: 1: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: 4WF38lDugkx4g5GWHdzVk5hRBqpGlU+mntDxAYWnRfU=) 2: C2F21005CDD8F19E492720297D0BA5C66395653F.crl (hash: /ry9PChTFm0Dj53P67QPHTyaLEEnXxzZd9ZYVtjcg4s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.crl rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:39:5f:7a:05:76:75:ec:eb:32:f5:1a:03:ad:5c:dc:55:e3:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2F21005CDD8F19E492720297D0BA5C66395653F Validity Not Before: Jul 20 11:45:58 2026 GMT Not After : Jul 21 14:15:58 2026 GMT Subject: CN=998D303F4F2BA53B3D66BC33B53A3C0B0FF092B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:67:67:ea:ab:4f:3f:39:b3:f8:af:f8:aa:fb: 85:6c:89:d8:c3:35:91:57:52:6c:37:8c:16:10:cf: ac:90:5c:d9:19:bf:20:f1:ae:23:ac:36:16:c0:55: 74:c3:76:b7:2c:07:ed:93:28:02:8d:71:2e:81:39: 62:df:41:62:65:5c:63:9d:2f:51:a8:59:ec:0f:bd: 28:8e:84:49:ed:e8:a0:31:5a:0e:2d:45:a9:90:e0: c6:d0:c1:50:7a:34:4c:f5:9c:ba:99:e4:b2:3c:6c: 31:23:33:1c:4d:fc:e6:28:c6:2f:9e:26:47:3c:90: 42:79:e7:a0:b8:26:28:ac:3c:db:21:67:e6:a5:55: 7d:3c:35:6f:e6:47:42:5d:24:4d:d6:5b:e2:76:63: 25:3b:a9:f8:f2:b6:3e:3d:f1:f4:fd:2e:47:b4:dd: 55:63:c5:4b:49:1e:01:16:af:d4:3e:19:6e:b3:e8: ff:9f:d2:e0:bf:6c:97:1b:10:46:cc:d7:0b:53:dd: 84:64:75:9c:e8:0a:72:80:37:91:ee:c4:b7:78:88: af:6d:5b:a0:9f:a7:ae:36:f3:58:27:6f:04:8a:a8: 1e:7c:35:e8:f7:66:c3:5e:10:8d:b9:14:cd:de:55: a7:29:ce:2d:db:be:6b:54:60:87:45:5f:99:8a:6d: ad:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8D:30:3F:4F:2B:A5:3B:3D:66:BC:33:B5:3A:3C:0B:0F:F0:92:B3 X509v3 Authority Key Identifier: keyid:C2:F2:10:05:CD:D8:F1:9E:49:27:20:29:7D:0B:A5:C6:63:95:65:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:2b:ee:7c:cf:84:17:de:53:b0:dc:2f:ac:4d:d9:3d:56:19: 39:a5:f6:6d:89:d0:25:ce:c4:83:29:02:ff:13:a9:d0:79:cb: b0:b1:17:a8:4d:00:9a:14:e1:ad:b3:d6:3e:71:95:ac:38:9b: 01:35:1c:44:f2:5b:f0:55:a2:91:25:48:e2:e3:e8:87:6d:86: 63:e9:3e:3f:b1:c1:c3:62:42:01:a3:f2:34:3e:c9:6a:ef:fc: 23:29:1f:4a:f5:b3:0d:bc:54:79:e7:90:80:c3:75:15:2c:33: aa:0c:f2:86:f6:47:13:f5:41:49:ca:69:e8:e9:c2:83:28:7a: fd:2d:8c:f3:b7:8f:33:4c:91:8f:c8:66:10:e2:4e:8c:c3:ee: 5a:27:20:29:0f:89:53:36:af:77:b5:7b:65:bb:d6:98:95:8a: fd:47:f4:a2:b1:42:e1:f2:27:50:91:1f:04:74:e9:05:f1:d7: 8b:51:49:d0:3e:dc:55:3c:1d:8a:72:7b:e9:ed:f8:ba:ba:65: 09:93:a1:63:80:f9:b7:4b:b2:01:b0:07:ac:a6:b1:7f:58:2c: bf:0f:b3:40:8c:ab:3b:42:64:92:6d:52:fd:a7:6a:cd:88:9d: 17:20:54:0b:fe:e4:f7:e8:4e:bd:61:5b:7d:d7:7b:9e:18:4b: bc:11:14:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYzlfegV2dezrMvUaA61c3FXjrwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJGMjEwMDVDREQ4RjE5RTQ5MjcyMDI5N0QwQkE1QzY2 Mzk1NjUzRjAeFw0yNjA3MjAxMTQ1NThaFw0yNjA3MjExNDE1NThaMDMxMTAvBgNV BAMTKDk5OEQzMDNGNEYyQkE1M0IzRDY2QkMzM0I1M0EzQzBCMEZGMDkyQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwZ2fqq08/ObP4r/iq+4VsidjD NZFXUmw3jBYQz6yQXNkZvyDxriOsNhbAVXTDdrcsB+2TKAKNcS6BOWLfQWJlXGOd L1GoWewPvSiOhEnt6KAxWg4tRamQ4MbQwVB6NEz1nLqZ5LI8bDEjMxxN/OYoxi+e Jkc8kEJ556C4JiisPNshZ+alVX08NW/mR0JdJE3WW+J2YyU7qfjytj498fT9Lke0 3VVjxUtJHgEWr9Q+GW6z6P+f0uC/bJcbEEbM1wtT3YRkdZzoCnKAN5HuxLd4iK9t W6Cfp64281gnbwSKqB58Nej3ZsNeEI25FM3eVacpzi3bvmtUYIdFX5mKba29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmY0wP08rpTs9ZrwztTo8Cw/wkrMwHwYDVR0j BBgwFoAUwvIQBc3Y8Z5JJyApfQulxmOVZT8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZmYmFmNzEtMmQ1Ny00ZTRhLTkxZDAtY2FjOGFiMGFjZWZlLzAvQzJGMjEwMDVD REQ4RjE5RTQ5MjcyMDI5N0QwQkE1QzY2Mzk1NjUzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkYyMTAwNUNERDhGMTlFNDkyNzIwMjk3RDBCQTVDNjYzOTU2 NTNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvQzJGMjEwMDVDREQ4RjE5RTQ5MjcyMDI5N0QwQkE1 QzY2Mzk1NjUzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAr7nzPhBfeU7DcL6xN2T1WGTml9m2J0CXO xIMpAv8TqdB5y7CxF6hNAJoU4a2z1j5xlaw4mwE1HETyW/BVopElSOLj6IdthmPp Pj+xwcNiQgGj8jQ+yWrv/CMpH0r1sw28VHnnkIDDdRUsM6oM8ob2RxP1QUnKaejp woMoev0tjPO3jzNMkY/IZhDiTozD7lonICkPiVM2r3e1e2W71piViv1H9KKxQuHy J1CRHwR06QXx14tRSdA+3FU8HYpye+nt+Lq6ZQmToWOA+bdLsgGwB6ymsX9YLL8P s0CMqztCZJJtUv2nas2InRcgVAv+5PfoTr1hW33Xe54YS7wRFEc= -----END CERTIFICATE-----Generated at Tue Jul 21 06:26:12 2026 by rpki-client