$ rpki-client -vvf rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft File: 2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft (raw, json) Hash identifier: 5Km6sTtRrZ7dmr6BUg70d47ZlE+DvCCt5PtiTl3H8jk= Subject key identifier: 9B:E6:77:1D:C5:C3:20:31:40:E6:29:C8:24:2D:91:9E:9C:1B:36:73 Authority key identifier: 2A:0F:66:41:16:FB:E2:E0:71:7E:83:DF:D4:F2:B6:ED:EB:09:E1:7E Certificate issuer: /CN=2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E Certificate serial: 6F1DFA469E74EB0D8839E042A3D2846171EBC677 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 13:48:40 +0000 Manifest this update: Mon 20 Jul 2026 13:43:40 +0000 Manifest next update: Tue 21 Jul 2026 16:58:40 +0000 Files and hashes: 1: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (hash: MDqOFg62hmCAUHW4Muj3krYCTsgPpqhMHNl5EdSS1rQ=) 2: 3130332e36372e39302e302f32342d3234203d3e20313532303035.roa (hash: D74+LFtaiM6p1bNo+g/DP+Bfx1wgVTvyGuc6jRnjUKM=) 3: 3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (hash: /Da4Pm0aCGjoevGiiRcx0Xt7whtWvoaG8WYvVgD2NtQ=) 4: 323030313a6466333a316363303a3a2f34382d3438203d3e20313532303035.roa (hash: 6lgQliV3qWJWSqE96iH08yO2bxxIknhiUKxtAeSrcOo=) 5: 2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl (hash: 5jcbMi7bAAZyAyGE8iAvgWPFgfKjkehFRKBSOYSa9dI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:1d:fa:46:9e:74:eb:0d:88:39:e0:42:a3:d2:84:61:71:eb:c6:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E Validity Not Before: Jul 20 13:43:40 2026 GMT Not After : Jul 21 16:58:40 2026 GMT Subject: CN=9BE6771DC5C3203140E629C8242D919E9C1B3673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b2:8a:90:e9:a1:49:a3:4b:47:ef:40:95:be: a3:f6:17:34:c1:b8:68:5c:cf:63:d5:3d:2b:fc:25: 73:77:72:e9:89:74:0e:8c:60:9e:e1:41:d7:47:d8: 5c:48:da:84:12:1f:a2:fe:7a:ce:ba:cd:8b:d2:64: 85:71:5b:04:94:b0:27:0d:c8:50:18:45:53:84:1c: 7a:bd:7f:bf:3d:9b:b3:eb:54:73:57:c0:62:3e:9a: 6a:95:db:a1:f1:e4:76:4e:7a:4f:5f:9f:ce:49:bc: 26:f0:c0:f4:54:0f:92:b3:db:2f:a5:2b:e0:60:ed: 76:32:7e:7b:e8:5a:6d:a3:49:ff:06:f2:d0:20:a3: 95:65:ba:8a:e0:cf:80:fd:05:ec:ee:73:5d:96:ba: d3:61:28:d5:f5:77:56:0d:8e:67:ca:69:1c:0d:2f: 95:57:cc:59:c5:76:0c:c0:45:53:19:35:23:e9:8c: 1f:89:96:d4:a0:04:bc:b7:24:4f:f5:9b:44:53:e5: 74:a6:59:83:aa:fa:f0:45:85:15:84:2d:44:1c:d3: 9c:3a:2b:f3:3f:66:5c:5e:bd:9a:22:ae:98:50:5c: 08:d4:e6:04:73:d4:07:a5:a7:55:90:5a:e4:2f:75: 9d:1f:ad:37:13:f7:57:3a:4d:c6:7f:42:fc:2b:6c: d7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E6:77:1D:C5:C3:20:31:40:E6:29:C8:24:2D:91:9E:9C:1B:36:73 X509v3 Authority Key Identifier: keyid:2A:0F:66:41:16:FB:E2:E0:71:7E:83:DF:D4:F2:B6:ED:EB:09:E1:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5b:50:c9:0f:56:f1:51:5d:38:49:82:06:13:bf:c9:77:d8: 68:2c:0b:a6:b6:07:d8:46:08:c0:cc:ce:2f:69:c6:3e:59:6f: 3c:65:0b:20:1d:7f:4c:e6:8e:cf:8e:89:7b:32:bb:13:2e:96: bc:45:5e:93:41:c4:a2:dd:a0:68:e4:75:bf:a3:6e:18:c3:9e: 04:90:2f:aa:9d:66:ad:9d:0f:c2:26:48:49:02:5b:99:7a:9c: 17:d6:95:46:34:3b:d8:a5:cc:fd:bd:37:b3:03:a1:f6:3a:1b: 7a:87:92:90:59:97:88:b9:e2:8e:a7:05:c1:f9:2e:6e:01:2c: 6e:9b:0d:d5:33:8e:9a:4f:56:ef:3e:a4:eb:fe:e0:0d:d3:f3: 21:a2:28:1e:79:b3:5e:a0:e6:18:f8:85:c9:15:ac:72:a3:1c: 22:5e:27:9a:14:68:e4:d8:ba:0a:91:65:44:6f:df:de:bf:3d: 42:73:dd:f7:92:85:96:ee:ca:73:2b:85:f0:d4:b8:9f:6d:0e: 85:8c:2a:8d:12:56:92:97:38:93:3e:dc:ab:cc:3a:0b:63:f8: fc:a9:93:a8:f9:22:66:74:94:c8:98:d5:27:c6:8a:f6:c3:8d: 47:71:f7:a8:ea:5a:8e:48:2a:18:06:a1:55:53:af:57:c5:a0: 7b:3e:5f:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbx36Rp506w2IOeBCo9KEYXHrxncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwRjY2NDExNkZCRTJFMDcxN0U4M0RGRDRGMkI2RURF QjA5RTE3RTAeFw0yNjA3MjAxMzQzNDBaFw0yNjA3MjExNjU4NDBaMDMxMTAvBgNV BAMTKDlCRTY3NzFEQzVDMzIwMzE0MEU2MjlDODI0MkQ5MTlFOUMxQjM2NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLsoqQ6aFJo0tH70CVvqP2FzTB uGhcz2PVPSv8JXN3cumJdA6MYJ7hQddH2FxI2oQSH6L+es66zYvSZIVxWwSUsCcN yFAYRVOEHHq9f789m7PrVHNXwGI+mmqV26Hx5HZOek9fn85JvCbwwPRUD5Kz2y+l K+Bg7XYyfnvoWm2jSf8G8tAgo5Vluorgz4D9Bezuc12WutNhKNX1d1YNjmfKaRwN L5VXzFnFdgzARVMZNSPpjB+JltSgBLy3JE/1m0RT5XSmWYOq+vBFhRWELUQc05w6 K/M/ZlxevZoirphQXAjU5gRz1Aelp1WQWuQvdZ0frTcT91c6TcZ/QvwrbNcFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm+Z3HcXDIDFA5inIJC2RnpwbNnMwHwYDVR0j BBgwFoAUKg9mQRb74uBxfoPf1PK27esJ4X4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg0ODg1MTktOGYwNC00NGY1LTgzMTItOGQ5ZDM2MTZkMGQ5LzAvMkEwRjY2NDEx NkZCRTJFMDcxN0U4M0RGRDRGMkI2RURFQjA5RTE3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTBGNjY0MTE2RkJFMkUwNzE3RTgzREZENEYyQjZFREVCMDlF MTdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg0ODg1MTktOGYwNC00NGY1LTgz MTItOGQ5ZDM2MTZkMGQ5LzAvMkEwRjY2NDExNkZCRTJFMDcxN0U4M0RGRDRGMkI2 RURFQjA5RTE3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5bUMkPVvFRXThJggYTv8l32GgsC6a2B9hG CMDMzi9pxj5ZbzxlCyAdf0zmjs+OiXsyuxMulrxFXpNBxKLdoGjkdb+jbhjDngSQ L6qdZq2dD8ImSEkCW5l6nBfWlUY0O9ilzP29N7MDofY6G3qHkpBZl4i54o6nBcH5 Lm4BLG6bDdUzjppPVu8+pOv+4A3T8yGiKB55s16g5hj4hckVrHKjHCJeJ5oUaOTY ugqRZURv396/PUJz3feShZbuynMrhfDUuJ9tDoWMKo0SVpKXOJM+3KvMOgtj+Pyp k6j5ImZ0lMiY1SfGivbDjUdx96jqWo5IKhgGoVVTr1fFoHs+Xy8= -----END CERTIFICATE-----Generated at Tue Jul 21 06:29:16 2026 by rpki-client