$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft File: 2E714C194A9AD07684B017C191F12805054E1FC8.mft (raw, json) Hash identifier: t3Cc4xnHcSlQiT8AilgyZtbob29Sk+VSasjrj2Psy34= Subject key identifier: EB:24:8F:4E:EE:DF:62:3B:17:5D:49:65:CB:57:2B:B4:8A:5B:66:86 Authority key identifier: 2E:71:4C:19:4A:9A:D0:76:84:B0:17:C1:91:F1:28:05:05:4E:1F:C8 Certificate issuer: /CN=2E714C194A9AD07684B017C191F12805054E1FC8 Certificate serial: 177439F03166210F4E8A79470854BDAD66BC041D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 11:20:27 +0000 Manifest this update: Mon 20 Jul 2026 11:15:27 +0000 Manifest next update: Tue 21 Jul 2026 15:02:27 +0000 Files and hashes: 1: 3130332e3136302e3139332e302f32342d3234203d3e20313530353433.roa (hash: pi7opShYJXpPoFXhyGT9aMrMLC59BMPBUsNaZoHvFnY=) 2: 2E714C194A9AD07684B017C191F12805054E1FC8.crl (hash: zE5p963cLq0aENKPh2qxTg7X0o+nMxo+PLG/OT24EUc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.crl rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:74:39:f0:31:66:21:0f:4e:8a:79:47:08:54:bd:ad:66:bc:04:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E714C194A9AD07684B017C191F12805054E1FC8 Validity Not Before: Jul 20 11:15:27 2026 GMT Not After : Jul 21 15:02:27 2026 GMT Subject: CN=EB248F4EEEDF623B175D4965CB572BB48A5B6686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:91:4a:dd:8d:21:ee:db:31:38:1c:a0:62:25: 68:a9:f4:dd:f4:6a:d5:b2:08:0a:64:c9:88:c4:76: f0:37:06:54:60:7e:b2:bd:22:f1:c0:80:f9:a4:48: 0d:d5:55:2c:20:f2:89:06:c5:e7:40:c1:87:71:e7: e3:09:8a:07:91:42:a4:84:49:77:c7:4b:39:98:44: 48:1a:cc:16:f0:68:80:f1:c9:0c:fe:9f:b7:43:a4: 97:be:90:9b:de:76:a2:7f:00:ba:62:e3:fa:1b:3a: f4:85:19:b9:79:32:0c:44:38:8a:91:31:b0:9f:f6: 16:c3:07:74:38:97:2b:46:15:6f:cb:bb:94:2e:ab: a0:f6:63:c3:20:f8:c3:1a:e1:4d:e6:2e:20:c2:46: 6c:e0:4d:72:5b:8c:69:a3:89:19:39:f6:34:ec:8f: 2e:ee:44:d2:35:09:af:b6:6a:91:be:2f:a5:33:00: c4:72:c1:90:99:ad:b5:56:a7:68:0b:4a:6e:14:67: 95:23:09:55:61:f3:43:0c:49:8c:48:96:9e:22:53: 99:a7:0a:97:9f:2d:d5:c6:e6:9b:6e:05:1f:c5:39: f3:1f:30:bb:61:70:3b:58:74:f5:89:92:c6:78:b6: c2:da:94:37:e0:c9:aa:6b:e3:3b:28:87:65:cb:2d: 00:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:24:8F:4E:EE:DF:62:3B:17:5D:49:65:CB:57:2B:B4:8A:5B:66:86 X509v3 Authority Key Identifier: keyid:2E:71:4C:19:4A:9A:D0:76:84:B0:17:C1:91:F1:28:05:05:4E:1F:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:e0:62:e8:79:76:78:a7:37:c8:2c:6b:2d:ba:16:7e:41:34: f5:db:b3:4b:08:98:6a:84:f1:9c:6f:a9:41:62:e8:92:0e:55: 1b:cc:74:36:c5:a5:36:b2:c3:f0:3d:79:f9:9a:ee:58:71:98: 44:b4:b9:63:47:85:14:f2:9a:10:bb:0f:5c:d1:82:b1:c7:55: c7:9c:47:6f:4d:6b:cb:d2:b3:c2:2f:53:c6:ec:58:0c:51:d8: 89:b9:b3:24:1c:58:fc:0a:5d:2d:2b:15:76:f5:ed:c6:18:7f: 4e:08:aa:b1:4a:16:96:0a:37:9a:dc:9f:7b:1f:af:52:e4:74: 0f:d1:0d:90:84:a2:ec:33:69:65:39:5a:9b:f4:7f:4b:a1:1e: 66:67:c2:b5:39:97:82:11:e5:37:ef:ae:25:fb:f8:05:b4:c2: 76:0d:19:7c:2c:58:b9:7d:24:b1:cb:06:2c:8a:31:46:04:a3: ad:80:e4:79:b5:83:bd:d4:1c:4a:f3:be:e4:4b:f8:d1:8e:df: ad:c9:2f:d7:f0:81:92:5d:9d:8a:99:56:f5:e3:d6:62:d2:12: f2:3d:35:dd:2e:28:06:d5:13:f1:6f:eb:78:1d:cf:1a:ec:ca: e4:0e:c9:fb:2a:34:93:be:99:d0:86:7c:cf:6b:e9:83:5e:20: 50:71:48:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF3Q58DFmIQ9OinlHCFS9rWa8BB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU3MTRDMTk0QTlBRDA3Njg0QjAxN0MxOTFGMTI4MDUw NTRFMUZDODAeFw0yNjA3MjAxMTE1MjdaFw0yNjA3MjExNTAyMjdaMDMxMTAvBgNV BAMTKEVCMjQ4RjRFRUVERjYyM0IxNzVENDk2NUNCNTcyQkI0OEE1QjY2ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzkUrdjSHu2zE4HKBiJWip9N30 atWyCApkyYjEdvA3BlRgfrK9IvHAgPmkSA3VVSwg8okGxedAwYdx5+MJigeRQqSE SXfHSzmYREgazBbwaIDxyQz+n7dDpJe+kJvedqJ/ALpi4/obOvSFGbl5MgxEOIqR MbCf9hbDB3Q4lytGFW/Lu5Quq6D2Y8Mg+MMa4U3mLiDCRmzgTXJbjGmjiRk59jTs jy7uRNI1Ca+2apG+L6UzAMRywZCZrbVWp2gLSm4UZ5UjCVVh80MMSYxIlp4iU5mn CpefLdXG5ptuBR/FOfMfMLthcDtYdPWJksZ4tsLalDfgyapr4zsoh2XLLQCHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ySPTu7fYjsXXUlly1crtIpbZoYwHwYDVR0j BBgwFoAULnFMGUqa0HaEsBfBkfEoBQVOH8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NiM2IwMGItYWQ3Yi00ODQ5LWIwYjItZTI0OWEyZmE2MDRhLzAvMkU3MTRDMTk0 QTlBRDA3Njg0QjAxN0MxOTFGMTI4MDUwNTRFMUZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTcxNEMxOTRBOUFEMDc2ODRCMDE3QzE5MUYxMjgwNTA1NEUx RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NiM2IwMGItYWQ3Yi00ODQ5LWIw YjItZTI0OWEyZmE2MDRhLzAvMkU3MTRDMTk0QTlBRDA3Njg0QjAxN0MxOTFGMTI4 MDUwNTRFMUZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLgYuh5dninN8gsay26Fn5BNPXbs0sImGqE 8ZxvqUFi6JIOVRvMdDbFpTayw/A9efma7lhxmES0uWNHhRTymhC7D1zRgrHHVcec R29Na8vSs8IvU8bsWAxR2Im5syQcWPwKXS0rFXb17cYYf04IqrFKFpYKN5rcn3sf r1LkdA/RDZCEouwzaWU5Wpv0f0uhHmZnwrU5l4IR5TfvriX7+AW0wnYNGXwsWLl9 JLHLBiyKMUYEo62A5Hm1g73UHErzvuRL+NGO363JL9fwgZJdnYqZVvXj1mLSEvI9 Nd0uKAbVE/Fv63gdzxrsyuQOyfsqNJO+mdCGfM9r6YNeIFBxSG0= -----END CERTIFICATE-----Generated at Tue Jul 21 07:09:12 2026 by rpki-client