$ rpki-client -vvf rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft File: 2DFA9ABE82F079690092186CFE591462760D0F8A.mft (raw, json) Hash identifier: o3DR+tbiauUnERNBYjix8lO27kFWTOdWtPVKT9a9WFA= Subject key identifier: 89:01:98:20:AA:25:F9:6C:C1:97:C8:F2:9A:33:BE:DD:04:B9:CC:36 Authority key identifier: 2D:FA:9A:BE:82:F0:79:69:00:92:18:6C:FE:59:14:62:76:0D:0F:8A Certificate issuer: /CN=2DFA9ABE82F079690092186CFE591462760D0F8A Certificate serial: 10B970E19F48A0C5C1E8DBE7ECDDBBD5DBB7EE9B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 05:17:20 +0000 Manifest this update: Tue 21 Jul 2026 05:12:20 +0000 Manifest next update: Wed 22 Jul 2026 05:49:20 +0000 Files and hashes: 1: 2DFA9ABE82F079690092186CFE591462760D0F8A.crl (hash: kLuIBgOYh73+bNyy1yRh1UELZe9jiGG9ks0IaY3JaBU=) 2: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: W/hw+IjAyZrPFulBFkYLnFPX3SzGksOOsryB2xI+HDo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.crl rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b9:70:e1:9f:48:a0:c5:c1:e8:db:e7:ec:dd:bb:d5:db:b7:ee:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFA9ABE82F079690092186CFE591462760D0F8A Validity Not Before: Jul 21 05:12:20 2026 GMT Not After : Jul 22 05:49:20 2026 GMT Subject: CN=89019820AA25F96CC197C8F29A33BEDD04B9CC36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:65:82:bf:73:4e:bc:bc:d7:5f:17:ca:a2:d5: 8f:61:b9:e0:2b:51:cb:9b:5e:b7:d6:cd:37:27:bd: 8f:62:7a:0f:09:54:7e:53:b1:5e:97:7e:61:72:33: 0c:b6:d7:95:c4:1f:c2:df:67:bd:64:b0:60:a2:0e: 2d:17:2f:3a:e7:59:eb:02:a0:de:10:d2:aa:b9:d3: ec:f1:ea:ce:3b:2b:0c:da:e1:34:11:4b:3e:11:e0: e6:29:ae:bf:ec:a5:e2:e7:2e:72:9c:0b:6b:62:e4: 02:ab:6b:96:58:92:d4:f3:0f:34:96:80:45:ad:a6: b5:07:aa:90:3a:31:e7:3f:a2:5d:a8:ba:a0:10:63: b6:2f:07:c4:b7:28:87:e4:b6:25:7c:a8:4e:d2:4f: 53:4e:c5:b8:b0:8f:f6:53:5e:35:c2:c9:af:de:34: ac:63:e1:07:15:9a:ca:6f:a1:cb:81:23:52:db:88: 12:d0:74:97:f8:45:3e:d9:68:a5:0f:7d:16:61:36: de:2c:19:05:55:20:db:b2:0e:ee:0d:71:5c:21:67: c0:0c:a4:03:05:fb:a1:5f:b3:60:cb:b5:39:1c:ea: 21:75:df:a3:18:ce:91:d4:09:a6:ae:03:be:cf:ac: a9:09:fb:ef:26:46:0f:c3:c2:8a:68:1d:d2:24:67: 6d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:01:98:20:AA:25:F9:6C:C1:97:C8:F2:9A:33:BE:DD:04:B9:CC:36 X509v3 Authority Key Identifier: keyid:2D:FA:9A:BE:82:F0:79:69:00:92:18:6C:FE:59:14:62:76:0D:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:34:3f:7f:d8:fb:ad:90:e4:5d:6d:16:81:a4:40:f1:04:a6: 94:07:fb:1f:7b:3d:f8:f8:ee:0e:a3:da:6d:8a:48:91:85:ca: 5d:38:1e:f4:02:30:38:6e:ff:97:bd:d8:74:35:be:e9:06:50: 5a:20:8d:3f:6e:24:84:70:33:e2:9d:c2:22:20:6a:8a:a2:8b: e6:ca:ed:06:6b:eb:07:13:b1:74:a3:0c:ae:48:cf:6c:51:d9: 2a:dd:1f:19:3c:10:3c:6d:83:9f:21:95:ea:1f:45:57:59:e2: 78:2b:51:5a:47:86:9b:3d:77:07:92:fe:f5:09:7f:c3:3e:43: b0:15:ab:56:e0:f9:8e:25:20:46:10:3a:50:65:83:11:a6:83: f5:da:d3:25:97:bb:dd:dd:b5:01:bd:4b:b7:c0:d5:8d:ea:ed: 2c:90:6d:6c:17:0b:85:3f:70:e5:2b:d7:7e:21:8a:bd:25:c7: 9f:a1:d9:45:e0:15:6f:f6:ac:03:bd:e9:18:37:1a:21:f0:c3: 00:7c:94:b6:a5:06:61:bb:3e:f1:ff:c4:00:ff:9e:72:fa:50: 4c:de:ce:79:1f:10:f7:58:37:2f:d7:49:b9:9d:1a:db:bf:e5: 5b:71:42:52:98:12:57:3c:64:80:d0:0b:43:c1:af:f4:0d:17: ce:65:d6:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELlw4Z9IoMXB6Nvn7N271du37pswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQTlBQkU4MkYwNzk2OTAwOTIxODZDRkU1OTE0NjI3 NjBEMEY4QTAeFw0yNjA3MjEwNTEyMjBaFw0yNjA3MjIwNTQ5MjBaMDMxMTAvBgNV BAMTKDg5MDE5ODIwQUEyNUY5NkNDMTk3QzhGMjlBMzNCRUREMDRCOUNDMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXZYK/c068vNdfF8qi1Y9hueAr UcubXrfWzTcnvY9ieg8JVH5TsV6XfmFyMwy215XEH8LfZ71ksGCiDi0XLzrnWesC oN4Q0qq50+zx6s47Kwza4TQRSz4R4OYprr/speLnLnKcC2ti5AKra5ZYktTzDzSW gEWtprUHqpA6Mec/ol2ouqAQY7YvB8S3KIfktiV8qE7ST1NOxbiwj/ZTXjXCya/e NKxj4QcVmspvocuBI1LbiBLQdJf4RT7ZaKUPfRZhNt4sGQVVINuyDu4NcVwhZ8AM pAMF+6Ffs2DLtTkc6iF136MYzpHUCaauA77PrKkJ++8mRg/DwopoHdIkZ23VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiQGYIKol+WzBl8jymjO+3QS5zDYwHwYDVR0j BBgwFoAULfqavoLweWkAkhhs/lkUYnYND4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGNjYzJhZjQtYTYyZC00NzA4LWI2ODgtMTg5MjU5NGJhOTg5LzAvMkRGQTlBQkU4 MkYwNzk2OTAwOTIxODZDRkU1OTE0NjI3NjBEMEY4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREZBOUFCRTgyRjA3OTY5MDA5MjE4NkNGRTU5MTQ2Mjc2MEQw RjhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvMkRGQTlBQkU4MkYwNzk2OTAwOTIxODZDRkU1OTE0 NjI3NjBEMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABg0P3/Y+62Q5F1tFoGkQPEEppQH+x97Pfj4 7g6j2m2KSJGFyl04HvQCMDhu/5e92HQ1vukGUFogjT9uJIRwM+KdwiIgaoqii+bK 7QZr6wcTsXSjDK5Iz2xR2SrdHxk8EDxtg58hleofRVdZ4ngrUVpHhps9dweS/vUJ f8M+Q7AVq1bg+Y4lIEYQOlBlgxGmg/Xa0yWXu93dtQG9S7fA1Y3q7SyQbWwXC4U/ cOUr134hir0lx5+h2UXgFW/2rAO96Rg3GiHwwwB8lLalBmG7PvH/xAD/nnL6UEze znkfEPdYNy/XSbmdGtu/5VtxQlKYElc8ZIDQC0PBr/QNF85l1us= -----END CERTIFICATE-----Generated at Tue Jul 21 06:41:40 2026 by rpki-client