$ rpki-client -vvf rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft File: 2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft (raw, json) Hash identifier: d8e8kTEt2tiJyBo04znlngrBb3D6g8kq2jeGnVxoOe8= Subject key identifier: DE:6C:21:D6:09:6E:2A:1B:2F:EA:CF:94:AC:E5:E5:44:70:19:D9:23 Authority key identifier: 2D:30:C3:00:58:7F:6D:81:BE:9B:55:44:3E:A8:EE:94:22:9F:CF:34 Certificate issuer: /CN=2D30C300587F6D81BE9B55443EA8EE94229FCF34 Certificate serial: 22091B504D46F984F95A25A12060B7939BAF8602 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 22:28:56 +0000 Manifest this update: Mon 20 Jul 2026 22:23:56 +0000 Manifest next update: Wed 22 Jul 2026 01:57:56 +0000 Files and hashes: 1: 2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl (hash: XnLdAIMP+vRqhdrAC2c9LEUWrcgbz9TSCKIA57uxr8w=) 2: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: /HZ9PgBcY1v+LICUOzB+p9dmjd1y9vMbbZwrBhVjk44=) 3: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: tFodUbzYC2MyevsY+1U3r+nqHy3x7yy2dunKYq9vZuc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:09:1b:50:4d:46:f9:84:f9:5a:25:a1:20:60:b7:93:9b:af:86:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D30C300587F6D81BE9B55443EA8EE94229FCF34 Validity Not Before: Jul 20 22:23:56 2026 GMT Not After : Jul 22 01:57:56 2026 GMT Subject: CN=DE6C21D6096E2A1B2FEACF94ACE5E5447019D923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1b:80:3b:c1:e6:47:be:32:a0:5d:0e:35:42: 64:3f:b0:d6:f4:59:b3:2f:6b:c9:a4:f2:39:bf:86: 22:53:9c:13:43:d8:af:c4:e7:10:7d:6e:0a:21:de: 71:8b:92:96:3e:a9:40:04:a4:d3:9c:c8:7e:d7:35: 9b:aa:3b:94:34:f0:23:0d:b3:f4:83:cb:a2:ff:92: 00:7d:bd:66:1a:ad:f8:99:27:5c:65:5d:a3:f8:cf: a1:6d:68:a6:93:13:a7:fe:81:7b:b8:ad:28:8d:39: 24:85:ef:2c:b1:15:5a:eb:db:1a:f3:7f:11:33:15: 85:93:ac:7e:d9:09:67:76:cf:a0:1b:99:b3:93:66: 45:33:a8:0e:29:ed:d8:a3:67:d1:68:f9:c6:3a:af: a9:d0:5c:42:2c:50:14:0c:02:2f:a7:7b:0a:0c:f9: 80:e9:a5:a4:47:44:1b:6b:b2:1b:45:e0:59:f7:96: bc:45:73:dc:d2:67:db:98:9a:fa:01:85:23:35:12: da:b6:44:27:35:47:f8:6f:e9:ad:f8:d0:60:c9:62: a1:21:46:99:da:f7:db:a7:e9:5d:71:2f:f9:b3:1d: 30:81:0b:e6:2b:2a:fe:dd:c9:9d:98:29:d8:00:49: ce:60:63:2e:00:bf:d4:54:fe:40:f6:5d:aa:e7:dc: df:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6C:21:D6:09:6E:2A:1B:2F:EA:CF:94:AC:E5:E5:44:70:19:D9:23 X509v3 Authority Key Identifier: keyid:2D:30:C3:00:58:7F:6D:81:BE:9B:55:44:3E:A8:EE:94:22:9F:CF:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d7:7e:5b:59:ba:35:5f:2e:17:86:06:a5:a0:52:39:ea:6d: 6d:25:41:6b:df:69:a3:1f:e6:ed:ee:64:62:4c:f7:58:4c:6d: 1b:7a:0c:da:77:55:d5:31:8b:7a:96:ec:0c:5e:58:5d:a8:f4: 4f:7f:38:2a:ae:8b:e1:ad:a7:5f:63:51:df:fc:87:8c:fa:62: 5d:c1:34:e8:11:e5:c5:aa:c8:89:e9:79:29:6a:e1:47:ca:42: 76:5a:af:18:f5:c4:e0:61:00:d4:47:15:fb:59:20:e6:0b:f8: 6a:3e:49:0d:bd:61:20:9d:bb:9d:38:ea:6e:05:e3:1d:71:50: 64:b1:53:31:8c:a1:ce:9e:af:0e:b7:fe:48:d4:8a:80:2f:9a: 17:20:b4:df:d8:5e:4c:a5:a8:71:72:8d:f9:86:56:8c:98:bc: ea:c6:66:7a:25:b8:c2:32:45:dc:6d:6d:35:ed:72:7b:75:f7: 64:8c:b0:2e:32:dd:a2:4f:e3:f5:a4:97:ad:26:2f:90:9a:01: 0f:c2:95:8a:16:28:ad:1c:a1:80:51:5c:ef:ae:95:bb:f5:4f: 65:96:67:65:e5:06:fa:00:7d:bf:3f:3d:4c:9b:8d:67:d6:f3: bd:61:64:7a:ce:d0:bc:0c:31:7a:97:ce:e1:2d:bb:42:c0:6b: 30:c8:e7:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIgkbUE1G+YT5WiWhIGC3k5uvhgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQzMEMzMDA1ODdGNkQ4MUJFOUI1NTQ0M0VBOEVFOTQy MjlGQ0YzNDAeFw0yNjA3MjAyMjIzNTZaFw0yNjA3MjIwMTU3NTZaMDMxMTAvBgNV BAMTKERFNkMyMUQ2MDk2RTJBMUIyRkVBQ0Y5NEFDRTVFNTQ0NzAxOUQ5MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdG4A7weZHvjKgXQ41QmQ/sNb0 WbMva8mk8jm/hiJTnBND2K/E5xB9bgoh3nGLkpY+qUAEpNOcyH7XNZuqO5Q08CMN s/SDy6L/kgB9vWYarfiZJ1xlXaP4z6FtaKaTE6f+gXu4rSiNOSSF7yyxFVrr2xrz fxEzFYWTrH7ZCWd2z6AbmbOTZkUzqA4p7dijZ9Fo+cY6r6nQXEIsUBQMAi+newoM +YDppaRHRBtrshtF4Fn3lrxFc9zSZ9uYmvoBhSM1Etq2RCc1R/hv6a340GDJYqEh Rpna99un6V1xL/mzHTCBC+YrKv7dyZ2YKdgASc5gYy4Av9RU/kD2Xarn3N/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3mwh1gluKhsv6s+UrOXlRHAZ2SMwHwYDVR0j BBgwFoAULTDDAFh/bYG+m1VEPqjulCKfzzQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTRkY2VmNjUtNWRlMy00MTI5LWFjMjctNzcwNmQ3MjY2MDAxLzAvMkQzMEMzMDA1 ODdGNkQ4MUJFOUI1NTQ0M0VBOEVFOTQyMjlGQ0YzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDMwQzMwMDU4N0Y2RDgxQkU5QjU1NDQzRUE4RUU5NDIyOUZD RjM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMkQzMEMzMDA1ODdGNkQ4MUJFOUI1NTQ0M0VBOEVF OTQyMjlGQ0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrXfltZujVfLheGBqWgUjnqbW0lQWvfaaMf 5u3uZGJM91hMbRt6DNp3VdUxi3qW7AxeWF2o9E9/OCqui+Gtp19jUd/8h4z6Yl3B NOgR5cWqyInpeSlq4UfKQnZarxj1xOBhANRHFftZIOYL+Go+SQ29YSCdu5046m4F 4x1xUGSxUzGMoc6erw63/kjUioAvmhcgtN/YXkylqHFyjfmGVoyYvOrGZnoluMIy RdxtbTXtcnt192SMsC4y3aJP4/Wkl60mL5CaAQ/ClYoWKK0coYBRXO+ulbv1T2WW Z2XlBvoAfb8/PUybjWfW871hZHrO0LwMMXqXzuEtu0LAazDI5yE= -----END CERTIFICATE-----Generated at Tue Jul 21 10:55:01 2026 by rpki-client