$ rpki-client -vvf rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft File: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft (raw, json) Hash identifier: Fn4CXzn4fCPMjdJJhDvjePvS1gJtnA6HM2vLZ1/FHNM= Subject key identifier: 86:C0:A6:99:CB:60:77:78:0A:3D:AE:ED:9B:3B:0C:64:EC:65:E4:4F Authority key identifier: 2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A Certificate issuer: /CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A Certificate serial: 4BD51FC1EEBE7EA439352E3E64F799CC02755BE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 12:01:45 +0000 Manifest this update: Sun 19 Jul 2026 11:56:45 +0000 Manifest next update: Mon 20 Jul 2026 12:25:45 +0000 Files and hashes: 1: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl (hash: qjdOEBsA1zOGKzWU4NeyzHGLZrEuh5KpSRaQ0skr8TM=) 2: 3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa (hash: VdJ1ZIQnNrJcWKeLJSeBvVO0FNQ/sxBZNurd+uNh3ek=) 3: 3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa (hash: GzkXDWcauMWYNDn5MyFD1nDjKkP9ZpScdykpa6iOEak=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d5:1f:c1:ee:be:7e:a4:39:35:2e:3e:64:f7:99:cc:02:75:5b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A Validity Not Before: Jul 19 11:56:45 2026 GMT Not After : Jul 20 12:25:45 2026 GMT Subject: CN=86C0A699CB6077780A3DAEED9B3B0C64EC65E44F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:ce:45:ff:89:be:59:41:84:13:26:d9:65: 80:ce:e8:64:90:21:dc:36:14:84:85:99:de:f3:79: 9c:30:11:d3:a7:15:4b:bb:1a:d0:f9:a5:22:79:5b: 7f:de:aa:8a:56:b5:2d:0d:55:e3:9c:1b:84:b2:31: 86:14:1b:1f:57:97:61:dd:8f:b1:cf:7c:3a:fc:a6: 7e:f3:22:c5:a2:90:fa:a3:e9:5e:dc:45:f7:df:d6: a6:32:6d:0c:b4:e9:2e:35:ab:de:f8:cc:fe:97:67: c7:40:4b:ae:9f:8f:3f:27:c6:02:62:d1:92:b5:a6: 29:5c:43:d6:ae:50:41:30:0b:62:3f:0e:54:4f:ec: db:c7:da:1e:ce:17:33:55:3d:63:8c:51:73:26:fa: c3:b3:77:06:86:bb:0d:8f:ae:f9:8e:cd:7c:31:bd: f3:19:4d:b8:68:fe:cb:33:65:06:3f:e9:e4:ae:76: fd:7a:ad:76:cf:59:87:02:fb:48:0b:76:0a:a2:ac: a9:01:9c:78:59:d8:cb:c9:bb:f7:d9:94:4a:0c:a5: 5b:3d:51:6e:22:1b:d1:83:bc:fe:51:c3:3e:0f:bf: f2:be:ff:0c:a7:1d:bb:31:f4:4e:82:5f:c2:29:64: 98:4a:87:d3:aa:f0:99:63:99:02:e5:6b:f5:f6:e2: f9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C0:A6:99:CB:60:77:78:0A:3D:AE:ED:9B:3B:0C:64:EC:65:E4:4F X509v3 Authority Key Identifier: keyid:2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:d8:a5:e0:ac:50:db:21:ea:ae:94:2c:5a:c3:76:0e:0f:f9: 22:21:d4:eb:50:36:c1:86:0f:5f:88:0a:a0:c7:bd:6e:c3:a8: 2a:b6:7a:ac:06:f8:04:ae:a5:4f:1f:d2:7f:eb:3e:a9:47:b7: 6c:8d:86:ee:53:ff:2f:bd:65:5f:70:d2:bf:bc:af:b0:ce:74: 5d:e3:04:32:82:7b:60:fa:3c:5d:9a:61:c8:17:12:e3:24:0b: b0:89:46:7c:a4:03:e0:51:23:20:1e:73:df:c1:e0:d7:3c:8a: 58:b5:88:af:82:9c:5b:d6:9c:12:3a:66:ab:e3:ad:1f:fe:c3: 8e:a4:6a:b7:99:1f:a4:40:a0:b9:89:f3:67:36:b8:98:45:88: d1:e5:c6:53:d9:a4:24:46:92:46:87:bb:bb:ab:bf:f4:94:51: ae:83:b7:0b:a3:e0:07:42:8a:00:36:bb:64:d1:6a:6a:b3:d4: 53:c5:86:d5:2d:32:1e:d7:e7:e9:e9:90:62:b4:bc:a8:54:5f: 22:d3:7f:64:a7:71:fb:f4:da:dd:dc:51:b3:2f:87:30:b8:ce: d6:b3:40:67:6c:10:08:d3:8f:62:24:7d:26:9a:cd:a2:19:7b: 33:d8:97:48:fd:3b:31:7e:97:85:f3:1b:09:5f:28:11:8d:b5: 9c:4a:5d:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9Ufwe6+fqQ5NS4+ZPeZzAJ1W+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJGQzc0MUFBMTc3MUZDNUNFNzc5RTRDRjg4QTVDM0FG NTJGOEU3QTAeFw0yNjA3MTkxMTU2NDVaFw0yNjA3MjAxMjI1NDVaMDMxMTAvBgNV BAMTKDg2QzBBNjk5Q0I2MDc3NzgwQTNEQUVFRDlCM0IwQzY0RUM2NUU0NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14s5F/4m+WUGEEybZZYDO6GSQ Idw2FISFmd7zeZwwEdOnFUu7GtD5pSJ5W3/eqopWtS0NVeOcG4SyMYYUGx9Xl2Hd j7HPfDr8pn7zIsWikPqj6V7cRfff1qYybQy06S41q974zP6XZ8dAS66fjz8nxgJi 0ZK1pilcQ9auUEEwC2I/DlRP7NvH2h7OFzNVPWOMUXMm+sOzdwaGuw2PrvmOzXwx vfMZTbho/sszZQY/6eSudv16rXbPWYcC+0gLdgqirKkBnHhZ2MvJu/fZlEoMpVs9 UW4iG9GDvP5Rwz4Pv/K+/wynHbsx9E6CX8IpZJhKh9Oq8JljmQLla/X24vlZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhsCmmctgd3gKPa7tmzsMZOxl5E8wHwYDVR0j BBgwFoAUK/x0GqF3H8XOd55M+IpcOvUvjnowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWRiZDNhNTAtODMyZS00MTI3LTk0ZTEtNDhhY2UxNjRjZjI2LzAvMkJGQzc0MUFB MTc3MUZDNUNFNzc5RTRDRjg4QTVDM0FGNTJGOEU3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQkZDNzQxQUExNzcxRkM1Q0U3NzlFNENGODhBNUMzQUY1MkY4 RTdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWRiZDNhNTAtODMyZS00MTI3LTk0 ZTEtNDhhY2UxNjRjZjI2LzAvMkJGQzc0MUFBMTc3MUZDNUNFNzc5RTRDRjg4QTVD M0FGNTJGOEU3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPYpeCsUNsh6q6ULFrDdg4P+SIh1OtQNsGG D1+ICqDHvW7DqCq2eqwG+ASupU8f0n/rPqlHt2yNhu5T/y+9ZV9w0r+8r7DOdF3j BDKCe2D6PF2aYcgXEuMkC7CJRnykA+BRIyAec9/B4Nc8ili1iK+CnFvWnBI6Zqvj rR/+w46kareZH6RAoLmJ82c2uJhFiNHlxlPZpCRGkkaHu7urv/SUUa6Dtwuj4AdC igA2u2TRamqz1FPFhtUtMh7X5+npkGK0vKhUXyLTf2Sncfv02t3cUbMvhzC4ztaz QGdsEAjTj2IkfSaazaIZezPYl0j9OzF+l4XzGwlfKBGNtZxKXQw= -----END CERTIFICATE-----Generated at Sun Jul 19 23:58:08 2026 by rpki-client