$ rpki-client -vvf rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft File: 2CFE6C04191B28EDA13984F5549231D1840AACEC.mft (raw, json) Hash identifier: UXz6tIYQkd8ZnmnwFlHz2uWVpZYySKfetmliTgk4AzA= Subject key identifier: ED:2F:8B:6D:D3:87:02:07:F9:BE:2E:D9:C3:AB:FA:EB:37:B9:3C:77 Authority key identifier: 2C:FE:6C:04:19:1B:28:ED:A1:39:84:F5:54:92:31:D1:84:0A:AC:EC Certificate issuer: /CN=2CFE6C04191B28EDA13984F5549231D1840AACEC Certificate serial: 59F83B677DD5F9343E8222AD0DF0C678F9C63A4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 20:47:01 +0000 Manifest this update: Mon 20 Jul 2026 20:42:01 +0000 Manifest next update: Tue 21 Jul 2026 21:49:01 +0000 Files and hashes: 1: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: dFGJI1S/FQoqvRu6ehr7n/qth/1SKexx3mS7zWvVonM=) 2: 2CFE6C04191B28EDA13984F5549231D1840AACEC.crl (hash: MIMjFUzkdIq99XhEqlGWwqEGhHbnRaZ3V3XwcqIs63c=) 3: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: z7Lqa5CkkfTSXbCBFY/k+Fz/ISz+SJw0HySx4HiNPMc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.crl rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 21:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f8:3b:67:7d:d5:f9:34:3e:82:22:ad:0d:f0:c6:78:f9:c6:3a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFE6C04191B28EDA13984F5549231D1840AACEC Validity Not Before: Jul 20 20:42:01 2026 GMT Not After : Jul 21 21:49:01 2026 GMT Subject: CN=ED2F8B6DD3870207F9BE2ED9C3ABFAEB37B93C77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7f:28:6e:fc:b0:cc:af:35:4f:77:f1:c8:cd: 87:32:ed:39:8f:f4:78:37:d3:26:11:3e:e9:d2:73: 9f:b6:84:16:42:5c:c2:74:ca:07:cf:06:aa:42:1e: e2:1f:83:7a:8f:a0:4f:e8:38:da:7f:7e:79:e0:80: 16:15:c9:a1:c5:6c:25:21:28:cf:55:31:ee:88:3c: 74:97:c9:55:2c:8a:47:b2:0f:a4:fa:c5:49:eb:d7: 4f:f7:90:23:4c:fb:7b:34:ba:0c:19:22:0d:39:14: 59:4e:c3:fa:15:7a:2e:61:9e:02:0a:bc:50:0c:cc: 27:27:a1:1b:1d:70:26:23:0f:08:60:7f:f1:1c:36: d0:6a:cb:7c:cf:eb:8d:6d:7b:22:87:df:f9:d8:8a: cb:a9:ef:39:19:a8:81:89:b6:f5:6f:fb:08:c1:5b: a1:fb:fa:57:f9:a8:e6:6e:c9:3b:30:76:c0:3b:49: 96:5e:98:14:15:27:dd:57:59:b4:60:af:9d:56:7d: 01:5c:e0:b1:a3:27:71:81:64:9a:30:75:4a:25:27: 27:b6:56:2f:d0:c8:4b:b0:01:64:2d:5e:f6:34:0f: 0d:20:2b:23:70:0f:3f:27:f0:29:08:37:72:7e:92: c9:ba:9c:dd:76:58:05:83:11:0b:c1:dc:a3:62:53: fe:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2F:8B:6D:D3:87:02:07:F9:BE:2E:D9:C3:AB:FA:EB:37:B9:3C:77 X509v3 Authority Key Identifier: keyid:2C:FE:6C:04:19:1B:28:ED:A1:39:84:F5:54:92:31:D1:84:0A:AC:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b8:cd:eb:a0:63:9a:22:e6:9b:63:77:61:39:01:84:b9:d8: f4:ab:c6:85:83:04:54:19:71:78:cc:02:0f:5b:ec:b6:20:cb: 1e:d3:3d:fb:3a:bc:d1:5d:33:91:29:66:f8:14:b1:74:c3:7f: 61:99:af:3c:11:4a:35:09:a4:d8:bd:b9:3f:b7:50:88:2e:62: 6b:74:d9:e4:2f:00:54:b6:1f:e1:eb:10:01:41:f4:d5:33:79: f3:e7:c6:e0:3e:28:5f:61:d9:aa:53:ea:55:89:48:82:3f:34: 35:0c:da:c7:9e:cb:d0:ad:cf:d1:ca:6a:89:bf:da:98:4d:80: 47:c6:1d:4a:88:30:4a:15:36:10:5f:16:6b:9b:50:76:d5:1d: 25:5e:dc:36:d3:2b:c8:d3:38:76:72:04:f0:20:a9:05:fa:5a: 0b:ce:55:c1:6e:bf:2a:63:25:85:e1:19:0c:8b:db:f0:67:6d: 62:79:ec:18:4e:26:d7:0a:03:e0:d7:ca:f3:9b:f9:88:22:62: 1b:52:82:6c:5d:7f:73:b6:00:d8:fd:5b:43:2b:28:bc:40:c6: e3:4c:d5:8d:46:0d:de:74:7b:7c:06:12:b0:3f:bf:cd:6a:7e: 3e:5a:a5:73:03:97:b4:eb:61:7b:7c:8b:6e:43:43:9d:54:73: 9f:a2:bb:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWfg7Z33V+TQ+giKtDfDGePnGOk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRTZDMDQxOTFCMjhFREExMzk4NEY1NTQ5MjMxRDE4 NDBBQUNFQzAeFw0yNjA3MjAyMDQyMDFaFw0yNjA3MjEyMTQ5MDFaMDMxMTAvBgNV BAMTKEVEMkY4QjZERDM4NzAyMDdGOUJFMkVEOUMzQUJGQUVCMzdCOTNDNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIfyhu/LDMrzVPd/HIzYcy7TmP 9Hg30yYRPunSc5+2hBZCXMJ0ygfPBqpCHuIfg3qPoE/oONp/fnnggBYVyaHFbCUh KM9VMe6IPHSXyVUsikeyD6T6xUnr10/3kCNM+3s0ugwZIg05FFlOw/oVei5hngIK vFAMzCcnoRsdcCYjDwhgf/EcNtBqy3zP641teyKH3/nYisup7zkZqIGJtvVv+wjB W6H7+lf5qOZuyTswdsA7SZZemBQVJ91XWbRgr51WfQFc4LGjJ3GBZJowdUolJye2 Vi/QyEuwAWQtXvY0Dw0gKyNwDz8n8CkIN3J+ksm6nN12WAWDEQvB3KNiU/7XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7S+LbdOHAgf5vi7Zw6v66ze5PHcwHwYDVR0j BBgwFoAULP5sBBkbKO2hOYT1VJIx0YQKrOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU5MDhiODMtN2Y0NC00NmUwLTg1MzUtNmZiODRiNTlkNThhLzAvMkNGRTZDMDQx OTFCMjhFREExMzk4NEY1NTQ5MjMxRDE4NDBBQUNFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0ZFNkMwNDE5MUIyOEVEQTEzOTg0RjU1NDkyMzFEMTg0MEFB Q0VDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU5MDhiODMtN2Y0NC00NmUwLTg1 MzUtNmZiODRiNTlkNThhLzAvMkNGRTZDMDQxOTFCMjhFREExMzk4NEY1NTQ5MjMx RDE4NDBBQUNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACO4zeugY5oi5ptjd2E5AYS52PSrxoWDBFQZ cXjMAg9b7LYgyx7TPfs6vNFdM5EpZvgUsXTDf2GZrzwRSjUJpNi9uT+3UIguYmt0 2eQvAFS2H+HrEAFB9NUzefPnxuA+KF9h2apT6lWJSII/NDUM2seey9Ctz9HKaom/ 2phNgEfGHUqIMEoVNhBfFmubUHbVHSVe3DbTK8jTOHZyBPAgqQX6WgvOVcFuvypj JYXhGQyL2/BnbWJ57BhOJtcKA+DXyvOb+YgiYhtSgmxdf3O2ANj9W0MrKLxAxuNM 1Y1GDd50e3wGErA/v81qfj5apXMDl7TrYXt8i25DQ51Uc5+iu2k= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:17 2026 by rpki-client