$ rpki-client -vvf rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft File: 2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft (raw, json) Hash identifier: RRFGyOxHFMDXKSpiWbWDtGDYrhMCJBauDhj+Md5PNj4= Subject key identifier: 0E:91:7E:FD:98:F9:D6:16:F6:10:B8:DC:E9:2D:74:FE:64:E3:8A:45 Authority key identifier: 2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32 Certificate issuer: /CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32 Certificate serial: 51B737453EE2FF4D1AA09019A9CC6275523E2AD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 23:24:58 +0000 Manifest this update: Mon 20 Jul 2026 23:19:58 +0000 Manifest next update: Wed 22 Jul 2026 01:15:58 +0000 Files and hashes: 1: 3130332e35322e36302e302f32332d3233203d3e20313339343237.roa (hash: wZpRBXgVxARx5THQhkidt3uYEJCBivcYi7zf6PFHOe8=) 2: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: Ks9YnRvxTe5fupbuzzjnQ7H1k8qTkpLLIojCNDLV9tI=) 3: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: gQZiPSYPZragbcbOQFwUKBcBf5Wr0XRio1UQ/GfXKcY=) 4: 2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl (hash: clGRxD6OjegVHF/CvrpawRo2rfTQ94CPQHV+FqYoPEc=) 5: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: rpaRQ6pLcg3h8lZWS5mZP3KVaWJuOAbOO/JXcmWKPAY=) 6: 3130332e35322e36302e302f32342d3234203d3e20313339343237.roa (hash: oRYTuCJLLdMWXGYdD1e1WCx/FrIV0BiHCyH2sk8DrtM=) 7: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: WTrF0cDS2UOT2PvqICS4rHLAPEa2DituaEKy6TilvQo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b7:37:45:3e:e2:ff:4d:1a:a0:90:19:a9:cc:62:75:52:3e:2a:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32 Validity Not Before: Jul 20 23:19:58 2026 GMT Not After : Jul 22 01:15:58 2026 GMT Subject: CN=0E917EFD98F9D616F610B8DCE92D74FE64E38A45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7f:3c:5b:8d:7b:e3:94:05:53:77:71:14:c2: cc:22:a9:f4:39:e8:dc:a3:f0:10:14:98:85:c1:8a: bb:56:d8:b4:b6:b6:dc:da:c7:f8:c0:10:36:c2:15: 00:1b:e7:5a:09:4b:6f:8c:98:a7:5e:9f:33:bd:30: 35:0e:47:ae:b7:bc:95:9c:c3:48:e0:6a:b2:94:c5: 5e:30:b8:8a:24:4c:fc:4c:6b:f5:84:cf:79:3e:3b: 04:c3:51:18:fc:67:7e:78:17:0e:43:de:c2:a8:86: 1c:80:1c:15:da:e7:94:bc:49:f0:b5:21:e4:f3:0b: e2:ad:fd:30:aa:59:3c:17:63:08:16:df:03:63:3c: db:de:3c:97:08:95:ae:6b:41:11:e2:2a:81:29:9b: 86:38:23:62:ae:cf:c5:f4:8e:92:b1:1b:51:fd:57: 20:cb:5f:af:e8:e3:e9:2e:28:7d:e1:0e:70:c1:3f: 62:ea:41:ac:ac:3f:c9:5b:f7:48:7b:b1:dc:e3:f0: 2b:2d:62:d6:60:12:b3:e3:46:96:6c:2a:19:2c:d2: 23:3b:a4:db:a5:a0:1a:97:b3:a3:cb:66:85:46:51: 53:c9:1f:7f:43:63:39:b7:e2:e0:4b:50:5f:69:8f: 10:46:b4:52:8f:86:21:1a:42:3c:11:44:ed:1c:be: 06:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:91:7E:FD:98:F9:D6:16:F6:10:B8:DC:E9:2D:74:FE:64:E3:8A:45 X509v3 Authority Key Identifier: keyid:2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:46:17:ac:d5:1a:22:1a:d1:0f:35:d9:fb:4c:15:a5:ba:cf: 0d:1e:3d:dc:48:3a:5f:89:54:05:ed:37:c2:cd:d2:9d:b7:4b: 50:a8:67:90:a6:fe:29:a2:bb:aa:aa:3e:a4:13:69:e4:6f:cd: c1:1a:1f:e0:04:51:41:ab:af:6e:fb:9f:74:2e:a8:3a:11:5f: 51:c1:71:bd:40:67:e1:f8:62:7a:82:9b:9a:b0:92:17:e3:5f: 5b:5a:90:10:cf:66:fb:fa:4a:af:a5:53:82:d0:6a:9a:47:39: 2f:0b:6e:19:39:ab:67:20:72:85:6a:fa:70:32:44:88:7e:21: 46:c7:6d:32:9d:94:15:1c:03:a7:3d:74:a3:45:ae:04:24:28: 59:c0:39:29:07:a7:04:8e:50:75:20:e2:d0:f5:e9:6f:be:84: 6e:b8:b5:9d:3e:1a:ae:91:d7:4b:39:34:09:67:ce:f4:bc:2d: 15:54:ae:e2:5c:10:e6:dd:97:5a:31:3c:1b:f4:5b:80:49:06: f3:64:f5:a5:57:80:00:af:8e:32:a8:42:1a:58:66:05:df:c0: 91:86:e3:fe:42:d7:5d:d6:24:38:33:d2:6f:d2:58:68:01:fc: 28:c4:e0:d9:f0:3b:5b:bb:3a:2e:b5:09:ad:1c:2e:f0:2e:c1: 8e:d3:f8:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUbc3RT7i/00aoJAZqcxidVI+KtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCRDgxMjk1RUEzRkEzODY3MDgyMDcyRDFCREU0MUNC RkIzRkIzMjAeFw0yNjA3MjAyMzE5NThaFw0yNjA3MjIwMTE1NThaMDMxMTAvBgNV BAMTKDBFOTE3RUZEOThGOUQ2MTZGNjEwQjhEQ0U5MkQ3NEZFNjRFMzhBNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFfzxbjXvjlAVTd3EUwswiqfQ5 6Nyj8BAUmIXBirtW2LS2ttzax/jAEDbCFQAb51oJS2+MmKdenzO9MDUOR663vJWc w0jgarKUxV4wuIokTPxMa/WEz3k+OwTDURj8Z354Fw5D3sKohhyAHBXa55S8SfC1 IeTzC+Kt/TCqWTwXYwgW3wNjPNvePJcIla5rQRHiKoEpm4Y4I2Kuz8X0jpKxG1H9 VyDLX6/o4+kuKH3hDnDBP2LqQaysP8lb90h7sdzj8CstYtZgErPjRpZsKhks0iM7 pNuloBqXs6PLZoVGUVPJH39DYzm34uBLUF9pjxBGtFKPhiEaQjwRRO0cvgbLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDpF+/Zj51hb2ELjc6S10/mTjikUwHwYDVR0j BBgwFoAULL2BKV6j+jhnCCBy0b3kHL+z+zIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDYxYjhjY2MtNmMyMi00MjRlLTk2MTQtOGFiOGFkMjg4NDljLzAvMkNCRDgxMjk1 RUEzRkEzODY3MDgyMDcyRDFCREU0MUNCRkIzRkIzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0JEODEyOTVFQTNGQTM4NjcwODIwNzJEMUJERTQxQ0JGQjNG QjMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDYxYjhjY2MtNmMyMi00MjRlLTk2 MTQtOGFiOGFkMjg4NDljLzAvMkNCRDgxMjk1RUEzRkEzODY3MDgyMDcyRDFCREU0 MUNCRkIzRkIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABGF6zVGiIa0Q812ftMFaW6zw0ePdxIOl+J VAXtN8LN0p23S1CoZ5Cm/imiu6qqPqQTaeRvzcEaH+AEUUGrr277n3QuqDoRX1HB cb1AZ+H4YnqCm5qwkhfjX1takBDPZvv6Sq+lU4LQappHOS8Lbhk5q2cgcoVq+nAy RIh+IUbHbTKdlBUcA6c9dKNFrgQkKFnAOSkHpwSOUHUg4tD16W++hG64tZ0+Gq6R 10s5NAlnzvS8LRVUruJcEObdl1oxPBv0W4BJBvNk9aVXgACvjjKoQhpYZgXfwJGG 4/5C113WJDgz0m/SWGgB/CjE4NnwO1u7Oi61Ca0cLvAuwY7T+O0= -----END CERTIFICATE-----Generated at Tue Jul 21 06:34:00 2026 by rpki-client