$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft File: 2FE1FA7D4DD3388355BABAD73020013D485C168C.mft (raw, json) Hash identifier: dLxkn6Utqt5PpFObEgU0hALL1XWkKCFujGJO1jftTCw= Subject key identifier: F5:56:C8:80:4F:BC:96:8D:4B:2E:B4:57:0D:DD:EA:D4:4F:9E:6F:7F Authority key identifier: 2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C Certificate issuer: /CN=2FE1FA7D4DD3388355BABAD73020013D485C168C Certificate serial: 31EB77E88D85402B204ECD436F5AC05800515F74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 03:45:29 +0000 Manifest this update: Tue 21 Jul 2026 03:40:29 +0000 Manifest next update: Wed 22 Jul 2026 04:51:29 +0000 Files and hashes: 1: 3130332e39352e32332e302f32342d3234203d3e20313530353537.roa (hash: QUvsonqLXdsih84z12pFdTCBAMOMy8pmVg5n4B/zEOQ=) 2: 3130332e39352e32322e302f32332d3233203d3e20313530353537.roa (hash: aB7QEaSEcJTWbjfIxBku5UcRO6NDRrQsqaho45FCjZI=) 3: 3130332e39352e32322e302f32342d3234203d3e20313530353537.roa (hash: UmfUI05XEmk9hWgPXOd+povgJcvWbtg+6u6rN6Z8bBg=) 4: 2FE1FA7D4DD3388355BABAD73020013D485C168C.crl (hash: EKN+JR9rBzBDGq5/WeMrMpnE/wJ5mFVW8a/7fGrYmsA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.crl rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:eb:77:e8:8d:85:40:2b:20:4e:cd:43:6f:5a:c0:58:00:51:5f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FE1FA7D4DD3388355BABAD73020013D485C168C Validity Not Before: Jul 21 03:40:29 2026 GMT Not After : Jul 22 04:51:29 2026 GMT Subject: CN=F556C8804FBC968D4B2EB4570DDDEAD44F9E6F7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ab:7c:92:2f:58:18:9b:ce:31:ca:71:d6:07: 3c:5f:97:c9:c6:a1:f1:91:51:96:e9:83:e9:82:f9: 59:8f:a0:f0:fa:2e:d0:41:18:66:93:76:d3:aa:5e: a5:1f:22:d7:90:34:1e:88:9c:5e:f3:d0:fa:b3:f8: 32:14:83:bf:10:09:6e:a5:0c:b2:49:96:25:bc:2e: e6:71:af:a2:b6:89:46:b4:f2:7c:e0:b8:72:55:05: bf:13:e4:91:67:9a:69:f1:a6:8d:14:90:6b:3c:da: f5:ef:aa:97:42:8a:f8:36:5a:98:45:14:3a:6d:59: cb:32:da:f0:2c:24:3e:ba:13:65:ea:c4:90:23:b5: f2:8e:ef:4a:4d:1f:a3:35:08:8e:2a:3b:3a:e0:ea: 3e:de:25:97:0d:1a:ef:13:20:e9:df:e8:a9:2f:ef: 08:ad:1f:60:c3:14:72:17:0b:66:25:3e:04:4f:86: 9f:7e:da:41:02:8e:b6:6f:91:bb:9f:f1:de:a8:0d: 4c:6e:22:83:36:4f:6a:cd:0d:76:9e:c6:fe:7e:fe: fc:40:2a:4e:22:b4:d7:0f:45:2f:5c:2a:6e:2f:3d: d5:01:68:9a:3c:c8:e7:87:65:34:d6:3f:9d:94:0f: fc:ab:8b:fd:f7:c2:5b:4b:6a:b9:9a:d2:62:cd:a0: 3b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:56:C8:80:4F:BC:96:8D:4B:2E:B4:57:0D:DD:EA:D4:4F:9E:6F:7F X509v3 Authority Key Identifier: keyid:2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:75:6c:5b:d3:61:c0:a1:66:07:23:15:59:82:e0:ba:59:82: 72:b0:5a:d5:8d:a9:5b:b2:1d:9c:0b:98:4d:65:f2:9c:b3:5e: 05:f9:a3:7a:04:ae:45:74:81:5b:0d:21:36:06:bf:2b:b8:20: 9d:3b:c9:5e:b4:6d:93:a3:60:9a:dc:d4:32:ba:77:22:de:a0: 83:ff:3e:7c:25:36:fe:0e:61:bb:7b:1b:2f:f9:0a:09:d9:a2: 32:65:ae:ad:27:43:d6:48:f6:7b:b4:6f:76:df:a2:c4:a5:82: 60:75:b2:bc:f0:e5:72:cf:b4:ad:6e:ef:61:df:54:2c:8f:59: 73:0e:a2:24:7d:1b:a7:d2:c0:bd:51:e6:68:01:3a:03:33:4f: c7:9e:af:f7:a4:b9:d5:b6:33:f8:e8:e7:99:5d:58:d0:8b:26: 14:08:b4:68:c8:77:da:b0:8f:d8:bd:82:b2:bb:40:62:0a:44: 7e:63:c8:86:ac:47:d8:82:fe:63:6d:ce:ad:50:72:04:19:61: df:68:ad:3b:ec:a3:f9:a8:76:4a:d3:10:72:4c:32:33:3a:11: 9b:cb:60:c3:54:09:4a:ba:8b:a6:a1:05:58:f3:2a:4e:57:58: 63:ac:df:5c:eb:48:3e:9b:81:5d:78:e8:4d:e8:7d:eb:55:bd: 9e:65:f2:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMet36I2FQCsgTs1Db1rAWABRX3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZFMUZBN0Q0REQzMzg4MzU1QkFCQUQ3MzAyMDAxM0Q0 ODVDMTY4QzAeFw0yNjA3MjEwMzQwMjlaFw0yNjA3MjIwNDUxMjlaMDMxMTAvBgNV BAMTKEY1NTZDODgwNEZCQzk2OEQ0QjJFQjQ1NzBERERFQUQ0NEY5RTZGN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRq3ySL1gYm84xynHWBzxfl8nG ofGRUZbpg+mC+VmPoPD6LtBBGGaTdtOqXqUfIteQNB6InF7z0Pqz+DIUg78QCW6l DLJJliW8LuZxr6K2iUa08nzguHJVBb8T5JFnmmnxpo0UkGs82vXvqpdCivg2WphF FDptWcsy2vAsJD66E2XqxJAjtfKO70pNH6M1CI4qOzrg6j7eJZcNGu8TIOnf6Kkv 7witH2DDFHIXC2YlPgRPhp9+2kECjrZvkbuf8d6oDUxuIoM2T2rNDXaexv5+/vxA Kk4itNcPRS9cKm4vPdUBaJo8yOeHZTTWP52UD/yri/33wltLarma0mLNoDs/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9VbIgE+8lo1LLrRXDd3q1E+eb38wHwYDVR0j BBgwFoAUL+H6fU3TOINVurrXMCABPUhcFowwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZkNGY4NjktNGRiNi00YjBhLWFhYjYtY2RlNDdiNDQ3ZDc3LzAvMkZFMUZBN0Q0 REQzMzg4MzU1QkFCQUQ3MzAyMDAxM0Q0ODVDMTY4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkUxRkE3RDRERDMzODgzNTVCQUJBRDczMDIwMDEzRDQ4NUMx NjhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZkNGY4NjktNGRiNi00YjBhLWFh YjYtY2RlNDdiNDQ3ZDc3LzAvMkZFMUZBN0Q0REQzMzg4MzU1QkFCQUQ3MzAyMDAx M0Q0ODVDMTY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACF1bFvTYcChZgcjFVmC4LpZgnKwWtWNqVuy HZwLmE1l8pyzXgX5o3oErkV0gVsNITYGvyu4IJ07yV60bZOjYJrc1DK6dyLeoIP/ PnwlNv4OYbt7Gy/5CgnZojJlrq0nQ9ZI9nu0b3bfosSlgmB1srzw5XLPtK1u72Hf VCyPWXMOoiR9G6fSwL1R5mgBOgMzT8eer/ekudW2M/jo55ldWNCLJhQItGjId9qw j9i9grK7QGIKRH5jyIasR9iC/mNtzq1QcgQZYd9orTvso/modkrTEHJMMjM6EZvL YMNUCUq6i6ahBVjzKk5XWGOs31zrSD6bgV146E3ofetVvZ5l8vI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:56:52 2026 by rpki-client