$ rpki-client -vvf rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft File: 2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft (raw, json) Hash identifier: YnPA2S2lUzvY7CICvUV2/kwALjkFBJ5HxTYG1blVPys= Subject key identifier: 03:64:DA:ED:39:DB:1D:E2:3A:C8:76:8E:5F:4B:F0:16:D7:53:0C:81 Authority key identifier: 2C:A6:27:0F:A0:99:DB:2B:77:ED:B7:EA:A9:30:40:FF:23:6B:21:4B Certificate issuer: /CN=2CA6270FA099DB2B77EDB7EAA93040FF236B214B Certificate serial: 4EF36EA30411497ED6BF5F2DC7366F11BBF78F0F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 13:17:56 +0000 Manifest this update: Mon 20 Jul 2026 13:12:56 +0000 Manifest next update: Tue 21 Jul 2026 15:32:56 +0000 Files and hashes: 1: 3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (hash: RYdUas2TasB0Egv36O3FoGBWixKmz+f1qKRhr6wdPhI=) 2: 3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (hash: 7n3FY8Iu2mTaPEdpSsiUuLrwQ3K9YP1KBkJ8ERWrHmg=) 3: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (hash: 5yASRqMJGpH3BlgDiF4qbtYdpHoRGPLyhQdyV1pz60w=) 4: 2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl (hash: YNNhCorMbUBtqtdR0PVXeH9HgmioFOoXEKqiAOPN/9U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f3:6e:a3:04:11:49:7e:d6:bf:5f:2d:c7:36:6f:11:bb:f7:8f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA6270FA099DB2B77EDB7EAA93040FF236B214B Validity Not Before: Jul 20 13:12:56 2026 GMT Not After : Jul 21 15:32:56 2026 GMT Subject: CN=0364DAED39DB1DE23AC8768E5F4BF016D7530C81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:ac:4c:c3:e2:51:d1:ca:c3:87:b8:9e:73: c7:94:73:66:3c:9e:1a:d1:f6:ae:8c:c4:2a:01:4b: fd:8b:a0:b2:09:38:90:fc:3d:a5:3c:cd:fb:29:74: 0f:50:ed:65:bc:d3:e5:ed:d0:de:b6:31:7a:7d:42: de:57:5d:21:3f:fd:54:44:66:ec:8b:c0:da:e0:4c: 29:25:23:16:e1:d1:30:71:97:7b:0a:32:71:e1:fa: d4:fb:2c:ed:77:7a:66:42:b4:b6:42:b0:3f:bb:ce: 05:05:c8:fb:69:d7:f8:aa:ad:5f:1b:c3:d3:f0:17: 0c:d6:e6:a7:ad:56:d2:fc:cb:04:34:36:6a:70:ae: d4:3f:43:a5:d6:55:e7:d3:95:e4:60:27:c0:14:3d: 8a:0e:d2:7c:2d:7b:1e:12:0a:a9:6b:8d:e9:a2:a4: 90:ba:83:2e:ae:21:00:eb:65:ee:2c:70:4c:e6:4e: 2d:3e:32:bb:7b:7f:e1:41:9a:84:88:50:4a:91:4c: 31:0f:f1:f1:bd:79:93:15:33:9b:b8:bf:6e:fa:90: 14:b0:d0:1e:b0:14:ec:4d:bc:65:3e:12:4b:09:3e: 30:2c:53:37:1c:06:a4:86:b2:07:d1:d9:21:a4:7e: 70:7a:fa:19:a6:6b:5a:80:76:ff:af:66:01:54:43: 66:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:64:DA:ED:39:DB:1D:E2:3A:C8:76:8E:5F:4B:F0:16:D7:53:0C:81 X509v3 Authority Key Identifier: keyid:2C:A6:27:0F:A0:99:DB:2B:77:ED:B7:EA:A9:30:40:FF:23:6B:21:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:49:ba:de:68:6f:2d:2e:35:9b:64:61:20:20:b8:49:3d:5f: b2:48:0f:b0:c6:b9:76:5b:31:cb:92:fd:ac:7a:f1:a1:9c:7e: 24:28:f5:e4:63:c8:e6:25:70:09:cb:0a:63:fa:47:d5:47:49: 8b:04:31:b4:45:5f:4e:4d:00:38:de:31:f0:5b:43:50:75:77: ff:ba:28:44:cc:11:71:ff:01:a7:57:a7:38:01:cd:66:54:a6: 36:ef:16:95:bb:3e:e4:12:4a:bb:30:4a:30:5f:2d:47:b4:aa: b2:b2:4d:21:a9:42:bf:49:9f:73:b8:c2:a0:83:b6:b5:56:8a: 0d:2c:4b:76:d3:d3:41:72:c1:ac:ab:2f:e2:83:0c:10:3c:4f: 52:fd:1d:d2:c8:98:07:4a:c4:54:d9:07:47:75:66:c7:65:a1: 47:2f:a5:16:99:e1:ea:dd:0c:51:2b:d7:85:63:88:34:c1:b5: 67:f0:3f:05:ee:7e:53:7f:26:fd:86:f3:32:fc:d7:92:a5:13: f6:a8:ac:a7:43:49:f0:74:59:b6:72:e4:8e:1c:42:e8:15:87: c1:ce:ec:15:be:3e:17:70:56:47:7a:3a:72:8f:a7:c1:18:f8: a0:b4:d0:54:c6:3d:dc:15:14:5f:10:39:bc:55:bc:77:11:9b: 2e:99:f2:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTvNuowQRSX7Wv18txzZvEbv3jw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNjI3MEZBMDk5REIyQjc3RURCN0VBQTkzMDQwRkYy MzZCMjE0QjAeFw0yNjA3MjAxMzEyNTZaFw0yNjA3MjExNTMyNTZaMDMxMTAvBgNV BAMTKDAzNjREQUVEMzlEQjFERTIzQUM4NzY4RTVGNEJGMDE2RDc1MzBDODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyxaxMw+JR0crDh7iec8eUc2Y8 nhrR9q6MxCoBS/2LoLIJOJD8PaU8zfspdA9Q7WW80+Xt0N62MXp9Qt5XXSE//VRE ZuyLwNrgTCklIxbh0TBxl3sKMnHh+tT7LO13emZCtLZCsD+7zgUFyPtp1/iqrV8b w9PwFwzW5qetVtL8ywQ0NmpwrtQ/Q6XWVefTleRgJ8AUPYoO0nwtex4SCqlrjemi pJC6gy6uIQDrZe4scEzmTi0+Mrt7f+FBmoSIUEqRTDEP8fG9eZMVM5u4v276kBSw 0B6wFOxNvGU+EksJPjAsUzccBqSGsgfR2SGkfnB6+hmma1qAdv+vZgFUQ2ZHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA2Ta7TnbHeI6yHaOX0vwFtdTDIEwHwYDVR0j BBgwFoAULKYnD6CZ2yt37bfqqTBA/yNrIUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY3YTdmMGUtOGQwNy00NWRlLTgyNTItM2JmZmMwNWU1NjQ5LzAvMkNBNjI3MEZB MDk5REIyQjc3RURCN0VBQTkzMDQwRkYyMzZCMjE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0E2MjcwRkEwOTlEQjJCNzdFREI3RUFBOTMwNDBGRjIzNkIy MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTY3YTdmMGUtOGQwNy00NWRlLTgy NTItM2JmZmMwNWU1NjQ5LzAvMkNBNjI3MEZBMDk5REIyQjc3RURCN0VBQTkzMDQw RkYyMzZCMjE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1Jut5oby0uNZtkYSAguEk9X7JID7DGuXZb McuS/ax68aGcfiQo9eRjyOYlcAnLCmP6R9VHSYsEMbRFX05NADjeMfBbQ1B1d/+6 KETMEXH/AadXpzgBzWZUpjbvFpW7PuQSSrswSjBfLUe0qrKyTSGpQr9Jn3O4wqCD trVWig0sS3bT00FywayrL+KDDBA8T1L9HdLImAdKxFTZB0d1ZsdloUcvpRaZ4erd DFEr14VjiDTBtWfwPwXuflN/Jv2G8zL815KlE/aorKdDSfB0WbZy5I4cQugVh8HO 7BW+PhdwVkd6OnKPp8EY+KC00FTGPdwVFF8QObxVvHcRmy6Z8hs= -----END CERTIFICATE-----Generated at Tue Jul 21 06:52:31 2026 by rpki-client