$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft File: C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft (raw, json) Hash identifier: NC6y/I+oJHXfpwlFM2H03K27qL0JfqLYezR7XQQEjdg= Subject key identifier: 2C:C9:12:C4:80:E3:BE:34:FE:D6:B9:FE:B8:B5:87:24:9D:4E:1A:24 Authority key identifier: C2:D6:F5:B6:33:70:10:04:FE:FA:E2:24:34:8B:98:C8:C5:AF:5D:E4 Certificate issuer: /CN=C2D6F5B633701004FEFAE224348B98C8C5AF5DE4 Certificate serial: 6287034B4347ED45BA65439EEEAF5F4A4088C4F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 03:09:41 +0000 Manifest this update: Tue 21 Jul 2026 03:04:41 +0000 Manifest next update: Wed 22 Jul 2026 04:55:41 +0000 Files and hashes: 1: C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl (hash: B/3hFJhC9Igl0OFPKL0Rxfn13cRqlQ+nyS7wFaeWVHE=) 2: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: Ufj1irifhgIIf9Z+cJ8JRj8meHiqH+Kv6sNyd7Vy/bM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:87:03:4b:43:47:ed:45:ba:65:43:9e:ee:af:5f:4a:40:88:c4:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D6F5B633701004FEFAE224348B98C8C5AF5DE4 Validity Not Before: Jul 21 03:04:41 2026 GMT Not After : Jul 22 04:55:41 2026 GMT Subject: CN=2CC912C480E3BE34FED6B9FEB8B587249D4E1A24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0f:03:1b:3c:71:12:2f:a4:6e:7d:bd:a1:cd: b4:66:1f:51:3e:b5:d7:3f:e6:f0:5c:69:08:1e:ac: 1e:76:22:2d:82:ac:0e:94:03:f8:c8:77:2e:27:2e: 12:78:48:4f:8c:12:5f:cd:b6:ba:c8:6a:aa:66:c5: d0:9b:b2:7a:00:93:1f:ce:0e:b4:8f:61:68:12:39: 67:b1:3c:aa:1e:de:14:24:31:b9:4c:30:4e:d0:b0: b8:7c:28:5f:34:15:ac:ea:cb:90:54:89:0e:9c:40: e3:46:14:21:65:dd:3b:bc:3b:4b:95:f9:15:f4:f3: b6:dc:37:61:18:25:44:79:57:d6:3c:4a:7b:62:99: 23:44:50:69:36:86:5d:22:d6:eb:7f:92:d7:50:eb: df:9e:aa:03:b4:52:27:ca:31:f6:b6:fa:8b:86:05: d3:8a:4a:78:bd:2f:d2:88:ef:a0:23:9d:fa:55:f0: 40:f5:fc:51:48:65:c0:b8:de:7f:99:8b:bc:78:25: 5a:da:e6:9d:3d:c7:4f:7d:cc:78:5b:1d:17:e4:fc: 55:cc:54:63:0b:5f:1a:d4:31:bd:c8:0d:d6:2c:9b: e4:0b:d6:ba:3c:1f:1d:a0:9c:30:4e:b4:9f:f7:61: 1d:ed:5e:b4:ea:fa:b2:5a:cd:d3:60:96:91:7c:25: 0c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C9:12:C4:80:E3:BE:34:FE:D6:B9:FE:B8:B5:87:24:9D:4E:1A:24 X509v3 Authority Key Identifier: keyid:C2:D6:F5:B6:33:70:10:04:FE:FA:E2:24:34:8B:98:C8:C5:AF:5D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:68:e9:88:87:cf:32:00:d7:a9:6e:12:ac:99:3a:71:27:5b: fb:8e:ab:1b:9c:02:2b:da:eb:5f:1d:43:05:74:a0:31:c3:49: 13:84:4c:14:5b:90:84:bb:ce:d0:a2:8d:f6:80:c9:b1:1a:43: e1:81:4c:9f:44:8b:ec:3e:13:c0:b5:6f:7b:3d:a0:67:2c:6b: 86:82:78:68:2b:15:4d:d7:83:c6:a9:3d:a6:17:a3:1c:6f:57: 21:f1:95:63:da:fd:96:2d:48:ec:ac:b5:f9:ad:5e:2c:ab:d0: ea:55:8b:dd:30:48:40:6f:91:19:27:96:d4:84:c4:d9:77:7f: 3b:41:3a:8a:51:19:1f:4b:52:74:89:8f:d5:38:a0:8d:e5:8a: 52:4d:8a:d1:14:c3:50:f2:ad:79:b6:17:06:79:de:ec:71:fd: b5:44:f2:b0:16:9d:5b:62:1b:d9:e2:32:76:5d:fb:d6:f1:38: 65:f5:0a:d9:14:bf:80:dd:50:56:74:cd:f9:00:2a:c9:5e:e6: 94:d8:a6:52:84:cd:71:1e:33:b1:4c:c7:79:0b:27:67:30:2f: e9:d1:27:5a:a0:44:5e:39:5a:e5:d2:13:1c:aa:00:87:97:f5: bb:74:ac:f5:11:3b:83:40:d6:69:ad:2a:7b:26:ab:d2:2b:8e: e5:a8:aa:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYocDS0NH7UW6ZUOe7q9fSkCIxPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENkY1QjYzMzcwMTAwNEZFRkFFMjI0MzQ4Qjk4QzhD NUFGNURFNDAeFw0yNjA3MjEwMzA0NDFaFw0yNjA3MjIwNDU1NDFaMDMxMTAvBgNV BAMTKDJDQzkxMkM0ODBFM0JFMzRGRUQ2QjlGRUI4QjU4NzI0OUQ0RTFBMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwDwMbPHESL6Rufb2hzbRmH1E+ tdc/5vBcaQgerB52Ii2CrA6UA/jIdy4nLhJ4SE+MEl/NtrrIaqpmxdCbsnoAkx/O DrSPYWgSOWexPKoe3hQkMblMME7QsLh8KF80Fazqy5BUiQ6cQONGFCFl3Tu8O0uV +RX087bcN2EYJUR5V9Y8SntimSNEUGk2hl0i1ut/ktdQ69+eqgO0UifKMfa2+ouG BdOKSni9L9KI76AjnfpV8ED1/FFIZcC43n+Zi7x4JVra5p09x099zHhbHRfk/FXM VGMLXxrUMb3IDdYsm+QL1ro8Hx2gnDBOtJ/3YR3tXrTq+rJazdNglpF8JQz1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULMkSxIDjvjT+1rn+uLWHJJ1OGiQwHwYDVR0j BBgwFoAUwtb1tjNwEAT++uIkNIuYyMWvXeQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA5NzZlMjYtOTUxMy00OGZmLTlmN2YtZWEzZmRjZjNlMmU4LzAvQzJENkY1QjYz MzcwMTAwNEZFRkFFMjI0MzQ4Qjk4QzhDNUFGNURFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkQ2RjVCNjMzNzAxMDA0RkVGQUUyMjQzNDhCOThDOEM1QUY1 REU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA5NzZlMjYtOTUxMy00OGZmLTlm N2YtZWEzZmRjZjNlMmU4LzAvQzJENkY1QjYzMzcwMTAwNEZFRkFFMjI0MzQ4Qjk4 QzhDNUFGNURFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIto6YiHzzIA16luEqyZOnEnW/uOqxucAiva 618dQwV0oDHDSROETBRbkIS7ztCijfaAybEaQ+GBTJ9Ei+w+E8C1b3s9oGcsa4aC eGgrFU3Xg8apPaYXoxxvVyHxlWPa/ZYtSOystfmtXiyr0OpVi90wSEBvkRknltSE xNl3fztBOopRGR9LUnSJj9U4oI3lilJNitEUw1DyrXm2FwZ53uxx/bVE8rAWnVti G9niMnZd+9bxOGX1CtkUv4DdUFZ0zfkAKsle5pTYplKEzXEeM7FMx3kLJ2cwL+nR J1qgRF45WuXSExyqAIeX9bt0rPURO4NA1mmtKnsmq9IrjuWoqsE= -----END CERTIFICATE-----Generated at Tue Jul 21 08:46:49 2026 by rpki-client