$ rpki-client -vvf rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft File: 2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft (raw, json) Hash identifier: g2CGsn+aXV/fvrBhrhu10DFOQLOH/dThTkpRqJY/8FQ= Subject key identifier: 78:59:FF:C7:6B:25:B6:F9:5C:57:A2:00:36:18:ED:AA:FA:2A:BB:25 Authority key identifier: 2C:F0:62:4C:97:05:2A:18:8B:12:C2:D8:DF:D6:92:56:BE:AE:A0:A3 Certificate issuer: /CN=2CF0624C97052A188B12C2D8DFD69256BEAEA0A3 Certificate serial: 17838BA3DFE72E81551976AA6C0659DAB0D29CB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft Manifest number: 5E Signing time: Sat 11 Jul 2026 21:42:39 +0000 Manifest this update: Sat 11 Jul 2026 21:37:39 +0000 Manifest next update: Mon 13 Jul 2026 00:10:39 +0000 Files and hashes: 1: 3131372e3132312e3230352e302f32342d3234203d3e203436303239.roa (hash: UH+sfXi3uyUzmqtZ5a3kiK88kT3KnsNHU+6St14pVbU=) 2: 3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa (hash: JklHOE9UnXIvsKlW/PC+ZLgav3mgVpKETno9/XOSONo=) 3: 3131372e3132312e3230342e302f32342d3234203d3e203436303239.roa (hash: 9xyVMpzGgMxzPTr0/YEPxhsOk4K0WU7VoWYP2UAihTY=) 4: 3131372e3132312e3230332e302f32342d3234203d3e203436303239.roa (hash: khNOf5qfeVAtCDmI+P0qU0wtTsenc+owEXE7IuCFTL4=) 5: 3131372e3132312e3230302e302f32342d3234203d3e203436303239.roa (hash: jjDQyLwOLFkeP+V5865OD4J5ZSFyfyGf7kRLTYcgAUA=) 6: 3131372e3132312e3230312e302f32342d3234203d3e203436303239.roa (hash: Gt77/DpvHcyfECJ/rzUv8b/LftlAsDwob9ro6Az9CBg=) 7: 3131372e3132312e3230372e302f32342d3234203d3e203436303239.roa (hash: 5qjiHCREo3yTZVwviMFSFaOdgsJ0Wu7pJnWioBrnUw8=) 8: 2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl (hash: S2OjgxDuNWjLe5/sDHITUTFOHrC+At/ZWF295G907vM=) 9: 3131372e3132312e3230322e302f32342d3234203d3e203436303239.roa (hash: G6layxH6VqJ35uHJZhmjgga72kPwjzbEYW/yD2TBIJU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 00:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:83:8b:a3:df:e7:2e:81:55:19:76:aa:6c:06:59:da:b0:d2:9c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CF0624C97052A188B12C2D8DFD69256BEAEA0A3 Validity Not Before: Jul 11 21:37:39 2026 GMT Not After : Jul 13 00:10:39 2026 GMT Subject: CN=7859FFC76B25B6F95C57A2003618EDAAFA2ABB25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:23:1b:7e:1a:78:70:eb:bd:b3:6a:61:4d:e8: e6:4e:91:82:60:21:e8:6c:e7:17:d1:91:d6:28:26: a8:71:1a:6d:7a:a5:f7:b3:b7:23:b6:22:4f:86:9c: eb:92:8f:5f:5b:6a:92:6c:40:f3:b5:49:12:d2:52: 36:40:b2:dc:88:68:be:e8:fd:cf:8c:b2:59:ab:dd: 58:1a:5d:a5:14:8a:e1:b2:8e:a5:a5:71:3a:1d:12: e3:98:44:06:14:df:02:a7:01:95:bb:2e:ac:57:fe: 66:cd:57:95:3b:9f:16:8d:d5:f6:ca:e6:a9:45:99: dc:85:a1:77:42:40:a1:c3:6f:b0:4b:53:85:16:aa: c0:c3:af:9a:14:44:43:b8:de:b0:62:78:0a:03:76: 5e:e0:fc:98:ce:13:73:cd:c8:af:77:3c:b6:a5:e6: 19:94:7e:84:32:81:61:36:b5:b7:5b:07:e6:73:57: 58:1f:88:78:61:0a:eb:0f:77:76:5e:b2:68:49:20: c0:d0:c3:54:29:24:25:05:f7:ff:10:c7:1d:65:15: fe:37:10:c3:6b:9a:fe:1a:e4:4f:e8:0a:fc:04:f3: eb:cf:86:d5:83:e7:b8:3a:b4:00:a8:4f:25:8a:2f: b1:1f:d5:f8:3e:24:f7:63:8e:65:75:df:86:20:7b: b8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:59:FF:C7:6B:25:B6:F9:5C:57:A2:00:36:18:ED:AA:FA:2A:BB:25 X509v3 Authority Key Identifier: keyid:2C:F0:62:4C:97:05:2A:18:8B:12:C2:D8:DF:D6:92:56:BE:AE:A0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:05:cd:98:18:ed:89:cf:95:5a:77:37:d9:d3:8e:79:6f:9e: ff:e6:44:b0:8d:e8:94:56:63:af:99:c5:33:3f:05:6c:75:53: e1:26:b6:36:8e:7d:06:17:fe:89:43:d3:4d:c9:db:56:57:31: cc:be:6f:d9:e4:33:05:b5:d1:08:6a:15:6c:a5:d8:6e:39:d0: 34:bb:01:af:ac:1c:03:6d:10:d4:df:1d:6f:35:52:e2:39:54: e2:5c:c7:bb:8c:9d:7d:bb:1d:8e:42:48:7c:f7:c3:02:ad:d0: 3b:2b:22:db:83:b0:f6:19:24:34:d9:22:61:ae:b7:18:4f:05: 50:44:15:9e:f2:f8:22:d4:d2:3f:14:dd:b4:e1:71:8e:d0:49: 9e:2b:87:8b:f5:f1:e2:0b:e0:7d:f2:e8:0d:c4:9e:ac:30:8c: a7:43:d0:7e:5c:cc:16:ee:91:ab:6c:1d:f4:96:6f:2e:0d:59: b8:0a:d5:b5:20:a8:53:9f:b4:d3:7c:a0:a3:e8:0c:f8:57:63: 4b:57:df:a1:ab:63:35:cd:c4:05:9a:e9:5f:69:90:aa:24:ad: ab:7a:7d:80:13:d4:78:4e:5a:21:06:c6:e0:5e:ef:2c:f9:93: 33:71:cc:5e:cf:0a:de:88:9f:a7:91:95:55:28:e5:63:5c:b4: 40:6c:d1:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF4OLo9/nLoFVGXaqbAZZ2rDSnLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGMDYyNEM5NzA1MkExODhCMTJDMkQ4REZENjkyNTZC RUFFQTBBMzAeFw0yNjA3MTEyMTM3MzlaFw0yNjA3MTMwMDEwMzlaMDMxMTAvBgNV BAMTKDc4NTlGRkM3NkIyNUI2Rjk1QzU3QTIwMDM2MThFREFBRkEyQUJCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdIxt+Gnhw672zamFN6OZOkYJg Iehs5xfRkdYoJqhxGm16pfeztyO2Ik+GnOuSj19bapJsQPO1SRLSUjZAstyIaL7o /c+Mslmr3VgaXaUUiuGyjqWlcTodEuOYRAYU3wKnAZW7LqxX/mbNV5U7nxaN1fbK 5qlFmdyFoXdCQKHDb7BLU4UWqsDDr5oUREO43rBieAoDdl7g/JjOE3PNyK93PLal 5hmUfoQygWE2tbdbB+ZzV1gfiHhhCusPd3ZesmhJIMDQw1QpJCUF9/8Qxx1lFf43 EMNrmv4a5E/oCvwE8+vPhtWD57g6tACoTyWKL7Ef1fg+JPdjjmV134Yge7jjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeFn/x2sltvlcV6IANhjtqvoquyUwHwYDVR0j BBgwFoAULPBiTJcFKhiLEsLY39aSVr6uoKMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTUzYjA2N2MtZWNjOS00ZGNhLTk4N2QtYjk1NzY4MTVmODU1LzAvMkNGMDYyNEM5 NzA1MkExODhCMTJDMkQ4REZENjkyNTZCRUFFQTBBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0YwNjI0Qzk3MDUyQTE4OEIxMkMyRDhERkQ2OTI1NkJFQUVB MEEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTUzYjA2N2MtZWNjOS00ZGNhLTk4 N2QtYjk1NzY4MTVmODU1LzAvMkNGMDYyNEM5NzA1MkExODhCMTJDMkQ4REZENjky NTZCRUFFQTBBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsFzZgY7YnPlVp3N9nTjnlvnv/mRLCN6JRW Y6+ZxTM/BWx1U+EmtjaOfQYX/olD003J21ZXMcy+b9nkMwW10QhqFWyl2G450DS7 Aa+sHANtENTfHW81UuI5VOJcx7uMnX27HY5CSHz3wwKt0DsrItuDsPYZJDTZImGu txhPBVBEFZ7y+CLU0j8U3bThcY7QSZ4rh4v18eIL4H3y6A3EnqwwjKdD0H5czBbu katsHfSWby4NWbgK1bUgqFOftNN8oKPoDPhXY0tX36GrYzXNxAWa6V9pkKokrat6 fYAT1HhOWiEGxuBe7yz5kzNxzF7PCt6In6eRlVUo5WNctEBs0fI= -----END CERTIFICATE-----Generated at Sun Jul 12 12:26:45 2026 by rpki-client