$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft File: 2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft (raw, json) Hash identifier: fY1WNqkW5891e5NZxPm2OkYBDdit0aoYmPmoBbkT3IE= Subject key identifier: DE:B3:DC:2E:EF:29:16:8E:4E:87:B3:8C:0E:3F:ED:CF:35:A3:31:E2 Authority key identifier: 2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5 Certificate issuer: /CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5 Certificate serial: 083E02A6991728AE85630B5A1319672B2379BFEB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 17:43:47 +0000 Manifest this update: Sun 02 Aug 2026 17:38:47 +0000 Manifest next update: Mon 03 Aug 2026 19:58:47 +0000 Files and hashes: 1: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: 8N1ryLqGS1Ck4AODHf8NX/rVMxyMRb5QCwGLiIIXGg8=) 2: 2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl (hash: DdvghCo2uH1OV3GBdlmsegyEtgizOuP3MU0ZvHKdo0E=) 3: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: 8wKUF9NYC7pRZOxvlEf5LxZ2nZECYvwr1BSS5u1G+4Y=) 4: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: K2AeuLRVAE8BPE4wuWW8WhZGZyYvk9GHwxpL0SCIDfk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:3e:02:a6:99:17:28:ae:85:63:0b:5a:13:19:67:2b:23:79:bf:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5 Validity Not Before: Aug 2 17:38:47 2026 GMT Not After : Aug 3 19:58:47 2026 GMT Subject: CN=DEB3DC2EEF29168E4E87B38C0E3FEDCF35A331E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:77:30:33:9f:22:2c:1c:d7:2f:7e:04:60:99: a8:83:a6:30:6a:ce:88:3c:f3:98:86:9b:c9:a5:3c: ca:3e:0b:9e:bc:72:6c:39:40:ce:aa:53:b8:f0:e0: b0:36:0b:6a:71:69:76:d2:46:c9:e7:74:61:be:b5: 3b:66:6c:09:ca:e9:f9:60:aa:ff:d6:f5:2e:d1:53: 33:48:25:1c:2a:75:cd:e0:c6:59:e1:c4:36:6e:31: 46:c2:e1:5e:50:36:9c:f7:97:1b:25:5a:36:71:85: d5:e2:61:6e:54:1c:4e:50:b0:69:9b:80:c8:ef:62: 87:78:4e:8d:07:66:61:dd:ce:d3:7d:f4:39:88:a2: a2:d2:b6:b1:64:4f:d4:15:cb:16:5a:4a:9e:5d:9d: 1e:0e:7d:62:36:85:c5:1f:c6:b5:97:8f:e7:19:ea: 1a:c3:7e:37:d0:5d:44:42:79:8c:05:3d:72:17:d2: 8e:6c:bb:80:a7:c4:80:67:5e:8d:cf:b6:bc:55:46: 95:eb:c8:ae:00:19:48:d9:60:70:2f:ec:ba:c8:6a: 63:3d:98:7e:37:da:e5:be:62:6d:2c:43:5c:11:b1: a5:51:39:2a:47:62:0b:7b:99:bf:a1:15:98:b8:cb: 60:ab:c2:0c:07:71:a5:11:bc:52:0f:4d:d2:32:d2: f2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B3:DC:2E:EF:29:16:8E:4E:87:B3:8C:0E:3F:ED:CF:35:A3:31:E2 X509v3 Authority Key Identifier: keyid:2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:d8:04:0e:58:ba:ac:fb:46:70:ae:69:4e:91:dc:d1:18:e0: 2e:76:3d:0f:96:4f:f9:14:24:32:88:4d:87:53:ba:fe:6e:98: f0:08:93:36:ee:f7:32:73:06:06:35:47:91:b1:ce:df:58:52: 87:be:5d:85:19:5a:a2:06:3a:4b:09:52:b9:e6:3b:6c:a8:ed: 91:97:d3:7f:10:6b:4a:4f:bb:88:bd:8c:40:c6:a6:cf:93:0f: 6b:98:3b:6e:fd:f0:fd:b6:f6:d8:cb:6b:8d:16:3f:f0:36:a0: 69:2f:38:e3:c8:fc:d9:e6:de:7a:3f:92:08:5a:2b:70:56:11: ef:2a:ea:12:24:b2:01:88:64:10:01:8f:21:d7:30:67:50:19: 9f:3c:c1:12:82:ee:84:bb:36:a2:4d:eb:f1:13:67:11:f0:7d: f5:dd:42:56:f2:f6:8f:42:df:76:c3:8a:46:9d:40:3d:9b:b3: 5c:2f:87:2d:c6:1f:b9:44:9d:78:61:f7:f4:4c:41:c4:d9:da: c2:2a:e2:00:87:b5:df:37:18:aa:fe:e9:00:c6:1b:98:5b:9b: a9:e6:37:9e:a9:6a:16:32:15:3d:76:e1:76:58:b6:e1:fc:5f: fd:d9:a8:dc:85:ae:bf:f4:ea:ae:57:49:b6:e4:96:a5:d9:fd: e5:98:97:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCD4CppkXKK6FYwtaExlnKyN5v+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFFMTQzM0JCODJGMjc3MTZERjUyNkRBRENDQzRDMkIz NzU4OUNBNTAeFw0yNjA4MDIxNzM4NDdaFw0yNjA4MDMxOTU4NDdaMDMxMTAvBgNV BAMTKERFQjNEQzJFRUYyOTE2OEU0RTg3QjM4QzBFM0ZFRENGMzVBMzMxRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMdzAznyIsHNcvfgRgmaiDpjBq zog885iGm8mlPMo+C568cmw5QM6qU7jw4LA2C2pxaXbSRsnndGG+tTtmbAnK6flg qv/W9S7RUzNIJRwqdc3gxlnhxDZuMUbC4V5QNpz3lxslWjZxhdXiYW5UHE5QsGmb gMjvYod4To0HZmHdztN99DmIoqLStrFkT9QVyxZaSp5dnR4OfWI2hcUfxrWXj+cZ 6hrDfjfQXURCeYwFPXIX0o5su4CnxIBnXo3PtrxVRpXryK4AGUjZYHAv7LrIamM9 mH432uW+Ym0sQ1wRsaVROSpHYgt7mb+hFZi4y2CrwgwHcaURvFIPTdIy0vJZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3rPcLu8pFo5Oh7OMDj/tzzWjMeIwHwYDVR0j BBgwFoAUKuFDO7gvJ3Ft9Sba3MxMKzdYnKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQwMTFhMWMtYTBhZC00ZDkzLTg2YWYtM2YwYWFkZDk2ODRmLzAvMkFFMTQzM0JC ODJGMjc3MTZERjUyNkRBRENDQzRDMkIzNzU4OUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yQUUxNDMzQkI4MkYyNzcxNkRGNTI2REFEQ0NDNEMyQjM3NTg5 Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvMkFFMTQzM0JCODJGMjc3MTZERjUyNkRBRENDQzRD MkIzNzU4OUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfYBA5Yuqz7RnCuaU6R3NEY4C52PQ+WT/kU JDKITYdTuv5umPAIkzbu9zJzBgY1R5Gxzt9YUoe+XYUZWqIGOksJUrnmO2yo7ZGX 038Qa0pPu4i9jEDGps+TD2uYO2798P229tjLa40WP/A2oGkvOOPI/Nnm3no/kgha K3BWEe8q6hIksgGIZBABjyHXMGdQGZ88wRKC7oS7NqJN6/ETZxHwffXdQlby9o9C 33bDikadQD2bs1wvhy3GH7lEnXhh9/RMQcTZ2sIq4gCHtd83GKr+6QDGG5hbm6nm N56pahYyFT124XZYtuH8X/3ZqNyFrr/06q5XSbbklqXZ/eWYlxg= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:36 2026 by rpki-client