$ rpki-client -vvf rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft File: 1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft (raw, json) Hash identifier: KDa02WR/YuMhk2UKzCIep0MNV1Lw9Jt1fgRNbvBkv2Y= Subject key identifier: 2C:8D:67:E6:28:08:1D:49:E0:5B:80:FB:32:6A:6F:96:CB:93:B5:C5 Authority key identifier: 1D:2C:9E:44:E4:E5:E2:2E:88:CD:03:13:51:42:D1:76:83:A2:4E:7D Certificate issuer: /CN=1D2C9E44E4E5E22E88CD03135142D17683A24E7D Certificate serial: 57FFB33F9314E4142927F7A63CB3A6FAD590A1E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 03:47:05 +0000 Manifest this update: Sun 02 Aug 2026 03:42:05 +0000 Manifest next update: Mon 03 Aug 2026 07:23:05 +0000 Files and hashes: 1: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (hash: BX3zo4jm394L+4A0hATz0MD3kr1dhrVpAj21QCDfQYI=) 2: 1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl (hash: TgEZzVlWqu1HOBTq1JdaFR5D/an8EO0+iCBV8cfyjMg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ff:b3:3f:93:14:e4:14:29:27:f7:a6:3c:b3:a6:fa:d5:90:a1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D2C9E44E4E5E22E88CD03135142D17683A24E7D Validity Not Before: Aug 2 03:42:05 2026 GMT Not After : Aug 3 07:23:05 2026 GMT Subject: CN=2C8D67E628081D49E05B80FB326A6F96CB93B5C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c4:12:bb:8c:e1:7a:ee:9b:d5:68:bd:16:8b: 61:10:7e:69:c1:0c:06:93:15:f9:9d:c1:39:42:97: ff:c4:71:b9:b0:34:98:15:4b:7f:7b:6a:37:57:56: 9a:14:fa:64:99:85:86:c1:95:37:c3:d3:bc:4c:42: ce:a2:9f:2c:be:6a:7c:ea:42:23:9a:61:be:76:13: cd:e0:d1:4b:3b:8d:fc:a2:1a:c2:1e:50:3d:a3:7d: cf:61:29:91:98:50:60:e8:b4:f7:63:db:78:74:1f: b5:1b:56:bd:ca:66:f5:b2:27:4d:38:3e:d1:d8:3c: 30:4d:72:19:8f:d1:9c:1b:2a:dc:a0:53:e5:c4:d8: 75:13:00:f0:aa:0c:5c:e5:e6:dc:e7:f7:74:75:50: 7a:2a:fc:ca:29:bc:6c:89:32:55:47:59:94:ee:b0: 11:eb:72:d4:d7:47:7e:66:2e:0e:6a:ea:c1:66:1e: e7:94:fd:15:3b:68:54:5b:64:c6:22:70:c9:eb:8e: 0a:f6:9f:9f:ce:17:71:a6:55:ff:61:f1:73:d8:09: 18:a0:23:e9:f1:85:e8:57:0d:40:10:5e:d6:07:46: 62:9b:f5:f9:96:bd:66:c4:cd:7f:d8:66:b7:b1:d9: 84:9e:f4:be:40:5e:a7:7b:a6:ec:77:db:81:cf:85: eb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8D:67:E6:28:08:1D:49:E0:5B:80:FB:32:6A:6F:96:CB:93:B5:C5 X509v3 Authority Key Identifier: keyid:1D:2C:9E:44:E4:E5:E2:2E:88:CD:03:13:51:42:D1:76:83:A2:4E:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:80:3d:86:dd:f6:7c:bf:72:46:19:d8:a8:25:a1:96:59:71: c1:06:6b:24:41:b3:1f:85:02:1b:6f:d8:31:cd:d8:07:f3:62: 67:da:6c:88:e5:57:9f:af:08:72:cb:90:82:f6:75:3e:c1:41: 24:6c:45:26:91:04:1d:db:ad:04:34:a8:ed:21:ef:c3:e9:4e: f0:80:34:b2:fd:b2:7f:b6:51:df:fa:5c:f4:a0:a5:2e:a5:be: 06:b6:02:38:f4:d2:21:20:f4:6b:31:2c:4e:1a:f2:5d:bf:6d: d8:8c:f5:89:02:e4:7a:fe:30:ea:92:8c:1d:37:60:47:c5:36: 0c:a5:b1:48:82:b6:f7:98:0e:72:fd:23:7d:a2:6c:12:9a:e8: 6c:fb:c5:7c:96:72:bc:68:f4:86:92:90:14:5b:5a:ff:2b:23: d7:74:c9:42:39:70:05:50:64:3a:e5:99:60:1c:5d:bc:e7:6e: 70:d1:d9:a5:b9:9f:d4:4f:78:d6:72:a4:5a:82:b0:6a:5f:c1: f9:fa:11:8b:ee:4a:65:5e:04:e2:d9:a5:eb:40:81:93:3c:ea: 61:c1:49:1a:49:b6:f7:ad:2f:01:9c:d9:84:0d:c2:c4:47:77: b6:44:03:82:ad:0a:67:e5:67:9c:b2:0a:1d:ba:a5:00:3a:a8: 1f:a6:73:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/+zP5MU5BQpJ/emPLOm+tWQoeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyQzlFNDRFNEU1RTIyRTg4Q0QwMzEzNTE0MkQxNzY4 M0EyNEU3RDAeFw0yNjA4MDIwMzQyMDVaFw0yNjA4MDMwNzIzMDVaMDMxMTAvBgNV BAMTKDJDOEQ2N0U2MjgwODFENDlFMDVCODBGQjMyNkE2Rjk2Q0I5M0I1QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZxBK7jOF67pvVaL0Wi2EQfmnB DAaTFfmdwTlCl//EcbmwNJgVS397ajdXVpoU+mSZhYbBlTfD07xMQs6inyy+anzq QiOaYb52E83g0Us7jfyiGsIeUD2jfc9hKZGYUGDotPdj23h0H7UbVr3KZvWyJ004 PtHYPDBNchmP0ZwbKtygU+XE2HUTAPCqDFzl5tzn93R1UHoq/MopvGyJMlVHWZTu sBHrctTXR35mLg5q6sFmHueU/RU7aFRbZMYicMnrjgr2n5/OF3GmVf9h8XPYCRig I+nxhehXDUAQXtYHRmKb9fmWvWbEzX/YZrex2YSe9L5AXqd7pux324HPhesZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULI1n5igIHUngW4D7MmpvlsuTtcUwHwYDVR0j BBgwFoAUHSyeROTl4i6IzQMTUULRdoOiTn0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI4ODBkZGItM2Q5NC00ZTM0LTkyZGMtNGQ0NTM4YjkwNWEyLzAvMUQyQzlFNDRF NEU1RTIyRTg4Q0QwMzEzNTE0MkQxNzY4M0EyNEU3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDJDOUU0NEU0RTVFMjJFODhDRDAzMTM1MTQyRDE3NjgzQTI0 RTdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI4ODBkZGItM2Q5NC00ZTM0LTky ZGMtNGQ0NTM4YjkwNWEyLzAvMUQyQzlFNDRFNEU1RTIyRTg4Q0QwMzEzNTE0MkQx NzY4M0EyNEU3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKAPYbd9ny/ckYZ2KgloZZZccEGayRBsx+F Ahtv2DHN2AfzYmfabIjlV5+vCHLLkIL2dT7BQSRsRSaRBB3brQQ0qO0h78PpTvCA NLL9sn+2Ud/6XPSgpS6lvga2Ajj00iEg9GsxLE4a8l2/bdiM9YkC5Hr+MOqSjB03 YEfFNgylsUiCtveYDnL9I32ibBKa6Gz7xXyWcrxo9IaSkBRbWv8rI9d0yUI5cAVQ ZDrlmWAcXbznbnDR2aW5n9RPeNZypFqCsGpfwfn6EYvuSmVeBOLZpetAgZM86mHB SRpJtvetLwGc2YQNwsRHd7ZEA4KtCmflZ5yyCh26pQA6qB+mc48= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:35 2026 by rpki-client