$ rpki-client -vvf rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft File: 2C1233B548C07507C6EF58E2A03DD8309F820753.mft (raw, json) Hash identifier: yfMgoWwsH3i78VSSxOrhQcOgik4RD0irEMzkn5cmGlM= Subject key identifier: 2F:77:2E:C9:0A:29:42:F5:38:B3:BA:FE:6C:23:B4:BD:EC:04:D7:FD Authority key identifier: 2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53 Certificate issuer: /CN=2C1233B548C07507C6EF58E2A03DD8309F820753 Certificate serial: 21C8687540BECB668BA5E4E62B431587B4B027F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft Manifest number: 62 Signing time: Mon 13 Jul 2026 23:49:16 +0000 Manifest this update: Mon 13 Jul 2026 23:44:16 +0000 Manifest next update: Wed 15 Jul 2026 02:50:16 +0000 Files and hashes: 1: 2C1233B548C07507C6EF58E2A03DD8309F820753.crl (hash: eWmRvG2+8cpqCex7TC+Eu3S7YsZHOhcTmMDaFRFSKC0=) 2: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 0GUMhzS+5NIthW1wvl37lL5c5ztTRVnrHP+oCvOX4MA=) 3: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: bvFzrT6armN3+NSh25eEAeVsS6vGdsFIsCLC0MUnl3s=) 4: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: /6iiyBTTzA+gJYo5W8sFnueJYX/K6dQcso0XDUc2u/0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c8:68:75:40:be:cb:66:8b:a5:e4:e6:2b:43:15:87:b4:b0:27:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C1233B548C07507C6EF58E2A03DD8309F820753 Validity Not Before: Jul 13 23:44:16 2026 GMT Not After : Jul 15 02:50:16 2026 GMT Subject: CN=2F772EC90A2942F538B3BAFE6C23B4BDEC04D7FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4c:c9:61:f0:20:2b:44:bb:a4:02:28:2a:d8: 7b:61:a5:04:00:fa:b2:22:aa:aa:e8:50:23:07:fc: ae:09:b3:9c:7d:4d:d5:53:e1:e6:b5:ce:9d:b0:ac: 35:eb:88:db:4b:a1:18:1e:52:ba:a1:f1:67:99:c7: fd:ad:84:0a:6a:05:15:1d:7e:ce:60:d8:38:e5:06: 86:87:0d:06:95:2d:65:25:fa:a2:9d:4e:db:68:a5: e1:17:dc:6e:6b:b1:70:24:1e:2b:b1:86:41:68:3a: 03:01:80:ce:6c:53:db:50:9f:9c:87:1a:75:90:09: e6:1e:02:1c:3b:78:e0:7d:b6:47:bb:b8:d7:bb:e3: 76:54:08:11:e7:48:89:1a:8c:ec:d8:2f:e7:c8:16: 0e:f1:1c:83:d3:fb:d5:f8:77:37:30:c3:ef:a4:30: 96:07:30:bb:8c:f1:d2:ed:33:3b:e7:7e:36:12:c1: 3b:de:e1:f4:3a:13:f9:b0:58:fe:67:1e:15:3d:4c: 0f:dc:95:f7:d7:c6:03:0c:51:07:fb:3b:fc:06:eb: bf:1f:b1:d1:29:51:4b:a9:29:a2:43:c1:10:45:f8: 6b:11:b4:45:d4:1c:98:28:8a:2c:e7:6e:68:bd:70: fc:96:de:a6:6d:af:89:be:63:77:09:8e:aa:ae:ba: 76:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:77:2E:C9:0A:29:42:F5:38:B3:BA:FE:6C:23:B4:BD:EC:04:D7:FD X509v3 Authority Key Identifier: keyid:2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:52:d0:ac:66:8b:5f:4f:bb:7d:c8:32:20:e8:11:6c:59:37: ff:54:f0:fb:1b:dc:5d:81:df:2f:21:c9:46:1b:11:14:ae:1a: 77:12:bd:13:db:11:5b:b9:15:40:7d:dd:2e:02:01:0d:68:df: b9:b7:40:23:e3:8b:17:82:76:e8:66:ba:db:05:95:a4:d1:e9: a1:75:b8:1f:35:9b:6a:c7:ef:78:47:fb:98:3f:c7:3b:4f:5f: a1:40:fd:0d:70:a2:7f:56:ae:14:82:e2:cf:9d:4c:0b:9b:1a: 62:d6:b8:22:8f:29:98:93:48:dd:1f:dc:18:c0:55:0e:06:8f: 92:2a:94:d4:fb:29:66:67:1e:ad:8c:18:9b:ae:8d:df:17:34: 98:2a:06:5f:c7:97:25:2f:0c:1d:de:0e:25:57:3f:eb:d2:fd: 7a:b7:15:c8:50:fd:cc:d6:36:42:ff:6d:e2:28:3e:57:18:ce: 42:b5:06:f3:34:65:a5:21:09:67:a3:2e:b6:a3:4d:25:36:d4: 47:06:8c:43:16:f0:10:2e:46:2d:97:a4:fe:e3:7c:42:ab:6f: 37:eb:9a:88:96:2a:2b:6f:32:cf:ef:c9:31:08:f0:56:ed:a3: 20:cd:c5:f6:61:65:75:52:6a:74:ae:e5:95:35:61:dd:9b:16: d5:70:47:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIchodUC+y2aLpeTmK0MVh7SwJ/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMxMjMzQjU0OEMwNzUwN0M2RUY1OEUyQTAzREQ4MzA5 RjgyMDc1MzAeFw0yNjA3MTMyMzQ0MTZaFw0yNjA3MTUwMjUwMTZaMDMxMTAvBgNV BAMTKDJGNzcyRUM5MEEyOTQyRjUzOEIzQkFGRTZDMjNCNEJERUMwNEQ3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhTMlh8CArRLukAigq2HthpQQA +rIiqqroUCMH/K4Js5x9TdVT4ea1zp2wrDXriNtLoRgeUrqh8WeZx/2thApqBRUd fs5g2DjlBoaHDQaVLWUl+qKdTttopeEX3G5rsXAkHiuxhkFoOgMBgM5sU9tQn5yH GnWQCeYeAhw7eOB9tke7uNe743ZUCBHnSIkajOzYL+fIFg7xHIPT+9X4dzcww++k MJYHMLuM8dLtMzvnfjYSwTve4fQ6E/mwWP5nHhU9TA/clffXxgMMUQf7O/wG678f sdEpUUupKaJDwRBF+GsRtEXUHJgoiiznbmi9cPyW3qZtr4m+Y3cJjqquunbjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL3cuyQopQvU4s7r+bCO0vewE1/0wHwYDVR0j BBgwFoAULBIztUjAdQfG71jioD3YMJ+CB1MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTFlOTQyNDMtODdmMC00MjZmLWE5Y2EtNGMxOWVkYjA2YjQyLzAvMkMxMjMzQjU0 OEMwNzUwN0M2RUY1OEUyQTAzREQ4MzA5RjgyMDc1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQzEyMzNCNTQ4QzA3NTA3QzZFRjU4RTJBMDNERDgzMDlGODIw NzUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5 Y2EtNGMxOWVkYjA2YjQyLzAvMkMxMjMzQjU0OEMwNzUwN0M2RUY1OEUyQTAzREQ4 MzA5RjgyMDc1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtS0Kxmi19Pu33IMiDoEWxZN/9U8Psb3F2B 3y8hyUYbERSuGncSvRPbEVu5FUB93S4CAQ1o37m3QCPjixeCduhmutsFlaTR6aF1 uB81m2rH73hH+5g/xztPX6FA/Q1won9WrhSC4s+dTAubGmLWuCKPKZiTSN0f3BjA VQ4Gj5IqlNT7KWZnHq2MGJuujd8XNJgqBl/HlyUvDB3eDiVXP+vS/Xq3FchQ/czW NkL/beIoPlcYzkK1BvM0ZaUhCWejLrajTSU21EcGjEMW8BAuRi2XpP7jfEKrbzfr moiWKitvMs/vyTEI8FbtoyDNxfZhZXVSanSu5ZU1Yd2bFtVwR8U= -----END CERTIFICATE-----Generated at Tue Jul 14 08:18:23 2026 by rpki-client