$ rpki-client -vvf rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft File: 2DFC13D85715AA04782C2A3D86F83844385F896D.mft (raw, json) Hash identifier: 6FYJk4VM8/SYkCwe18ok2cd8LzK7sTib7liqLRJk/yc= Subject key identifier: AA:31:BF:45:60:21:B0:7B:17:B8:5D:E4:CD:A5:4A:DE:25:82:DC:D9 Authority key identifier: 2D:FC:13:D8:57:15:AA:04:78:2C:2A:3D:86:F8:38:44:38:5F:89:6D Certificate issuer: /CN=2DFC13D85715AA04782C2A3D86F83844385F896D Certificate serial: 54669CA2432A65ADE187D8FE1D4B388CEC483609 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 05:29:04 +0000 Manifest this update: Sun 02 Aug 2026 05:24:04 +0000 Manifest next update: Mon 03 Aug 2026 06:58:04 +0000 Files and hashes: 1: 2DFC13D85715AA04782C2A3D86F83844385F896D.crl (hash: IA8ybIid+DtazlVJAt+BZmTsJVSYqUlEFcl4imQj4uk=) 2: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: 2yToa31P3viNdlJSz6LX8aSdNJBJoeEJaRZoiY3wK8c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.crl rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 06:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:66:9c:a2:43:2a:65:ad:e1:87:d8:fe:1d:4b:38:8c:ec:48:36:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFC13D85715AA04782C2A3D86F83844385F896D Validity Not Before: Aug 2 05:24:04 2026 GMT Not After : Aug 3 06:58:04 2026 GMT Subject: CN=AA31BF456021B07B17B85DE4CDA54ADE2582DCD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a4:99:31:22:78:62:bf:da:e5:ed:1d:32:cd: 3a:f7:95:0a:e2:36:2e:f8:bd:44:c0:9e:6d:b7:af: 1f:8b:ec:54:a3:22:2f:7a:3d:58:62:61:57:d4:f7: 25:41:f4:c5:ed:45:fd:59:c4:da:8d:e1:22:8b:2c: 00:97:ec:00:02:fe:68:52:b9:cd:a2:c4:18:e7:06: f2:16:5a:bd:74:b6:8c:4b:0c:5e:65:85:21:28:40: de:71:fa:db:28:6d:a0:98:81:2d:c3:2b:fb:bd:48: 14:0b:e8:f9:77:fa:83:cc:ae:d3:20:00:46:17:7a: 86:53:3c:86:80:a0:80:33:f1:c7:fa:67:da:2b:6f: 78:23:02:75:87:e8:2b:e2:cb:fd:13:a3:3a:51:68: 92:19:f0:82:8a:fe:67:0e:6e:2c:96:50:0a:d7:10: 6c:93:0e:0d:c7:55:a3:20:9b:18:1a:fb:2e:e5:1d: 83:b0:83:53:40:e9:6e:59:e8:2e:88:e1:7b:91:7d: 2a:3f:ef:29:59:51:26:5b:df:80:9e:12:e6:44:3e: ba:3a:1f:4f:55:52:87:c7:9d:d8:d2:72:d8:39:ea: 25:1a:cb:18:aa:ad:b0:b2:f6:09:0d:22:bc:1e:7b: 28:3b:96:62:16:2a:91:67:f3:ef:d5:fc:64:84:6c: 26:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:31:BF:45:60:21:B0:7B:17:B8:5D:E4:CD:A5:4A:DE:25:82:DC:D9 X509v3 Authority Key Identifier: keyid:2D:FC:13:D8:57:15:AA:04:78:2C:2A:3D:86:F8:38:44:38:5F:89:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e5:66:1b:31:d6:ab:94:af:d7:a2:94:5d:d9:3f:46:19:21: cb:53:f8:bb:87:58:7d:88:d5:2e:b0:f1:5b:9b:68:d5:37:ab: 35:73:88:47:f9:79:3e:1b:69:3b:14:a0:40:3f:10:48:f5:d4: cd:a7:6c:13:42:dd:d5:63:44:2d:de:01:58:46:5b:fa:86:bb: 38:1c:8b:4b:6a:07:6d:fc:0e:bc:50:48:fa:9c:61:a6:4b:53: 76:fb:67:70:a4:d5:0f:4c:84:a6:87:dc:71:d0:a4:b9:5f:ba: 49:0c:1f:5e:35:e4:c6:52:81:08:43:a0:8f:69:b0:f9:f9:bd: 78:f4:0f:89:c3:09:ed:d2:28:79:3f:6d:ed:2f:cc:97:bd:b8: 4c:cc:fc:a7:c5:21:a4:bd:97:8a:ca:f8:7a:1d:22:51:f0:05: 87:20:84:10:dd:83:ed:c3:60:3a:b6:5a:8e:95:86:8c:06:e5: 6d:5e:50:5b:c6:93:fd:ad:82:dd:97:cb:7e:52:a9:3d:da:4a: 33:04:3c:2c:1f:86:45:69:5b:34:df:bd:60:64:b5:be:a7:77: 02:17:14:ae:9f:af:0b:bc:a5:94:1e:91:18:88:17:3a:42:80: 48:b9:6b:49:03:4e:d0:ab:fc:c4:d5:fa:e1:ea:c8:0e:04:17: 19:10:e9:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVGacokMqZa3hh9j+HUs4jOxINgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQzEzRDg1NzE1QUEwNDc4MkMyQTNEODZGODM4NDQz ODVGODk2RDAeFw0yNjA4MDIwNTI0MDRaFw0yNjA4MDMwNjU4MDRaMDMxMTAvBgNV BAMTKEFBMzFCRjQ1NjAyMUIwN0IxN0I4NURFNENEQTU0QURFMjU4MkRDRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDppJkxInhiv9rl7R0yzTr3lQri Ni74vUTAnm23rx+L7FSjIi96PVhiYVfU9yVB9MXtRf1ZxNqN4SKLLACX7AAC/mhS uc2ixBjnBvIWWr10toxLDF5lhSEoQN5x+tsobaCYgS3DK/u9SBQL6Pl3+oPMrtMg AEYXeoZTPIaAoIAz8cf6Z9orb3gjAnWH6Cviy/0TozpRaJIZ8IKK/mcObiyWUArX EGyTDg3HVaMgmxga+y7lHYOwg1NA6W5Z6C6I4XuRfSo/7ylZUSZb34CeEuZEPro6 H09VUofHndjSctg56iUayxiqrbCy9gkNIrweeyg7lmIWKpFn8+/V/GSEbCbvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqjG/RWAhsHsXuF3kzaVK3iWC3NkwHwYDVR0j BBgwFoAULfwT2FcVqgR4LCo9hvg4RDhfiW0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTliMDdhOWUtNjJkZi00ODA4LTlkMmEtYTZlNjg4NGJjYmJiLzAvMkRGQzEzRDg1 NzE1QUEwNDc4MkMyQTNEODZGODM4NDQzODVGODk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yREZDMTNEODU3MTVBQTA0NzgyQzJBM0Q4NkY4Mzg0NDM4NUY4 OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvMkRGQzEzRDg1NzE1QUEwNDc4MkMyQTNEODZGODM4 NDQzODVGODk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrlZhsx1quUr9eilF3ZP0YZIctT+LuHWH2I 1S6w8VubaNU3qzVziEf5eT4baTsUoEA/EEj11M2nbBNC3dVjRC3eAVhGW/qGuzgc i0tqB238DrxQSPqcYaZLU3b7Z3Ck1Q9MhKaH3HHQpLlfukkMH1415MZSgQhDoI9p sPn5vXj0D4nDCe3SKHk/be0vzJe9uEzM/KfFIaS9l4rK+HodIlHwBYcghBDdg+3D YDq2Wo6VhowG5W1eUFvGk/2tgt2Xy35SqT3aSjMEPCwfhkVpWzTfvWBktb6ndwIX FK6frwu8pZQekRiIFzpCgEi5a0kDTtCr/MTV+uHqyA4EFxkQ6fw= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:45 2026 by rpki-client