$ rpki-client -vvf rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft File: 2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft (raw, json) Hash identifier: +uuaVvdMjzdMqPkyWPp7//KATMNeB/JWlL9sLAYojOk= Subject key identifier: 4B:C4:F4:28:B4:64:C2:46:9D:38:4D:3B:5C:F7:C3:D9:A1:5C:53:D2 Authority key identifier: 2D:FC:5C:3D:38:82:FE:6E:7F:9A:9E:FE:2F:6B:96:55:5F:F5:2D:D7 Certificate issuer: /CN=2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7 Certificate serial: 70473B88BB50D66E4AB710E5BEF06373D6DB5874 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 06:09:49 +0000 Manifest this update: Sun 02 Aug 2026 06:04:49 +0000 Manifest next update: Mon 03 Aug 2026 09:39:49 +0000 Files and hashes: 1: 2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl (hash: 2sWSTTe8uqwpw0sHLgfqoLohOEgwbSiMvlKsF59QjcI=) 2: 3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (hash: KyTDN/npdCxMnf6sB8d1UiCU7Ow9yE5T+dZIKGap4fI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:47:3b:88:bb:50:d6:6e:4a:b7:10:e5:be:f0:63:73:d6:db:58:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7 Validity Not Before: Aug 2 06:04:49 2026 GMT Not After : Aug 3 09:39:49 2026 GMT Subject: CN=4BC4F428B464C2469D384D3B5CF7C3D9A15C53D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:62:ef:86:9b:8e:0a:75:24:e2:22:f0:fc:83: 33:a3:9e:a6:6c:89:5b:b6:5a:d1:73:a2:33:4b:f1: 44:62:53:68:26:7e:17:a5:13:59:15:08:cf:61:1a: 58:a6:f5:26:67:9d:27:89:c9:8b:c1:f9:d9:53:d2: 0c:71:f0:9f:41:30:78:18:d3:aa:1d:fb:fb:fd:ef: eb:ae:c2:0c:72:b2:75:0b:f9:7d:bf:63:37:35:19: 83:6a:f9:66:01:75:55:6c:b9:0b:2f:a0:3a:58:2c: 38:a5:39:2b:3c:e0:9d:7c:92:99:a5:e2:c2:43:6d: 3f:24:d2:1b:68:06:bf:32:31:dd:10:33:b4:3b:88: 90:29:1b:f9:5a:b0:30:df:88:ce:c4:07:d4:f0:4f: b6:31:79:be:b4:6e:62:70:15:82:88:f0:30:25:03: 1c:e7:52:58:10:0c:1f:b0:34:0e:42:e9:7b:7c:3c: 77:67:db:ee:08:40:c0:3f:46:41:05:99:03:13:18: 0b:50:b0:e2:6f:bb:ed:6f:6f:a6:2d:6c:54:83:3b: 62:cb:bf:56:a9:67:04:14:95:a0:da:fa:cb:65:93: be:d3:b5:f5:84:2e:04:17:9c:d3:6a:14:6e:27:a2: 25:c1:16:4a:ed:f2:36:97:70:b6:06:35:66:0f:f5: 09:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C4:F4:28:B4:64:C2:46:9D:38:4D:3B:5C:F7:C3:D9:A1:5C:53:D2 X509v3 Authority Key Identifier: keyid:2D:FC:5C:3D:38:82:FE:6E:7F:9A:9E:FE:2F:6B:96:55:5F:F5:2D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e3:18:86:7e:07:8b:0c:77:29:f6:39:61:82:7c:13:cc:f5: 2f:f6:ab:1b:a7:58:3d:b2:94:84:86:8c:08:98:b8:b9:fa:26: 9e:c6:18:a5:74:1e:3e:7c:39:76:6b:6c:60:30:60:0a:8b:83: 24:0a:ec:8f:32:ac:86:82:f4:07:3b:e6:7e:14:d6:df:c1:58: 5e:64:f2:7f:f1:c6:70:ad:ad:85:69:d2:6d:c4:5d:01:31:d9: 84:84:53:6a:0f:ad:f2:c6:25:f7:0a:2e:22:f4:be:61:cb:76: 02:02:8c:3c:d6:01:77:b6:c0:ad:3e:a0:2b:81:7f:55:0a:1b: 14:69:05:3e:73:0d:57:df:2a:f2:ca:41:25:24:89:76:49:15: f3:21:2a:47:e0:3b:78:f1:f7:0e:9c:84:08:c6:09:df:41:72: dd:3f:3b:70:40:2f:f1:d1:56:42:6e:63:98:fd:e7:81:d1:45: 69:f8:5b:a5:0a:67:ca:8a:4a:5d:d1:6e:43:7a:ed:0c:36:eb: 49:52:07:72:c8:5e:14:94:8c:33:78:65:5b:97:d3:59:49:64: 96:09:5c:36:d2:b2:75:42:3e:ee:5e:b0:90:49:f4:8a:9f:a9: 57:37:9a:28:f0:38:a3:df:66:50:a7:c1:32:3e:c3:13:44:a4: 15:6a:43:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcEc7iLtQ1m5KtxDlvvBjc9bbWHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQzVDM0QzODgyRkU2RTdGOUE5RUZFMkY2Qjk2NTU1 RkY1MkRENzAeFw0yNjA4MDIwNjA0NDlaFw0yNjA4MDMwOTM5NDlaMDMxMTAvBgNV BAMTKDRCQzRGNDI4QjQ2NEMyNDY5RDM4NEQzQjVDRjdDM0Q5QTE1QzUzRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJYu+Gm44KdSTiIvD8gzOjnqZs iVu2WtFzojNL8URiU2gmfhelE1kVCM9hGlim9SZnnSeJyYvB+dlT0gxx8J9BMHgY 06od+/v97+uuwgxysnUL+X2/Yzc1GYNq+WYBdVVsuQsvoDpYLDilOSs84J18kpml 4sJDbT8k0htoBr8yMd0QM7Q7iJApG/lasDDfiM7EB9TwT7Yxeb60bmJwFYKI8DAl AxznUlgQDB+wNA5C6Xt8PHdn2+4IQMA/RkEFmQMTGAtQsOJvu+1vb6YtbFSDO2LL v1apZwQUlaDa+stlk77TtfWELgQXnNNqFG4noiXBFkrt8jaXcLYGNWYP9QkVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS8T0KLRkwkadOE07XPfD2aFcU9IwHwYDVR0j BBgwFoAULfxcPTiC/m5/mp7+L2uWVV/1LdcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVmMDAxM2ItNTlhNi00NzMzLTg5ZjgtMjhmYTNkODg1NzlmLzAvMkRGQzVDM0Qz ODgyRkU2RTdGOUE5RUZFMkY2Qjk2NTU1RkY1MkRENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREZDNUMzRDM4ODJGRTZFN0Y5QTlFRkUyRjZCOTY1NTVGRjUy REQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmVmMDAxM2ItNTlhNi00NzMzLTg5 ZjgtMjhmYTNkODg1NzlmLzAvMkRGQzVDM0QzODgyRkU2RTdGOUE5RUZFMkY2Qjk2 NTU1RkY1MkRENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrjGIZ+B4sMdyn2OWGCfBPM9S/2qxunWD2y lISGjAiYuLn6Jp7GGKV0Hj58OXZrbGAwYAqLgyQK7I8yrIaC9Ac75n4U1t/BWF5k 8n/xxnCtrYVp0m3EXQEx2YSEU2oPrfLGJfcKLiL0vmHLdgICjDzWAXe2wK0+oCuB f1UKGxRpBT5zDVffKvLKQSUkiXZJFfMhKkfgO3jx9w6chAjGCd9Bct0/O3BAL/HR VkJuY5j954HRRWn4W6UKZ8qKSl3RbkN67Qw260lSB3LIXhSUjDN4ZVuX01lJZJYJ XDbSsnVCPu5esJBJ9IqfqVc3mijwOKPfZlCnwTI+wxNEpBVqQ3M= -----END CERTIFICATE-----Generated at Sun Aug 2 22:54:05 2026 by rpki-client