$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft File: 2479BECD79D87972D2E64A75818044EA49B2F7AB.mft (raw, json) Hash identifier: REfWV1Of62MnrGvI4+13YBNtjZEko8egTvu349w6fMw= Subject key identifier: 52:19:74:73:92:C0:A7:57:D4:50:E2:8D:39:3A:39:1A:BE:72:62:A0 Authority key identifier: 24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB Certificate issuer: /CN=2479BECD79D87972D2E64A75818044EA49B2F7AB Certificate serial: 5A6AF8EC0C69ADEE3461FF3FD0DDD37FDCB8D320 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft Manifest number: 67 Signing time: Fri 17 Jul 2026 22:30:40 +0000 Manifest this update: Fri 17 Jul 2026 22:25:40 +0000 Manifest next update: Sat 18 Jul 2026 23:53:40 +0000 Files and hashes: 1: 3130332e3131322e3134342e302f32332d3233203d3e20313534343130.roa (hash: EBSYxoW+DLXOqCY+Bl9yoeDsBygUGPhlM9cqjS/xpGk=) 2: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: aop58br7cTbLrX5Ig76Wb88/Xv5ZLtq0WiG+kxtdBWw=) 3: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: /gZ4/45D54iPNl3rFwLqcXjfv+fGeCZ/kGOEYCstAaw=) 4: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: W/8+xRtFQTktxO0fuk7MAz6L6AHwxOnMCS8RTW7dGss=) 5: 2479BECD79D87972D2E64A75818044EA49B2F7AB.crl (hash: atsZss/fA1rjaUEB9ZkuBdC/nSUk9nVFbgLVzqfXIi0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 20:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:6a:f8:ec:0c:69:ad:ee:34:61:ff:3f:d0:dd:d3:7f:dc:b8:d3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2479BECD79D87972D2E64A75818044EA49B2F7AB Validity Not Before: Jul 17 22:25:40 2026 GMT Not After : Jul 18 23:53:40 2026 GMT Subject: CN=5219747392C0A757D450E28D393A391ABE7262A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f5:32:6c:1d:7a:fa:b3:86:e8:6e:44:5b:57: 43:1e:e2:85:8a:9d:5b:77:17:fc:48:f4:5f:44:9c: c0:f4:9a:e0:93:62:38:81:68:ff:33:02:98:6a:22: b6:d3:e4:36:17:8d:ce:93:af:64:e7:bc:2a:f4:62: 24:7c:e6:47:c9:b4:5d:56:da:70:4f:9d:f7:78:a9: 75:b5:c8:88:7e:61:7e:ba:66:0b:3b:15:c0:ad:ce: 44:14:bd:6c:51:d6:9c:cd:bb:a6:b3:41:6e:04:1e: fa:a6:f6:db:9f:93:07:e0:f5:0a:0b:be:1e:10:b4: 60:3c:cc:30:17:d5:0a:23:d9:38:76:36:f0:a5:30: 15:d8:f5:46:9d:94:23:54:85:e4:aa:bf:05:bd:9f: a6:56:b8:2d:62:b7:33:82:d3:bd:a8:21:85:ba:29: 20:b1:99:69:57:10:ea:cd:9f:70:e5:13:7b:2b:5d: 53:8f:3b:5d:be:bb:99:8f:e7:48:b5:b7:78:c8:e5: 75:84:7e:ab:57:cb:53:9b:1d:50:79:f1:0f:72:f4: 82:03:9f:f8:d3:d5:3f:51:9a:6e:b7:30:3f:53:09: 12:3a:82:43:b8:41:ad:87:b8:39:ed:ac:4e:0b:d3: 95:55:9c:e2:3b:02:80:33:4f:a5:d5:4b:b9:8a:6a: 2f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:19:74:73:92:C0:A7:57:D4:50:E2:8D:39:3A:39:1A:BE:72:62:A0 X509v3 Authority Key Identifier: keyid:24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ff:d6:0f:5b:9f:e0:ff:4d:df:9d:bf:81:4c:ec:dc:5d:8c: 61:94:07:a6:34:be:21:cc:d6:99:1a:f4:70:20:0e:35:ef:7d: 11:73:fe:b7:c5:82:69:da:8b:30:65:33:d2:9c:6f:fc:2e:f4: 63:93:5c:68:03:86:48:e2:1e:a7:4e:4c:40:e8:87:96:fd:47: e1:21:3a:2e:a7:77:55:6c:ff:99:c9:0e:c6:18:22:22:74:6d: 28:e0:03:c1:a1:2d:6c:6e:3d:81:35:d6:9b:eb:13:cd:c8:a1: 57:2f:c0:e3:f1:a7:1d:6c:09:7f:1f:87:63:02:68:d7:5b:d3: d1:7c:66:79:3b:74:21:ea:23:c4:08:a9:03:79:5e:c3:cd:5c: 68:d7:45:1f:2b:c9:aa:64:50:14:36:f3:c3:38:76:ca:42:7c: ab:43:b6:fb:6b:1a:49:a6:93:3a:00:2d:28:d1:92:4a:65:b2: 1f:58:e4:51:2a:7a:eb:29:8e:63:38:26:3c:32:b8:67:06:ba: 5a:08:bd:a3:6a:67:d7:32:65:db:bd:4d:c3:f4:24:15:14:77: 3c:d7:73:bf:18:49:2a:81:d3:fd:46:67:7c:44:ac:22:be:b9: 5a:53:65:61:65:19:f3:0b:c8:50:93:0c:32:ac:ef:9e:74:8b: 06:7f:4e:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWmr47Axpre40Yf8/0N3Tf9y40yAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3OUJFQ0Q3OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0RUE0 OUIyRjdBQjAeFw0yNjA3MTcyMjI1NDBaFw0yNjA3MTgyMzUzNDBaMDMxMTAvBgNV BAMTKDUyMTk3NDczOTJDMEE3NTdENDUwRTI4RDM5M0EzOTFBQkU3MjYyQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa9TJsHXr6s4bobkRbV0Me4oWK nVt3F/xI9F9EnMD0muCTYjiBaP8zAphqIrbT5DYXjc6Tr2TnvCr0YiR85kfJtF1W 2nBPnfd4qXW1yIh+YX66Zgs7FcCtzkQUvWxR1pzNu6azQW4EHvqm9tufkwfg9QoL vh4QtGA8zDAX1Qoj2Th2NvClMBXY9UadlCNUheSqvwW9n6ZWuC1itzOC072oIYW6 KSCxmWlXEOrNn3DlE3srXVOPO12+u5mP50i1t3jI5XWEfqtXy1ObHVB58Q9y9IID n/jT1T9Rmm63MD9TCRI6gkO4Qa2HuDntrE4L05VVnOI7AoAzT6XVS7mKai/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUhl0c5LAp1fUUOKNOTo5Gr5yYqAwHwYDVR0j BBgwFoAUJHm+zXnYeXLS5kp1gYBE6kmy96swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNkMDhlYjMtOTM3ZC00MzA0LTkxNjctNDYzZDdjNThkNWU0LzAvMjQ3OUJFQ0Q3 OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0RUE0OUIyRjdBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDc5QkVDRDc5RDg3OTcyRDJFNjRBNzU4MTgwNDRFQTQ5QjJG N0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGNkMDhlYjMtOTM3ZC00MzA0LTkx NjctNDYzZDdjNThkNWU0LzAvMjQ3OUJFQ0Q3OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0 RUE0OUIyRjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADH/1g9bn+D/Td+dv4FM7NxdjGGUB6Y0viHM 1pka9HAgDjXvfRFz/rfFgmnaizBlM9Kcb/wu9GOTXGgDhkjiHqdOTEDoh5b9R+Eh Oi6nd1Vs/5nJDsYYIiJ0bSjgA8GhLWxuPYE11pvrE83IoVcvwOPxpx1sCX8fh2MC aNdb09F8Znk7dCHqI8QIqQN5XsPNXGjXRR8ryapkUBQ288M4dspCfKtDtvtrGkmm kzoALSjRkkplsh9Y5FEqeuspjmM4JjwyuGcGuloIvaNqZ9cyZdu9TcP0JBUUdzzX c78YSSqB0/1GZ3xErCK+uVpTZWFlGfMLyFCTDDKs7550iwZ/TsU= -----END CERTIFICATE-----Generated at Sat Jul 18 02:23:18 2026 by rpki-client