$ rpki-client -vvf rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft File: 2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft (raw, json) Hash identifier: bepuIK/ceVGUk3VruBH90dDWp+OPlJ+OaNWaw6viftI= Subject key identifier: 0C:25:7B:8E:E6:7C:DE:69:39:D0:A1:CC:E6:BE:5C:69:86:AD:13:10 Authority key identifier: 2D:81:47:AB:32:AE:34:FE:05:99:30:1C:39:9B:A4:31:CB:D9:6A:E2 Certificate issuer: /CN=2D8147AB32AE34FE0599301C399BA431CBD96AE2 Certificate serial: 722B623B999A06F6C3EA2A1F183367563562A968 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 16:52:43 +0000 Manifest this update: Sun 02 Aug 2026 16:47:43 +0000 Manifest next update: Mon 03 Aug 2026 19:39:43 +0000 Files and hashes: 1: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: YTcLxO+mbdwk1sv6hkGjyOE34UWEs5shSWT+DleZD5E=) 2: 2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl (hash: GkdXOgbuau63p7X64mYMgycw/ljvGxtZ4onu45IWmlo=) 3: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: OX/hSObmRCzkD1qVckzfWkKuBPC5Pdod9YDgySPz4C8=) 4: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: RnobRsvxkM1MTdlV59E6oBUzJE/tUaI5t4eU9X2Ihxg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:2b:62:3b:99:9a:06:f6:c3:ea:2a:1f:18:33:67:56:35:62:a9:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D8147AB32AE34FE0599301C399BA431CBD96AE2 Validity Not Before: Aug 2 16:47:43 2026 GMT Not After : Aug 3 19:39:43 2026 GMT Subject: CN=0C257B8EE67CDE6939D0A1CCE6BE5C6986AD1310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c1:23:f6:6e:3f:41:b9:20:59:30:b2:f8:2a: c2:9f:83:51:6b:dd:57:8b:0b:80:12:92:d2:2b:1b: 89:59:71:c7:74:d8:95:71:a7:9d:2a:9e:98:68:99: ac:0b:3d:18:03:3c:76:16:7e:69:a4:5e:a1:28:94: 54:94:92:17:99:e0:45:11:90:21:13:fb:39:71:17: 22:e1:b1:b2:05:ee:35:f3:94:4b:5e:1b:6d:0a:c0: 1c:8f:66:e3:40:22:d6:8b:8b:3d:94:6c:25:d8:0e: e6:15:6b:65:95:8c:0d:41:42:95:5b:c1:4b:a3:5c: fe:f1:da:34:56:e5:b7:d1:26:26:6f:aa:dc:d5:89: 64:66:88:f1:86:61:61:52:0f:08:65:39:8c:3a:fa: fb:10:d1:26:b7:f0:2e:db:27:f8:05:a9:67:5d:39: 97:8a:5b:9d:53:ce:6a:f1:10:f0:71:9e:6d:12:d8: 6e:d4:b2:b3:d4:87:3e:e3:a7:8d:76:d4:9f:40:5d: 9b:63:28:f9:55:d3:f6:7f:be:17:0b:4e:72:cf:70: 59:66:8a:07:5b:0b:6e:ce:54:19:db:6f:d8:2c:f6: cf:0b:c9:6f:11:27:50:4c:2e:68:b4:23:fe:d4:4a: b4:75:86:21:98:ad:49:74:5b:61:05:f5:09:50:5f: 7d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:25:7B:8E:E6:7C:DE:69:39:D0:A1:CC:E6:BE:5C:69:86:AD:13:10 X509v3 Authority Key Identifier: keyid:2D:81:47:AB:32:AE:34:FE:05:99:30:1C:39:9B:A4:31:CB:D9:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:8d:8d:8c:69:ab:ce:a0:da:ce:26:22:b8:ab:d2:80:d2:20: 4b:f5:9b:5d:0f:56:14:a0:fb:ae:8f:c8:a6:fc:8a:bb:e1:43: 85:2c:26:27:ab:a8:4a:00:fa:65:ac:77:27:a4:49:42:ad:65: 7d:6b:9f:db:2b:ee:4a:76:88:f1:e1:b5:d3:43:ca:e2:76:39: 2e:22:5c:8c:18:80:69:03:17:34:3a:17:b7:0c:34:a3:2e:d6: d9:6b:55:bc:17:9f:3a:67:78:59:cb:af:a7:30:4b:a0:c2:43: b8:12:75:8a:e1:2e:b6:40:89:2c:ca:bc:e6:2f:f2:1e:80:a5: e4:83:7e:00:98:18:8a:7a:21:6e:c1:3a:d6:8f:12:2a:e8:93: ca:1a:df:ad:21:6f:83:79:aa:27:f1:48:87:fc:3a:3d:15:06: 8c:30:3d:53:b0:c3:26:11:15:0d:78:2b:6a:db:3f:a1:58:9d: 87:eb:d8:55:7b:85:e1:a7:4f:2c:a4:5e:b0:dd:84:38:27:27: 28:29:75:4d:2b:97:47:fa:dd:da:c3:a0:57:ec:ed:b9:74:b4: b1:81:0a:41:8b:03:e8:a1:c9:63:01:8e:3b:5b:e5:e9:dd:d3: 38:c8:2e:f1:50:78:50:02:55:f6:ab:92:4a:91:4c:0d:32:97: 05:18:af:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcitiO5maBvbD6iofGDNnVjViqWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ4MTQ3QUIzMkFFMzRGRTA1OTkzMDFDMzk5QkE0MzFD QkQ5NkFFMjAeFw0yNjA4MDIxNjQ3NDNaFw0yNjA4MDMxOTM5NDNaMDMxMTAvBgNV BAMTKDBDMjU3QjhFRTY3Q0RFNjkzOUQwQTFDQ0U2QkU1QzY5ODZBRDEzMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqwSP2bj9BuSBZMLL4KsKfg1Fr 3VeLC4ASktIrG4lZccd02JVxp50qnphomawLPRgDPHYWfmmkXqEolFSUkheZ4EUR kCET+zlxFyLhsbIF7jXzlEteG20KwByPZuNAItaLiz2UbCXYDuYVa2WVjA1BQpVb wUujXP7x2jRW5bfRJiZvqtzViWRmiPGGYWFSDwhlOYw6+vsQ0Sa38C7bJ/gFqWdd OZeKW51TzmrxEPBxnm0S2G7UsrPUhz7jp4121J9AXZtjKPlV0/Z/vhcLTnLPcFlm igdbC27OVBnbb9gs9s8LyW8RJ1BMLmi0I/7USrR1hiGYrUl0W2EF9QlQX32vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDCV7juZ83mk50KHM5r5caYatExAwHwYDVR0j BBgwFoAULYFHqzKuNP4FmTAcOZukMcvZauIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFkYTIzZTktODRiZS00YTU0LWJjYTAtZTlhMGNhZmQxNmZlLzAvMkQ4MTQ3QUIz MkFFMzRGRTA1OTkzMDFDMzk5QkE0MzFDQkQ5NkFFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yRDgxNDdBQjMyQUUzNEZFMDU5OTMwMUMzOTlCQTQzMUNCRDk2 QUUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFkYTIzZTktODRiZS00YTU0LWJj YTAtZTlhMGNhZmQxNmZlLzAvMkQ4MTQ3QUIzMkFFMzRGRTA1OTkzMDFDMzk5QkE0 MzFDQkQ5NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAONjYxpq86g2s4mIrir0oDSIEv1m10PVhSg +66PyKb8irvhQ4UsJierqEoA+mWsdyekSUKtZX1rn9sr7kp2iPHhtdNDyuJ2OS4i XIwYgGkDFzQ6F7cMNKMu1tlrVbwXnzpneFnLr6cwS6DCQ7gSdYrhLrZAiSzKvOYv 8h6ApeSDfgCYGIp6IW7BOtaPEirok8oa360hb4N5qifxSIf8Oj0VBowwPVOwwyYR FQ14K2rbP6FYnYfr2FV7heGnTyykXrDdhDgnJygpdU0rl0f63drDoFfs7bl0tLGB CkGLA+ihyWMBjjtb5end0zjILvFQeFACVfarkkqRTA0ylwUYrx8= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:48 2026 by rpki-client