$ rpki-client -vvf rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft File: 2CE9A084598867F6677FDE09C272DA8D05C480FC.mft (raw, json) Hash identifier: h0JoqME+bOyxkNe29LDWE2A4/wo58jtBt3yq6sij+hk= Subject key identifier: 2E:D2:C5:F1:C9:E6:67:F0:12:CD:8A:BB:3B:67:4F:21:A2:9D:0B:7C Authority key identifier: 2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC Certificate issuer: /CN=2CE9A084598867F6677FDE09C272DA8D05C480FC Certificate serial: 41A19DE0BEB5927DBE299170A87A2A654D5F6BC5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 03:21:34 +0000 Manifest this update: Sun 02 Aug 2026 03:16:34 +0000 Manifest next update: Mon 03 Aug 2026 03:53:34 +0000 Files and hashes: 1: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: 7nMz4s5YYhUtNRJIR+ORKIg42vTypWbintD4uEN6yZw=) 2: 2CE9A084598867F6677FDE09C272DA8D05C480FC.crl (hash: jeleD4b/gLKU8W1AxbS16FNiwRBZbry8TozBknELRaM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a1:9d:e0:be:b5:92:7d:be:29:91:70:a8:7a:2a:65:4d:5f:6b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CE9A084598867F6677FDE09C272DA8D05C480FC Validity Not Before: Aug 2 03:16:34 2026 GMT Not After : Aug 3 03:53:34 2026 GMT Subject: CN=2ED2C5F1C9E667F012CD8ABB3B674F21A29D0B7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:75:44:11:14:53:bb:3a:a5:aa:90:43:88:44: dd:c2:55:32:c3:d1:11:b4:89:e3:d8:f6:dc:38:81: 37:47:9a:5b:25:83:72:b2:7a:ec:7e:97:f0:22:cf: 6a:88:da:52:2f:01:95:7a:03:a2:84:ae:52:83:43: af:e1:a7:83:3a:80:5c:84:98:ea:b4:34:f9:a1:4d: 88:76:b1:43:06:ca:38:3a:8a:88:55:82:c8:bd:74: bb:2b:ee:23:61:88:2b:5c:4a:01:5c:0d:be:bc:ce: cc:fe:b5:15:4a:6a:bb:5e:39:87:cb:cb:a7:5b:ef: b8:71:e1:dd:71:69:3e:2a:c6:89:af:7b:70:19:4b: de:3a:b5:e1:19:04:59:d6:95:dc:11:2e:64:8e:5b: 41:46:d6:d5:4f:75:15:dc:a4:2f:74:b5:96:ed:26: bc:c7:df:ab:42:ea:17:ac:4a:55:8c:04:15:49:59: 73:2a:eb:21:41:e5:b2:97:b1:bc:f1:cb:bd:08:3c: 62:16:29:6f:8f:df:99:ca:4c:74:f0:12:b1:d5:92: d7:ab:50:a9:f6:e5:f5:64:26:57:76:fe:80:83:87: a4:1d:57:06:8c:35:9b:1e:99:c0:14:a8:cc:59:22: d3:c2:4e:c1:13:88:ca:31:8c:ce:b7:c0:7e:36:39: b5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D2:C5:F1:C9:E6:67:F0:12:CD:8A:BB:3B:67:4F:21:A2:9D:0B:7C X509v3 Authority Key Identifier: keyid:2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:27:89:10:35:67:7d:0f:20:1b:4d:e7:42:b5:79:5e:2f:bd: de:b5:76:9a:75:42:93:7c:a9:e0:a5:a8:f4:be:62:2b:0f:67: 8d:b2:d1:1b:0d:df:2e:93:73:a9:0c:08:99:01:62:43:97:ba: f6:38:68:9b:a2:24:9a:ac:53:ce:1a:20:cc:bc:b5:7b:01:63: 41:2d:1f:92:69:9b:f8:fb:1f:61:de:4e:fc:44:f2:62:8d:0e: 55:43:fd:80:be:e4:a8:1f:9e:c1:15:77:ed:f0:2c:30:f4:28: 3e:4d:23:fc:f5:eb:bd:6c:db:91:29:25:ed:53:0c:11:5a:fe: 61:81:54:50:58:cc:29:d8:90:0d:fc:1c:6d:10:67:90:86:36: cf:7a:31:d5:a7:2e:02:03:8d:2b:2b:6b:04:bf:8f:e0:93:9c: 5c:37:df:f0:6d:74:a8:28:a0:c1:d4:43:0f:d9:0b:d0:ae:ff: e5:b9:98:2a:fe:a6:f6:16:35:21:89:2a:d6:76:66:92:1f:a0: fc:41:f9:67:f1:7e:0a:ef:20:c1:be:0f:6c:e5:ac:14:f2:fe: a7:63:f6:e5:99:97:38:00:a0:d2:44:8a:60:b8:03:c8:56:a1: 88:f7:c2:66:eb:bb:dd:53:4b:a3:d4:3e:d2:3f:bb:ff:e0:8e: ec:dc:0e:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQaGd4L61kn2+KZFwqHoqZU1fa8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNFOUEwODQ1OTg4NjdGNjY3N0ZERTA5QzI3MkRBOEQw NUM0ODBGQzAeFw0yNjA4MDIwMzE2MzRaFw0yNjA4MDMwMzUzMzRaMDMxMTAvBgNV BAMTKDJFRDJDNUYxQzlFNjY3RjAxMkNEOEFCQjNCNjc0RjIxQTI5RDBCN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/dUQRFFO7OqWqkEOIRN3CVTLD 0RG0iePY9tw4gTdHmlslg3Kyeux+l/Aiz2qI2lIvAZV6A6KErlKDQ6/hp4M6gFyE mOq0NPmhTYh2sUMGyjg6iohVgsi9dLsr7iNhiCtcSgFcDb68zsz+tRVKarteOYfL y6db77hx4d1xaT4qxomve3AZS946teEZBFnWldwRLmSOW0FG1tVPdRXcpC90tZbt JrzH36tC6hesSlWMBBVJWXMq6yFB5bKXsbzxy70IPGIWKW+P35nKTHTwErHVkter UKn25fVkJld2/oCDh6QdVwaMNZsemcAUqMxZItPCTsETiMoxjM63wH42ObW1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULtLF8cnmZ/ASzYq7O2dPIaKdC3wwHwYDVR0j BBgwFoAULOmghFmIZ/Znf94JwnLajQXEgPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTliODE1MmUtYWE4Ni00ZDhhLTgxZGEtZTcxMDg2YjI5NTZjLzAvMkNFOUEwODQ1 OTg4NjdGNjY3N0ZERTA5QzI3MkRBOEQwNUM0ODBGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yQ0U5QTA4NDU5ODg2N0Y2Njc3RkRFMDlDMjcyREE4RDA1QzQ4 MEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvMkNFOUEwODQ1OTg4NjdGNjY3N0ZERTA5QzI3MkRB OEQwNUM0ODBGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8niRA1Z30PIBtN50K1eV4vvd61dpp1QpN8 qeClqPS+YisPZ42y0RsN3y6Tc6kMCJkBYkOXuvY4aJuiJJqsU84aIMy8tXsBY0Et H5Jpm/j7H2HeTvxE8mKNDlVD/YC+5KgfnsEVd+3wLDD0KD5NI/z1671s25EpJe1T DBFa/mGBVFBYzCnYkA38HG0QZ5CGNs96MdWnLgIDjSsrawS/j+CTnFw33/BtdKgo oMHUQw/ZC9Cu/+W5mCr+pvYWNSGJKtZ2ZpIfoPxB+WfxfgrvIMG+D2zlrBTy/qdj 9uWZlzgAoNJEimC4A8hWoYj3wmbru91TS6PUPtI/u//gjuzcDmE= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:28 2026 by rpki-client