$ rpki-client -vvf rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft File: 2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft (raw, json) Hash identifier: iCcfaI60wKiw13nk/G0aInc3NCocaluirTH8YAfMukQ= Subject key identifier: AF:D6:A9:45:22:5F:7D:D1:D4:8B:5B:54:2D:75:6F:46:6C:5C:6A:B1 Authority key identifier: 2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA Certificate issuer: /CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA Certificate serial: 08A72105F24631B1C15E6475F0B3C0E2F0F54401 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 06:50:30 +0000 Manifest this update: Thu 18 Jun 2026 06:45:30 +0000 Manifest next update: Fri 19 Jun 2026 07:48:30 +0000 Files and hashes: 1: 2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl (hash: Aq7DHp6YpgpoIF7hxQQVYshtNQWvZyqm0qkizx8Zp5g=) 2: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: eNG7+LqFPcA2X6MnUSyw57FaBVmmkZ9qB88jQfVFgQw=) 3: 3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa (hash: Jv5U5LGovEDFBhrf2yN8LsratIXrB4UcO/MW+FaftYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 07:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a7:21:05:f2:46:31:b1:c1:5e:64:75:f0:b3:c0:e2:f0:f5:44:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA Validity Not Before: Jun 18 06:45:30 2026 GMT Not After : Jun 19 07:48:30 2026 GMT Subject: CN=AFD6A945225F7DD1D48B5B542D756F466C5C6AB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:28:cb:28:fe:c8:d0:f6:7a:b7:86:54:54: b2:a5:02:42:0c:bf:d8:b2:ac:6f:82:77:bc:0c:c9: 95:2f:e1:3d:f8:5f:9e:8f:91:64:ad:09:97:78:67: 2d:f1:2a:5a:1f:2d:be:9f:48:8b:c0:bb:0a:fa:b9: 56:72:c2:09:9d:ac:94:4a:e6:c8:83:c1:c5:4b:24: d7:b5:3f:d7:a2:41:1a:b1:b2:18:54:c7:68:f5:eb: f4:4e:1f:25:37:8b:af:96:3a:e1:1b:37:84:f1:d9: 63:a0:36:f7:a9:c2:a0:92:cd:51:a2:66:20:a0:a3: 47:26:64:1d:dd:61:e1:b7:4b:5e:2a:62:01:81:13: ca:2f:d5:d8:a1:c2:4c:79:1d:b0:ba:7d:88:f4:7d: 8c:20:54:1c:21:a4:db:a0:f6:75:26:c9:e9:7c:fb: 1d:70:ae:b4:38:ab:a6:4b:14:ec:01:23:ef:f7:17: 30:2a:d3:71:39:5f:d3:11:c1:50:36:52:a4:db:99: b8:52:b6:52:f5:c8:a5:f3:c7:fe:51:85:8f:93:f1: 47:7a:b5:64:00:a9:f9:36:86:65:e4:4d:60:c3:41: 2e:df:3a:80:4d:e4:0b:00:5a:8b:f9:a4:93:a2:6b: d7:7b:f6:6c:35:64:83:39:85:07:c4:3b:8b:d5:32: d7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D6:A9:45:22:5F:7D:D1:D4:8B:5B:54:2D:75:6F:46:6C:5C:6A:B1 X509v3 Authority Key Identifier: keyid:2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:fc:69:be:c6:81:64:4b:10:97:43:13:34:79:95:73:ba:b6: bd:e6:43:3b:67:81:77:4b:86:46:b0:60:32:03:e2:28:ac:ca: 43:67:18:6e:5a:65:99:fc:58:55:0f:72:7b:7a:9e:f6:5e:c6: c9:85:d9:d0:21:5d:19:77:06:f2:e4:ad:21:58:2f:f3:64:2f: c5:e6:bc:15:59:e0:42:3c:0f:d0:88:1a:d6:26:13:da:e1:2a: 8f:9e:39:bc:7a:c6:0a:fe:61:b4:04:52:14:0a:67:33:1c:c1: 85:98:aa:fd:b6:b5:56:2f:b9:3a:ca:da:32:a8:80:f3:d3:fb: 21:8f:33:62:df:d9:10:48:4a:af:b4:38:78:b2:0a:e1:3c:88: 4f:45:ef:2e:26:51:7b:2b:5e:e4:d9:fd:a0:3a:94:c1:bd:a5: 2d:88:dd:b4:90:fb:9e:10:41:d1:bb:3b:f6:5e:66:09:9f:aa: 23:f2:ca:04:62:1e:44:29:7d:89:f6:8c:9f:bd:5d:9c:a8:33: 89:c2:49:6a:4b:2d:94:10:5b:3d:fa:23:87:41:d8:42:7a:01: 28:ce:44:2e:af:55:f1:95:e2:51:74:22:4d:a8:15:0f:4c:22: ec:ab:9b:ab:66:c1:bc:17:2f:da:dc:ea:43:1f:4e:27:51:7b: 4b:50:f3:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCKchBfJGMbHBXmR18LPA4vD1RAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE3RkI4MDE2REEwMDBBOUQxMEM5ODA5QzQ0RURFMkU5 RkRBQjZGQTAeFw0yNjA2MTgwNjQ1MzBaFw0yNjA2MTkwNzQ4MzBaMDMxMTAvBgNV BAMTKEFGRDZBOTQ1MjI1RjdERDFENDhCNUI1NDJENzU2RjQ2NkM1QzZBQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKCjLKP7I0PZ6t4ZUVLKlAkIM v9iyrG+Cd7wMyZUv4T34X56PkWStCZd4Zy3xKlofLb6fSIvAuwr6uVZywgmdrJRK 5siDwcVLJNe1P9eiQRqxshhUx2j16/ROHyU3i6+WOuEbN4Tx2WOgNvepwqCSzVGi ZiCgo0cmZB3dYeG3S14qYgGBE8ov1dihwkx5HbC6fYj0fYwgVBwhpNug9nUmyel8 +x1wrrQ4q6ZLFOwBI+/3FzAq03E5X9MRwVA2UqTbmbhStlL1yKXzx/5RhY+T8Ud6 tWQAqfk2hmXkTWDDQS7fOoBN5AsAWov5pJOia9d79mw1ZIM5hQfEO4vVMtdfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr9apRSJffdHUi1tULXVvRmxcarEwHwYDVR0j BBgwFoAUKn+4AW2gAKnRDJgJxE7eLp/atvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NhMmUwZGItZTI5My00MWM1LTg1ODMtMzgwMTU3NTg0MjFjLzAvMkE3RkI4MDE2 REEwMDBBOUQxMEM5ODA5QzQ0RURFMkU5RkRBQjZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTdGQjgwMTZEQTAwMEE5RDEwQzk4MDlDNDRFREUyRTlGREFC NkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvMkE3RkI4MDE2REEwMDBBOUQxMEM5ODA5QzQ0RURF MkU5RkRBQjZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOD8ab7GgWRLEJdDEzR5lXO6tr3mQztngXdL hkawYDID4iisykNnGG5aZZn8WFUPcnt6nvZexsmF2dAhXRl3BvLkrSFYL/NkL8Xm vBVZ4EI8D9CIGtYmE9rhKo+eObx6xgr+YbQEUhQKZzMcwYWYqv22tVYvuTrK2jKo gPPT+yGPM2Lf2RBISq+0OHiyCuE8iE9F7y4mUXsrXuTZ/aA6lMG9pS2I3bSQ+54Q QdG7O/ZeZgmfqiPyygRiHkQpfYn2jJ+9XZyoM4nCSWpLLZQQWz36I4dB2EJ6ASjO RC6vVfGV4lF0Ik2oFQ9MIuyrm6tmwbwXL9rc6kMfTidRe0tQ8zM= -----END CERTIFICATE-----Generated at Thu Jun 18 19:21:26 2026 by rpki-client