$ rpki-client -vvf rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft File: 2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft (raw, json) Hash identifier: CKK4WcxIHwSDzXBWwyfeeZFVCsF7ZBrrugGDgmveEcc= Subject key identifier: 30:56:9A:A5:57:E8:CE:F9:62:D1:D7:27:91:F1:CA:36:2C:5D:39:E0 Authority key identifier: 2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA Certificate issuer: /CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA Certificate serial: 3914AC807DD78272B10025278A49BA09280CB2E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 11:16:20 +0000 Manifest this update: Sun 02 Aug 2026 11:11:20 +0000 Manifest next update: Mon 03 Aug 2026 14:56:20 +0000 Files and hashes: 1: 3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa (hash: Jv5U5LGovEDFBhrf2yN8LsratIXrB4UcO/MW+FaftYc=) 2: 2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl (hash: 6qxm51TXrEupbwefu1YLNlvV0hQN/kvCy/XLkFTNs8M=) 3: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: eNG7+LqFPcA2X6MnUSyw57FaBVmmkZ9qB88jQfVFgQw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:14:ac:80:7d:d7:82:72:b1:00:25:27:8a:49:ba:09:28:0c:b2:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA Validity Not Before: Aug 2 11:11:20 2026 GMT Not After : Aug 3 14:56:20 2026 GMT Subject: CN=30569AA557E8CEF962D1D72791F1CA362C5D39E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:94:e8:2c:88:0a:2d:00:61:2f:75:f2:15:41: c5:40:ac:d2:9a:d3:33:13:77:c0:bd:0b:3d:f3:91: ca:22:8a:9c:5c:e9:7d:d4:55:56:fb:68:5c:77:9b: 5c:49:8f:9e:4b:7e:dd:71:63:c3:70:65:eb:ba:ad: a7:24:34:29:2c:33:02:31:2f:79:99:db:56:f5:3e: ad:b9:5c:18:3c:6b:c1:b5:58:9c:0f:1c:16:e9:6e: d8:4a:21:6a:29:df:4c:4c:8b:4d:4e:00:ce:0d:cc: 21:e8:32:f7:ee:1f:fb:b9:3b:49:8a:d6:34:ae:b0: 09:5c:d3:61:dd:aa:68:ad:1b:16:9d:bd:bc:98:85: 47:0a:65:78:6f:be:03:72:26:a5:ad:43:ca:6f:05: 0f:5f:ee:3b:6c:af:27:a0:d2:5a:bc:f7:f3:c2:77: 60:ad:d4:a6:d9:3a:1e:b0:84:6f:7a:70:fd:64:d5: 96:a2:e9:0e:32:29:50:da:a3:a6:2b:10:ff:48:6d: f6:13:98:67:70:55:05:66:67:5b:e8:3e:35:b8:f9: 81:4a:d7:ce:c6:05:c5:12:59:b5:ce:bd:3e:86:d4: c2:0d:78:ce:16:8a:55:e7:3c:66:76:4d:4c:c4:2a: 86:12:0e:02:19:0c:46:69:16:b6:43:f4:9c:7a:15: e6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:56:9A:A5:57:E8:CE:F9:62:D1:D7:27:91:F1:CA:36:2C:5D:39:E0 X509v3 Authority Key Identifier: keyid:2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:ef:bc:97:f0:e2:97:1c:b3:58:6b:af:56:ab:ae:a4:36:be: 96:0c:81:2e:fa:8b:54:cc:d4:db:20:20:b6:0b:88:58:0a:07: ea:26:37:87:46:e6:dc:60:68:0a:56:5b:44:4e:ff:cd:fd:be: b6:8f:4a:e0:0f:21:43:03:06:9a:d8:7a:f3:e5:86:ad:3a:bf: 4c:14:2e:19:87:eb:2f:6f:1b:bf:de:5a:84:5a:6f:97:54:16: 77:4f:f9:dd:f4:0a:f3:2b:b9:e5:f3:6f:80:97:da:31:79:81: 20:4e:cb:7d:5d:51:70:14:c2:3b:3a:7e:95:37:b2:38:db:5d: bd:bb:fd:06:07:95:4c:12:66:66:7f:cd:2e:0c:19:2e:dc:69: 2c:3e:18:4a:c3:79:df:97:96:c9:2b:43:0a:ac:73:47:68:01: fd:76:1e:3d:19:42:a3:9c:39:64:b2:d1:f4:9e:53:c6:1f:4b: 87:0d:f1:e9:6f:d0:96:06:17:b3:73:4d:38:48:a6:a3:63:8e: 9a:57:c2:8a:13:d4:85:48:a1:8a:84:ab:38:63:41:31:b0:39: 9b:20:12:ab:2e:22:c4:9a:17:f6:cc:7d:a9:ba:0c:2a:2e:17: 06:a9:6a:18:25:58:a6:8e:1e:0c:4a:45:0f:6f:18:ab:28:96: 3d:cb:b2:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUORSsgH3XgnKxACUnikm6CSgMsucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE3RkI4MDE2REEwMDBBOUQxMEM5ODA5QzQ0RURFMkU5 RkRBQjZGQTAeFw0yNjA4MDIxMTExMjBaFw0yNjA4MDMxNDU2MjBaMDMxMTAvBgNV BAMTKDMwNTY5QUE1NTdFOENFRjk2MkQxRDcyNzkxRjFDQTM2MkM1RDM5RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOlOgsiAotAGEvdfIVQcVArNKa 0zMTd8C9Cz3zkcoiipxc6X3UVVb7aFx3m1xJj55Lft1xY8NwZeu6rackNCksMwIx L3mZ21b1Pq25XBg8a8G1WJwPHBbpbthKIWop30xMi01OAM4NzCHoMvfuH/u5O0mK 1jSusAlc02HdqmitGxadvbyYhUcKZXhvvgNyJqWtQ8pvBQ9f7jtsryeg0lq89/PC d2Ct1KbZOh6whG96cP1k1Zai6Q4yKVDao6YrEP9IbfYTmGdwVQVmZ1voPjW4+YFK 187GBcUSWbXOvT6G1MINeM4WilXnPGZ2TUzEKoYSDgIZDEZpFrZD9Jx6FeYdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMFaapVfozvli0dcnkfHKNixdOeAwHwYDVR0j BBgwFoAUKn+4AW2gAKnRDJgJxE7eLp/atvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NhMmUwZGItZTI5My00MWM1LTg1ODMtMzgwMTU3NTg0MjFjLzAvMkE3RkI4MDE2 REEwMDBBOUQxMEM5ODA5QzQ0RURFMkU5RkRBQjZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTdGQjgwMTZEQTAwMEE5RDEwQzk4MDlDNDRFREUyRTlGREFC NkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvMkE3RkI4MDE2REEwMDBBOUQxMEM5ODA5QzQ0RURF MkU5RkRBQjZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTvvJfw4pccs1hrr1arrqQ2vpYMgS76i1TM 1NsgILYLiFgKB+omN4dG5txgaApWW0RO/839vraPSuAPIUMDBprYevPlhq06v0wU LhmH6y9vG7/eWoRab5dUFndP+d30CvMrueXzb4CX2jF5gSBOy31dUXAUwjs6fpU3 sjjbXb27/QYHlUwSZmZ/zS4MGS7caSw+GErDed+XlskrQwqsc0doAf12Hj0ZQqOc OWSy0fSeU8YfS4cN8elv0JYGF7NzTThIpqNjjppXwooT1IVIoYqEqzhjQTGwOZsg EqsuIsSaF/bMfam6DCouFwapahglWKaOHgxKRQ9vGKsolj3Lsqw= -----END CERTIFICATE-----Generated at Sun Aug 2 22:44:46 2026 by rpki-client