$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft File: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft (raw, json) Hash identifier: hFzQmD9pR7vATbgaD1zQ55IWwtVov70EW+YoLYy2x2s= Subject key identifier: 65:6D:E4:74:2E:DB:2A:1C:80:B7:D4:98:58:A0:79:C3:38:5C:B7:37 Authority key identifier: 2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 Certificate issuer: /CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Certificate serial: 22D82A6ABB91C46F33E997A5407736EA116AAA5D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft Manifest number: 74 Signing time: Mon 27 Jul 2026 15:16:37 +0000 Manifest this update: Mon 27 Jul 2026 15:11:37 +0000 Manifest next update: Tue 28 Jul 2026 17:48:37 +0000 Files and hashes: 1: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl (hash: 4ZmV47D+LSoYWZY1widpDNTWT76uY/VsZNn3vJ0hj0o=) 2: 3130332e3133312e3130372e302f32342d3234203d3e20313338313139.roa (hash: cKDgVoSVAFZfl4hgrIHwI1J4tBbCiwmqXmahxpGLx8I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 17:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d8:2a:6a:bb:91:c4:6f:33:e9:97:a5:40:77:36:ea:11:6a:aa:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Validity Not Before: Jul 27 15:11:37 2026 GMT Not After : Jul 28 17:48:37 2026 GMT Subject: CN=656DE4742EDB2A1C80B7D49858A079C3385CB737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f8:79:32:3b:1a:94:b6:ff:c1:fb:22:c2:54: 8d:b0:29:6d:79:26:fa:f5:77:d0:ba:5e:5d:0c:24: d1:26:46:0d:6b:bf:7d:50:55:67:af:71:0d:90:ae: 7b:97:c7:ec:43:ac:fe:00:0c:dd:77:36:d7:cd:17: b7:47:c7:48:2c:70:5a:64:60:e1:44:be:ea:91:2f: f8:9a:20:df:a2:bb:e3:c8:d0:15:79:26:b1:54:83: a0:0d:b3:16:82:5d:2e:28:13:de:17:f4:06:e4:c9: 2d:17:80:d9:7c:32:f4:f1:2e:2c:93:28:98:3c:cd: c3:a8:11:e9:d9:8c:84:b6:d3:90:05:67:8d:89:dc: 39:a4:46:cb:2c:42:2a:fc:4d:90:67:14:b4:a0:1f: 41:28:88:5b:86:b2:1d:53:a2:41:d5:24:24:5d:28: 96:07:c5:a7:05:fe:13:2c:4b:7b:43:9b:e6:ae:fb: 09:a2:d1:70:c4:2c:3c:e1:c2:03:a0:5f:91:c4:c2: 5c:80:fe:16:d3:9b:02:6e:5b:47:98:09:44:58:fc: 91:b8:17:9d:16:21:eb:0f:3c:8c:e4:62:3d:d3:88: ee:03:7d:94:c5:5e:d0:40:a7:02:9a:99:a9:b8:5f: 99:76:1f:7f:6e:ee:c2:ff:2a:4e:f4:ee:00:88:69: 0f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6D:E4:74:2E:DB:2A:1C:80:B7:D4:98:58:A0:79:C3:38:5C:B7:37 X509v3 Authority Key Identifier: keyid:2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:a6:97:84:b8:e7:69:52:02:dc:f1:8d:21:a5:d7:32:89:f8: 48:26:d3:0a:ba:a3:6f:02:be:6e:6f:02:3b:0b:cf:b0:3c:66: 51:c8:d1:f0:03:5b:6a:4f:5f:46:a1:0b:9f:a7:5b:df:20:d3: f2:61:b9:ba:46:aa:fe:a3:cf:16:75:29:3f:2d:6f:44:5d:d3: 09:94:05:0b:18:18:fc:5e:5a:76:53:a2:d8:0c:d8:7d:42:5c: 17:78:a1:b5:57:a6:c9:74:be:e5:b8:b2:46:38:dd:80:c4:3a: cf:84:d2:ee:6e:be:b8:99:39:76:86:08:0e:56:72:d3:80:98: 69:29:37:99:35:c6:4d:87:04:80:26:1c:b3:31:c8:fb:4f:1b: f9:6e:ef:35:11:3a:58:bc:14:3c:32:41:20:31:80:a3:da:81: 71:22:da:60:a6:11:ce:48:85:b7:f6:d8:66:f1:4e:f8:fb:91: b0:f2:d3:06:38:7e:c7:57:79:27:54:40:5a:a8:d7:b8:df:f7: d8:33:0a:a6:93:54:18:fe:bd:f2:ab:10:79:8a:43:41:b7:6a: ac:b2:8d:bc:d2:0c:8f:cd:27:1b:54:ad:c4:33:f2:28:57:74: 5c:ed:0d:c4:c5:32:86:61:2c:47:0c:e8:9d:d1:24:a5:a9:08: 55:7e:62:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUItgqaruRxG8z6ZelQHc26hFqql0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFFMTRBQkJENTE2MUJBMENBREIzQzQwQzFGOURGQ0JD OUNGMzQ3MDAeFw0yNjA3MjcxNTExMzdaFw0yNjA3MjgxNzQ4MzdaMDMxMTAvBgNV BAMTKDY1NkRFNDc0MkVEQjJBMUM4MEI3RDQ5ODU4QTA3OUMzMzg1Q0I3MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu+HkyOxqUtv/B+yLCVI2wKW15 Jvr1d9C6Xl0MJNEmRg1rv31QVWevcQ2QrnuXx+xDrP4ADN13NtfNF7dHx0gscFpk YOFEvuqRL/iaIN+iu+PI0BV5JrFUg6ANsxaCXS4oE94X9AbkyS0XgNl8MvTxLiyT KJg8zcOoEenZjIS205AFZ42J3DmkRsssQir8TZBnFLSgH0EoiFuGsh1TokHVJCRd KJYHxacF/hMsS3tDm+au+wmi0XDELDzhwgOgX5HEwlyA/hbTmwJuW0eYCURY/JG4 F50WIesPPIzkYj3TiO4DfZTFXtBApwKamam4X5l2H39u7sL/Kk707gCIaQ9nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZW3kdC7bKhyAt9SYWKB5wzhctzcwHwYDVR0j BBgwFoAUKuFKu9UWG6DK2zxAwfnfy8nPNHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkyNDM5NTAtM2ZkZi00OWFiLWJmZGMtZjU4NjQ1MzcwNGM2LzAvMkFFMTRBQkJE NTE2MUJBMENBREIzQzQwQzFGOURGQ0JDOUNGMzQ3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUUxNEFCQkQ1MTYxQkEwQ0FEQjNDNDBDMUY5REZDQkM5Q0Yz NDcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkyNDM5NTAtM2ZkZi00OWFiLWJm ZGMtZjU4NjQ1MzcwNGM2LzAvMkFFMTRBQkJENTE2MUJBMENBREIzQzQwQzFGOURG Q0JDOUNGMzQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeml4S452lSAtzxjSGl1zKJ+Egm0wq6o28C vm5vAjsLz7A8ZlHI0fADW2pPX0ahC5+nW98g0/JhubpGqv6jzxZ1KT8tb0Rd0wmU BQsYGPxeWnZTotgM2H1CXBd4obVXpsl0vuW4skY43YDEOs+E0u5uvriZOXaGCA5W ctOAmGkpN5k1xk2HBIAmHLMxyPtPG/lu7zUROli8FDwyQSAxgKPagXEi2mCmEc5I hbf22GbxTvj7kbDy0wY4fsdXeSdUQFqo17jf99gzCqaTVBj+vfKrEHmKQ0G3aqyy jbzSDI/NJxtUrcQz8ihXdFztDcTFMoZhLEcM6J3RJKWpCFV+YsE= -----END CERTIFICATE-----Generated at Tue Jul 28 04:22:54 2026 by rpki-client