$ rpki-client -vvf rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft File: 2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft (raw, json) Hash identifier: OmYbywCb0/Rk+J0rdU22XrpdO+7/E+QwIEX4dL9Hab0= Subject key identifier: 87:DC:19:53:14:66:FD:CE:E3:C0:4B:3D:4E:E3:91:27:42:CE:B3:8B Authority key identifier: 2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63 Certificate issuer: /CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463 Certificate serial: 697F4CF215ECBDE2D80A9E554FC42B90BA917D22 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 14:02:39 +0000 Manifest this update: Wed 29 Jul 2026 13:57:39 +0000 Manifest next update: Thu 30 Jul 2026 15:01:39 +0000 Files and hashes: 1: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: iJm4NhgPbIn9ZoK9MCrx0LzGYq+XRWtI9oNHEB41bTw=) 2: 2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl (hash: gWY8AOLelDnwZINiMeysGGiIQJTowqNO61NZphVRM4U=) 3: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: JbxVAMh0l8cOOEqUdkvkAwk1Vty1kRSyKXbV2pl/yFg=) 4: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: 6lFtnPCNARkQq8uMVyUcH9X2yfQ7BRCjGYYqyfiHjKo=) 5: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: 6oOlCIxGneY8XQmzJaSA+rXwKrW4Xz1wcUf44XfKjgk=) 6: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: i83P/tWxpN7+zDb3L4rKQFgIev7DrUCxoADIDDyJE9U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 14:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:7f:4c:f2:15:ec:bd:e2:d8:0a:9e:55:4f:c4:2b:90:ba:91:7d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463 Validity Not Before: Jul 29 13:57:39 2026 GMT Not After : Jul 30 15:01:39 2026 GMT Subject: CN=87DC19531466FDCEE3C04B3D4EE3912742CEB38B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:64:01:5c:14:de:aa:35:d9:4e:65:93:27:0b: 66:0f:f8:82:98:a5:75:fe:c6:76:04:a3:3c:7b:d9: 2f:2d:51:d0:f0:8f:8f:fc:97:1b:4d:92:d2:fb:06: d5:81:a8:ef:80:28:a5:c0:c8:c8:1e:ac:c7:c9:72: c0:6c:19:60:a8:71:29:84:90:89:b1:fc:a7:78:1a: 5b:53:69:c9:d5:a1:5a:f3:27:46:99:07:71:c9:31: 91:06:13:fc:70:9f:3c:b7:6d:ba:9a:90:8e:6b:7f: f6:3e:01:72:ef:87:a1:07:6c:cb:f0:4d:85:9a:61: 14:4f:e7:b3:55:a1:9d:24:2e:bc:9b:af:23:c9:f8: 13:99:20:f0:c1:f6:3e:a0:c5:bd:17:b0:71:d5:95: dc:32:28:b2:7a:0f:b2:07:97:89:b9:5c:8b:2e:0e: 8c:f9:ae:06:3c:a8:2b:33:51:3c:7d:f0:61:ff:d6: 4b:e8:98:16:d0:1a:e3:f8:47:c4:cd:dd:06:df:28: 19:f0:b2:2e:5e:d9:eb:0c:e9:44:c5:5e:3f:f1:e1: 91:01:ab:d3:c2:ee:37:ac:bf:69:86:4a:15:22:ed: 37:c0:10:82:7a:f5:b5:d6:61:fa:0f:5d:1f:e8:93: 70:e2:d4:c8:8a:63:ef:9d:db:4f:d9:13:bc:a9:b6: 00:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DC:19:53:14:66:FD:CE:E3:C0:4B:3D:4E:E3:91:27:42:CE:B3:8B X509v3 Authority Key Identifier: keyid:2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ec:8c:64:b7:fd:17:6a:c1:81:c5:3e:28:1d:fa:0a:d5:b1: 35:16:ac:22:fe:41:be:bf:31:07:5d:e1:c6:14:31:79:7a:06: 5d:07:23:24:91:ef:8b:da:e3:6c:e2:4b:06:a8:69:70:5a:58: 01:96:4b:26:df:a7:04:e3:af:71:16:8a:6d:be:64:2b:4a:d1: b0:27:d9:ef:a6:ab:bd:4e:2c:52:8a:ba:0f:8d:36:15:66:79: 7a:9c:3a:a1:2a:b8:2e:6a:94:7a:d2:72:20:29:85:86:1f:09: 2f:6d:15:4b:e6:f8:6e:d9:e7:48:ef:b0:0e:ff:0e:05:e8:d4: 25:28:73:0c:c0:0b:82:3a:7d:a1:4c:29:fa:d3:85:0b:95:26: a8:a1:a5:e8:be:5a:7f:aa:d6:3d:64:72:1c:0f:0d:ac:7e:c4: 29:bc:18:9b:ff:a4:ca:82:b0:1a:f0:dd:a8:c6:5f:e6:7f:36: bd:e6:c1:30:74:df:10:96:27:04:c9:82:0f:e3:73:77:04:48: 19:2b:ff:bf:71:33:81:eb:1f:77:39:f1:3c:31:f4:38:c2:c5: 6a:d1:c6:03:d2:96:8f:6d:d2:4b:fa:8b:ed:81:56:eb:9e:12: 30:0e:ff:4d:98:f4:f7:9e:47:07:e0:0b:24:6f:fe:c8:a9:98: 2f:2e:ba:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaX9M8hXsveLYCp5VT8QrkLqRfSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzMTM3RUVGNzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3 MkUyQzQ2MzAeFw0yNjA3MjkxMzU3MzlaFw0yNjA3MzAxNTAxMzlaMDMxMTAvBgNV BAMTKDg3REMxOTUzMTQ2NkZEQ0VFM0MwNEIzRDRFRTM5MTI3NDJDRUIzOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcZAFcFN6qNdlOZZMnC2YP+IKY pXX+xnYEozx72S8tUdDwj4/8lxtNktL7BtWBqO+AKKXAyMgerMfJcsBsGWCocSmE kImx/Kd4GltTacnVoVrzJ0aZB3HJMZEGE/xwnzy3bbqakI5rf/Y+AXLvh6EHbMvw TYWaYRRP57NVoZ0kLrybryPJ+BOZIPDB9j6gxb0XsHHVldwyKLJ6D7IHl4m5XIsu Doz5rgY8qCszUTx98GH/1kvomBbQGuP4R8TN3QbfKBnwsi5e2esM6UTFXj/x4ZEB q9PC7jesv2mGShUi7TfAEIJ69bXWYfoPXR/ok3Di1MiKY++d20/ZE7yptgD1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh9wZUxRm/c7jwEs9TuORJ0LOs4swHwYDVR0j BBgwFoAUKjE37vd/GvFvehLdbTaUTHLixGMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI4ZWVjNWItNTMyNC00NDIyLWEzMmYtOWIxZGNlZDM3NTlmLzAvMkEzMTM3RUVG NzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3MkUyQzQ2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTMxMzdFRUY3N0YxQUYxNkY3QTEyREQ2RDM2OTQ0QzcyRTJD NDYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMkEzMTM3RUVGNzdGMUFGMTZGN0ExMkRENkQzNjk0 NEM3MkUyQzQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALsjGS3/RdqwYHFPigd+grVsTUWrCL+Qb6/ MQdd4cYUMXl6Bl0HIySR74va42ziSwaoaXBaWAGWSybfpwTjr3EWim2+ZCtK0bAn 2e+mq71OLFKKug+NNhVmeXqcOqEquC5qlHrSciAphYYfCS9tFUvm+G7Z50jvsA7/ DgXo1CUocwzAC4I6faFMKfrThQuVJqihpei+Wn+q1j1kchwPDax+xCm8GJv/pMqC sBrw3ajGX+Z/Nr3mwTB03xCWJwTJgg/jc3cESBkr/79xM4HrH3c58Twx9DjCxWrR xgPSlo9t0kv6i+2BVuueEjAO/02Y9PeeRwfgCyRv/sipmC8uusA= -----END CERTIFICATE-----Generated at Wed Jul 29 17:30:02 2026 by rpki-client