$ rpki-client -vvf rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft File: 2111C1DE0964BA3363560863B0A6338C56E44B27.mft (raw, json) Hash identifier: yHLU7vV/3Q4DvZNSqNv3TBr5CxqcIp193XQxFwN/yiA= Subject key identifier: D6:7F:B6:39:98:5C:76:E9:94:34:9E:BD:9E:19:EA:83:72:93:13:C2 Authority key identifier: 21:11:C1:DE:09:64:BA:33:63:56:08:63:B0:A6:33:8C:56:E4:4B:27 Certificate issuer: /CN=2111C1DE0964BA3363560863B0A6338C56E44B27 Certificate serial: 04FFDA4E7C0CD4B34793BEAE2EC1A42DD9988594 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 17:12:58 +0000 Manifest this update: Tue 28 Jul 2026 17:07:58 +0000 Manifest next update: Wed 29 Jul 2026 20:17:58 +0000 Files and hashes: 1: 2111C1DE0964BA3363560863B0A6338C56E44B27.crl (hash: LyOmKJhs8FIAa5WZplIpv7IEX6UiRUsvYD8WAzmVYvM=) 2: 3130332e3136322e3130352e302f32342d3234203d3e20313337333136.roa (hash: reUfW2xUZcOA3UU73tVnYqvdrqLkl2f35VFNF05Zufw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.crl rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ff:da:4e:7c:0c:d4:b3:47:93:be:ae:2e:c1:a4:2d:d9:98:85:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2111C1DE0964BA3363560863B0A6338C56E44B27 Validity Not Before: Jul 28 17:07:58 2026 GMT Not After : Jul 29 20:17:58 2026 GMT Subject: CN=D67FB639985C76E994349EBD9E19EA83729313C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7b:63:c5:ae:c8:2b:34:fa:c8:e7:e0:72:0d: ee:4e:82:f3:90:e3:ac:2b:f4:b4:32:7f:35:96:7b: 43:c0:29:2d:81:b6:cd:cf:5a:73:70:30:73:e1:e2: a3:e1:19:80:5e:94:3c:74:a4:96:a4:08:8a:0a:98: f0:f6:5b:5e:e5:ab:6f:ff:60:25:d4:73:fa:71:7b: ea:16:4f:a8:0d:97:ec:fe:5e:e4:f9:32:96:e7:e7: e4:97:94:71:45:a6:2c:d5:3c:e2:fb:43:96:6d:16: af:3a:e4:fa:93:7c:dc:75:bf:4c:fb:3d:be:da:4a: 8b:bb:fa:34:2f:64:8d:c6:52:4b:5d:0f:b0:3b:64: 8c:cf:48:ef:26:b1:10:b5:ee:ba:e7:de:46:76:63: b1:ed:26:a8:4d:7a:a5:8c:d6:f2:2a:d0:14:21:24: cc:82:e3:cf:23:92:7e:35:6a:32:24:ba:bc:63:b1: b4:0e:61:43:56:e3:5f:21:45:d0:7f:3e:2c:47:a0: 3d:83:48:5d:1b:9c:f0:12:c0:c7:a4:eb:7c:30:f7: 54:33:e7:8a:8b:81:26:78:c2:4b:b1:8b:bf:32:d4: a4:a2:05:12:99:e6:c8:c4:6b:6e:a8:89:ad:50:81: 95:bd:7c:26:c0:a8:0c:dd:ee:88:f6:75:c4:a0:a7: 87:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7F:B6:39:98:5C:76:E9:94:34:9E:BD:9E:19:EA:83:72:93:13:C2 X509v3 Authority Key Identifier: keyid:21:11:C1:DE:09:64:BA:33:63:56:08:63:B0:A6:33:8C:56:E4:4B:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:38:c6:a9:2f:ed:f4:a5:6c:62:5b:6c:bc:b1:c5:d3:7b:25: 3f:f2:a6:40:69:91:b7:a8:32:3b:6d:3c:0a:b0:e5:9f:a5:eb: 2b:7c:cb:3d:46:b4:3b:b9:a4:68:c3:c1:b0:33:3f:26:bb:f3: 3e:7f:51:93:2c:a7:21:72:93:38:ae:d7:2b:6f:88:07:d2:b1: c6:a2:8a:41:b1:9b:06:70:d4:10:7e:40:ba:de:ca:cc:bf:54: f1:22:6f:aa:c0:66:6a:0f:8c:03:1c:e2:3b:95:bb:7b:b2:00: 4d:0a:d5:95:7a:36:18:d3:e2:23:1a:16:d2:f7:a7:fb:93:48: 38:cb:68:76:24:bf:f0:c6:84:e8:ae:30:dd:dc:db:4b:34:bc: 8e:bb:d3:80:4c:ee:0f:61:bd:2f:7a:f7:e2:f4:32:8a:90:a8: 9e:ab:6d:86:40:74:5e:b2:a1:ef:3b:ab:33:4c:42:ca:29:3e: 37:39:52:21:47:63:09:d2:d9:b5:3d:ec:63:d8:58:99:93:39: cd:20:d6:cc:35:b7:f4:3c:39:d3:50:4e:32:3c:6b:c7:15:52: b3:f7:54:0b:1a:4b:43:8c:96:8a:f4:93:62:71:57:36:89:a9: eb:77:28:88:04:02:12:0d:97:6a:97:34:fd:e6:0a:7d:0b:23: 88:b2:67:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBP/aTnwM1LNHk76uLsGkLdmYhZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExMUMxREUwOTY0QkEzMzYzNTYwODYzQjBBNjMzOEM1 NkU0NEIyNzAeFw0yNjA3MjgxNzA3NThaFw0yNjA3MjkyMDE3NThaMDMxMTAvBgNV BAMTKEQ2N0ZCNjM5OTg1Qzc2RTk5NDM0OUVCRDlFMTlFQTgzNzI5MzEzQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZe2PFrsgrNPrI5+ByDe5OgvOQ 46wr9LQyfzWWe0PAKS2Bts3PWnNwMHPh4qPhGYBelDx0pJakCIoKmPD2W17lq2// YCXUc/pxe+oWT6gNl+z+XuT5Mpbn5+SXlHFFpizVPOL7Q5ZtFq865PqTfNx1v0z7 Pb7aSou7+jQvZI3GUktdD7A7ZIzPSO8msRC17rrn3kZ2Y7HtJqhNeqWM1vIq0BQh JMyC488jkn41ajIkurxjsbQOYUNW418hRdB/PixHoD2DSF0bnPASwMek63ww91Qz 54qLgSZ4wkuxi78y1KSiBRKZ5sjEa26oia1QgZW9fCbAqAzd7oj2dcSgp4fxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1n+2OZhcdumUNJ69nhnqg3KTE8IwHwYDVR0j BBgwFoAUIRHB3glkujNjVghjsKYzjFbkSycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzcyMjQzNjAtMjQ1ZC00YTFhLWFmMzYtZjliZWZjZGI3MGI3LzAvMjExMUMxREUw OTY0QkEzMzYzNTYwODYzQjBBNjMzOEM1NkU0NEIyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMTExQzFERTA5NjRCQTMzNjM1NjA4NjNCMEE2MzM4QzU2RTQ0 QjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzcyMjQzNjAtMjQ1ZC00YTFhLWFm MzYtZjliZWZjZGI3MGI3LzAvMjExMUMxREUwOTY0QkEzMzYzNTYwODYzQjBBNjMz OEM1NkU0NEIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJI4xqkv7fSlbGJbbLyxxdN7JT/ypkBpkbeo MjttPAqw5Z+l6yt8yz1GtDu5pGjDwbAzPya78z5/UZMspyFykziu1ytviAfSscai ikGxmwZw1BB+QLreysy/VPEib6rAZmoPjAMc4juVu3uyAE0K1ZV6NhjT4iMaFtL3 p/uTSDjLaHYkv/DGhOiuMN3c20s0vI6704BM7g9hvS969+L0MoqQqJ6rbYZAdF6y oe87qzNMQsopPjc5UiFHYwnS2bU97GPYWJmTOc0g1sw1t/Q8OdNQTjI8a8cVUrP3 VAsaS0OMlor0k2JxVzaJqet3KIgEAhINl2qXNP3mCn0LI4iyZyo= -----END CERTIFICATE-----Generated at Wed Jul 29 12:56:01 2026 by rpki-client