$ rpki-client -vvf rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft File: 2DFA9ABE82F079690092186CFE591462760D0F8A.mft (raw, json) Hash identifier: ZJFykFvRm75GyozK28PoOqvoR96rIUL+D5+CDa4HMzE= Subject key identifier: 48:6C:2A:55:84:7E:21:B8:A2:B8:11:DB:67:2B:E4:33:73:DD:5D:EB Authority key identifier: 2D:FA:9A:BE:82:F0:79:69:00:92:18:6C:FE:59:14:62:76:0D:0F:8A Certificate issuer: /CN=2DFA9ABE82F079690092186CFE591462760D0F8A Certificate serial: 3D24E7E4EC51E56AD017E213168D435D04EBB4FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 18:14:13 +0000 Manifest this update: Tue 28 Jul 2026 18:09:13 +0000 Manifest next update: Wed 29 Jul 2026 19:12:13 +0000 Files and hashes: 1: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: W/hw+IjAyZrPFulBFkYLnFPX3SzGksOOsryB2xI+HDo=) 2: 2DFA9ABE82F079690092186CFE591462760D0F8A.crl (hash: tLbvw2QsDCOgRzLyApDVRwj+LhBD6EJqpdDs5MWxl98=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.crl rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:24:e7:e4:ec:51:e5:6a:d0:17:e2:13:16:8d:43:5d:04:eb:b4:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFA9ABE82F079690092186CFE591462760D0F8A Validity Not Before: Jul 28 18:09:13 2026 GMT Not After : Jul 29 19:12:13 2026 GMT Subject: CN=486C2A55847E21B8A2B811DB672BE43373DD5DEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0c:33:3b:77:e0:6a:5f:64:4a:5b:e3:9f:b9: 20:dc:d7:22:b8:e9:ac:53:e8:6d:9e:c1:c0:c3:c4: df:b3:b8:6f:e4:84:cf:82:4d:84:97:e2:00:c2:b7: 3f:74:80:09:31:16:bd:e6:2c:4e:a6:d7:74:0d:41: a1:27:07:f1:c2:86:74:b0:fc:cd:54:fd:8b:17:ae: 05:38:59:67:7f:50:68:ca:21:1a:ef:98:24:67:da: 11:5d:50:42:cc:d4:6c:ec:67:7a:92:27:3a:46:f2: 52:d3:59:24:0a:b1:78:f7:dd:6c:ec:54:e7:48:ef: 35:a3:3c:d7:31:52:da:56:19:96:5e:89:40:af:16: 6d:f2:3e:ee:a5:ae:2f:02:62:19:3e:d1:57:89:a9: 9c:d9:b6:4f:2c:bb:21:15:3b:77:58:3f:48:56:55: 59:3d:14:11:55:75:fb:32:19:3e:92:b0:0c:69:a6: 85:c4:74:85:fa:17:39:b0:ab:c8:c8:a6:cb:a3:c6: 90:79:80:94:4c:9c:40:34:fa:c5:d9:18:a3:73:ae: 78:67:5c:39:3f:c7:66:11:d7:d1:c4:c5:95:5d:04: 9f:b3:ef:67:8b:89:ec:0e:9b:9a:4e:66:49:f0:f2: 2a:86:46:aa:68:74:9f:f9:1d:3f:17:b8:4e:ec:07: c7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6C:2A:55:84:7E:21:B8:A2:B8:11:DB:67:2B:E4:33:73:DD:5D:EB X509v3 Authority Key Identifier: keyid:2D:FA:9A:BE:82:F0:79:69:00:92:18:6C:FE:59:14:62:76:0D:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b7:07:db:82:9d:4b:73:08:27:0a:20:01:a8:8a:50:73:5b: 0b:0a:eb:50:d8:82:c0:e3:9f:52:2a:d5:12:c2:83:4e:df:f1: 80:34:20:85:8d:85:78:89:9a:66:86:db:db:54:50:15:8d:bc: f4:e9:1c:50:9a:07:3c:24:d1:fd:01:5a:9a:ab:80:7f:e5:00: 61:a8:41:91:00:cc:f0:94:f2:90:51:e7:f3:32:a5:67:de:4a: 76:d7:5d:3a:86:a0:03:18:6e:fb:0d:67:bf:50:ce:ef:ba:c5: a3:57:ab:e8:50:57:93:d7:85:e3:9b:13:02:d1:ba:bf:16:f6: 40:39:5b:4c:8b:3f:27:00:c4:7f:2f:7e:ce:74:23:24:30:71: f1:e9:b8:b1:3e:f0:4f:e3:1a:c7:a0:1c:14:05:9d:b6:aa:24: 70:d8:20:88:e8:c3:b6:95:4d:95:46:e1:b9:8a:47:f7:24:f8: 10:bf:2f:b7:b3:2b:cc:78:e9:a6:1d:26:a9:0f:02:eb:bd:8d: b7:00:fe:c1:12:90:37:8d:64:53:41:e5:90:c5:6d:41:94:ca: d1:ef:70:12:42:d8:66:fa:fa:a8:b2:4b:fb:d6:03:83:4b:b2: 94:00:19:79:25:87:47:c5:26:c7:af:b3:f9:0f:4f:94:c4:98: 57:f0:8e:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSTn5OxR5WrQF+ITFo1DXQTrtP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQTlBQkU4MkYwNzk2OTAwOTIxODZDRkU1OTE0NjI3 NjBEMEY4QTAeFw0yNjA3MjgxODA5MTNaFw0yNjA3MjkxOTEyMTNaMDMxMTAvBgNV BAMTKDQ4NkMyQTU1ODQ3RTIxQjhBMkI4MTFEQjY3MkJFNDMzNzNERDVERUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbDDM7d+BqX2RKW+OfuSDc1yK4 6axT6G2ewcDDxN+zuG/khM+CTYSX4gDCtz90gAkxFr3mLE6m13QNQaEnB/HChnSw /M1U/YsXrgU4WWd/UGjKIRrvmCRn2hFdUELM1GzsZ3qSJzpG8lLTWSQKsXj33Wzs VOdI7zWjPNcxUtpWGZZeiUCvFm3yPu6lri8CYhk+0VeJqZzZtk8suyEVO3dYP0hW VVk9FBFVdfsyGT6SsAxppoXEdIX6Fzmwq8jIpsujxpB5gJRMnEA0+sXZGKNzrnhn XDk/x2YR19HExZVdBJ+z72eLiewOm5pOZknw8iqGRqpodJ/5HT8XuE7sB8ezAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSGwqVYR+IbiiuBHbZyvkM3PdXeswHwYDVR0j BBgwFoAULfqavoLweWkAkhhs/lkUYnYND4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGNjYzJhZjQtYTYyZC00NzA4LWI2ODgtMTg5MjU5NGJhOTg5LzAvMkRGQTlBQkU4 MkYwNzk2OTAwOTIxODZDRkU1OTE0NjI3NjBEMEY4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREZBOUFCRTgyRjA3OTY5MDA5MjE4NkNGRTU5MTQ2Mjc2MEQw RjhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvMkRGQTlBQkU4MkYwNzk2OTAwOTIxODZDRkU1OTE0 NjI3NjBEMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJa3B9uCnUtzCCcKIAGoilBzWwsK61DYgsDj n1Iq1RLCg07f8YA0IIWNhXiJmmaG29tUUBWNvPTpHFCaBzwk0f0BWpqrgH/lAGGo QZEAzPCU8pBR5/MypWfeSnbXXTqGoAMYbvsNZ79Qzu+6xaNXq+hQV5PXheObEwLR ur8W9kA5W0yLPycAxH8vfs50IyQwcfHpuLE+8E/jGsegHBQFnbaqJHDYIIjow7aV TZVG4bmKR/ck+BC/L7ezK8x46aYdJqkPAuu9jbcA/sESkDeNZFNB5ZDFbUGUytHv cBJC2Gb6+qiyS/vWA4NLspQAGXklh0fFJsevs/kPT5TEmFfwjpA= -----END CERTIFICATE-----Generated at Wed Jul 29 08:37:40 2026 by rpki-client