$ rpki-client -vvf rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft File: 2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft (raw, json) Hash identifier: innjZg1fHemV42njNTjroeUEATqvD6IFT8HjHEpSepE= Subject key identifier: D1:0D:09:0A:A4:B8:AA:D4:79:E1:84:56:57:0C:4C:1B:F6:39:F0:0A Authority key identifier: 2D:FC:5C:3D:38:82:FE:6E:7F:9A:9E:FE:2F:6B:96:55:5F:F5:2D:D7 Certificate issuer: /CN=2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7 Certificate serial: 509F372CC33452356125A925BC36167FE6A28F39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 20:57:23 +0000 Manifest this update: Tue 28 Jul 2026 20:52:23 +0000 Manifest next update: Wed 29 Jul 2026 22:35:23 +0000 Files and hashes: 1: 3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (hash: KyTDN/npdCxMnf6sB8d1UiCU7Ow9yE5T+dZIKGap4fI=) 2: 2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl (hash: SNVTYPxj2AIiYgqsgzsKQfQ+7SL5Rf+G0L4fxAyKFHk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:9f:37:2c:c3:34:52:35:61:25:a9:25:bc:36:16:7f:e6:a2:8f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7 Validity Not Before: Jul 28 20:52:23 2026 GMT Not After : Jul 29 22:35:23 2026 GMT Subject: CN=D10D090AA4B8AAD479E18456570C4C1BF639F00A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8f:fc:6c:19:ec:84:97:ca:f5:b7:3c:39:13: 48:bf:e4:b0:4e:33:36:af:38:01:f2:f8:42:fb:3e: 93:cc:e4:bd:64:f9:31:bd:19:82:02:52:d0:07:ec: 91:c1:ca:c3:87:e9:93:e4:99:90:4b:09:14:c0:6c: 87:c9:5e:10:5b:61:60:63:72:9a:99:7a:10:71:e4: 2d:a8:05:0c:dc:52:44:9f:eb:13:b9:e7:1a:72:5a: 16:2e:bb:c0:28:50:8a:f4:16:31:07:fc:73:ec:0c: 48:7a:07:57:9e:38:ad:20:f3:57:20:95:02:91:6d: 83:bb:42:f5:f6:c0:21:20:04:9f:8a:1e:fe:b1:fb: c0:d0:01:56:57:3e:b0:fe:32:4b:a1:83:55:b3:40: 43:70:e1:6f:2e:f9:8c:49:87:a9:93:1e:25:bd:fb: 92:52:0c:2a:27:15:f9:0d:ec:b1:8e:13:e0:fa:68: ee:cb:c6:03:c4:56:42:8b:bd:0d:7a:3a:e6:95:f7: cf:91:56:e6:31:15:41:d6:f4:a9:89:0f:66:96:a6: 7c:e6:2c:dd:4e:60:8f:2b:31:63:56:98:84:51:8a: ba:cc:c7:e1:ab:28:46:35:e7:36:95:80:f6:29:83: 52:08:a7:a6:ee:9f:4a:b0:85:32:3e:36:fc:d6:8d: 4c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0D:09:0A:A4:B8:AA:D4:79:E1:84:56:57:0C:4C:1B:F6:39:F0:0A X509v3 Authority Key Identifier: keyid:2D:FC:5C:3D:38:82:FE:6E:7F:9A:9E:FE:2F:6B:96:55:5F:F5:2D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:45:9b:19:f8:39:5c:bc:21:c5:ba:30:7a:b1:f6:db:c0:5f: 84:5e:c5:ff:66:17:02:9c:7c:91:0e:7e:39:d0:04:76:81:4f: ef:c1:56:58:26:16:e8:18:42:86:31:7f:17:9d:9a:5e:1f:18: d2:0d:fd:d9:cd:7e:da:f7:e7:f1:d5:10:a7:f2:54:62:78:61: f4:a5:40:3b:10:9f:57:33:16:9c:d3:db:40:e9:90:de:f1:0a: b2:7f:6f:3a:0c:fa:80:9d:01:50:d1:55:c0:87:dd:e1:53:a4: dd:00:67:96:85:23:b6:e0:61:63:a2:72:60:43:c9:b2:29:60: 5f:d3:b3:94:0f:0c:49:95:c2:eb:b9:c6:2b:02:da:4e:c5:34: 63:7a:65:36:1c:c8:0e:99:94:3a:db:68:c7:1e:30:fa:b1:8c: 39:ce:f2:3d:42:b1:e7:c7:70:7f:c9:d7:c5:df:d0:ff:32:75: c3:6b:a5:3c:18:d8:c1:e7:af:38:65:07:ef:2e:75:70:79:8d: 51:4f:f1:a7:04:09:01:e3:17:73:78:a9:10:cb:1e:3d:24:64: a1:60:0b:3e:6a:b7:46:2b:90:6a:c2:0a:f0:f0:fe:70:b8:d3: 76:70:bb:d5:04:46:21:88:3d:03:17:a4:f9:b1:4a:7d:04:39: 64:e0:fd:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJ83LMM0UjVhJaklvDYWf+aijzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQzVDM0QzODgyRkU2RTdGOUE5RUZFMkY2Qjk2NTU1 RkY1MkRENzAeFw0yNjA3MjgyMDUyMjNaFw0yNjA3MjkyMjM1MjNaMDMxMTAvBgNV BAMTKEQxMEQwOTBBQTRCOEFBRDQ3OUUxODQ1NjU3MEM0QzFCRjYzOUYwMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCej/xsGeyEl8r1tzw5E0i/5LBO MzavOAHy+EL7PpPM5L1k+TG9GYICUtAH7JHBysOH6ZPkmZBLCRTAbIfJXhBbYWBj cpqZehBx5C2oBQzcUkSf6xO55xpyWhYuu8AoUIr0FjEH/HPsDEh6B1eeOK0g81cg lQKRbYO7QvX2wCEgBJ+KHv6x+8DQAVZXPrD+Mkuhg1WzQENw4W8u+YxJh6mTHiW9 +5JSDConFfkN7LGOE+D6aO7LxgPEVkKLvQ16OuaV98+RVuYxFUHW9KmJD2aWpnzm LN1OYI8rMWNWmIRRirrMx+GrKEY15zaVgPYpg1IIp6bun0qwhTI+NvzWjUzBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Q0JCqS4qtR54YRWVwxMG/Y58AowHwYDVR0j BBgwFoAULfxcPTiC/m5/mp7+L2uWVV/1LdcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVmMDAxM2ItNTlhNi00NzMzLTg5ZjgtMjhmYTNkODg1NzlmLzAvMkRGQzVDM0Qz ODgyRkU2RTdGOUE5RUZFMkY2Qjk2NTU1RkY1MkRENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREZDNUMzRDM4ODJGRTZFN0Y5QTlFRkUyRjZCOTY1NTVGRjUy REQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmVmMDAxM2ItNTlhNi00NzMzLTg5 ZjgtMjhmYTNkODg1NzlmLzAvMkRGQzVDM0QzODgyRkU2RTdGOUE5RUZFMkY2Qjk2 NTU1RkY1MkRENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZFmxn4OVy8IcW6MHqx9tvAX4Rexf9mFwKc fJEOfjnQBHaBT+/BVlgmFugYQoYxfxedml4fGNIN/dnNftr35/HVEKfyVGJ4YfSl QDsQn1czFpzT20DpkN7xCrJ/bzoM+oCdAVDRVcCH3eFTpN0AZ5aFI7bgYWOicmBD ybIpYF/Ts5QPDEmVwuu5xisC2k7FNGN6ZTYcyA6ZlDrbaMceMPqxjDnO8j1CsefH cH/J18Xf0P8ydcNrpTwY2MHnrzhlB+8udXB5jVFP8acECQHjF3N4qRDLHj0kZKFg Cz5qt0YrkGrCCvDw/nC403Zwu9UERiGIPQMXpPmxSn0EOWTg/X4= -----END CERTIFICATE-----Generated at Wed Jul 29 10:31:16 2026 by rpki-client