$ rpki-client -vvf rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft File: 2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft (raw, json) Hash identifier: XUYais9rEz+XsrP3FfcnyztbI3KWi+ctvDOm+SrQnxA= Subject key identifier: A8:62:61:48:34:A1:CD:5F:16:06:7F:C3:17:E5:A2:07:5C:13:62:DB Authority key identifier: 2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA Certificate issuer: /CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA Certificate serial: 1588D428A752D84C80777228D4FF068ECF42BA5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 16:49:53 +0000 Manifest this update: Sat 13 Jun 2026 16:44:53 +0000 Manifest next update: Sun 14 Jun 2026 19:14:53 +0000 Files and hashes: 1: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: eNG7+LqFPcA2X6MnUSyw57FaBVmmkZ9qB88jQfVFgQw=) 2: 3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa (hash: Jv5U5LGovEDFBhrf2yN8LsratIXrB4UcO/MW+FaftYc=) 3: 2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl (hash: 7HsdQ0LjI1DKjbZ+s27eZ7s9nFk5OX5DhM2cUOUGA+Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 19:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:88:d4:28:a7:52:d8:4c:80:77:72:28:d4:ff:06:8e:cf:42:ba:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA Validity Not Before: Jun 13 16:44:53 2026 GMT Not After : Jun 14 19:14:53 2026 GMT Subject: CN=A862614834A1CD5F16067FC317E5A2075C1362DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:97:f4:de:ee:37:e5:6b:1f:92:aa:40:d7:aa: 27:88:0f:33:a6:54:f4:a6:2d:7a:d5:a5:85:f6:9c: ae:05:1a:4e:6f:77:24:cb:7e:6e:bd:94:43:d0:af: b7:72:ba:65:82:f1:ff:d9:22:a7:da:1d:d0:ab:7c: 07:cd:f4:2b:23:b2:31:52:ad:b8:14:2b:8f:bd:9f: c7:dd:ec:5c:ab:0d:de:34:eb:81:6a:59:1f:7b:76: a5:05:50:42:66:67:86:c0:e4:ef:e5:af:48:a6:2a: a2:1a:95:25:48:e6:3e:3c:5c:7a:93:02:b1:67:1b: 78:7f:ac:53:22:b1:58:eb:9d:b7:66:5a:45:29:6e: c8:f3:aa:16:e9:6f:6b:d6:67:28:e1:59:85:15:e1: f2:d5:dc:94:84:f1:51:aa:09:c3:08:a0:b9:a7:6c: 20:8d:b8:75:c6:8e:08:31:47:73:19:2c:cc:9a:4a: c1:b2:a8:90:ac:15:e3:de:a9:09:4c:3e:94:6f:0d: e6:94:6a:ab:1d:ff:97:f3:d5:99:ac:ab:fb:c4:90: 19:b0:fc:96:b8:d7:87:78:e3:f0:19:7e:ea:d9:82: cd:a1:fd:cf:92:d0:c4:1b:c8:d3:21:37:01:81:a0: 5e:91:97:50:74:17:0f:91:ba:5a:ec:1d:2a:72:c4: 02:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:62:61:48:34:A1:CD:5F:16:06:7F:C3:17:E5:A2:07:5C:13:62:DB X509v3 Authority Key Identifier: keyid:2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:cc:b4:8d:a8:67:e8:df:7e:ec:50:95:ac:6c:cd:dc:cf:02: 10:53:1a:5f:d1:8f:fc:88:e9:21:34:9f:69:a3:38:e1:42:b4: 8d:08:0a:c1:f9:1d:c9:07:29:0a:15:18:3a:27:a7:a2:fa:d2: 0e:7b:2e:3b:a4:da:e7:cf:e3:07:70:39:df:00:8c:02:ed:19: 8a:b5:44:17:cd:a9:78:3f:4a:83:4f:4f:dc:92:9d:91:ca:87: ac:fb:c6:43:ef:db:a0:af:72:cc:db:ec:1a:70:25:12:9b:f1: d6:cd:b0:9d:0b:75:fd:c5:ba:e8:7d:59:8b:81:6d:7a:6c:d8: 57:7e:fc:4e:9d:96:bf:d7:16:38:00:de:ab:7d:1e:f5:a4:75: e6:b4:cb:20:85:4b:6c:af:b8:15:0c:e0:78:ee:c8:e6:22:76: 54:b9:84:9c:44:fd:ba:e3:a7:46:fb:b2:b5:82:6f:8d:01:d2: f5:ee:8b:cc:a0:01:ec:25:bf:53:60:ae:3b:06:f2:95:7f:ea: 19:06:07:4c:9e:7c:bf:e9:38:ff:01:87:58:d7:62:2a:34:60: 68:bc:8c:5b:e7:e6:cc:d0:9f:33:3a:b3:ce:09:fd:44:48:3a: e6:67:cc:12:1b:7d:d9:49:3a:97:b8:bc:6e:4b:73:00:a4:96: 38:90:3d:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFYjUKKdS2EyAd3Io1P8Gjs9Cul4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE3RkI4MDE2REEwMDBBOUQxMEM5ODA5QzQ0RURFMkU5 RkRBQjZGQTAeFw0yNjA2MTMxNjQ0NTNaFw0yNjA2MTQxOTE0NTNaMDMxMTAvBgNV BAMTKEE4NjI2MTQ4MzRBMUNENUYxNjA2N0ZDMzE3RTVBMjA3NUMxMzYyREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJl/Te7jflax+SqkDXqieIDzOm VPSmLXrVpYX2nK4FGk5vdyTLfm69lEPQr7dyumWC8f/ZIqfaHdCrfAfN9CsjsjFS rbgUK4+9n8fd7FyrDd4064FqWR97dqUFUEJmZ4bA5O/lr0imKqIalSVI5j48XHqT ArFnG3h/rFMisVjrnbdmWkUpbsjzqhbpb2vWZyjhWYUV4fLV3JSE8VGqCcMIoLmn bCCNuHXGjggxR3MZLMyaSsGyqJCsFePeqQlMPpRvDeaUaqsd/5fz1Zmsq/vEkBmw /Ja414d44/AZfurZgs2h/c+S0MQbyNMhNwGBoF6Rl1B0Fw+RulrsHSpyxALvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqGJhSDShzV8WBn/DF+WiB1wTYtswHwYDVR0j BBgwFoAUKn+4AW2gAKnRDJgJxE7eLp/atvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NhMmUwZGItZTI5My00MWM1LTg1ODMtMzgwMTU3NTg0MjFjLzAvMkE3RkI4MDE2 REEwMDBBOUQxMEM5ODA5QzQ0RURFMkU5RkRBQjZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTdGQjgwMTZEQTAwMEE5RDEwQzk4MDlDNDRFREUyRTlGREFC NkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvMkE3RkI4MDE2REEwMDBBOUQxMEM5ODA5QzQ0RURF MkU5RkRBQjZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnMtI2oZ+jffuxQlaxszdzPAhBTGl/Rj/yI 6SE0n2mjOOFCtI0ICsH5HckHKQoVGDonp6L60g57Ljuk2ufP4wdwOd8AjALtGYq1 RBfNqXg/SoNPT9ySnZHKh6z7xkPv26Cvcszb7BpwJRKb8dbNsJ0Ldf3Fuuh9WYuB bXps2Fd+/E6dlr/XFjgA3qt9HvWkdea0yyCFS2yvuBUM4HjuyOYidlS5hJxE/brj p0b7srWCb40B0vXui8ygAewlv1NgrjsG8pV/6hkGB0yefL/pOP8Bh1jXYio0YGi8 jFvn5szQnzM6s84J/URIOuZnzBIbfdlJOpe4vG5LcwCkljiQPT0= -----END CERTIFICATE-----Generated at Sun Jun 14 10:22:04 2026 by rpki-client