$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft File: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft (raw, json) Hash identifier: ItUPgJGNSOWvAXdxdu+hA6C9nJuoPHFoZJ5TB4bY7xs= Subject key identifier: 25:2D:8D:34:CC:33:19:24:59:6B:97:1A:FC:F1:61:99:52:D3:61:E0 Authority key identifier: 2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 Certificate issuer: /CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Certificate serial: 257D040FE905A700B57EF035F285EC12599E312E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 02:39:19 +0000 Manifest this update: Wed 29 Jul 2026 02:34:19 +0000 Manifest next update: Thu 30 Jul 2026 04:08:19 +0000 Files and hashes: 1: 3130332e3133312e3130372e302f32342d3234203d3e20313338313139.roa (hash: cKDgVoSVAFZfl4hgrIHwI1J4tBbCiwmqXmahxpGLx8I=) 2: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl (hash: sYHEX7avMwHx3+l4EsfdsvYy4PQ06BVOdHcfzsU/+qM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:7d:04:0f:e9:05:a7:00:b5:7e:f0:35:f2:85:ec:12:59:9e:31:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Validity Not Before: Jul 29 02:34:19 2026 GMT Not After : Jul 30 04:08:19 2026 GMT Subject: CN=252D8D34CC331924596B971AFCF1619952D361E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c5:c3:a5:3b:9c:25:ba:ab:73:90:53:94:d8: b8:bf:3b:26:79:59:b6:99:e1:db:c3:71:fb:ba:82: 37:0b:dd:94:fe:c8:dc:c2:2a:ef:2d:eb:0e:0f:aa: 0a:18:b7:fb:f1:43:ca:5c:6e:75:16:82:7d:8a:fb: 5e:ef:11:3a:c6:74:93:eb:db:d7:d2:d9:5b:c1:27: 91:10:11:1a:a4:9b:3c:0c:d6:51:b5:7e:b5:c3:20: f7:c4:33:dd:e3:f4:f5:0d:72:17:ab:34:cd:40:c0: b2:0f:fe:5e:26:0f:1b:46:e6:e9:d6:d2:17:90:f5: 2c:e7:f4:7d:51:ee:e3:18:c2:46:be:1a:f4:b2:72: 12:9a:4c:68:4f:23:cd:f8:c3:b5:0b:1e:c8:e6:41: 6d:e1:58:53:bb:60:00:0d:c6:95:11:58:46:6a:98: 9e:96:49:0f:31:7b:44:53:f2:87:c3:38:94:ae:f8: 00:be:5f:80:a3:30:13:6b:60:5d:12:9e:ed:59:09: ee:f2:d6:fb:30:b5:16:e4:14:3a:6c:07:1f:b9:01: 1b:f2:4e:69:a6:4e:fc:4a:ac:f2:81:6f:4d:ec:5f: 72:f8:e7:8c:1c:b9:b0:d4:2e:f0:1c:5e:e4:c5:29: 70:4e:a9:2f:64:16:84:ae:b5:10:80:b0:b7:aa:ef: 29:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2D:8D:34:CC:33:19:24:59:6B:97:1A:FC:F1:61:99:52:D3:61:E0 X509v3 Authority Key Identifier: keyid:2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:cd:20:f3:e2:33:64:b6:bf:77:a0:05:06:f5:cc:2d:88:7f: ce:dd:74:c1:eb:8c:f2:0f:c2:59:11:1b:23:4c:6b:f9:f6:90: 72:18:f1:c0:c0:2a:fb:e7:81:b3:d0:a3:71:de:c6:12:74:e0: 0c:82:a1:dc:33:3d:4e:e3:12:15:dc:d5:8f:ec:c9:0d:4e:9f: 69:66:2e:07:99:71:05:3e:91:1f:cc:e9:0c:d3:b5:28:a7:94: e2:4e:9b:9b:c3:77:79:47:31:32:80:4b:17:e3:62:c3:67:aa: a1:ac:c5:a7:42:cf:15:ef:b8:6c:63:76:9c:d6:f3:52:d6:9a: fd:13:61:7f:fb:20:ba:e9:df:5c:06:19:7e:3a:78:6b:d0:58: 42:c4:75:f9:dd:88:ad:47:3b:16:62:d6:9f:0d:37:a5:53:73: 88:f7:b4:00:58:9e:c0:42:73:24:28:da:f6:62:4a:83:b3:cc: 7f:7a:84:5e:93:b2:9c:7c:a9:2d:62:ee:46:c3:94:f5:4a:b0: 16:0a:77:22:c7:d4:32:04:84:86:28:6d:bb:d7:8e:42:38:70: bb:61:37:14:2e:23:0a:79:b4:10:d9:b3:bb:9e:0b:27:76:37: f7:81:0f:26:cc:e1:f4:1a:28:21:a1:78:f0:6c:ce:2e:7b:53: 8d:d3:42:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJX0ED+kFpwC1fvA18oXsElmeMS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFFMTRBQkJENTE2MUJBMENBREIzQzQwQzFGOURGQ0JD OUNGMzQ3MDAeFw0yNjA3MjkwMjM0MTlaFw0yNjA3MzAwNDA4MTlaMDMxMTAvBgNV BAMTKDI1MkQ4RDM0Q0MzMzE5MjQ1OTZCOTcxQUZDRjE2MTk5NTJEMzYxRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUxcOlO5wluqtzkFOU2Li/OyZ5 WbaZ4dvDcfu6gjcL3ZT+yNzCKu8t6w4PqgoYt/vxQ8pcbnUWgn2K+17vETrGdJPr 29fS2VvBJ5EQERqkmzwM1lG1frXDIPfEM93j9PUNcherNM1AwLIP/l4mDxtG5unW 0heQ9Szn9H1R7uMYwka+GvSychKaTGhPI834w7ULHsjmQW3hWFO7YAANxpURWEZq mJ6WSQ8xe0RT8ofDOJSu+AC+X4CjMBNrYF0Snu1ZCe7y1vswtRbkFDpsBx+5ARvy TmmmTvxKrPKBb03sX3L454wcubDULvAcXuTFKXBOqS9kFoSutRCAsLeq7ymTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJS2NNMwzGSRZa5ca/PFhmVLTYeAwHwYDVR0j BBgwFoAUKuFKu9UWG6DK2zxAwfnfy8nPNHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkyNDM5NTAtM2ZkZi00OWFiLWJmZGMtZjU4NjQ1MzcwNGM2LzAvMkFFMTRBQkJE NTE2MUJBMENBREIzQzQwQzFGOURGQ0JDOUNGMzQ3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUUxNEFCQkQ1MTYxQkEwQ0FEQjNDNDBDMUY5REZDQkM5Q0Yz NDcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkyNDM5NTAtM2ZkZi00OWFiLWJm ZGMtZjU4NjQ1MzcwNGM2LzAvMkFFMTRBQkJENTE2MUJBMENBREIzQzQwQzFGOURG Q0JDOUNGMzQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzNIPPiM2S2v3egBQb1zC2If87ddMHrjPIP wlkRGyNMa/n2kHIY8cDAKvvngbPQo3HexhJ04AyCodwzPU7jEhXc1Y/syQ1On2lm LgeZcQU+kR/M6QzTtSinlOJOm5vDd3lHMTKASxfjYsNnqqGsxadCzxXvuGxjdpzW 81LWmv0TYX/7ILrp31wGGX46eGvQWELEdfndiK1HOxZi1p8NN6VTc4j3tABYnsBC cyQo2vZiSoOzzH96hF6Tspx8qS1i7kbDlPVKsBYKdyLH1DIEhIYobbvXjkI4cLth NxQuIwp5tBDZs7ueCyd2N/eBDybM4fQaKCGhePBszi57U43TQoE= -----END CERTIFICATE-----Generated at Wed Jul 29 09:07:23 2026 by rpki-client