$ rpki-client -vvvf rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft File: 2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft (raw, json) Hash identifier: oMx+6354tDt6Qjnz/Bryr+krvsrxH1PtcB61t+MgOqw= Subject key identifier: 68:1A:C1:BF:E7:61:E3:01:76:2E:9A:14:4D:12:7F:A8:84:C8:14:65 Authority key identifier: 2E:1A:4B:EC:A1:A3:FE:AE:F0:C7:92:4E:EE:B4:50:3F:88:5A:87:7C Certificate issuer: /CN=2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C Certificate serial: 1D3C26B6F9B84AE47162C74FF8C77E117CC14513 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft Manifest number: BF Signing time: Mon 21 Sep 2026 16:32:02 +0000 Manifest this update: Mon 21 Sep 2026 16:27:02 +0000 Manifest next update: Tue 22 Sep 2026 16:40:02 +0000 Files and hashes: 1: 2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl (hash: b11sMFl1olxXGq8pbK9QaB38tB7WZU/j6+H68/KdTwg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 16:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:3c:26:b6:f9:b8:4a:e4:71:62:c7:4f:f8:c7:7e:11:7c:c1:45:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C Validity Not Before: Sep 21 16:27:02 2026 GMT Not After : Sep 22 16:40:02 2026 GMT Subject: CN=681AC1BFE761E301762E9A144D127FA884C81465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:64:69:52:d0:e5:cf:c5:13:bb:7c:19:8d:34: d0:a3:6c:ee:e2:bd:d9:b3:82:82:58:72:e9:a9:14: 73:fd:ca:fc:ae:5c:05:1c:23:4a:cc:2a:5c:97:33: 50:87:db:5d:02:37:79:ff:45:3c:6c:db:54:73:4e: d4:0f:99:df:a6:d3:f0:88:5e:40:28:28:91:73:39: e6:38:7c:d5:aa:bc:ce:ed:eb:b7:d3:87:6b:44:19: 53:28:da:86:b4:69:42:3d:6f:a9:eb:29:97:66:5b: fc:5f:e1:bc:31:80:59:f9:b9:c9:12:a0:ef:ab:44: 02:c6:df:d1:cc:10:b8:bb:3c:6d:4a:5e:d4:b2:6a: c6:72:65:df:a7:2a:6e:7e:8f:20:50:6a:86:da:5f: d5:93:16:35:e1:b5:17:61:f4:83:28:ac:b2:53:b7: f9:18:8b:ae:da:99:03:8a:fb:b8:7d:07:73:c1:ef: fe:de:97:8b:43:07:e1:ca:a4:d8:29:39:37:b7:79: bf:65:24:96:65:48:74:bb:e7:a5:88:48:d4:0e:de: 9b:6b:bc:f7:bb:8e:56:4f:7f:4c:42:a9:8a:46:d6: 23:43:40:67:5a:83:82:1b:15:15:18:75:65:14:f9: be:06:f4:d7:b1:d0:ea:09:11:40:da:38:83:6a:99: 80:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1A:C1:BF:E7:61:E3:01:76:2E:9A:14:4D:12:7F:A8:84:C8:14:65 X509v3 Authority Key Identifier: keyid:2E:1A:4B:EC:A1:A3:FE:AE:F0:C7:92:4E:EE:B4:50:3F:88:5A:87:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6a:16:db:58:e4:4a:69:ae:06:d9:e0:15:fd:7b:ff:1f:b7: 5c:b5:34:60:14:bd:27:fd:bf:fb:ed:5a:4d:fe:82:6c:26:35: 78:46:ef:03:cd:89:0b:4e:82:59:49:8c:e3:cc:6d:f1:4f:9f: b0:8a:24:27:a3:44:bd:5c:8c:ab:4a:c3:ed:96:c5:a1:5c:d1: 9f:06:ad:41:69:86:97:41:d6:ce:1b:ea:bf:48:cf:0e:dc:a6: 5f:96:37:42:3b:f1:71:ec:e3:57:da:21:38:44:f9:a3:2f:2b: bd:01:f7:77:86:96:6d:27:ed:eb:75:ec:ae:c2:d7:3d:0b:db: d7:2e:3b:77:c5:bb:ae:34:e8:9c:9b:18:99:00:4e:8f:4b:2d: 33:cd:5c:60:5d:eb:ab:2d:22:df:08:08:d6:41:f3:42:c8:6a: 5a:42:a5:3d:ae:a1:94:ad:b8:30:47:f3:99:d3:0a:90:a1:8d: 41:cc:56:78:2a:4e:d2:79:90:48:e6:fc:85:99:13:c6:47:d6: 6c:eb:66:4a:0f:07:c5:d5:31:f3:a3:c4:d4:1d:be:dc:06:4a: fb:80:d5:73:5c:53:46:1d:f1:95:87:25:49:2f:48:4c:4b:61: 0a:3c:05:74:96:21:a2:3b:f1:9d:20:f2:7b:02:84:49:21:81: 3a:09:f9:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHTwmtvm4SuRxYsdP+Md+EXzBRRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxQTRCRUNBMUEzRkVBRUYwQzc5MjRFRUVCNDUwM0Y4 ODVBODc3QzAeFw0yNjA5MjExNjI3MDJaFw0yNjA5MjIxNjQwMDJaMDMxMTAvBgNV BAMTKDY4MUFDMUJGRTc2MUUzMDE3NjJFOUExNDREMTI3RkE4ODRDODE0NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtZGlS0OXPxRO7fBmNNNCjbO7i vdmzgoJYcumpFHP9yvyuXAUcI0rMKlyXM1CH210CN3n/RTxs21RzTtQPmd+m0/CI XkAoKJFzOeY4fNWqvM7t67fTh2tEGVMo2oa0aUI9b6nrKZdmW/xf4bwxgFn5uckS oO+rRALG39HMELi7PG1KXtSyasZyZd+nKm5+jyBQaobaX9WTFjXhtRdh9IMorLJT t/kYi67amQOK+7h9B3PB7/7el4tDB+HKpNgpOTe3eb9lJJZlSHS756WISNQO3ptr vPe7jlZPf0xCqYpG1iNDQGdag4IbFRUYdWUU+b4G9Nex0OoJEUDaOINqmYDDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaBrBv+dh4wF2LpoUTRJ/qITIFGUwHwYDVR0j BBgwFoAULhpL7KGj/q7wx5JO7rRQP4hah3wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDEzNjhhZTMtZGQxMi00YWEzLTg5NDgtNTQ2ZGUwNGM1MWU0LzAvMkUxQTRCRUNB MUEzRkVBRUYwQzc5MjRFRUVCNDUwM0Y4ODVBODc3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yRTFBNEJFQ0ExQTNGRUFFRjBDNzkyNEVFRUI0NTAzRjg4NUE4 NzdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDEzNjhhZTMtZGQxMi00YWEzLTg5 NDgtNTQ2ZGUwNGM1MWU0LzAvMkUxQTRCRUNBMUEzRkVBRUYwQzc5MjRFRUVCNDUw M0Y4ODVBODc3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItqFttY5EpprgbZ4BX9e/8ft1y1NGAUvSf9 v/vtWk3+gmwmNXhG7wPNiQtOgllJjOPMbfFPn7CKJCejRL1cjKtKw+2WxaFc0Z8G rUFphpdB1s4b6r9Izw7cpl+WN0I78XHs41faIThE+aMvK70B93eGlm0n7et17K7C 1z0L29cuO3fFu6406JybGJkATo9LLTPNXGBd66stIt8ICNZB80LIalpCpT2uoZSt uDBH85nTCpChjUHMVngqTtJ5kEjm/IWZE8ZH1mzrZkoPB8XVMfOjxNQdvtwGSvuA 1XNcU0Yd8ZWHJUkvSExLYQo8BXSWIaI78Z0g8nsChEkhgToJ+WU= -----END CERTIFICATE-----Generated at Tue Sep 22 06:53:27 2026 by rpki-client