$ rpki-client -vvvf rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft File: 2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft (raw, json) Hash identifier: aSCL/k9FMquSkmlAWdcN/k3svVjeybYJaiFNa2KbzMc= Subject key identifier: 61:AE:97:5D:39:59:08:57:B4:AB:20:E4:C0:76:71:66:CB:5B:24:ED Authority key identifier: 2B:5A:07:8B:9D:8A:31:7D:A7:A2:AD:40:20:90:C9:AE:72:A1:D0:F4 Certificate issuer: /CN=2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4 Certificate serial: 6E044BADC7FB5F9C5187DB497A9CC8EA4F0D17AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft Manifest number: BF Signing time: Wed 23 Sep 2026 04:31:42 +0000 Manifest this update: Wed 23 Sep 2026 04:26:42 +0000 Manifest next update: Thu 24 Sep 2026 04:31:42 +0000 Files and hashes: 1: 3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa (hash: cjqOi69hQ/DuVUUYy0IY+fZE1a6xIzJfgF06BFHgrL0=) 2: 3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa (hash: SSJvSdL4NA21o/quBBkRYHXaBZlnNisf6npebpyix0w=) 3: 3130332e3130302e39392e302f32342d3234203d3e20313336383338.roa (hash: YEpJ9MshH91OnFv/znxkxIYveM8j2r6OPnOxKsElZA4=) 4: 3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa (hash: F/SUGaqSrvN9l0bA+VVFhafqTQPYwg8gVdDw3HwYYEg=) 5: 2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl (hash: CiwMkkKu85m141oVgShiP+tiiAYY2NNrjvEHvMN85FU=) 6: 3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa (hash: I+MpxcufYeam5pksOgKwBNTewvekIqJYxt3l7XuR42Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 04:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:04:4b:ad:c7:fb:5f:9c:51:87:db:49:7a:9c:c8:ea:4f:0d:17:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4 Validity Not Before: Sep 23 04:26:42 2026 GMT Not After : Sep 24 04:31:42 2026 GMT Subject: CN=61AE975D39590857B4AB20E4C0767166CB5B24ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:0e:d9:f7:e2:6a:7f:bc:9a:5c:58:48:4e: 63:7e:c9:6d:0d:66:2a:5c:08:f4:5a:1e:d5:c0:e8: 69:45:80:e1:d2:ba:6f:74:b9:9d:96:a1:04:a2:f6: 0f:e6:5c:3e:56:98:63:83:e9:9b:6b:b1:93:9c:a5: a5:c0:dd:7b:b7:19:50:38:21:a4:ec:ae:3a:2e:be: 83:22:8d:cc:1c:8f:65:11:4b:1d:2b:78:67:5c:bd: 7b:50:c5:6a:5d:29:23:1d:2b:ac:75:1a:c0:85:00: 62:e6:0f:7f:6c:dc:44:a4:69:86:2d:d0:ad:e2:4b: cb:75:31:91:41:c7:12:24:cd:20:fb:53:8b:66:d6: 4f:c7:a2:85:1d:0b:5e:80:cf:a3:80:2d:5a:28:67: 9a:63:01:96:c1:d3:6a:f6:fe:d9:44:df:c2:a1:ac: 19:66:71:b3:7a:79:8c:a4:80:20:c0:96:a7:5a:7e: 5a:9a:16:d9:49:84:22:c7:a0:37:cc:fb:a2:b2:ac: 11:df:fb:d8:13:e8:6c:e9:3d:45:af:6f:fa:e2:86: 91:3e:5f:ab:27:b4:3b:86:a2:e7:eb:72:7b:90:45: ee:05:27:3c:5c:fd:27:d9:16:bb:c1:a5:66:b7:14: 21:b0:f8:f0:e8:4c:4b:fa:48:de:c8:b6:96:fd:a1: 6e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AE:97:5D:39:59:08:57:B4:AB:20:E4:C0:76:71:66:CB:5B:24:ED X509v3 Authority Key Identifier: keyid:2B:5A:07:8B:9D:8A:31:7D:A7:A2:AD:40:20:90:C9:AE:72:A1:D0:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:a1:f3:c6:19:94:cb:8a:27:66:48:03:bc:94:5b:bc:f5:6d: 51:9e:b8:92:c1:ac:97:95:5f:14:71:09:43:4b:62:89:7b:73: a0:67:2b:4f:48:f7:62:8b:91:d2:0d:1a:6a:d8:b6:64:e5:72: 42:a2:2d:21:bc:c5:f7:b4:a7:a3:4c:0a:56:c2:38:41:76:df: cb:6d:22:54:5b:19:23:d7:a7:6a:ae:e3:94:59:21:c8:2e:14: 49:6c:1c:1a:36:1a:be:74:38:7a:e5:58:ff:88:7f:6c:d7:6d: 53:f9:2d:64:94:65:54:f6:34:17:26:b7:5a:25:64:d7:2d:c6: 7a:fc:e8:9a:f2:23:2a:0e:c6:88:03:3c:4a:a9:c7:ed:0b:3b: 6a:c8:84:51:f9:ac:11:a3:34:08:6b:9a:9c:4c:47:fe:f0:b0: 3f:54:d0:85:fc:a1:4a:a0:e4:ab:14:e0:cd:db:1d:7a:91:1f: 4a:a7:01:d7:a1:19:b0:97:88:25:d3:6c:b1:90:66:58:b0:d7: de:94:18:2c:f3:6b:e5:25:ad:35:66:54:d8:93:51:4e:91:c6: cd:40:76:d3:d2:6b:9e:aa:82:4d:43:a0:18:fe:07:d8:bb:01: 01:9c:b7:18:36:cb:b1:6f:4a:07:ae:83:83:49:15:c2:b8:2e: 22:24:1f:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbgRLrcf7X5xRh9tJepzI6k8NF6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI1QTA3OEI5RDhBMzE3REE3QTJBRDQwMjA5MEM5QUU3 MkExRDBGNDAeFw0yNjA5MjMwNDI2NDJaFw0yNjA5MjQwNDMxNDJaMDMxMTAvBgNV BAMTKDYxQUU5NzVEMzk1OTA4NTdCNEFCMjBFNEMwNzY3MTY2Q0I1QjI0RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74Q7Z9+Jqf7yaXFhITmN+yW0N ZipcCPRaHtXA6GlFgOHSum90uZ2WoQSi9g/mXD5WmGOD6ZtrsZOcpaXA3Xu3GVA4 IaTsrjouvoMijcwcj2URSx0reGdcvXtQxWpdKSMdK6x1GsCFAGLmD39s3ESkaYYt 0K3iS8t1MZFBxxIkzSD7U4tm1k/HooUdC16Az6OALVooZ5pjAZbB02r2/tlE38Kh rBlmcbN6eYykgCDAlqdaflqaFtlJhCLHoDfM+6KyrBHf+9gT6GzpPUWvb/rihpE+ X6sntDuGoufrcnuQRe4FJzxc/SfZFrvBpWa3FCGw+PDoTEv6SN7Itpb9oW7dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYa6XXTlZCFe0qyDkwHZxZstbJO0wHwYDVR0j BBgwFoAUK1oHi52KMX2noq1AIJDJrnKh0PQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTNkODA2NDMtZDVlOS00MWFmLTk0ZGYtNmQ5NGZiZjQ2NDg3LzAvMkI1QTA3OEI5 RDhBMzE3REE3QTJBRDQwMjA5MEM5QUU3MkExRDBGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQjVBMDc4QjlEOEEzMTdEQTdBMkFENDAyMDkwQzlBRTcyQTFE MEY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTNkODA2NDMtZDVlOS00MWFmLTk0 ZGYtNmQ5NGZiZjQ2NDg3LzAvMkI1QTA3OEI5RDhBMzE3REE3QTJBRDQwMjA5MEM5 QUU3MkExRDBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGh88YZlMuKJ2ZIA7yUW7z1bVGeuJLBrJeV XxRxCUNLYol7c6BnK09I92KLkdINGmrYtmTlckKiLSG8xfe0p6NMClbCOEF238tt IlRbGSPXp2qu45RZIcguFElsHBo2Gr50OHrlWP+If2zXbVP5LWSUZVT2NBcmt1ol ZNctxnr86JryIyoOxogDPEqpx+0LO2rIhFH5rBGjNAhrmpxMR/7wsD9U0IX8oUqg 5KsU4M3bHXqRH0qnAdehGbCXiCXTbLGQZliw196UGCzza+UlrTVmVNiTUU6Rxs1A dtPSa56qgk1DoBj+B9i7AQGctxg2y7FvSgeug4NJFcK4LiIkH1w= -----END CERTIFICATE-----Generated at Wed Sep 23 12:48:53 2026 by rpki-client