$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft File: 2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft (raw, json) Hash identifier: Dhgs3pWejoMUgW3BN2mpGIoLsrKRoFUQjJ5a0kN3qok= Subject key identifier: 7C:5A:95:B0:E9:57:B8:26:2D:FE:2A:80:93:AE:E5:E5:36:D9:3A:72 Authority key identifier: 2E:5B:4D:91:9A:E6:E0:98:45:4A:21:D8:3B:EE:48:9C:0A:1D:F6:87 Certificate issuer: /CN=2E5B4D919AE6E098454A21D83BEE489C0A1DF687 Certificate serial: 525DBC0119BAB116EFE5D0496AB3D4E5B016B7EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft Manifest number: BD Signing time: Mon 21 Sep 2026 19:35:42 +0000 Manifest this update: Mon 21 Sep 2026 19:30:42 +0000 Manifest next update: Tue 22 Sep 2026 22:59:42 +0000 Files and hashes: 1: 2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl (hash: nAVJ9wVswplBkIolSFYI3IACa35vxjCyr1lNvg/Z6PI=) 2: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: hXYZBw+zcNWgfpkr4qfi2P6UAXZrhjOtAH+ubipVz38=) 3: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: w0l4Z0QTqPW7n9jh4ktHZnj4TWLQC1w9BHsCnnP0SC0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:5d:bc:01:19:ba:b1:16:ef:e5:d0:49:6a:b3:d4:e5:b0:16:b7:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E5B4D919AE6E098454A21D83BEE489C0A1DF687 Validity Not Before: Sep 21 19:30:42 2026 GMT Not After : Sep 22 22:59:42 2026 GMT Subject: CN=7C5A95B0E957B8262DFE2A8093AEE5E536D93A72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:1e:c7:f7:f4:e2:e9:a6:5e:f1:fe:c6:0e: 9e:b5:02:21:f9:1e:a4:83:ea:c1:82:15:fe:d6:f3: 41:4b:d9:35:8d:f4:89:ba:6b:a9:e6:35:c5:fd:95: 39:45:c6:e0:70:46:ea:7a:ea:82:b2:ae:df:ac:d0: ff:c7:47:78:b7:41:d9:ea:85:99:bc:1f:05:c8:d9: 3d:d6:e6:b3:40:83:9c:67:16:1c:58:33:36:2e:82: 4e:7b:74:1a:45:f8:83:c2:ec:9b:2d:3a:ff:e9:65: 18:30:f0:cf:62:34:d8:43:b9:1a:78:e0:01:b2:91: 89:e3:34:d1:d2:ab:3d:3b:46:a0:0b:12:cf:e4:03: bf:24:d5:48:b7:83:75:a0:96:b2:5f:f2:69:80:15: 55:03:98:46:f6:28:09:f7:3c:5e:bd:fd:a8:84:ac: 8d:60:2a:b1:f2:c7:c3:65:2d:3f:8b:1c:a2:c9:15: b8:0d:94:18:e4:87:d4:54:a9:23:e9:bb:4c:d8:53: 02:cb:13:d5:5b:3d:72:6b:fe:47:b8:35:73:80:62: 85:f3:c7:3c:57:80:e0:d9:af:6b:4d:69:56:d0:a8: 19:7f:73:51:dc:5c:3e:8f:a6:26:0c:52:c7:7a:a2: 69:f7:e4:cd:5f:62:8a:6a:9c:04:9b:96:cd:a1:b7: e7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5A:95:B0:E9:57:B8:26:2D:FE:2A:80:93:AE:E5:E5:36:D9:3A:72 X509v3 Authority Key Identifier: keyid:2E:5B:4D:91:9A:E6:E0:98:45:4A:21:D8:3B:EE:48:9C:0A:1D:F6:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:38:1e:2b:32:bf:f5:00:f3:a4:af:2e:1a:e4:0d:f8:14:5e: 73:6c:21:f5:ff:d1:82:65:4d:42:2a:d3:45:6e:7d:32:21:6c: 15:92:18:8b:c4:01:53:76:a0:ad:0c:72:ba:84:23:8d:da:65: 39:4b:79:cf:ff:45:80:54:8e:32:79:6d:35:68:ef:c3:e2:27: 2f:24:fc:88:38:68:d2:95:43:0c:ad:6e:e0:24:08:26:2e:22: 4c:30:2c:21:34:e9:9c:cb:e1:3c:82:0b:d7:0b:a4:86:20:cb: 95:a9:db:df:f3:be:f1:54:a7:44:ed:8c:75:38:49:e3:fc:91: dd:b7:98:dc:00:d8:26:fd:ce:4e:db:4e:c1:86:d8:a3:ab:12: 63:6d:4d:ed:5f:f4:49:47:9d:3f:5b:98:56:88:9a:11:4f:b5: bf:01:eb:c5:7f:45:ac:16:37:1f:b5:3e:02:e4:ef:20:73:60: 50:66:dd:f1:34:32:6c:6e:77:31:23:70:6a:33:57:af:cb:8d: 5d:a1:82:09:ac:c0:40:fd:22:0f:41:7a:b1:d5:33:04:65:81: cf:ee:52:e5:ff:bf:32:58:65:e2:d3:9e:d4:85:b3:2b:68:8b: cd:9a:52:6b:d0:87:bc:9f:7f:05:19:4e:4f:8e:75:6f:62:06: 38:62:e2:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUl28ARm6sRbv5dBJarPU5bAWt+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU1QjREOTE5QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4OUMw QTFERjY4NzAeFw0yNjA5MjExOTMwNDJaFw0yNjA5MjIyMjU5NDJaMDMxMTAvBgNV BAMTKDdDNUE5NUIwRTk1N0I4MjYyREZFMkE4MDkzQUVFNUU1MzZEOTNBNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6iR7H9/Ti6aZe8f7GDp61AiH5 HqSD6sGCFf7W80FL2TWN9Im6a6nmNcX9lTlFxuBwRup66oKyrt+s0P/HR3i3Qdnq hZm8HwXI2T3W5rNAg5xnFhxYMzYugk57dBpF+IPC7JstOv/pZRgw8M9iNNhDuRp4 4AGykYnjNNHSqz07RqALEs/kA78k1Ui3g3WglrJf8mmAFVUDmEb2KAn3PF69/aiE rI1gKrHyx8NlLT+LHKLJFbgNlBjkh9RUqSPpu0zYUwLLE9VbPXJr/ke4NXOAYoXz xzxXgODZr2tNaVbQqBl/c1HcXD6PpiYMUsd6omn35M1fYopqnASbls2ht+dhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfFqVsOlXuCYt/iqAk67l5TbZOnIwHwYDVR0j BBgwFoAULltNkZrm4JhFSiHYO+5InAod9ocwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkM2RkNzktODYzNS00ODU3LThhM2MtOTg1OTU0NTE2ZjllLzAvMkU1QjREOTE5 QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4OUMwQTFERjY4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTVCNEQ5MTlBRTZFMDk4NDU0QTIxRDgzQkVFNDg5QzBBMURG Njg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkM2RkNzktODYzNS00ODU3LThh M2MtOTg1OTU0NTE2ZjllLzAvMkU1QjREOTE5QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4 OUMwQTFERjY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMU4Hisyv/UA86SvLhrkDfgUXnNsIfX/0YJl TUIq00VufTIhbBWSGIvEAVN2oK0McrqEI43aZTlLec//RYBUjjJ5bTVo78PiJy8k /Ig4aNKVQwytbuAkCCYuIkwwLCE06ZzL4TyCC9cLpIYgy5Wp29/zvvFUp0TtjHU4 SeP8kd23mNwA2Cb9zk7bTsGG2KOrEmNtTe1f9ElHnT9bmFaImhFPtb8B68V/RawW Nx+1PgLk7yBzYFBm3fE0MmxudzEjcGozV6/LjV2hggmswED9Ig9BerHVMwRlgc/u UuX/vzJYZeLTntSFsytoi82aUmvQh7yffwUZTk+OdW9iBjhi4vo= -----END CERTIFICATE-----Generated at Tue Sep 22 13:35:29 2026 by rpki-client