$ rpki-client -vvvf rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft File: 2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft (raw, json) Hash identifier: ZO716rQJ8M4DartzWBljaxUJl3QHOnlMhUxFJGLvmUw= Subject key identifier: 40:53:3F:7F:47:C4:B7:10:58:E4:A2:7E:18:4F:3F:3E:E8:73:8D:00 Authority key identifier: 2C:7A:30:2B:26:8D:C5:40:59:CE:B8:8F:7A:C2:19:8D:98:52:CB:D3 Certificate issuer: /CN=2C7A302B268DC54059CEB88F7AC2198D9852CBD3 Certificate serial: 4460DDA8AA23F3EBA8EF152585B5C410018C61AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 18:43:48 +0000 Manifest this update: Thu 24 Sep 2026 18:38:48 +0000 Manifest next update: Fri 25 Sep 2026 19:42:48 +0000 Files and hashes: 1: 2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl (hash: AKtf+xxJhLVYpt6W3GJv3kQcduPgjdWO1W9W3IYazbk=) 2: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: bJqqtyMrUB6ove5aksmXoGy9PsBIFYzerBlsfdZy7oQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:60:dd:a8:aa:23:f3:eb:a8:ef:15:25:85:b5:c4:10:01:8c:61:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C7A302B268DC54059CEB88F7AC2198D9852CBD3 Validity Not Before: Sep 24 18:38:48 2026 GMT Not After : Sep 25 19:42:48 2026 GMT Subject: CN=40533F7F47C4B71058E4A27E184F3F3EE8738D00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:26:9a:69:de:e5:d0:d7:16:0f:fd:19:0c:eb: cc:45:dd:74:f1:d4:9a:00:7a:e0:7e:76:95:2d:c4: 5b:3c:84:5e:26:ea:d8:a0:c4:e0:d0:77:90:2d:dd: e7:d5:dc:87:f6:f8:d9:ac:76:ff:9b:c6:26:71:60: 80:ad:fb:94:03:d3:02:61:1f:b5:bd:1b:8a:f0:82: 68:a8:f3:70:6c:b8:b2:73:22:b0:16:5c:fa:d7:04: 9b:ea:d3:d6:1a:50:e5:cb:89:84:85:ac:e2:00:a5: 97:ca:fb:f3:9e:cc:59:ed:c5:2e:c2:87:05:6a:32: a5:52:62:3f:5e:c5:11:0f:17:a5:2a:0c:9f:d5:d9: b4:6b:fe:e9:8d:66:ee:3d:12:c3:55:4e:c8:25:43: 93:d6:7b:9d:09:11:3d:50:21:35:d4:a6:df:95:54: f6:56:16:f8:17:d9:6e:08:d3:0c:54:47:78:c8:6a: d5:81:1a:27:bb:9d:de:21:19:d4:23:c2:7c:5d:b0: bc:c9:db:cb:2f:1e:e6:1c:f3:c9:78:6c:ee:a3:4f: a4:60:4f:78:c7:0a:19:45:5c:eb:c8:f5:c9:83:bd: 1a:41:0f:a8:5f:c1:40:97:6a:d1:ec:62:54:e4:db: bd:8c:9f:8d:df:ab:25:09:46:a4:eb:1c:e3:64:8a: 3e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:53:3F:7F:47:C4:B7:10:58:E4:A2:7E:18:4F:3F:3E:E8:73:8D:00 X509v3 Authority Key Identifier: keyid:2C:7A:30:2B:26:8D:C5:40:59:CE:B8:8F:7A:C2:19:8D:98:52:CB:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e9:32:c6:2c:39:9d:80:54:0d:43:66:5e:1f:72:aa:3d:67: ec:f5:d1:2d:fd:19:0c:17:70:37:a1:62:c3:f2:0b:d2:5a:44: ac:c3:65:78:6d:ff:83:ba:67:92:26:eb:a6:a1:6e:7c:96:84: 4a:de:00:95:32:0e:cf:51:65:f8:a8:93:1d:8e:8c:e4:32:33: 80:1f:b4:ca:09:d4:fa:9d:c7:d8:f6:c7:dc:1c:7d:5f:3a:91: df:f6:a6:98:b0:80:3e:5b:35:cc:0c:2d:85:37:f2:4e:d4:46: 75:e9:ce:5c:cb:ae:58:a4:28:08:7b:19:32:3e:80:ec:70:3c: 33:78:b6:df:67:ac:d3:e4:1a:fa:6f:37:47:64:73:0e:fe:eb: 89:a7:7d:aa:c1:ba:55:f1:3f:28:6c:f4:b4:98:cb:97:c5:f7: c6:58:9c:e3:f9:1a:47:e1:58:32:b2:6e:97:5c:66:e6:90:04: fb:97:54:32:f9:3b:5e:ef:64:9f:43:88:84:a8:d6:84:54:fb: f5:16:5a:19:b9:e0:a8:7c:f5:33:9f:66:17:f8:bd:06:9c:37: b0:0f:bf:1f:ff:37:9f:0e:01:55:dc:0a:86:8a:e6:7d:c3:27: 47:8c:d2:87:5e:fe:d5:27:ca:8b:68:59:1f:c3:f8:14:d9:f2: 72:a3:fa:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURGDdqKoj8+uo7xUlhbXEEAGMYawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM3QTMwMkIyNjhEQzU0MDU5Q0VCODhGN0FDMjE5OEQ5 ODUyQ0JEMzAeFw0yNjA5MjQxODM4NDhaFw0yNjA5MjUxOTQyNDhaMDMxMTAvBgNV BAMTKDQwNTMzRjdGNDdDNEI3MTA1OEU0QTI3RTE4NEYzRjNFRTg3MzhEMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxJppp3uXQ1xYP/RkM68xF3XTx 1JoAeuB+dpUtxFs8hF4m6tigxODQd5At3efV3If2+Nmsdv+bxiZxYICt+5QD0wJh H7W9G4rwgmio83BsuLJzIrAWXPrXBJvq09YaUOXLiYSFrOIApZfK+/OezFntxS7C hwVqMqVSYj9exREPF6UqDJ/V2bRr/umNZu49EsNVTsglQ5PWe50JET1QITXUpt+V VPZWFvgX2W4I0wxUR3jIatWBGie7nd4hGdQjwnxdsLzJ28svHuYc88l4bO6jT6Rg T3jHChlFXOvI9cmDvRpBD6hfwUCXatHsYlTk272Mn43fqyUJRqTrHONkij7vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQFM/f0fEtxBY5KJ+GE8/PuhzjQAwHwYDVR0j BBgwFoAULHowKyaNxUBZzriPesIZjZhSy9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA1YWY4MjItYmVhOS00OGYzLWFhMTItYjI3MzcxNjJmYzQyLzAvMkM3QTMwMkIy NjhEQzU0MDU5Q0VCODhGN0FDMjE5OEQ5ODUyQ0JEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQzdBMzAyQjI2OERDNTQwNTlDRUI4OEY3QUMyMTk4RDk4NTJD QkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA1YWY4MjItYmVhOS00OGYzLWFh MTItYjI3MzcxNjJmYzQyLzAvMkM3QTMwMkIyNjhEQzU0MDU5Q0VCODhGN0FDMjE5 OEQ5ODUyQ0JEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbpMsYsOZ2AVA1DZl4fcqo9Z+z10S39GQwX cDehYsPyC9JaRKzDZXht/4O6Z5Im66ahbnyWhEreAJUyDs9RZfiokx2OjOQyM4Af tMoJ1Pqdx9j2x9wcfV86kd/2ppiwgD5bNcwMLYU38k7URnXpzlzLrlikKAh7GTI+ gOxwPDN4tt9nrNPkGvpvN0dkcw7+64mnfarBulXxPyhs9LSYy5fF98ZYnOP5Gkfh WDKybpdcZuaQBPuXVDL5O17vZJ9DiISo1oRU+/UWWhm54Kh89TOfZhf4vQacN7AP vx//N58OAVXcCoaK5n3DJ0eM0ode/tUnyotoWR/D+BTZ8nKj+i8= -----END CERTIFICATE-----Generated at Fri Sep 25 01:39:36 2026 by rpki-client