$ rpki-client -vvvf rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft File: 2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft (raw, json) Hash identifier: xgke713SRCdrmhPw/xiFBtuq7D4IzTOJpexHXn4vJL8= Subject key identifier: 59:DF:C2:BB:AF:9A:E7:9E:0E:6D:2A:C4:34:F3:A1:65:73:36:EE:27 Authority key identifier: 2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14 Certificate issuer: /CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714 Certificate serial: 5C56633317B455785C57AA31D88265017E0306F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft Manifest number: BE Signing time: Sun 20 Sep 2026 14:45:16 +0000 Manifest this update: Sun 20 Sep 2026 14:40:16 +0000 Manifest next update: Mon 21 Sep 2026 17:36:16 +0000 Files and hashes: 1: 3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (hash: ib7HPEQ/1sTUx6nXpMyLf2LdpmFve2tZtQrzXQVTi5I=) 2: 2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl (hash: eDscJ2l57QDe6gXxjhjvOb0rufTAzOLaYIfWNPIKodg=) 3: 3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (hash: HyudSDnKB8bCiy0S2RrKH+D8dZ2RY7de+E6PViymOWI=) 4: 3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa (hash: hq7t6IGdrToWC5Y/u0/ln3majWig7C7xPRHwOMHho0s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:56:63:33:17:b4:55:78:5c:57:aa:31:d8:82:65:01:7e:03:06:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714 Validity Not Before: Sep 20 14:40:16 2026 GMT Not After : Sep 21 17:36:16 2026 GMT Subject: CN=59DFC2BBAF9AE79E0E6D2AC434F3A1657336EE27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4b:88:31:a8:17:57:b4:64:58:e9:36:7d:a4: 9c:2b:46:f8:fa:01:92:1d:7f:ec:be:a2:7b:05:e0: 1b:2b:f8:6a:2e:6e:4f:40:01:7a:60:ed:20:3a:29: a1:09:36:77:a7:7f:98:f6:64:a4:55:f7:e4:48:d3: d3:a1:94:ab:b1:4d:18:d2:5f:db:c1:b5:eb:8c:0b: 4e:2b:43:e8:bd:22:7d:af:58:6c:9f:60:36:8e:77: fd:c9:1b:3f:d0:82:9b:31:cb:b4:50:a6:61:59:65: 9b:66:02:ab:b6:88:ff:70:81:37:33:57:cc:88:29: 3a:ec:7a:dd:1d:b5:bf:1f:06:b1:e6:25:f5:d7:08: af:bd:16:d1:52:4a:48:4a:c9:a3:57:da:dc:f9:59: 1c:76:19:34:5c:ca:3d:dc:43:0e:ef:0b:0c:f6:10: c8:99:56:06:63:74:f3:f3:4e:da:74:b9:76:97:4e: 3b:ae:e1:22:d9:bf:85:7e:48:94:74:91:34:32:2e: 2a:31:dc:e1:e5:68:fc:a4:f2:10:4e:09:7d:8f:51: b3:d5:ef:91:48:a2:a8:b4:0b:97:70:ba:41:e0:23: d8:45:dc:02:99:44:32:d3:ab:72:cf:d1:a8:9f:c8: c1:22:06:9c:f6:1b:4d:63:d5:60:29:15:fb:b5:e8: bb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DF:C2:BB:AF:9A:E7:9E:0E:6D:2A:C4:34:F3:A1:65:73:36:EE:27 X509v3 Authority Key Identifier: keyid:2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:80:ae:73:df:43:d0:63:6e:2d:c3:25:bc:10:64:68:cf:e1: ca:5a:07:90:fc:8d:3b:40:09:73:df:27:a4:5d:64:c1:68:7f: 95:78:ed:cc:03:41:85:9c:51:3a:63:9e:19:5a:f2:25:21:8e: 8d:d0:71:13:03:b9:28:e6:1d:6c:0a:8d:3d:a4:64:0c:59:e9: 8c:57:53:d6:ba:a2:9a:2e:3c:2c:6c:ac:a6:e1:99:94:fb:ac: c8:7a:f7:0c:34:b4:59:0b:d6:db:4e:dc:20:e4:c2:86:14:d5: a7:73:ab:d2:4f:b2:31:54:55:39:02:55:46:8e:e3:04:74:83: c2:72:5d:46:51:0b:4d:1a:83:91:67:ae:5c:92:3c:89:46:9c: 37:bc:40:b0:66:32:b7:26:68:d2:2e:64:93:d2:ee:88:3a:cc: 0f:91:7c:50:e9:a6:ac:da:75:67:12:d6:9f:71:4e:a7:ca:03: 69:30:bc:c9:cc:b4:eb:8b:01:8b:51:79:ce:41:59:3e:7e:c7: 4b:cd:35:30:15:8a:ca:60:85:e5:a7:53:38:49:7c:3b:41:e8: 94:29:54:17:b0:6c:63:7f:d1:cd:d7:94:e3:f4:e0:74:cb:84: a8:4b:e1:17:2a:d0:ac:30:0c:d9:ee:c8:8b:0d:de:40:1e:81: 12:22:cc:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXFZjMxe0VXhcV6ox2IJlAX4DBvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRBRkMyNTAzMDUwOUFENzEyNkJCRDkzQUJDQ0I5NUU3 QTE4NjcxNDAeFw0yNjA5MjAxNDQwMTZaFw0yNjA5MjExNzM2MTZaMDMxMTAvBgNV BAMTKDU5REZDMkJCQUY5QUU3OUUwRTZEMkFDNDM0RjNBMTY1NzMzNkVFMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSS4gxqBdXtGRY6TZ9pJwrRvj6 AZIdf+y+onsF4Bsr+Goubk9AAXpg7SA6KaEJNnenf5j2ZKRV9+RI09OhlKuxTRjS X9vBteuMC04rQ+i9In2vWGyfYDaOd/3JGz/Qgpsxy7RQpmFZZZtmAqu2iP9wgTcz V8yIKTrset0dtb8fBrHmJfXXCK+9FtFSSkhKyaNX2tz5WRx2GTRcyj3cQw7vCwz2 EMiZVgZjdPPzTtp0uXaXTjuu4SLZv4V+SJR0kTQyLiox3OHlaPyk8hBOCX2PUbPV 75FIoqi0C5dwukHgI9hF3AKZRDLTq3LP0aifyMEiBpz2G01j1WApFfu16Lt1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWd/Cu6+a554ObSrENPOhZXM27icwHwYDVR0j BBgwFoAULa/CUDBQmtcSa72Tq8y5XnoYZxQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0YmI0YzgtNmZjZi00ZmZmLWJkY2MtZmUxZmNjZWUxMDQ1LzAvMkRBRkMyNTAz MDUwOUFENzEyNkJCRDkzQUJDQ0I5NUU3QTE4NjcxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREFGQzI1MDMwNTA5QUQ3MTI2QkJEOTNBQkNDQjk1RTdBMTg2 NzE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0YmI0YzgtNmZjZi00ZmZmLWJk Y2MtZmUxZmNjZWUxMDQ1LzAvMkRBRkMyNTAzMDUwOUFENzEyNkJCRDkzQUJDQ0I5 NUU3QTE4NjcxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWArnPfQ9Bjbi3DJbwQZGjP4cpaB5D8jTtA CXPfJ6RdZMFof5V47cwDQYWcUTpjnhla8iUhjo3QcRMDuSjmHWwKjT2kZAxZ6YxX U9a6opouPCxsrKbhmZT7rMh69ww0tFkL1ttO3CDkwoYU1adzq9JPsjFUVTkCVUaO 4wR0g8JyXUZRC00ag5FnrlySPIlGnDe8QLBmMrcmaNIuZJPS7og6zA+RfFDppqza dWcS1p9xTqfKA2kwvMnMtOuLAYtRec5BWT5+x0vNNTAVispgheWnUzhJfDtB6JQp VBewbGN/0c3XlOP04HTLhKhL4Rcq0KwwDNnuyIsN3kAegRIizEI= -----END CERTIFICATE-----Generated at Mon Sep 21 11:06:35 2026 by rpki-client