$ rpki-client -vvvf rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft File: 2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft (raw, json) Hash identifier: dtBdvEQhsxiUz7LSt6KGUeEjpdapIHec47jUxZIHMA4= Subject key identifier: 87:AD:91:72:91:49:2D:67:5C:32:27:5B:05:B3:5B:A9:DD:FB:10:07 Authority key identifier: 2D:88:AC:79:1B:0C:C1:B7:D9:21:EC:E6:60:CD:E0:CF:2E:E8:ED:72 Certificate issuer: /CN=2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72 Certificate serial: 7BB052511E05F400EBD7CA2322DF033A5FADAAB2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft Manifest number: BE Signing time: Mon 21 Sep 2026 12:26:39 +0000 Manifest this update: Mon 21 Sep 2026 12:21:39 +0000 Manifest next update: Tue 22 Sep 2026 14:21:39 +0000 Files and hashes: 1: 3130332e3136322e3234302e302f32332d3234203d3e20313431363731.roa (hash: 4S3CjwY52E8pJFph27PsS9L2iHBVLGusILVU9iKtoiI=) 2: 2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl (hash: 5Q8eYNW6OLXHfKC5yA1bqDmYZYaXXFmrPbUa4859QIw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 14:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b0:52:51:1e:05:f4:00:eb:d7:ca:23:22:df:03:3a:5f:ad:aa:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72 Validity Not Before: Sep 21 12:21:39 2026 GMT Not After : Sep 22 14:21:39 2026 GMT Subject: CN=87AD917291492D675C32275B05B35BA9DDFB1007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:69:0a:6d:ac:84:1b:98:8b:2a:2d:70:06:c4: 6f:20:39:4d:9c:93:23:87:c1:23:fb:61:d6:c5:5e: c0:33:e5:1c:85:21:2e:f2:28:ea:c6:75:ce:d9:96: f1:10:5f:38:9a:1f:ca:1c:a5:3e:a5:20:8a:d5:46: c6:2a:43:b7:23:e2:35:60:23:74:2b:06:98:74:57: 5f:50:f0:f1:c4:6a:9e:8f:5a:53:21:f9:ba:7d:7b: 1e:61:4b:0e:29:68:32:b3:54:2f:3b:c8:40:e5:04: 81:0a:60:06:e4:c6:1e:19:9a:23:cd:e5:ba:3e:83: e8:7a:61:3d:63:94:bd:a4:df:64:91:f5:a0:78:b9: ea:7e:df:72:4b:b4:ac:9e:51:75:56:d7:7c:e3:b7: 27:6e:60:45:12:9d:85:32:13:1c:11:e2:ba:89:b8: 33:4e:c1:6f:e1:3c:39:0e:7a:5a:f8:f9:56:3d:e5: 16:04:21:68:46:cc:63:10:24:60:ba:0b:61:84:5d: ce:da:ab:90:88:bc:b3:eb:ec:36:00:42:17:3b:08: 93:b3:8e:07:c8:85:a8:26:08:a0:45:4a:1e:d5:10: 0d:32:b4:02:7e:ff:0e:6d:6f:d9:3b:83:58:fb:19: 33:29:b9:2b:16:f8:d3:89:bd:d5:65:c0:ba:c8:ac: 54:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AD:91:72:91:49:2D:67:5C:32:27:5B:05:B3:5B:A9:DD:FB:10:07 X509v3 Authority Key Identifier: keyid:2D:88:AC:79:1B:0C:C1:B7:D9:21:EC:E6:60:CD:E0:CF:2E:E8:ED:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:de:bd:08:e6:21:12:45:81:17:7c:79:5e:05:ef:4c:98:43: 2f:b4:d0:e1:5b:0f:84:18:4c:b6:6d:ec:a9:38:91:3b:a7:0c: f2:9b:aa:1c:50:91:54:d4:28:95:74:a3:3a:9c:58:ff:da:32: 95:41:95:83:0f:20:5e:84:53:a6:fb:6e:2f:22:dd:f9:8b:69: a3:0f:53:45:ad:bd:af:b9:1f:0d:9d:e2:98:5c:4e:37:32:d3: 85:78:f8:12:c2:30:26:e2:44:7e:27:b8:59:78:5f:b4:a2:78: ab:17:0e:44:06:55:c3:5d:b1:98:a3:de:78:ae:b3:74:bf:dd: 67:26:89:84:6f:6c:78:4f:0a:58:b8:1e:b9:3e:c4:66:0e:bd: f8:50:e1:3e:44:52:6f:43:78:e8:e0:38:df:53:86:30:c4:fb: 5f:6a:a4:b3:90:7b:88:c9:70:3f:72:de:cc:66:a4:be:af:9f: c1:94:b2:9f:df:5a:d9:23:02:f1:a8:1b:af:ee:17:41:55:a5: fb:e3:94:52:75:28:90:e6:66:57:1c:b0:77:47:84:33:75:7a: e0:ef:a2:d8:1c:35:b7:87:7e:09:93:07:06:87:6e:e7:48:d9: 01:2e:75:32:00:51:4c:65:c7:0b:81:c7:2c:71:ed:b2:3f:bc: 46:7b:a1:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe7BSUR4F9ADr18ojIt8DOl+tqrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ4OEFDNzkxQjBDQzFCN0Q5MjFFQ0U2NjBDREUwQ0Yy RUU4RUQ3MjAeFw0yNjA5MjExMjIxMzlaFw0yNjA5MjIxNDIxMzlaMDMxMTAvBgNV BAMTKDg3QUQ5MTcyOTE0OTJENjc1QzMyMjc1QjA1QjM1QkE5RERGQjEwMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMaQptrIQbmIsqLXAGxG8gOU2c kyOHwSP7YdbFXsAz5RyFIS7yKOrGdc7ZlvEQXziaH8ocpT6lIIrVRsYqQ7cj4jVg I3QrBph0V19Q8PHEap6PWlMh+bp9ex5hSw4paDKzVC87yEDlBIEKYAbkxh4ZmiPN 5bo+g+h6YT1jlL2k32SR9aB4uep+33JLtKyeUXVW13zjtyduYEUSnYUyExwR4rqJ uDNOwW/hPDkOelr4+VY95RYEIWhGzGMQJGC6C2GEXc7aq5CIvLPr7DYAQhc7CJOz jgfIhagmCKBFSh7VEA0ytAJ+/w5tb9k7g1j7GTMpuSsW+NOJvdVlwLrIrFTXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh62RcpFJLWdcMidbBbNbqd37EAcwHwYDVR0j BBgwFoAULYiseRsMwbfZIezmYM3gzy7o7XIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjMwMjRkMjQtOWZhYS00YWIwLThmYTQtMGNlNjA4YzZkMGEzLzAvMkQ4OEFDNzkx QjBDQzFCN0Q5MjFFQ0U2NjBDREUwQ0YyRUU4RUQ3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDg4QUM3OTFCMENDMUI3RDkyMUVDRTY2MENERTBDRjJFRThF RDcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjMwMjRkMjQtOWZhYS00YWIwLThm YTQtMGNlNjA4YzZkMGEzLzAvMkQ4OEFDNzkxQjBDQzFCN0Q5MjFFQ0U2NjBDREUw Q0YyRUU4RUQ3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzevQjmIRJFgRd8eV4F70yYQy+00OFbD4QY TLZt7Kk4kTunDPKbqhxQkVTUKJV0ozqcWP/aMpVBlYMPIF6EU6b7bi8i3fmLaaMP U0Wtva+5Hw2d4phcTjcy04V4+BLCMCbiRH4nuFl4X7SieKsXDkQGVcNdsZij3niu s3S/3WcmiYRvbHhPCli4Hrk+xGYOvfhQ4T5EUm9DeOjgON9ThjDE+19qpLOQe4jJ cD9y3sxmpL6vn8GUsp/fWtkjAvGoG6/uF0FVpfvjlFJ1KJDmZlccsHdHhDN1euDv otgcNbeHfgmTBwaHbudI2QEudTIAUUxlxwuBxyxx7bI/vEZ7oWo= -----END CERTIFICATE-----Generated at Tue Sep 22 05:48:19 2026 by rpki-client