$ rpki-client -vvvf rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft File: 2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft (raw, json) Hash identifier: THnv6bZ5uJ1oJ79h7ETAPorPYXJCLqlM3pCvGEjdrSI= Subject key identifier: 47:68:08:31:11:F1:0C:2A:24:02:0F:C3:C1:39:5C:A5:ED:EA:04:B1 Authority key identifier: 2F:F2:8E:C3:1F:A9:59:5D:4C:93:72:E0:37:8B:12:7B:FC:07:D5:43 Certificate issuer: /CN=2FF28EC31FA9595D4C9372E0378B127BFC07D543 Certificate serial: 1178C7662C6336271A5E2240FA56A6884BC338A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft Manifest number: BF Signing time: Mon 21 Sep 2026 14:44:47 +0000 Manifest this update: Mon 21 Sep 2026 14:39:47 +0000 Manifest next update: Tue 22 Sep 2026 16:39:47 +0000 Files and hashes: 1: 2FF28EC31FA9595D4C9372E0378B127BFC07D543.crl (hash: 2Bic7J01rSoDPeDK2TKkAtfIGD9SgXAaGhGhoa308F8=) 2: 3130332e37382e3135382e302f32342d3234203d3e20313530323438.roa (hash: WBevjDBrr8T3lRgtMCROWKCPpKkw27Bp5qV284oO8bo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.crl rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 16:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:78:c7:66:2c:63:36:27:1a:5e:22:40:fa:56:a6:88:4b:c3:38:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FF28EC31FA9595D4C9372E0378B127BFC07D543 Validity Not Before: Sep 21 14:39:47 2026 GMT Not After : Sep 22 16:39:47 2026 GMT Subject: CN=4768083111F10C2A24020FC3C1395CA5EDEA04B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ac:d1:4d:91:bb:7e:77:57:36:43:bc:b7:8d: 07:26:a0:86:db:b8:4c:d9:be:cd:b6:76:c4:8c:78: 3b:49:bb:a6:17:8d:83:ab:a7:05:29:42:e6:32:04: 31:e7:4c:04:63:ba:91:7b:b7:e3:ad:bf:7f:f3:7b: dd:e6:64:4e:67:0f:39:da:7d:82:db:f4:91:58:25: 2d:d5:07:55:f4:ff:cc:fb:97:68:59:04:a9:04:2e: 86:e1:18:b4:a4:81:a8:c0:98:4b:ea:1e:8e:ab:5a: 63:86:73:80:07:f8:89:82:e4:c0:ae:c1:49:37:1f: 1b:e6:0a:8b:d2:5e:c9:8c:ac:96:42:e3:96:1c:0c: cb:0a:64:e8:37:26:1a:72:32:6e:29:ca:73:a2:dd: 64:83:23:58:5a:2b:18:e1:4b:3f:69:54:5d:ce:44: 2c:93:3a:aa:a0:c6:b1:3b:3a:31:17:cd:7c:32:cd: 12:b9:b9:e9:ac:0b:a3:6d:00:84:7c:bb:34:35:b6: 1e:b3:61:0b:27:8e:67:02:10:00:7c:d6:9c:d8:3a: 7c:87:4f:bb:3c:48:35:38:f3:89:e6:6b:aa:06:d7: 58:95:38:f9:70:59:a3:54:ce:33:a2:20:d5:ba:34: 58:45:5c:80:00:41:a5:17:b7:9a:85:6b:da:87:91: 43:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:68:08:31:11:F1:0C:2A:24:02:0F:C3:C1:39:5C:A5:ED:EA:04:B1 X509v3 Authority Key Identifier: keyid:2F:F2:8E:C3:1F:A9:59:5D:4C:93:72:E0:37:8B:12:7B:FC:07:D5:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:4a:e8:18:44:cc:22:3d:92:41:d9:81:cd:b1:79:2c:e6:c9: 00:25:f8:7e:8d:dd:5c:4e:2f:3e:d2:f5:24:23:5f:f7:b0:cf: 60:95:c5:77:c9:c2:b2:d5:91:65:cd:85:6c:37:c7:3d:b7:53: 16:82:d6:ff:cf:8b:0d:19:3d:ed:fc:23:75:67:6d:ca:d3:8b: e3:74:36:fb:5d:e9:ef:37:88:0a:7f:e5:df:ff:65:8b:4f:42: b6:df:3d:ff:a1:81:98:51:38:b4:11:8a:04:d3:9b:ab:38:d4: 5a:f5:bd:ce:ab:4d:0e:45:0d:83:b1:ca:4e:02:72:89:c6:94: 2e:a8:09:72:a9:27:b5:2d:7b:5a:4b:b8:02:b0:dd:0b:d2:80: 78:51:84:cb:98:f2:0c:d0:0c:e0:59:98:c4:92:aa:d2:35:80: e4:db:b2:1e:c6:32:61:6d:59:e5:b4:2b:50:e6:f0:d8:b3:35: 60:69:1e:8b:66:ba:38:07:ab:38:b7:d6:02:d4:10:4f:79:c9: c2:e2:10:7b:2b:18:7d:97:28:18:92:5b:de:46:6a:b9:80:34: 7c:7c:c3:38:0f:e4:0a:5a:3f:78:97:26:68:f9:f7:aa:0b:c2: e6:32:30:9c:e7:f4:e6:6c:7a:64:92:73:a4:7f:18:1f:e0:dd: 6e:de:16:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEXjHZixjNicaXiJA+lamiEvDOKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZGMjhFQzMxRkE5NTk1RDRDOTM3MkUwMzc4QjEyN0JG QzA3RDU0MzAeFw0yNjA5MjExNDM5NDdaFw0yNjA5MjIxNjM5NDdaMDMxMTAvBgNV BAMTKDQ3NjgwODMxMTFGMTBDMkEyNDAyMEZDM0MxMzk1Q0E1RURFQTA0QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZrNFNkbt+d1c2Q7y3jQcmoIbb uEzZvs22dsSMeDtJu6YXjYOrpwUpQuYyBDHnTARjupF7t+Otv3/ze93mZE5nDzna fYLb9JFYJS3VB1X0/8z7l2hZBKkELobhGLSkgajAmEvqHo6rWmOGc4AH+ImC5MCu wUk3HxvmCovSXsmMrJZC45YcDMsKZOg3JhpyMm4pynOi3WSDI1haKxjhSz9pVF3O RCyTOqqgxrE7OjEXzXwyzRK5uemsC6NtAIR8uzQ1th6zYQsnjmcCEAB81pzYOnyH T7s8SDU484nma6oG11iVOPlwWaNUzjOiINW6NFhFXIAAQaUXt5qFa9qHkUP3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR2gIMRHxDCokAg/DwTlcpe3qBLEwHwYDVR0j BBgwFoAUL/KOwx+pWV1Mk3LgN4sSe/wH1UMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjZjMDYwZmItZTkzNi00YTIzLWJiZTItOTQ0NTdiZjcwOWJmLzAvMkZGMjhFQzMx RkE5NTk1RDRDOTM3MkUwMzc4QjEyN0JGQzA3RDU0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkYyOEVDMzFGQTk1OTVENEM5MzcyRTAzNzhCMTI3QkZDMDdE NTQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjZjMDYwZmItZTkzNi00YTIzLWJi ZTItOTQ0NTdiZjcwOWJmLzAvMkZGMjhFQzMxRkE5NTk1RDRDOTM3MkUwMzc4QjEy N0JGQzA3RDU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhK6BhEzCI9kkHZgc2xeSzmyQAl+H6N3VxO Lz7S9SQjX/ewz2CVxXfJwrLVkWXNhWw3xz23UxaC1v/Piw0ZPe38I3VnbcrTi+N0 Nvtd6e83iAp/5d//ZYtPQrbfPf+hgZhROLQRigTTm6s41Fr1vc6rTQ5FDYOxyk4C conGlC6oCXKpJ7Ute1pLuAKw3QvSgHhRhMuY8gzQDOBZmMSSqtI1gOTbsh7GMmFt WeW0K1Dm8NizNWBpHotmujgHqzi31gLUEE95ycLiEHsrGH2XKBiSW95GarmANHx8 wzgP5ApaP3iXJmj596oLwuYyMJzn9OZsemSSc6R/GB/g3W7eFo4= -----END CERTIFICATE-----Generated at Tue Sep 22 01:22:35 2026 by rpki-client