$ rpki-client -vvvf rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft File: 2C54A4433C48711637614DBB101ACAC627FB4444.mft (raw, json) Hash identifier: mdJlGihlFN82kAMRTid0lL3gsqXL1hTBp4NGa3aH8eM= Subject key identifier: F4:1C:CE:43:51:74:75:CA:9B:4F:07:C3:16:78:F7:25:32:5D:DD:4D Authority key identifier: 2C:54:A4:43:3C:48:71:16:37:61:4D:BB:10:1A:CA:C6:27:FB:44:44 Certificate issuer: /CN=2C54A4433C48711637614DBB101ACAC627FB4444 Certificate serial: 5198A2EA963F0F4B3C2FC312BA3E8FE2FC86F6B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft Manifest number: BE Signing time: Mon 21 Sep 2026 06:14:20 +0000 Manifest this update: Mon 21 Sep 2026 06:09:20 +0000 Manifest next update: Tue 22 Sep 2026 07:26:20 +0000 Files and hashes: 1: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: Z5Se0ZyJ7MpGnb/9is2oDoz8gpk4WBt/gi9IC5o2uZ8=) 2: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: tiLkhdsZaOrcZG1DisK5BBKtAsDDLSd1a7ljRi2LuI0=) 3: 2C54A4433C48711637614DBB101ACAC627FB4444.crl (hash: yd1YCTXdJJwe5Fg7X3UfzGAqQS9lmJ0uPPRmqCoHW98=) 4: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: WB2X6Qgdpit+yQSWxUcjxbLeviD7P5xB5Bfdmss/apw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.crl rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:98:a2:ea:96:3f:0f:4b:3c:2f:c3:12:ba:3e:8f:e2:fc:86:f6:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C54A4433C48711637614DBB101ACAC627FB4444 Validity Not Before: Sep 21 06:09:20 2026 GMT Not After : Sep 22 07:26:20 2026 GMT Subject: CN=F41CCE43517475CA9B4F07C31678F725325DDD4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:10:f0:a4:8b:44:db:27:ab:cc:66:cd:69: 23:c8:89:3c:66:66:06:ff:6a:e3:e3:a8:41:9f:fc: cb:8b:c6:c5:70:d2:58:08:98:3d:e7:85:26:2c:6e: 06:57:a1:02:ee:29:a1:e8:cc:a6:9f:43:c2:fa:8c: a2:df:d0:bd:9c:4b:28:d0:2a:40:0f:e6:73:ef:4f: f2:f8:af:c5:f9:3c:88:06:88:bf:d4:2c:32:10:47: f8:33:bc:ff:09:4a:e8:3a:f5:5e:9c:05:8c:d0:d4: 39:74:aa:53:f3:42:8b:e9:5e:86:0d:b6:3a:3a:e5: 7d:47:ba:2a:a5:fb:93:07:92:a3:7e:df:15:5a:ba: 12:9c:62:ec:99:34:f9:e3:19:51:a4:7d:3f:98:46: 8b:92:1f:6f:39:b2:a5:b9:d1:99:c9:60:d2:a8:06: a4:37:d3:9e:85:56:8b:30:67:47:01:97:0f:f7:a2: 8a:a9:e3:bb:58:b2:07:33:08:99:33:46:3f:76:bd: 07:41:53:41:67:96:fc:a4:ab:41:52:81:5e:68:97: 09:ad:08:b7:7e:40:71:59:fb:7b:be:2c:70:b0:b6: 05:71:44:29:85:af:38:8c:ff:73:fe:c5:85:32:6d: 65:dc:cf:a2:d8:cd:06:f7:c2:27:2c:31:a9:91:ef: 82:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1C:CE:43:51:74:75:CA:9B:4F:07:C3:16:78:F7:25:32:5D:DD:4D X509v3 Authority Key Identifier: keyid:2C:54:A4:43:3C:48:71:16:37:61:4D:BB:10:1A:CA:C6:27:FB:44:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ea:65:84:d5:36:54:45:9e:14:70:14:30:66:70:26:11:b6: a7:50:dc:12:0e:ac:4c:4a:58:ff:18:44:00:f7:61:56:4c:39: 45:a6:97:b6:fa:2a:58:43:e2:96:27:fe:5b:a4:c5:d5:9d:32: ff:5c:09:08:60:e9:e6:cc:e9:04:a1:be:b2:56:cf:10:7b:77: 93:55:fa:bc:db:67:4a:33:62:9f:01:fc:64:b3:61:dd:99:cd: 46:38:67:c9:70:b4:ac:01:74:bd:6c:f9:36:f7:1f:06:e3:4c: c6:36:eb:02:86:bc:af:50:20:b2:1b:ee:fa:ed:a4:ec:38:ff: b6:be:04:ed:a0:cc:03:d5:c3:90:ac:b0:f5:dd:a6:17:24:9f: b5:26:a5:42:d9:e4:5a:25:39:2b:2b:78:90:24:4a:6e:03:3d: 44:a7:bf:47:a2:85:22:ac:31:0f:cc:38:4d:3e:b9:06:c6:9a: 9b:56:f6:e9:34:80:3f:e3:4f:8e:e6:4e:83:f6:d0:c5:91:e0: e5:48:fc:7b:a0:54:84:fa:13:3c:a4:9d:93:b0:d1:f7:f5:1a: 36:e5:09:af:70:5d:3f:8c:f2:cd:82:26:6b:3b:36:68:95:06: 59:72:1f:b8:06:fb:5e:23:72:2b:02:49:45:e7:7a:ee:95:83: 29:94:5f:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUZii6pY/D0s8L8MSuj6P4vyG9rcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM1NEE0NDMzQzQ4NzExNjM3NjE0REJCMTAxQUNBQzYy N0ZCNDQ0NDAeFw0yNjA5MjEwNjA5MjBaFw0yNjA5MjIwNzI2MjBaMDMxMTAvBgNV BAMTKEY0MUNDRTQzNTE3NDc1Q0E5QjRGMDdDMzE2NzhGNzI1MzI1RERENEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+gxDwpItE2yerzGbNaSPIiTxm Zgb/auPjqEGf/MuLxsVw0lgImD3nhSYsbgZXoQLuKaHozKafQ8L6jKLf0L2cSyjQ KkAP5nPvT/L4r8X5PIgGiL/ULDIQR/gzvP8JSug69V6cBYzQ1Dl0qlPzQovpXoYN tjo65X1Huiql+5MHkqN+3xVauhKcYuyZNPnjGVGkfT+YRouSH285sqW50ZnJYNKo BqQ3056FVoswZ0cBlw/3ooqp47tYsgczCJkzRj92vQdBU0Fnlvykq0FSgV5olwmt CLd+QHFZ+3u+LHCwtgVxRCmFrziM/3P+xYUybWXcz6LYzQb3wicsMamR74LBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9BzOQ1F0dcqbTwfDFnj3JTJd3U0wHwYDVR0j BBgwFoAULFSkQzxIcRY3YU27EBrKxif7REQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjhjNzdlZWUtOWJjYy00MDFlLThmNGQtNWYyMzY3NTYyNzU3LzAvMkM1NEE0NDMz QzQ4NzExNjM3NjE0REJCMTAxQUNBQzYyN0ZCNDQ0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQzU0QTQ0MzNDNDg3MTE2Mzc2MTREQkIxMDFBQ0FDNjI3RkI0 NDQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjhjNzdlZWUtOWJjYy00MDFlLThm NGQtNWYyMzY3NTYyNzU3LzAvMkM1NEE0NDMzQzQ4NzExNjM3NjE0REJCMTAxQUNB QzYyN0ZCNDQ0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnqZYTVNlRFnhRwFDBmcCYRtqdQ3BIOrExK WP8YRAD3YVZMOUWml7b6KlhD4pYn/lukxdWdMv9cCQhg6ebM6QShvrJWzxB7d5NV +rzbZ0ozYp8B/GSzYd2ZzUY4Z8lwtKwBdL1s+Tb3HwbjTMY26wKGvK9QILIb7vrt pOw4/7a+BO2gzAPVw5CssPXdphckn7UmpULZ5FolOSsreJAkSm4DPUSnv0eihSKs MQ/MOE0+uQbGmptW9uk0gD/jT47mToP20MWR4OVI/HugVIT6EzyknZOw0ff1Gjbl Ca9wXT+M8s2CJms7NmiVBllyH7gG+14jcisCSUXneu6VgymUX3I= -----END CERTIFICATE-----Generated at Mon Sep 21 19:45:11 2026 by rpki-client