$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft File: 2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft (raw, json) Hash identifier: aKj6AozxGJsGmpU2Q0Bc6AcXqwa5hEiS3gWd+7eoFmk= Subject key identifier: 13:60:3F:95:B4:D9:50:55:A2:B2:98:6E:F7:F6:42:E6:81:A3:62:CA Authority key identifier: 2D:4E:F7:6F:F5:F1:DE:08:B9:FB:7C:AE:D4:9A:F7:AD:4C:60:18:35 Certificate issuer: /CN=2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835 Certificate serial: 16F7249C541A90CC112F6F6A385EAACAE277CE24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft Manifest number: BE Signing time: Mon 21 Sep 2026 17:18:07 +0000 Manifest this update: Mon 21 Sep 2026 17:13:07 +0000 Manifest next update: Tue 22 Sep 2026 18:03:07 +0000 Files and hashes: 1: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: abfZiYldhdnO1xBcxOi/v0tih5cS8BcQKFP2Z8xIlZI=) 2: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: +vElMuoXueIlORLkNX9hNN9LTELx3Cm8ZNhxGm0p8LM=) 3: 2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl (hash: BH8PwTaZaHT9m/qXxG0YlM6X3nZ5EZ0bB7mqdI7LCH0=) 4: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: Lvw5pO2bg6firYOVJrL24L/mVS2H6b/TJe2TV+FnMQs=) 5: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: Qy2f1Th+IuSFin6EsJuwgkXChR1+TY6gnLgDe+ouGOE=) 6: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (hash: gCsatGRm4KYeS4xTuGnz+oT2rG5lR5XCvd8UnIJR5JU=) 7: 3130332e31392e35362e302f32322d3232203d3e20313332363337.roa (hash: JZgdRbJu890tbXcbh9Oxv/c/hndsIuQkwCj004yU0ZY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f7:24:9c:54:1a:90:cc:11:2f:6f:6a:38:5e:aa:ca:e2:77:ce:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835 Validity Not Before: Sep 21 17:13:07 2026 GMT Not After : Sep 22 18:03:07 2026 GMT Subject: CN=13603F95B4D95055A2B2986EF7F642E681A362CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:de:8a:d4:47:8d:c3:98:fb:8f:e3:e7:7d:02: 9f:8e:3a:2f:30:a6:5f:77:0e:14:6d:fc:dc:75:ca: c1:7f:0e:fe:f0:47:6b:31:83:eb:ab:bb:27:40:54: b1:cf:82:9a:f8:c2:cc:62:a4:35:af:f8:c6:ac:14: 51:10:45:c1:05:de:66:86:71:67:65:4b:6d:8a:96: 6c:c7:de:d4:5a:85:6b:bc:a3:97:ec:5c:c5:f9:42: 3f:ce:ea:f0:cd:e0:d0:cd:90:d6:7b:63:6a:7d:74: c0:9a:f7:3b:9b:ab:f5:70:8d:b8:ef:94:f7:8c:22: fb:d4:4b:8c:a0:94:44:4d:a1:2c:b1:39:ee:61:4b: bf:a2:90:51:12:92:e4:5a:1f:71:69:0a:3c:e0:40: 7b:7e:a6:0d:6a:c1:50:d1:85:02:fb:db:52:13:15: 5b:1d:15:75:45:4e:72:9c:ae:46:1b:cb:91:ae:ef: 45:cd:a5:b4:6c:65:3e:2d:2d:38:44:b5:ae:aa:93: 73:29:fc:b9:42:a5:94:bc:b0:b9:ee:c1:9c:bb:f1: 42:f8:52:7e:e3:64:50:2d:5c:50:5d:3a:a4:e0:be: ab:ed:f4:50:72:f1:68:25:c2:8e:17:31:bc:35:53: bb:75:3a:f9:2b:79:69:99:3e:8e:a7:bf:f7:01:26: 07:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:60:3F:95:B4:D9:50:55:A2:B2:98:6E:F7:F6:42:E6:81:A3:62:CA X509v3 Authority Key Identifier: keyid:2D:4E:F7:6F:F5:F1:DE:08:B9:FB:7C:AE:D4:9A:F7:AD:4C:60:18:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:15:1f:02:3d:22:b1:cd:b3:82:af:e9:55:7b:09:46:ab:e6: 95:3a:57:35:1e:2d:28:b5:a7:a4:d0:e0:40:c2:34:46:99:78: 83:f2:d2:a6:36:84:13:78:08:75:5f:f5:92:b0:92:f3:6d:ce: a1:a5:9b:80:d2:b8:23:6a:73:b9:58:fa:2e:fb:26:7e:c0:91: c0:32:f1:31:bb:fb:4b:25:70:cb:4a:e3:bf:e4:d5:15:51:13: db:7e:62:41:13:39:82:e9:63:64:83:df:8a:9a:6d:76:9a:30: d3:c5:98:b1:04:47:f0:bd:b4:6f:dc:24:42:a5:69:b3:0e:b3: f6:dc:f3:cd:05:35:61:0b:48:1a:11:ce:71:51:15:09:2d:7e: 80:28:0d:b8:47:35:06:b3:f3:29:19:bd:13:11:50:60:5b:68: 48:81:39:66:b8:69:08:28:1e:45:a3:d2:7c:0e:bf:dc:f5:6c: 29:81:de:3c:d9:ba:b3:b7:f9:9d:30:5e:4f:c1:50:5e:3e:49: 14:37:ec:c8:3e:9e:57:f6:87:00:37:8d:f8:4b:84:d0:d8:1e: 01:ad:8c:1d:d0:e1:77:ee:75:b3:b2:61:f5:33:f9:a0:42:a3: 18:de:d5:ea:02:a2:f9:8e:3c:d8:d1:52:71:b4:4b:1c:b1:52: 05:95:f6:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFvcknFQakMwRL29qOF6qyuJ3ziQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ0RUY3NkZGNUYxREUwOEI5RkI3Q0FFRDQ5QUY3QUQ0 QzYwMTgzNTAeFw0yNjA5MjExNzEzMDdaFw0yNjA5MjIxODAzMDdaMDMxMTAvBgNV BAMTKDEzNjAzRjk1QjREOTUwNTVBMkIyOTg2RUY3RjY0MkU2ODFBMzYyQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw3orUR43DmPuP4+d9Ap+OOi8w pl93DhRt/Nx1ysF/Dv7wR2sxg+uruydAVLHPgpr4wsxipDWv+MasFFEQRcEF3maG cWdlS22KlmzH3tRahWu8o5fsXMX5Qj/O6vDN4NDNkNZ7Y2p9dMCa9zubq/Vwjbjv lPeMIvvUS4yglERNoSyxOe5hS7+ikFESkuRaH3FpCjzgQHt+pg1qwVDRhQL721IT FVsdFXVFTnKcrkYby5Gu70XNpbRsZT4tLThEta6qk3Mp/LlCpZS8sLnuwZy78UL4 Un7jZFAtXFBdOqTgvqvt9FBy8Wglwo4XMbw1U7t1OvkreWmZPo6nv/cBJgcJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE2A/lbTZUFWisphu9/ZC5oGjYsowHwYDVR0j BBgwFoAULU73b/Xx3gi5+3yu1Jr3rUxgGDUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQwOTI3ZTYtOGEwYS00ZmE3LTg5NjktOWZiOWQ2OTQzOTdjLzAvMkQ0RUY3NkZG NUYxREUwOEI5RkI3Q0FFRDQ5QUY3QUQ0QzYwMTgzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDRFRjc2RkY1RjFERTA4QjlGQjdDQUVENDlBRjdBRDRDNjAx ODM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQwOTI3ZTYtOGEwYS00ZmE3LTg5 NjktOWZiOWQ2OTQzOTdjLzAvMkQ0RUY3NkZGNUYxREUwOEI5RkI3Q0FFRDQ5QUY3 QUQ0QzYwMTgzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUVHwI9IrHNs4Kv6VV7CUar5pU6VzUeLSi1 p6TQ4EDCNEaZeIPy0qY2hBN4CHVf9ZKwkvNtzqGlm4DSuCNqc7lY+i77Jn7AkcAy 8TG7+0slcMtK47/k1RVRE9t+YkETOYLpY2SD34qabXaaMNPFmLEER/C9tG/cJEKl abMOs/bc880FNWELSBoRznFRFQktfoAoDbhHNQaz8ykZvRMRUGBbaEiBOWa4aQgo HkWj0nwOv9z1bCmB3jzZurO3+Z0wXk/BUF4+SRQ37Mg+nlf2hwA3jfhLhNDYHgGt jB3Q4XfudbOyYfUz+aBCoxje1eoCovmOPNjRUnG0SxyxUgWV9vY= -----END CERTIFICATE-----Generated at Tue Sep 22 06:46:28 2026 by rpki-client