$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft File: 2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft (raw, json) Hash identifier: ZZ3OVS7yHRRdLT4SkLMaDVcGhi/PgG/jmqWrbTwuRtM= Subject key identifier: 6C:D4:F7:1B:D2:A2:5C:71:39:B5:B2:C6:59:DC:54:B0:6C:66:D6:8C Authority key identifier: 27:69:DC:A3:F8:9F:0B:44:81:12:7F:F4:E7:DB:34:D7:95:7B:9B:9A Certificate issuer: /CN=2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A Certificate serial: 01EA5AE861C7766E8BD2B0107573FEC0254C913E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft Manifest number: BE Signing time: Sun 20 Sep 2026 23:05:27 +0000 Manifest this update: Sun 20 Sep 2026 23:00:27 +0000 Manifest next update: Tue 22 Sep 2026 02:01:27 +0000 Files and hashes: 1: 2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.crl (hash: VZmaB9E5ZmMkr0WLGi6mR8E9IKEb3PV7mKkzuAejI+Q=) 2: 3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa (hash: SxuSRhZVuQ01C/J4fBuk49O3beWTR2sEuK9CbWvLAoU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.crl rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ea:5a:e8:61:c7:76:6e:8b:d2:b0:10:75:73:fe:c0:25:4c:91:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A Validity Not Before: Sep 20 23:00:27 2026 GMT Not After : Sep 22 02:01:27 2026 GMT Subject: CN=6CD4F71BD2A25C7139B5B2C659DC54B06C66D68C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:be:9f:78:73:e4:2b:8a:a6:04:db:8f:f0: 75:6c:13:93:f3:30:d9:5b:25:84:98:77:04:c4:c5: 03:f4:06:3b:5f:39:e8:31:0a:54:62:33:18:df:2f: ba:90:4d:b2:87:c0:c0:c5:57:48:ee:e5:2a:02:fc: 76:ec:44:ff:63:d8:29:66:df:a8:bb:6d:9c:73:bf: 64:c0:68:11:1a:c3:08:30:08:da:11:aa:bd:f8:0c: 6e:85:61:35:1d:f0:76:3c:38:4b:93:3f:08:95:ae: de:7a:ad:42:a2:c4:77:22:61:a8:6b:a9:bb:95:41: 59:b1:ec:da:94:f4:bd:00:00:69:c4:3f:50:e9:7d: 44:2e:f6:ca:50:1b:aa:37:f8:f6:52:6d:90:92:93: 32:c1:15:72:f4:2a:e1:67:a3:12:63:68:a1:d4:7a: fd:c7:fc:ca:41:5f:59:22:e2:1e:4f:f6:e4:b1:d8: 0b:20:34:dd:8a:a4:29:86:9d:a5:76:f5:56:cd:8e: c3:b0:a7:92:82:33:1c:81:41:7f:87:75:ff:ad:03: 48:fc:24:9f:cf:2f:62:04:a8:ae:68:84:5c:33:cf: 8c:b7:58:47:23:63:58:0c:e4:d5:43:12:85:99:11: 22:65:02:29:51:17:6e:a5:8a:33:1f:90:5a:bf:62: d5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D4:F7:1B:D2:A2:5C:71:39:B5:B2:C6:59:DC:54:B0:6C:66:D6:8C X509v3 Authority Key Identifier: keyid:27:69:DC:A3:F8:9F:0B:44:81:12:7F:F4:E7:DB:34:D7:95:7B:9B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:6e:0d:a4:34:73:c9:57:4a:ff:2d:c2:85:0a:0d:ed:68:11: 29:09:a3:5e:9c:bb:1d:75:88:3a:d1:8f:39:ef:59:d8:fd:a3: 5a:b7:da:4b:e2:dd:68:58:40:58:f2:e8:38:fd:67:2c:4c:b2: d0:e8:5e:96:e5:11:28:64:71:af:f3:c5:64:75:9c:15:3b:33: 0f:f5:7d:62:3e:04:cd:a2:a8:fa:64:9a:60:0b:ad:97:6f:c5: 6f:42:e3:3c:ca:b5:b9:61:17:17:8b:8e:29:93:ad:d6:0e:8f: 9f:da:2c:a6:54:25:56:0d:bf:6c:34:50:f3:e0:e8:4f:1a:db: ea:4d:2a:48:bb:0a:62:49:5b:89:94:ae:71:84:78:1e:a6:82: 01:24:a9:9b:f6:81:42:4c:8a:89:c6:5d:3d:87:f2:37:70:41: a8:f8:fd:14:74:3e:73:04:2f:31:88:54:70:09:cf:ef:11:63: ee:92:16:a5:56:8d:38:15:30:de:e4:f0:eb:4e:95:30:a8:51: fa:f3:37:02:b4:bc:1c:0c:80:e0:a9:07:14:01:f8:62:f4:b9: d8:25:84:3a:b0:86:3a:f8:81:3a:a0:54:e8:93:cc:86:ac:f0: 31:bb:a6:7f:6f:81:7a:dc:20:e9:75:45:9c:da:1f:b9:a8:54: 79:b8:d3:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAepa6GHHdm6L0rAQdXP+wCVMkT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc2OURDQTNGODlGMEI0NDgxMTI3RkY0RTdEQjM0RDc5 NTdCOUI5QTAeFw0yNjA5MjAyMzAwMjdaFw0yNjA5MjIwMjAxMjdaMDMxMTAvBgNV BAMTKDZDRDRGNzFCRDJBMjVDNzEzOUI1QjJDNjU5REM1NEIwNkM2NkQ2OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Vb6feHPkK4qmBNuP8HVsE5Pz MNlbJYSYdwTExQP0BjtfOegxClRiMxjfL7qQTbKHwMDFV0ju5SoC/HbsRP9j2Clm 36i7bZxzv2TAaBEawwgwCNoRqr34DG6FYTUd8HY8OEuTPwiVrt56rUKixHciYahr qbuVQVmx7NqU9L0AAGnEP1DpfUQu9spQG6o3+PZSbZCSkzLBFXL0KuFnoxJjaKHU ev3H/MpBX1ki4h5P9uSx2AsgNN2KpCmGnaV29VbNjsOwp5KCMxyBQX+Hdf+tA0j8 JJ/PL2IEqK5ohFwzz4y3WEcjY1gM5NVDEoWZESJlAilRF26lijMfkFq/YtVHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbNT3G9KiXHE5tbLGWdxUsGxm1owwHwYDVR0j BBgwFoAUJ2nco/ifC0SBEn/059s015V7m5owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmUzYTEzOGUtYTJiMi00NjA0LWFkNTAtM2NhYjc1MGE3NWU3LzAvMjc2OURDQTNG ODlGMEI0NDgxMTI3RkY0RTdEQjM0RDc5NTdCOUI5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNzY5RENBM0Y4OUYwQjQ0ODExMjdGRjRFN0RCMzRENzk1N0I5 QjlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmUzYTEzOGUtYTJiMi00NjA0LWFk NTAtM2NhYjc1MGE3NWU3LzAvMjc2OURDQTNGODlGMEI0NDgxMTI3RkY0RTdEQjM0 RDc5NTdCOUI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZuDaQ0c8lXSv8twoUKDe1oESkJo16cux11 iDrRjznvWdj9o1q32kvi3WhYQFjy6Dj9ZyxMstDoXpblEShkca/zxWR1nBU7Mw/1 fWI+BM2iqPpkmmALrZdvxW9C4zzKtblhFxeLjimTrdYOj5/aLKZUJVYNv2w0UPPg 6E8a2+pNKki7CmJJW4mUrnGEeB6mggEkqZv2gUJMionGXT2H8jdwQaj4/RR0PnME LzGIVHAJz+8RY+6SFqVWjTgVMN7k8OtOlTCoUfrzNwK0vBwMgOCpBxQB+GL0udgl hDqwhjr4gTqgVOiTzIas8DG7pn9vgXrcIOl1RZzaH7moVHm408M= -----END CERTIFICATE-----Generated at Mon Sep 21 09:16:53 2026 by rpki-client