$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft File: C2F21005CDD8F19E492720297D0BA5C66395653F.mft (raw, json) Hash identifier: bu2VMF32c4ESPpnKQoB24jBerfvkQteTLndUc3MVO+g= Subject key identifier: 92:57:F6:F4:9B:A6:88:41:B7:52:D8:E7:CB:90:09:B3:BC:80:1F:93 Authority key identifier: C2:F2:10:05:CD:D8:F1:9E:49:27:20:29:7D:0B:A5:C6:63:95:65:3F Certificate issuer: /CN=C2F21005CDD8F19E492720297D0BA5C66395653F Certificate serial: 42F24E22CEEC36739EAFF4EE03E1F5D4E8977B5F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft Manifest number: BC Signing time: Mon 21 Sep 2026 09:43:35 +0000 Manifest this update: Mon 21 Sep 2026 09:38:35 +0000 Manifest next update: Tue 22 Sep 2026 12:00:35 +0000 Files and hashes: 1: C2F21005CDD8F19E492720297D0BA5C66395653F.crl (hash: QvIM4YaZEOCKikzzofS/iXPaRfiw9z4Rw1Tn/mYJxvI=) 2: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: 4WF38lDugkx4g5GWHdzVk5hRBqpGlU+mntDxAYWnRfU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.crl rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f2:4e:22:ce:ec:36:73:9e:af:f4:ee:03:e1:f5:d4:e8:97:7b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2F21005CDD8F19E492720297D0BA5C66395653F Validity Not Before: Sep 21 09:38:35 2026 GMT Not After : Sep 22 12:00:35 2026 GMT Subject: CN=9257F6F49BA68841B752D8E7CB9009B3BC801F93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a0:9c:94:00:d4:4d:91:c6:d8:19:8f:7a:d6: 85:91:93:0e:c6:dd:63:01:ec:38:ea:74:94:f0:41: 4c:50:12:03:9b:a3:95:22:7d:ad:7f:bc:bc:65:21: 2e:f8:3e:8b:06:22:b3:5d:1b:26:ac:38:92:5d:12: 10:ac:fd:10:0a:c9:73:e1:35:3d:6a:7f:60:3b:d6: 35:b8:40:d2:f9:56:01:62:ec:a3:4c:8f:08:2b:9b: 6b:8d:77:1f:23:93:d2:0f:d3:47:78:36:1f:20:aa: 19:51:9e:6c:38:ff:6f:04:88:d4:a6:29:cd:6a:3d: 50:2b:91:46:3e:2e:78:6e:4a:83:17:c0:8f:a0:56: 64:86:e3:d1:75:de:3e:75:74:19:24:96:71:08:cb: 77:8b:c8:20:f2:36:98:47:80:cd:04:85:9e:ea:58: 7f:bf:2c:06:3c:59:2a:64:5e:60:84:7d:e2:e0:fa: 14:34:ef:f9:f7:9b:6b:4a:41:6d:36:21:43:50:f9: dc:b6:c7:80:28:f8:46:8c:c0:a7:40:37:ad:8f:e2: c1:c1:17:37:44:36:67:36:f7:f6:e2:41:ae:f3:a3: 7f:30:83:49:19:d6:88:15:48:48:8d:2a:06:ae:95: 0a:67:f0:77:24:6b:2a:07:8e:4e:4b:f3:96:f5:53: 7d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:57:F6:F4:9B:A6:88:41:B7:52:D8:E7:CB:90:09:B3:BC:80:1F:93 X509v3 Authority Key Identifier: keyid:C2:F2:10:05:CD:D8:F1:9E:49:27:20:29:7D:0B:A5:C6:63:95:65:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:da:78:e9:86:54:2c:f2:65:8d:d3:21:1f:3b:86:25:f6:ec: 82:28:62:c7:0f:31:ed:9d:80:d2:89:aa:fd:d3:05:c1:e2:40: 40:64:65:84:43:de:25:7b:c6:0c:ed:3a:7e:d2:ca:b5:61:e2: 32:91:3d:7e:9d:ed:00:7b:a9:00:76:41:5c:08:ce:f4:7c:ae: ab:5c:35:df:11:ac:c5:64:a9:f9:ea:73:0c:2e:2f:50:78:21: 3e:16:9e:82:2d:fc:bc:fc:fc:75:0c:be:cd:7c:b5:bb:af:1b: 02:5c:f2:82:b5:2f:7f:0b:2e:5e:db:57:d5:68:6f:8e:bf:5a: 81:01:2e:ac:aa:17:d9:80:06:24:62:19:64:1e:a8:87:e2:5d: b0:e9:a6:31:d5:fe:7e:9b:47:48:02:31:97:6a:69:87:69:79: a9:22:1d:b5:23:22:81:44:14:3c:40:61:e6:3b:d9:e0:7e:45: 1c:92:44:9d:39:3e:23:9c:77:af:0c:6d:c8:5b:68:1c:e3:55: 44:00:78:51:ec:0d:df:23:83:43:f8:1d:a9:a1:08:7b:3d:2f: 3d:34:bc:5d:25:b1:38:5f:37:12:1b:76:70:f4:7e:26:b2:69: 0f:0d:2f:b4:c9:7e:3a:1a:f8:fa:5f:7d:ca:73:ad:dc:66:96: be:52:d0:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvJOIs7sNnOer/TuA+H11OiXe18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJGMjEwMDVDREQ4RjE5RTQ5MjcyMDI5N0QwQkE1QzY2 Mzk1NjUzRjAeFw0yNjA5MjEwOTM4MzVaFw0yNjA5MjIxMjAwMzVaMDMxMTAvBgNV BAMTKDkyNTdGNkY0OUJBNjg4NDFCNzUyRDhFN0NCOTAwOUIzQkM4MDFGOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyoJyUANRNkcbYGY961oWRkw7G 3WMB7DjqdJTwQUxQEgObo5Uifa1/vLxlIS74PosGIrNdGyasOJJdEhCs/RAKyXPh NT1qf2A71jW4QNL5VgFi7KNMjwgrm2uNdx8jk9IP00d4Nh8gqhlRnmw4/28EiNSm Kc1qPVArkUY+LnhuSoMXwI+gVmSG49F13j51dBkklnEIy3eLyCDyNphHgM0EhZ7q WH+/LAY8WSpkXmCEfeLg+hQ07/n3m2tKQW02IUNQ+dy2x4Ao+EaMwKdAN62P4sHB FzdENmc29/biQa7zo38wg0kZ1ogVSEiNKgaulQpn8HckayoHjk5L85b1U321AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUklf29JumiEG3Utjny5AJs7yAH5MwHwYDVR0j BBgwFoAUwvIQBc3Y8Z5JJyApfQulxmOVZT8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZmYmFmNzEtMmQ1Ny00ZTRhLTkxZDAtY2FjOGFiMGFjZWZlLzAvQzJGMjEwMDVD REQ4RjE5RTQ5MjcyMDI5N0QwQkE1QzY2Mzk1NjUzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkYyMTAwNUNERDhGMTlFNDkyNzIwMjk3RDBCQTVDNjYzOTU2 NTNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvQzJGMjEwMDVDREQ4RjE5RTQ5MjcyMDI5N0QwQkE1 QzY2Mzk1NjUzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACraeOmGVCzyZY3TIR87hiX27IIoYscPMe2d gNKJqv3TBcHiQEBkZYRD3iV7xgztOn7SyrVh4jKRPX6d7QB7qQB2QVwIzvR8rqtc Nd8RrMVkqfnqcwwuL1B4IT4WnoIt/Lz8/HUMvs18tbuvGwJc8oK1L38LLl7bV9Vo b46/WoEBLqyqF9mABiRiGWQeqIfiXbDppjHV/n6bR0gCMZdqaYdpeakiHbUjIoFE FDxAYeY72eB+RRySRJ05PiOcd68MbchbaBzjVUQAeFHsDd8jg0P4HamhCHs9Lz00 vF0lsThfNxIbdnD0fiayaQ8NL7TJfjoa+Ppffcpzrdxmlr5S0DA= -----END CERTIFICATE-----Generated at Mon Sep 21 22:20:53 2026 by rpki-client