$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft File: 2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft (raw, json) Hash identifier: GXCIIAoiLbmXy765gMuxtchewaoGHmsIOYnTRr/LEs8= Subject key identifier: 45:25:20:E6:D2:0C:CA:C3:3B:DE:C0:59:00:D1:A2:8A:7A:3C:45:19 Authority key identifier: 2E:06:9E:30:CF:7B:24:CD:D7:7C:20:65:50:B0:BD:BD:B0:16:83:AF Certificate issuer: /CN=2E069E30CF7B24CDD77C206550B0BDBDB01683AF Certificate serial: 4ED5A2DD4320EF85C4E0275781E071AA288978A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft Manifest number: BF Signing time: Mon 21 Sep 2026 18:14:06 +0000 Manifest this update: Mon 21 Sep 2026 18:09:06 +0000 Manifest next update: Tue 22 Sep 2026 19:21:06 +0000 Files and hashes: 1: 2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl (hash: LJm/H+7BoXQDKvHCLmCUq3wnTesIs+8mvnV8iSa+wOw=) 2: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: R//K7f8SQ84W/WhpHi/GP3kDl7olX9IsyMdmQ8qFKuk=) 3: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: njSBQKxaBf8FgxYd9UzVWcsd+7NkvHs45etGgjIxXxw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d5:a2:dd:43:20:ef:85:c4:e0:27:57:81:e0:71:aa:28:89:78:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E069E30CF7B24CDD77C206550B0BDBDB01683AF Validity Not Before: Sep 21 18:09:06 2026 GMT Not After : Sep 22 19:21:06 2026 GMT Subject: CN=452520E6D20CCAC33BDEC05900D1A28A7A3C4519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1c:22:24:e3:b2:2d:4b:70:a8:34:89:b4:08: d8:30:03:a4:44:5e:46:60:b3:7e:03:17:45:ed:ed: 01:34:3d:23:cd:e0:04:a9:f7:b5:0d:35:71:b0:c9: 9a:e1:fe:43:1a:25:53:77:42:94:ca:b9:fa:1a:64: b7:f8:0e:0a:6d:be:96:6f:ff:1c:85:d6:0c:f8:a4: e9:f5:62:1d:ff:c7:8c:fe:8f:d4:58:44:c5:8d:01: 70:ea:9b:f6:34:df:89:67:46:12:48:32:40:11:85: 00:d8:f9:9d:bb:e9:c6:11:47:cc:53:aa:82:55:23: 30:cc:2c:a4:63:3b:1b:7f:24:0c:e4:dd:90:ff:bd: 76:32:23:6e:37:f2:c9:7b:7a:5b:f1:97:e0:23:dd: d6:88:26:f2:59:04:e9:8f:1a:03:80:e0:08:04:55: b0:6c:61:39:42:dc:bb:b3:51:6f:f4:f2:cb:3b:b5: f4:38:cd:c1:07:56:cb:87:0c:9e:28:70:31:ae:57: 1c:5b:63:93:07:c4:39:b3:ed:45:1c:df:56:54:60: 3a:cc:1c:ac:27:fd:2b:78:32:14:93:4d:2b:22:05: 12:18:ba:59:ca:e7:a8:90:81:83:80:cd:45:0e:57: 35:e7:82:50:a9:a8:65:21:14:66:b1:b7:40:de:01: 50:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:25:20:E6:D2:0C:CA:C3:3B:DE:C0:59:00:D1:A2:8A:7A:3C:45:19 X509v3 Authority Key Identifier: keyid:2E:06:9E:30:CF:7B:24:CD:D7:7C:20:65:50:B0:BD:BD:B0:16:83:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:cc:36:8d:ed:12:2c:50:d6:b1:b1:c8:45:85:7c:8b:47:ae: b5:09:15:82:6e:e1:92:00:69:fa:b1:58:40:6d:00:b9:d0:dc: 49:39:0a:46:c4:13:f2:f9:83:49:29:9a:7c:2d:93:71:3c:19: 98:cd:ff:5b:dd:e6:63:1e:18:32:03:91:59:81:c0:b9:38:9c: 01:0e:a5:79:0c:be:a7:cd:63:76:4e:6f:ca:13:5b:5c:17:e8: e6:82:d0:6b:14:52:dd:34:c2:53:e1:18:58:51:17:03:c3:06: 5d:d6:be:d4:c1:62:60:ed:87:db:16:cf:3a:d4:a5:a4:ba:e4: 61:05:6b:4a:84:c8:53:4a:dd:02:65:d8:c5:3e:ef:10:df:f5: dc:ad:76:a6:32:c1:ef:39:ff:51:b8:9a:96:c2:b8:83:9d:5a: cf:34:5e:62:01:1e:7e:2d:25:d8:3b:8d:bd:57:34:71:74:dd: 18:95:a6:f8:45:6e:fa:5f:27:3f:6a:48:88:ab:ef:19:b8:88: f4:fe:89:46:f1:1b:7b:0e:5d:a5:7a:54:9e:cb:3a:7d:ab:d5: 9a:99:ea:e0:ca:92:25:05:f3:0d:30:4b:3d:5c:b8:94:0b:f1: 11:39:63:a9:c1:43:0b:64:d4:e6:d1:dc:0f:d1:23:59:f6:18: 54:e8:86:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTtWi3UMg74XE4CdXgeBxqiiJeKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUwNjlFMzBDRjdCMjRDREQ3N0MyMDY1NTBCMEJEQkRC MDE2ODNBRjAeFw0yNjA5MjExODA5MDZaFw0yNjA5MjIxOTIxMDZaMDMxMTAvBgNV BAMTKDQ1MjUyMEU2RDIwQ0NBQzMzQkRFQzA1OTAwRDFBMjhBN0EzQzQ1MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHCIk47ItS3CoNIm0CNgwA6RE XkZgs34DF0Xt7QE0PSPN4ASp97UNNXGwyZrh/kMaJVN3QpTKufoaZLf4DgptvpZv /xyF1gz4pOn1Yh3/x4z+j9RYRMWNAXDqm/Y034lnRhJIMkARhQDY+Z276cYRR8xT qoJVIzDMLKRjOxt/JAzk3ZD/vXYyI2438sl7elvxl+Aj3daIJvJZBOmPGgOA4AgE VbBsYTlC3LuzUW/08ss7tfQ4zcEHVsuHDJ4ocDGuVxxbY5MHxDmz7UUc31ZUYDrM HKwn/St4MhSTTSsiBRIYulnK56iQgYOAzUUOVzXnglCpqGUhFGaxt0DeAVDdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURSUg5tIMysM73sBZANGiino8RRkwHwYDVR0j BBgwFoAULgaeMM97JM3XfCBlULC9vbAWg68wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzUyMWU1ZWUtNTg4Mi00OTQzLWI0MDgtNDNjMzc1ODJmYjBiLzAvMkUwNjlFMzBD RjdCMjRDREQ3N0MyMDY1NTBCMEJEQkRCMDE2ODNBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTA2OUUzMENGN0IyNENERDc3QzIwNjU1MEIwQkRCREIwMTY4 M0FGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzUyMWU1ZWUtNTg4Mi00OTQzLWI0 MDgtNDNjMzc1ODJmYjBiLzAvMkUwNjlFMzBDRjdCMjRDREQ3N0MyMDY1NTBCMEJE QkRCMDE2ODNBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvMNo3tEixQ1rGxyEWFfItHrrUJFYJu4ZIA afqxWEBtALnQ3Ek5CkbEE/L5g0kpmnwtk3E8GZjN/1vd5mMeGDIDkVmBwLk4nAEO pXkMvqfNY3ZOb8oTW1wX6OaC0GsUUt00wlPhGFhRFwPDBl3WvtTBYmDth9sWzzrU paS65GEFa0qEyFNK3QJl2MU+7xDf9dytdqYywe85/1G4mpbCuIOdWs80XmIBHn4t Jdg7jb1XNHF03RiVpvhFbvpfJz9qSIir7xm4iPT+iUbxG3sOXaV6VJ7LOn2r1ZqZ 6uDKkiUF8w0wSz1cuJQL8RE5Y6nBQwtk1ObR3A/RI1n2GFTohuA= -----END CERTIFICATE-----Generated at Mon Sep 21 22:17:44 2026 by rpki-client