$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft File: 2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft (raw, json) Hash identifier: /j4xone+Q15cbA7ixjhhHRgNkuDLR2IHL/oREzwjZDs= Subject key identifier: 5C:52:61:A9:DC:0D:AB:9F:EC:5C:32:63:0D:E7:E7:97:CC:03:CB:69 Authority key identifier: 2A:C4:B9:21:8D:44:A8:AF:6A:89:3D:00:D5:F2:8F:34:AD:B8:3E:ED Certificate issuer: /CN=2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED Certificate serial: 02E0E42EE00B3B34F6FB4BB0B739BE7CD7474473 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft Manifest number: BE Signing time: Mon 21 Sep 2026 12:36:57 +0000 Manifest this update: Mon 21 Sep 2026 12:31:57 +0000 Manifest next update: Tue 22 Sep 2026 13:12:57 +0000 Files and hashes: 1: 2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl (hash: +n6hXE70AuTgfA6kjIwUKuVpSC/IKRefC6hFX+1E9Cw=) 2: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: Yu7TLcR1tuusuhDSrYnM4of9BN5qOWkNLvH5+MvtCeE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e0:e4:2e:e0:0b:3b:34:f6:fb:4b:b0:b7:39:be:7c:d7:47:44:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED Validity Not Before: Sep 21 12:31:57 2026 GMT Not After : Sep 22 13:12:57 2026 GMT Subject: CN=5C5261A9DC0DAB9FEC5C32630DE7E797CC03CB69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9a:93:e2:48:ff:d8:ec:58:ac:14:9a:c0:e1: ee:9f:78:0a:51:a9:c4:3e:91:41:21:d1:32:86:17: ef:84:5c:44:34:8e:e2:03:a3:18:3c:97:97:26:1b: a9:31:ba:c4:85:6b:79:5e:c5:80:63:95:8f:9c:29: c7:5e:a2:68:b2:cb:06:c7:99:ad:34:81:62:63:98: 20:24:94:ae:d6:24:e0:67:32:bd:e8:48:34:20:37: c1:cc:0a:95:91:f3:a1:70:7e:3a:d8:53:7a:09:0f: a6:8b:07:06:b9:6a:31:0b:de:ed:33:0e:33:f9:e3: f0:03:f1:96:99:34:b8:be:23:bb:7e:b6:ca:71:11: be:57:75:10:97:9e:2c:c4:ca:6c:1e:9b:ce:66:c1: 03:12:10:76:d3:e0:6c:77:c1:65:17:69:ca:7a:d9: b9:15:2a:42:6d:98:fa:71:62:7e:63:4b:bb:3f:65: e0:6f:45:37:bd:7b:cb:bb:e7:49:c4:4e:04:d9:37: 43:00:a8:30:f0:eb:e0:5d:a7:57:bd:2c:fe:69:f2: 2c:25:9c:76:6c:ea:0b:7b:9a:08:3a:5e:a9:7e:03: fc:d9:1b:17:94:32:a7:d9:9d:aa:5d:1c:5c:03:b7: f3:94:9d:ef:0c:2d:1d:58:5b:3b:2f:3d:5c:23:17: bf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:52:61:A9:DC:0D:AB:9F:EC:5C:32:63:0D:E7:E7:97:CC:03:CB:69 X509v3 Authority Key Identifier: keyid:2A:C4:B9:21:8D:44:A8:AF:6A:89:3D:00:D5:F2:8F:34:AD:B8:3E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:5a:49:f7:a1:15:16:0a:eb:44:99:f2:0e:6c:e6:44:99:da: b9:42:5e:3e:00:cf:8c:cb:36:13:a5:47:14:b9:4d:f7:90:f6: 19:a0:0e:42:f0:f4:f5:5a:71:73:42:7e:f8:88:64:db:9c:8f: a2:a1:7a:5c:37:9e:56:7c:9f:65:c2:ac:f6:e8:9e:09:88:a6: da:25:cc:a2:2f:74:48:03:54:cd:19:fc:13:c9:d9:e4:35:a4: 53:f7:eb:2c:8d:4f:e3:be:80:84:81:00:7e:fe:f1:dd:8f:3d: a9:ee:41:8a:fa:b1:b1:21:74:be:83:d6:02:a2:dc:e8:82:1c: 47:86:50:f1:1d:b7:74:91:46:69:10:12:c2:09:ac:b1:80:8c: d7:b0:a4:ad:ef:43:bc:2b:0f:0f:05:3d:87:7a:c8:2f:8f:47: fc:c9:ca:bd:eb:e7:0c:e9:54:67:50:0e:45:16:d3:dc:fd:f3: b6:08:e5:f6:61:3f:87:de:4a:61:2a:c0:a3:b5:55:6c:8a:2c: ff:5a:c2:4c:f9:bd:ee:08:f7:bd:3d:3f:ab:b6:b7:ad:87:79: 19:f3:46:58:a3:7f:70:da:9c:3f:f8:9f:ba:90:58:fc:27:89: 6c:fa:7a:cc:4e:38:e4:c8:eb:c8:68:d9:1b:b6:8d:b2:68:8d: 54:36:c9:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAuDkLuALOzT2+0uwtzm+fNdHRHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFDNEI5MjE4RDQ0QThBRjZBODkzRDAwRDVGMjhGMzRB REI4M0VFRDAeFw0yNjA5MjExMjMxNTdaFw0yNjA5MjIxMzEyNTdaMDMxMTAvBgNV BAMTKDVDNTI2MUE5REMwREFCOUZFQzVDMzI2MzBERTdFNzk3Q0MwM0NCNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZmpPiSP/Y7FisFJrA4e6feApR qcQ+kUEh0TKGF++EXEQ0juIDoxg8l5cmG6kxusSFa3lexYBjlY+cKcdeomiyywbH ma00gWJjmCAklK7WJOBnMr3oSDQgN8HMCpWR86FwfjrYU3oJD6aLBwa5ajEL3u0z DjP54/AD8ZaZNLi+I7t+tspxEb5XdRCXnizEymwem85mwQMSEHbT4Gx3wWUXacp6 2bkVKkJtmPpxYn5jS7s/ZeBvRTe9e8u750nETgTZN0MAqDDw6+Bdp1e9LP5p8iwl nHZs6gt7mgg6Xql+A/zZGxeUMqfZnapdHFwDt/OUne8MLR1YWzsvPVwjF7+3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXFJhqdwNq5/sXDJjDefnl8wDy2kwHwYDVR0j BBgwFoAUKsS5IY1EqK9qiT0A1fKPNK24Pu0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4NmNiNWQtZjA3ZC00MjZhLThlNWUtYTc3YTk3OGRkMmVlLzAvMkFDNEI5MjE4 RDQ0QThBRjZBODkzRDAwRDVGMjhGMzRBREI4M0VFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUM0QjkyMThENDRBOEFGNkE4OTNEMDBENUYyOEYzNEFEQjgz RUVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvMkFDNEI5MjE4RDQ0QThBRjZBODkzRDAwRDVGMjhG MzRBREI4M0VFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdaSfehFRYK60SZ8g5s5kSZ2rlCXj4Az4zL NhOlRxS5TfeQ9hmgDkLw9PVacXNCfviIZNucj6Khelw3nlZ8n2XCrPbongmIptol zKIvdEgDVM0Z/BPJ2eQ1pFP36yyNT+O+gISBAH7+8d2PPanuQYr6sbEhdL6D1gKi 3OiCHEeGUPEdt3SRRmkQEsIJrLGAjNewpK3vQ7wrDw8FPYd6yC+PR/zJyr3r5wzp VGdQDkUW09z987YI5fZhP4feSmEqwKO1VWyKLP9awkz5ve4I9709P6u2t62HeRnz Rlijf3DanD/4n7qQWPwniWz6esxOOOTI68ho2Ru2jbJojVQ2yVM= -----END CERTIFICATE-----Generated at Mon Sep 21 23:21:41 2026 by rpki-client