$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft File: C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft (raw, json) Hash identifier: vwtBhzVdJtKzHH80XhgDJgpGiGUYUrU0tXBStF8L5Wo= Subject key identifier: A0:F2:78:B8:87:52:26:06:55:00:FE:E3:47:66:8D:74:00:76:6D:FE Authority key identifier: C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F Certificate issuer: /CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Certificate serial: 51886B927BC9EAF101B9DA25B10BA9BEA9BA9B81 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 15:50:22 +0000 Manifest this update: Thu 24 Sep 2026 15:45:22 +0000 Manifest next update: Fri 25 Sep 2026 17:03:22 +0000 Files and hashes: 1: 3230322e39332e32352e302f32342d3234203d3e203233393532.roa (hash: XDcl778T4rloVqTTjGoVuGMqfUdN427riMbFlonBX50=) 2: 3230322e39332e32382e302f32342d3234203d3e203233393532.roa (hash: 9SwaYqrzPZ+NZyn3VVdmOLoMhtVvVQwxxV4EtTxtGy4=) 3: 3230322e39332e32342e302f32342d3234203d3e203233393532.roa (hash: 13PIyETCXWDo1Gv/U6Oaqwz2KRpjJgPdWNVs0uRPBXw=) 4: 3230322e39332e32362e302f32342d3234203d3e203233393532.roa (hash: wkOR/tKRFg1S67lRSPwTcy9/cVjDL9uk2HigWHRxfeU=) 5: 3230322e39332e32342e302f32312d3231203d3e203233393532.roa (hash: 3DKoXwBAcS+jAgG56so/w0LfTxjXkoMotMqExXI7Hkk=) 6: 3230322e39332e32372e302f32342d3234203d3e203233393532.roa (hash: XriecMPCY4alQrxwYsfldyREke/eGKRNr/vElamRFhc=) 7: 3230322e39332e33302e302f32342d3234203d3e203233393532.roa (hash: bpztS81zV/NNGiXHgumEn+WH+G0wv++4rGgXBHGkvA4=) 8: 3230322e39332e32392e302f32342d3234203d3e203233393532.roa (hash: Omke75z/uNaQobGnfXKQ3d9K7J2R9/Q2eOXtQtif9WU=) 9: 3230322e39332e33312e302f32342d3234203d3e203233393532.roa (hash: d+9UVCD8niS1faGA61UPoVHLJY0k2w63v+pVMpLKKfc=) 10: C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl (hash: p7auYLQvA/c8REbs85nFgfdJs2Wu7wCUdrzU57/Thhw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:88:6b:92:7b:c9:ea:f1:01:b9:da:25:b1:0b:a9:be:a9:ba:9b:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Validity Not Before: Sep 24 15:45:22 2026 GMT Not After : Sep 25 17:03:22 2026 GMT Subject: CN=A0F278B8875226065500FEE347668D7400766DFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f7:10:4c:32:de:24:a0:1d:53:7b:01:04:33: 8e:33:38:1c:10:71:de:b4:fa:b0:98:c7:f0:b4:42: ad:20:00:60:52:e1:54:31:49:40:68:de:df:f3:74: ea:32:81:3a:cc:aa:1e:27:42:45:6c:75:f4:78:19: e8:e0:e5:a9:7e:c5:72:78:85:3d:f9:6e:b8:af:ee: 2e:72:5d:08:8f:c9:4d:4b:1b:86:14:3e:c9:fb:89: 20:51:fb:05:2b:a5:11:f5:23:37:18:44:86:fc:f7: cc:eb:8b:7e:19:f6:a2:0c:06:88:c4:37:88:da:17: 3e:c2:d4:50:e6:bd:73:ab:c9:77:cd:2b:65:de:49: 36:43:7d:58:f0:02:b9:f9:bd:ae:fd:e8:37:65:bd: fb:05:26:10:33:ce:5b:81:2f:4e:0a:b0:bb:7b:df: fa:66:68:03:8c:a1:c0:f6:46:92:17:54:a9:54:1e: 2f:f4:f5:3d:76:26:10:ff:2c:91:f0:0f:cc:69:b5: 5b:4c:1f:e6:f9:46:76:40:70:27:52:0a:f3:bf:a0: e6:ea:a4:9f:b8:a5:a5:cb:15:f2:d4:08:3a:f2:4c: 0a:53:1b:5c:f8:e0:d2:51:66:a5:cd:61:aa:43:39: a0:51:2d:bd:c2:5d:0a:2c:4f:9f:49:a0:c2:57:ac: 2a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F2:78:B8:87:52:26:06:55:00:FE:E3:47:66:8D:74:00:76:6D:FE X509v3 Authority Key Identifier: keyid:C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ab:47:6b:c0:6f:29:cc:f5:13:3c:62:82:29:12:98:1c:42: 02:0c:e2:a3:ed:b1:26:e0:6c:bf:cb:ad:c7:1e:34:29:a9:95: 63:52:84:bf:fe:23:36:af:97:c9:59:5a:be:6b:1c:6e:9a:86: 84:90:9b:70:62:c2:eb:bf:25:7b:cd:de:05:a4:49:fa:2f:d3: 12:54:09:fc:4b:26:9a:3f:ce:e2:af:4e:7c:72:e8:f7:0d:ec: 5e:50:a5:77:1e:38:98:37:c0:9e:17:f0:f3:87:19:78:eb:c8: 59:2f:ce:b0:b2:64:5a:bb:21:5c:a1:68:b5:04:e6:6f:63:3d: ed:5d:c6:fb:85:4e:4d:02:cb:11:15:85:6b:15:81:5e:80:e3: 1f:4f:f0:33:cd:84:fd:f9:b2:58:64:0c:b1:1c:33:e7:3f:27: e6:cd:3d:99:25:61:ea:4d:d0:86:96:11:ae:3b:1e:ef:01:71: 74:62:8b:31:90:28:9d:96:9f:4e:fa:b0:a2:43:fc:f0:89:de: 77:9e:28:2c:b9:72:30:35:0c:36:06:b3:75:f5:65:a7:d6:8e: a2:b2:98:98:d3:cd:a5:b2:1d:6e:80:7d:43:3b:1e:7e:25:1e: c2:09:d6:cd:06:c1:d9:e5:a6:4f:21:fb:cf:52:08:11:e1:86: be:0f:ef:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUYhrknvJ6vEBudolsQupvqm6m4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQx RTU3MEExRjAeFw0yNjA5MjQxNTQ1MjJaFw0yNjA5MjUxNzAzMjJaMDMxMTAvBgNV BAMTKEEwRjI3OEI4ODc1MjI2MDY1NTAwRkVFMzQ3NjY4RDc0MDA3NjZERkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD9xBMMt4koB1TewEEM44zOBwQ cd60+rCYx/C0Qq0gAGBS4VQxSUBo3t/zdOoygTrMqh4nQkVsdfR4Gejg5al+xXJ4 hT35briv7i5yXQiPyU1LG4YUPsn7iSBR+wUrpRH1IzcYRIb898zri34Z9qIMBojE N4jaFz7C1FDmvXOryXfNK2XeSTZDfVjwArn5va796DdlvfsFJhAzzluBL04KsLt7 3/pmaAOMocD2RpIXVKlUHi/09T12JhD/LJHwD8xptVtMH+b5RnZAcCdSCvO/oObq pJ+4paXLFfLUCDryTApTG1z44NJRZqXNYapDOaBRLb3CXQosT59JoMJXrCrHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoPJ4uIdSJgZVAP7jR2aNdAB2bf4wHwYDVR0j BBgwFoAUwqkKw2SBoZ7kFLtayqgAJB5XCh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4YWIzZTAtY2E2OC00MmY2LTk4ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2 NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQxRTU3MEExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkE5MEFDMzY0ODFBMTlFRTQxNEJCNUFDQUE4MDAyNDFFNTcw QTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4YWIzZTAtY2E2OC00MmY2LTk4 ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAw MjQxRTU3MEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFurR2vAbynM9RM8YoIpEpgcQgIM4qPtsSbg bL/LrcceNCmplWNShL/+Izavl8lZWr5rHG6ahoSQm3Biwuu/JXvN3gWkSfov0xJU CfxLJpo/zuKvTnxy6PcN7F5QpXceOJg3wJ4X8POHGXjryFkvzrCyZFq7IVyhaLUE 5m9jPe1dxvuFTk0CyxEVhWsVgV6A4x9P8DPNhP35slhkDLEcM+c/J+bNPZklYepN 0IaWEa47Hu8BcXRiizGQKJ2Wn076sKJD/PCJ3neeKCy5cjA1DDYGs3X1ZafWjqKy mJjTzaWyHW6AfUM7Hn4lHsIJ1s0Gwdnlpk8h+89SCBHhhr4P71Y= -----END CERTIFICATE-----Generated at Fri Sep 25 04:36:03 2026 by rpki-client