$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft File: 2DFA9ABE82F079690092186CFE591462760D0F8A.mft (raw, json) Hash identifier: VvRK52yrVcoCgFZN8bRKID9AMnmBWrVt29pQO7EZCvE= Subject key identifier: 20:89:D6:A4:61:6C:56:D6:54:83:1E:AE:1D:59:EE:1E:73:3C:94:91 Authority key identifier: 2D:FA:9A:BE:82:F0:79:69:00:92:18:6C:FE:59:14:62:76:0D:0F:8A Certificate issuer: /CN=2DFA9ABE82F079690092186CFE591462760D0F8A Certificate serial: 6BB9CE87887D8D75F9C8D14E4CB5C6D16B7721A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft Manifest number: D6 Signing time: Sat 10 Oct 2026 00:02:30 +0000 Manifest this update: Fri 09 Oct 2026 23:57:30 +0000 Manifest next update: Sun 11 Oct 2026 02:54:30 +0000 Files and hashes: 1: 2DFA9ABE82F079690092186CFE591462760D0F8A.crl (hash: 7kQFEYbA+XbFnbgfxW9BWrS9lwfb12wWsEOiIwe76Fc=) 2: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: W/hw+IjAyZrPFulBFkYLnFPX3SzGksOOsryB2xI+HDo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.crl rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 02:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b9:ce:87:88:7d:8d:75:f9:c8:d1:4e:4c:b5:c6:d1:6b:77:21:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFA9ABE82F079690092186CFE591462760D0F8A Validity Not Before: Oct 9 23:57:30 2026 GMT Not After : Oct 11 02:54:30 2026 GMT Subject: CN=2089D6A4616C56D654831EAE1D59EE1E733C9491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f2:53:47:9e:b0:6b:f3:aa:04:51:eb:3e:17: 08:fe:b2:57:a8:40:20:73:59:d9:29:97:3f:5b:6f: 5c:b9:27:f6:8b:c2:97:6f:16:86:05:9d:30:6e:37: c3:0c:98:a1:d6:41:21:b7:93:e8:c2:06:38:81:37: 4f:c3:b0:e4:e8:86:25:49:05:0a:64:af:40:08:b6: e4:01:14:e7:94:1c:07:1b:f9:5f:a5:c9:dc:57:65: ba:58:e1:d6:6d:1b:d2:dc:90:41:ca:a3:dd:52:06: b5:88:5a:1a:8a:78:4b:46:ab:a7:e7:96:ac:41:8d: 50:b3:8b:96:87:95:d4:48:35:f6:40:bf:27:cf:74: 89:5f:17:95:c7:5f:62:74:71:00:e9:42:2d:52:fa: a1:ae:62:65:23:ea:f7:63:b8:2d:1d:9c:56:cf:70: 63:08:88:cf:9a:8a:bc:f3:b5:6b:c7:ca:74:e4:c4: d7:b6:14:3b:a6:13:37:cb:e2:2b:dd:9c:31:02:e0: f7:a4:c2:24:b2:b4:58:c4:87:e3:8d:6f:34:07:61: f1:7d:c2:93:d3:4d:f8:f4:51:b5:8a:46:84:81:b3: 01:a3:45:8e:cf:80:06:9e:fd:e1:9f:30:24:87:ca: 57:f1:c9:1a:7d:ac:14:90:99:c8:20:4a:a3:45:d9: c9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:89:D6:A4:61:6C:56:D6:54:83:1E:AE:1D:59:EE:1E:73:3C:94:91 X509v3 Authority Key Identifier: keyid:2D:FA:9A:BE:82:F0:79:69:00:92:18:6C:FE:59:14:62:76:0D:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:47:d6:e0:0e:2c:57:ed:be:df:d4:ce:91:f7:af:7d:5e:e8: 9d:d4:a8:70:a6:c8:90:0b:e7:db:76:d6:ab:ed:54:c9:84:30: de:23:70:41:71:9a:4c:7f:a7:18:dc:91:52:46:15:70:2c:d6: 5c:27:2f:04:33:2f:69:74:0e:8e:db:5f:9d:4f:06:58:ea:26: 56:f1:7b:06:1b:7d:27:da:73:bb:68:08:cb:1d:2f:58:e1:86: 04:82:a4:40:df:17:44:ff:d7:cc:09:46:e3:90:d5:b5:64:6e: 93:c9:d6:31:02:b3:2c:a9:b0:7f:31:86:69:d1:96:b8:b4:8d: 1c:02:6a:de:e8:9d:3e:f4:5d:02:4e:7f:2d:60:9e:d6:13:97: 23:45:e6:cf:7f:0e:87:2b:04:83:c9:21:2b:87:7f:f1:05:4c: 9b:a3:4b:3d:b6:44:4d:76:d4:f7:ac:29:bd:48:9f:d2:22:07: 54:90:15:a1:79:e1:79:b8:79:3f:4c:ba:1e:77:44:ea:a3:f6: 81:25:49:b8:8f:e6:c6:7a:d2:d3:d7:18:bf:f3:30:fb:83:e8: 8d:b5:99:d6:2f:bf:dc:a0:dc:ec:5c:ef:a6:9e:76:77:08:5f: 8b:a3:f0:e9:f4:09:40:6f:9c:e4:2d:f8:ee:0e:65:7b:df:d9: f6:bd:4a:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa7nOh4h9jXX5yNFOTLXG0Wt3IaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQTlBQkU4MkYwNzk2OTAwOTIxODZDRkU1OTE0NjI3 NjBEMEY4QTAeFw0yNjEwMDkyMzU3MzBaFw0yNjEwMTEwMjU0MzBaMDMxMTAvBgNV BAMTKDIwODlENkE0NjE2QzU2RDY1NDgzMUVBRTFENTlFRTFFNzMzQzk0OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw8lNHnrBr86oEUes+Fwj+sleo QCBzWdkplz9bb1y5J/aLwpdvFoYFnTBuN8MMmKHWQSG3k+jCBjiBN0/DsOTohiVJ BQpkr0AItuQBFOeUHAcb+V+lydxXZbpY4dZtG9LckEHKo91SBrWIWhqKeEtGq6fn lqxBjVCzi5aHldRINfZAvyfPdIlfF5XHX2J0cQDpQi1S+qGuYmUj6vdjuC0dnFbP cGMIiM+airzztWvHynTkxNe2FDumEzfL4ivdnDEC4PekwiSytFjEh+ONbzQHYfF9 wpPTTfj0UbWKRoSBswGjRY7PgAae/eGfMCSHylfxyRp9rBSQmcggSqNF2cntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIInWpGFsVtZUgx6uHVnuHnM8lJEwHwYDVR0j BBgwFoAULfqavoLweWkAkhhs/lkUYnYND4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGNjYzJhZjQtYTYyZC00NzA4LWI2ODgtMTg5MjU5NGJhOTg5LzAvMkRGQTlBQkU4 MkYwNzk2OTAwOTIxODZDRkU1OTE0NjI3NjBEMEY4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREZBOUFCRTgyRjA3OTY5MDA5MjE4NkNGRTU5MTQ2Mjc2MEQw RjhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvMkRGQTlBQkU4MkYwNzk2OTAwOTIxODZDRkU1OTE0 NjI3NjBEMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRH1uAOLFftvt/UzpH3r31e6J3UqHCmyJAL 59t21qvtVMmEMN4jcEFxmkx/pxjckVJGFXAs1lwnLwQzL2l0Do7bX51PBljqJlbx ewYbfSfac7toCMsdL1jhhgSCpEDfF0T/18wJRuOQ1bVkbpPJ1jECsyypsH8xhmnR lri0jRwCat7onT70XQJOfy1gntYTlyNF5s9/DocrBIPJISuHf/EFTJujSz22RE12 1PesKb1In9IiB1SQFaF54Xm4eT9Muh53ROqj9oElSbiP5sZ60tPXGL/zMPuD6I21 mdYvv9yg3Oxc76aedncIX4uj8On0CUBvnOQt+O4OZXvf2fa9Sqo= -----END CERTIFICATE-----Generated at Sat Oct 10 13:59:54 2026 by rpki-client