$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft File: 2C1233B548C07507C6EF58E2A03DD8309F820753.mft (raw, json) Hash identifier: EGyeVwpPFCVdedahYXraXu1k170126bZojTwI0KPl/o= Subject key identifier: 9B:20:16:AC:60:4F:B8:6B:5F:17:FB:BB:77:06:99:65:AF:A2:46:7E Authority key identifier: 2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53 Certificate issuer: /CN=2C1233B548C07507C6EF58E2A03DD8309F820753 Certificate serial: 3889C7197BD0739CC7BE830F1E180FAB6E7B3BFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft Manifest number: BE Signing time: Mon 21 Sep 2026 04:57:42 +0000 Manifest this update: Mon 21 Sep 2026 04:52:42 +0000 Manifest next update: Tue 22 Sep 2026 08:40:42 +0000 Files and hashes: 1: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: bvFzrT6armN3+NSh25eEAeVsS6vGdsFIsCLC0MUnl3s=) 2: 2C1233B548C07507C6EF58E2A03DD8309F820753.crl (hash: FhmEkC8TkxTFXDTppDz0fPbxo+2KfY5aWJatkUAJbKM=) 3: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 0GUMhzS+5NIthW1wvl37lL5c5ztTRVnrHP+oCvOX4MA=) 4: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: /6iiyBTTzA+gJYo5W8sFnueJYX/K6dQcso0XDUc2u/0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 08:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:89:c7:19:7b:d0:73:9c:c7:be:83:0f:1e:18:0f:ab:6e:7b:3b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C1233B548C07507C6EF58E2A03DD8309F820753 Validity Not Before: Sep 21 04:52:42 2026 GMT Not After : Sep 22 08:40:42 2026 GMT Subject: CN=9B2016AC604FB86B5F17FBBB77069965AFA2467E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2a:39:05:2b:16:f7:67:e6:0b:1e:da:e9:3f: 93:c3:f0:fc:7d:23:a0:bf:17:00:90:53:91:3d:91: 32:3a:7a:56:0c:94:41:88:c1:0a:68:38:80:28:a2: 34:7c:92:27:53:c8:8c:d3:d0:61:a5:2c:d6:2a:fc: f2:fd:f2:e7:36:36:e9:f4:a0:83:dd:9c:7a:58:50: c6:1d:5e:19:8c:d8:8e:13:82:89:ce:0b:26:2c:d4: 1f:15:de:a8:15:ad:a7:3a:d7:d6:12:20:9d:d8:6f: 28:7f:8c:34:67:09:a7:60:36:26:6d:0b:b2:7e:a7: 2c:e7:a7:7d:c1:47:ac:7f:28:95:fa:79:2b:53:52: 70:56:0d:50:49:1f:f0:aa:3a:7d:65:2e:dc:78:60: 4c:5a:41:03:c8:97:8a:80:a0:43:18:1d:a9:84:09: a6:11:0b:e6:01:d2:97:36:3b:be:a8:88:5e:e1:fc: 81:3b:22:6c:8e:93:c2:09:e0:8f:0c:e6:11:c2:e4: 15:94:97:3f:1e:ba:bf:3e:00:d4:2b:8a:a7:3f:be: 32:55:cd:b6:b6:f8:1e:e5:14:67:f1:c7:4e:12:5f: 4f:de:fe:ee:7a:2b:7d:f1:4b:91:87:85:af:1d:47: a3:62:31:fc:c9:36:86:b2:7c:5f:60:cb:3c:3b:64: 15:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:20:16:AC:60:4F:B8:6B:5F:17:FB:BB:77:06:99:65:AF:A2:46:7E X509v3 Authority Key Identifier: keyid:2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:25:08:2f:ba:f1:5e:11:fb:80:9f:69:43:14:9f:cf:56:a4: 38:da:04:9d:1a:8e:35:f6:05:18:96:29:67:13:9f:f7:78:4d: 90:f9:8f:39:33:75:55:30:c9:51:0a:d7:63:ff:a0:3c:a6:13: e5:9d:1a:7c:d0:66:0c:c2:4f:9a:48:49:a3:70:cc:02:a8:b6: 35:56:e2:4a:7d:27:8b:ac:09:61:e9:c8:0c:7d:5a:a8:5d:6d: 6a:e9:f0:fe:b4:aa:80:78:98:73:59:6f:63:c3:17:40:98:be: e1:cf:52:2e:ed:73:f4:e9:a3:85:b1:51:66:25:be:ac:f4:de: 4c:eb:47:b9:66:96:56:c8:63:45:ba:6b:d2:5e:18:3f:8c:a5: 0a:55:00:a2:50:7b:3d:71:77:fd:62:5d:b7:2f:4d:50:d2:c9: 3b:cb:5c:52:99:b6:a5:ab:bb:a8:95:ad:03:f2:4c:a2:40:a5: e4:26:04:f9:15:a3:f4:95:a3:78:22:f3:77:ad:0d:37:d2:0b: f7:aa:6e:3d:da:11:cf:49:44:a9:53:a8:92:59:93:cf:b5:68: b1:4d:ce:58:a6:fc:28:5b:4f:cb:0c:0d:50:0a:f3:43:4c:ed: 30:36:b6:0a:be:3b:0d:4a:0b:a0:8e:69:46:cf:4b:65:b8:8e: 0f:63:c4:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOInHGXvQc5zHvoMPHhgPq257O/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMxMjMzQjU0OEMwNzUwN0M2RUY1OEUyQTAzREQ4MzA5 RjgyMDc1MzAeFw0yNjA5MjEwNDUyNDJaFw0yNjA5MjIwODQwNDJaMDMxMTAvBgNV BAMTKDlCMjAxNkFDNjA0RkI4NkI1RjE3RkJCQjc3MDY5OTY1QUZBMjQ2N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAKjkFKxb3Z+YLHtrpP5PD8Px9 I6C/FwCQU5E9kTI6elYMlEGIwQpoOIAoojR8kidTyIzT0GGlLNYq/PL98uc2Nun0 oIPdnHpYUMYdXhmM2I4TgonOCyYs1B8V3qgVrac619YSIJ3Ybyh/jDRnCadgNiZt C7J+pyznp33BR6x/KJX6eStTUnBWDVBJH/CqOn1lLtx4YExaQQPIl4qAoEMYHamE CaYRC+YB0pc2O76oiF7h/IE7ImyOk8IJ4I8M5hHC5BWUlz8eur8+ANQriqc/vjJV zba2+B7lFGfxx04SX0/e/u56K33xS5GHha8dR6NiMfzJNoayfF9gyzw7ZBXLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmyAWrGBPuGtfF/u7dwaZZa+iRn4wHwYDVR0j BBgwFoAULBIztUjAdQfG71jioD3YMJ+CB1MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTFlOTQyNDMtODdmMC00MjZmLWE5Y2EtNGMxOWVkYjA2YjQyLzAvMkMxMjMzQjU0 OEMwNzUwN0M2RUY1OEUyQTAzREQ4MzA5RjgyMDc1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQzEyMzNCNTQ4QzA3NTA3QzZFRjU4RTJBMDNERDgzMDlGODIw NzUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5 Y2EtNGMxOWVkYjA2YjQyLzAvMkMxMjMzQjU0OEMwNzUwN0M2RUY1OEUyQTAzREQ4 MzA5RjgyMDc1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHolCC+68V4R+4CfaUMUn89WpDjaBJ0ajjX2 BRiWKWcTn/d4TZD5jzkzdVUwyVEK12P/oDymE+WdGnzQZgzCT5pISaNwzAKotjVW 4kp9J4usCWHpyAx9WqhdbWrp8P60qoB4mHNZb2PDF0CYvuHPUi7tc/Tpo4WxUWYl vqz03kzrR7lmllbIY0W6a9JeGD+MpQpVAKJQez1xd/1iXbcvTVDSyTvLXFKZtqWr u6iVrQPyTKJApeQmBPkVo/SVo3gi83etDTfSC/eqbj3aEc9JRKlTqJJZk8+1aLFN zlim/ChbT8sMDVAK80NM7TA2tgq+Ow1KC6COaUbPS2W4jg9jxLQ= -----END CERTIFICATE-----Generated at Tue Sep 22 00:51:19 2026 by rpki-client