$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft File: 2DFC13D85715AA04782C2A3D86F83844385F896D.mft (raw, json) Hash identifier: Wl0Qwdrujn0cJcg+SaYUDqWNAYt9JkRaqNFj6ISslog= Subject key identifier: 7B:20:F0:A9:F4:F9:7C:13:EE:7B:12:12:4E:46:AB:32:9C:8B:90:3A Authority key identifier: 2D:FC:13:D8:57:15:AA:04:78:2C:2A:3D:86:F8:38:44:38:5F:89:6D Certificate issuer: /CN=2DFC13D85715AA04782C2A3D86F83844385F896D Certificate serial: 1375A615576ADF05E6C32C93FD127D6FA5E102C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:48:42 +0000 Manifest this update: Mon 21 Sep 2026 13:43:42 +0000 Manifest next update: Tue 22 Sep 2026 15:43:42 +0000 Files and hashes: 1: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: 2yToa31P3viNdlJSz6LX8aSdNJBJoeEJaRZoiY3wK8c=) 2: 2DFC13D85715AA04782C2A3D86F83844385F896D.crl (hash: WWhY/0gtRJahNZiwug7QVTcfBF24PamNPu4c51z5iIM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.crl rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:75:a6:15:57:6a:df:05:e6:c3:2c:93:fd:12:7d:6f:a5:e1:02:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFC13D85715AA04782C2A3D86F83844385F896D Validity Not Before: Sep 21 13:43:42 2026 GMT Not After : Sep 22 15:43:42 2026 GMT Subject: CN=7B20F0A9F4F97C13EE7B12124E46AB329C8B903A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:0f:80:ec:17:f6:fb:88:02:5d:2e:1e:b2: aa:0f:5a:53:46:39:c6:33:32:23:58:23:65:c8:b5: 14:ab:67:b9:3a:05:59:b2:9f:39:b9:d8:e8:6f:d9: 3e:71:f3:cc:8d:fa:02:a8:ee:18:86:cf:a6:ed:ad: 18:24:c9:4e:49:cf:35:ee:9c:e7:4e:d4:33:95:b2: ae:2c:34:bf:f0:e8:6f:46:a5:b1:5d:fe:b3:59:7c: d2:49:93:f9:cc:42:2e:43:25:36:3b:8d:86:06:0b: bb:a1:e9:26:71:44:82:0e:b4:e5:25:00:90:1a:61: d1:6c:1b:85:93:ce:b5:d8:b9:bd:bf:85:3c:1c:aa: 3e:c3:ba:10:03:d5:98:5a:43:9e:07:25:48:66:7f: f4:e0:e4:98:92:09:74:b8:f4:64:2a:45:3d:b9:4d: 6a:40:ab:15:bc:2d:28:5e:f6:e4:8d:b9:6a:22:56: d8:f6:9e:bc:6f:bb:55:62:7a:a7:c9:d6:64:57:f5: c0:10:27:e8:15:20:91:1e:08:9b:05:78:ff:66:d3: de:fb:4b:a9:70:16:6c:bb:8c:68:7c:f3:de:32:52: 18:e5:e4:3b:4f:ef:14:94:c2:21:e3:fd:01:f2:7f: ca:81:5c:e4:bb:21:1c:27:7e:11:24:ff:13:d2:2c: 3e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:20:F0:A9:F4:F9:7C:13:EE:7B:12:12:4E:46:AB:32:9C:8B:90:3A X509v3 Authority Key Identifier: keyid:2D:FC:13:D8:57:15:AA:04:78:2C:2A:3D:86:F8:38:44:38:5F:89:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:53:22:5a:62:ca:fc:19:d7:88:9a:99:66:27:10:fc:79:26: 28:59:1d:85:fa:d0:6f:69:21:e4:83:64:91:5f:18:fb:ab:7c: e1:2d:e4:5b:e0:08:da:3b:61:f7:30:d9:6a:02:e0:a1:0c:68: d7:cf:1b:17:f9:e4:cc:76:67:c8:ca:14:57:c4:2c:17:82:c3: 6a:43:ae:ac:a0:2e:ed:43:07:34:c5:1b:5d:c2:a5:6c:85:9c: 76:b1:86:e6:7b:87:3d:9d:9e:81:b0:81:dc:6c:7f:71:42:a7: 3a:78:d0:c4:fe:3d:44:1d:c8:b2:1e:c0:31:f6:85:b6:dc:80: 3c:52:3e:20:45:8d:c5:9f:d7:f5:a3:68:bd:a2:6b:78:1e:be: ce:1e:50:71:88:66:25:f3:9b:db:7e:d8:92:5e:14:02:c5:ca: b3:0f:d4:bc:8c:c8:1d:56:ad:df:ab:37:d9:b2:94:90:ff:8f: 5b:85:1b:a0:a7:d3:7b:51:90:4f:08:1e:a8:13:8f:f1:5f:a7: 6d:eb:e0:7d:5a:60:24:e5:4d:a3:ee:4b:1a:d8:38:56:60:1e: 76:55:8a:28:59:9a:4a:1f:88:1d:0b:00:e5:6a:7e:9a:a9:b8: d6:df:35:7b:1a:f0:a0:41:20:01:5e:06:6e:25:39:fc:ae:20: 37:1e:a7:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE3WmFVdq3wXmwyyT/RJ9b6XhAsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQzEzRDg1NzE1QUEwNDc4MkMyQTNEODZGODM4NDQz ODVGODk2RDAeFw0yNjA5MjExMzQzNDJaFw0yNjA5MjIxNTQzNDJaMDMxMTAvBgNV BAMTKDdCMjBGMEE5RjRGOTdDMTNFRTdCMTIxMjRFNDZBQjMyOUM4QjkwM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPA+A7Bf2+4gCXS4esqoPWlNG OcYzMiNYI2XItRSrZ7k6BVmynzm52Ohv2T5x88yN+gKo7hiGz6btrRgkyU5JzzXu nOdO1DOVsq4sNL/w6G9GpbFd/rNZfNJJk/nMQi5DJTY7jYYGC7uh6SZxRIIOtOUl AJAaYdFsG4WTzrXYub2/hTwcqj7DuhAD1ZhaQ54HJUhmf/Tg5JiSCXS49GQqRT25 TWpAqxW8LShe9uSNuWoiVtj2nrxvu1VieqfJ1mRX9cAQJ+gVIJEeCJsFeP9m0977 S6lwFmy7jGh8894yUhjl5DtP7xSUwiHj/QHyf8qBXOS7IRwnfhEk/xPSLD6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeyDwqfT5fBPuexISTkarMpyLkDowHwYDVR0j BBgwFoAULfwT2FcVqgR4LCo9hvg4RDhfiW0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTliMDdhOWUtNjJkZi00ODA4LTlkMmEtYTZlNjg4NGJjYmJiLzAvMkRGQzEzRDg1 NzE1QUEwNDc4MkMyQTNEODZGODM4NDQzODVGODk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yREZDMTNEODU3MTVBQTA0NzgyQzJBM0Q4NkY4Mzg0NDM4NUY4 OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvMkRGQzEzRDg1NzE1QUEwNDc4MkMyQTNEODZGODM4 NDQzODVGODk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxTIlpiyvwZ14iamWYnEPx5JihZHYX60G9p IeSDZJFfGPurfOEt5FvgCNo7Yfcw2WoC4KEMaNfPGxf55Mx2Z8jKFFfELBeCw2pD rqygLu1DBzTFG13CpWyFnHaxhuZ7hz2dnoGwgdxsf3FCpzp40MT+PUQdyLIewDH2 hbbcgDxSPiBFjcWf1/WjaL2ia3gevs4eUHGIZiXzm9t+2JJeFALFyrMP1LyMyB1W rd+rN9mylJD/j1uFG6Cn03tRkE8IHqgTj/Ffp23r4H1aYCTlTaPuSxrYOFZgHnZV iihZmkofiB0LAOVqfpqpuNbfNXsa8KBBIAFeBm4lOfyuIDcep7Y= -----END CERTIFICATE-----Generated at Mon Sep 21 19:41:47 2026 by rpki-client