$ rpki-client -vvvf rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft File: 2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft (raw, json) Hash identifier: Bmt+mHhKYl+UnQvUVmso90A6W2sAF7wylT92v5BDOFc= Subject key identifier: 9A:B3:E7:CA:73:EF:9D:92:4C:9C:D3:F3:49:80:4A:E8:D1:10:93:20 Authority key identifier: 24:69:BE:3E:79:EE:62:4D:E9:C3:D6:D6:30:7B:64:82:C1:DE:83:2E Certificate issuer: /CN=2469BE3E79EE624DE9C3D6D6307B6482C1DE832E Certificate serial: 4FA6B099F4621130C5B3745B7FDA477165977B32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 04:05:43 +0000 Manifest this update: Thu 24 Sep 2026 04:00:43 +0000 Manifest next update: Fri 25 Sep 2026 07:18:43 +0000 Files and hashes: 1: 3130332e3134382e3139322e302f32332d3233203d3e20313339393935.roa (hash: IoDA8uRnuH2Y6CGJmD83Fs8xZFkU0MuwdHuMYgo3MNI=) 2: 323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa (hash: kBjc6OXZ/6vxacL9UgjRAviZ4OmFuFSXJVueUFg8fnE=) 3: 2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.crl (hash: tBeUx61lJtVJX1YIdPpDrmuh9wstx37HNEuEez7GVAQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.crl rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a6:b0:99:f4:62:11:30:c5:b3:74:5b:7f:da:47:71:65:97:7b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2469BE3E79EE624DE9C3D6D6307B6482C1DE832E Validity Not Before: Sep 24 04:00:43 2026 GMT Not After : Sep 25 07:18:43 2026 GMT Subject: CN=9AB3E7CA73EF9D924C9CD3F349804AE8D1109320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d5:4c:9e:73:e4:2f:52:42:26:8a:a3:02:29: bb:0d:fc:69:ff:b4:73:31:cf:e7:94:83:63:65:a6: eb:53:b2:47:fb:c5:ea:1f:d9:0b:73:39:6a:5d:42: 96:56:c6:0a:d9:b4:e9:8c:e3:dd:fa:d0:d8:19:b4: 53:f0:85:2e:39:a9:56:a9:04:cb:d9:eb:89:fb:c0: 82:01:eb:4a:65:69:77:44:47:15:c7:b5:3f:0f:b9: a1:23:1f:e2:33:09:ec:0c:e3:f1:04:2d:3f:e5:36: 92:c1:a3:30:89:8c:98:81:b5:0e:18:53:83:ce:74: ae:76:82:81:74:aa:03:25:5f:6b:7e:80:57:3f:76: cc:92:6d:23:c4:84:cc:ee:8c:0a:af:92:a4:22:fc: 2f:d1:9e:a6:f9:1e:ee:d6:28:c1:40:f1:17:b9:e4: 27:20:1d:92:10:e4:ad:ec:e1:5e:54:df:af:b8:63: 5f:7b:9a:cf:d1:8a:a0:02:61:64:d6:78:bb:92:ba: 57:40:cd:b0:4b:1f:14:30:e6:71:39:4a:90:41:9e: 76:62:a0:12:e8:77:6a:7e:c4:69:d6:51:d9:c1:46: cd:b8:ec:1e:69:cc:f2:1d:07:16:8c:3d:30:4e:65: 8c:e5:1a:c3:9a:e6:1b:9c:3a:6b:f4:5d:1e:59:16: a6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B3:E7:CA:73:EF:9D:92:4C:9C:D3:F3:49:80:4A:E8:D1:10:93:20 X509v3 Authority Key Identifier: keyid:24:69:BE:3E:79:EE:62:4D:E9:C3:D6:D6:30:7B:64:82:C1:DE:83:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:5a:9d:c3:c3:c2:87:a8:fb:af:3d:50:7a:c8:55:56:99:0a: aa:66:b3:b5:8b:8c:ec:a9:e5:dc:3a:02:de:af:af:2c:b8:36: a4:30:24:f0:fb:9a:80:95:5d:34:dc:59:0c:70:28:98:21:99: 74:da:1e:c5:9b:7e:de:82:a9:83:2b:03:12:eb:9c:86:66:2d: 0e:89:88:74:8f:32:83:1c:6e:34:b1:fd:f8:d4:eb:d7:2a:d4: 73:73:92:de:c9:96:50:04:e7:e7:89:fe:6b:62:a7:db:40:04: 56:df:5a:dd:90:13:89:b5:b0:2b:e0:a9:ff:9c:6e:c6:b9:41: 85:37:9d:40:54:c3:54:ee:29:19:64:57:af:90:eb:4d:c7:82: 04:fa:6d:81:61:86:2b:73:e4:32:dd:aa:c5:81:e0:c9:01:9a: 79:86:a2:3a:9a:13:0d:d2:b4:c1:3e:72:bc:d1:a2:da:b0:50: 4b:9d:06:ba:45:d5:ab:73:f1:2a:3e:6f:dc:77:e3:a7:98:91: 2d:2d:3c:11:3b:43:b4:dd:6c:ac:c2:1e:07:16:a7:39:96:da: 41:bf:d8:9a:7f:b7:fd:66:5e:a9:cc:9e:2f:24:87:11:ec:a5: 46:88:33:3e:cf:6c:02:d9:da:be:d2:bf:09:c0:b8:e8:f6:2f: 9d:6d:66:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6awmfRiETDFs3Rbf9pHcWWXezIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ2OUJFM0U3OUVFNjI0REU5QzNENkQ2MzA3QjY0ODJD MURFODMyRTAeFw0yNjA5MjQwNDAwNDNaFw0yNjA5MjUwNzE4NDNaMDMxMTAvBgNV BAMTKDlBQjNFN0NBNzNFRjlEOTI0QzlDRDNGMzQ5ODA0QUU4RDExMDkzMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF1Uyec+QvUkImiqMCKbsN/Gn/ tHMxz+eUg2NlputTskf7xeof2QtzOWpdQpZWxgrZtOmM49360NgZtFPwhS45qVap BMvZ64n7wIIB60plaXdERxXHtT8PuaEjH+IzCewM4/EELT/lNpLBozCJjJiBtQ4Y U4POdK52goF0qgMlX2t+gFc/dsySbSPEhMzujAqvkqQi/C/Rnqb5Hu7WKMFA8Re5 5CcgHZIQ5K3s4V5U36+4Y197ms/RiqACYWTWeLuSuldAzbBLHxQw5nE5SpBBnnZi oBLod2p+xGnWUdnBRs247B5pzPIdBxaMPTBOZYzlGsOa5hucOmv0XR5ZFqbNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmrPnynPvnZJMnNPzSYBK6NEQkyAwHwYDVR0j BBgwFoAUJGm+PnnuYk3pw9bWMHtkgsHegy4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjBiNTkwZTgtNGY4OS00Nzg1LWFlNzktMmJmZmZhMmM1MmM5LzAvMjQ2OUJFM0U3 OUVFNjI0REU5QzNENkQ2MzA3QjY0ODJDMURFODMyRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDY5QkUzRTc5RUU2MjRERTlDM0Q2RDYzMDdCNjQ4MkMxREU4 MzJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjBiNTkwZTgtNGY4OS00Nzg1LWFl NzktMmJmZmZhMmM1MmM5LzAvMjQ2OUJFM0U3OUVFNjI0REU5QzNENkQ2MzA3QjY0 ODJDMURFODMyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxancPDwoeo+689UHrIVVaZCqpms7WLjOyp 5dw6At6vryy4NqQwJPD7moCVXTTcWQxwKJghmXTaHsWbft6CqYMrAxLrnIZmLQ6J iHSPMoMcbjSx/fjU69cq1HNzkt7JllAE5+eJ/mtip9tABFbfWt2QE4m1sCvgqf+c bsa5QYU3nUBUw1TuKRlkV6+Q603HggT6bYFhhitz5DLdqsWB4MkBmnmGojqaEw3S tME+crzRotqwUEudBrpF1atz8So+b9x346eYkS0tPBE7Q7TdbKzCHgcWpzmW2kG/ 2Jp/t/1mXqnMni8khxHspUaIMz7PbALZ2r7SvwnAuOj2L51tZrw= -----END CERTIFICATE-----Generated at Thu Sep 24 23:12:58 2026 by rpki-client