$ rpki-client -vvvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft File: 2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft (raw, json) Hash identifier: ebFBlYgBXgBbs8OFkABcKx7ibxYuTrfn7KZDlGd6TO0= Subject key identifier: 9D:AD:0E:60:C3:7A:10:0B:D3:D8:33:27:7B:90:BE:81:38:F0:4D:9C Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0 Certificate issuer: /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0 Certificate serial: 299CFC2FFE0151EEB5463C1709F644109AF7B4EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft Manifest number: BF Signing time: Mon 21 Sep 2026 14:49:53 +0000 Manifest this update: Mon 21 Sep 2026 14:44:53 +0000 Manifest next update: Tue 22 Sep 2026 16:17:53 +0000 Files and hashes: 1: 3230322e37322e3230342e302f32332d3233203d3e203538353532.roa (hash: F2TMv35JZK5AIuzdcDqCbXvGPGE/OVFOpnP/LxPgY6M=) 2: 3230322e37322e3230322e302f32342d3234203d3e203138313533.roa (hash: 08R8uow6CkDSzpj8I0I6g9tHwsOaR/O2coPRJDLApcU=) 3: 3230322e37322e3139392e302f32342d3234203d3e203538353532.roa (hash: I7aNpMfH7ZHP4Lp/vWgPFU8KVrb9zX35ePeEEjLzIes=) 4: 3230322e37322e3230332e302f32342d3234203d3e203538353532.roa (hash: iby8iV2U2RE+gf7SXobV11P3/zgUaZgIeET+QYf6T1o=) 5: 3230322e37322e3139382e302f32342d3234203d3e203538353532.roa (hash: q93DQl+hjXIQfrcVhu9DN0JHvkzY8J25CxthuhIjous=) 6: 2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl (hash: UiLuA5D46okLfjveAWqqMokCCC/8B0Vh0JxhPGsKSbc=) 7: 3230322e37322e3230342e302f32342d3234203d3e203538353532.roa (hash: 8elAsNukKO5kSDzzuWo1Aj5s9RVKBqJn0R9tAyalsQM=) 8: 3230322e37322e3230312e302f32342d3234203d3e203138313533.roa (hash: 5mZLoNgZhTm39U7OL1mXB6ctYVQTzYRY8BBmuLpMg4Y=) 9: 3230322e37322e3230362e302f32342d3234203d3e203138313533.roa (hash: rYb9medyxCLAhcgseCZT0SUDS0jCzHAqSI7lOKhEDGA=) 10: 3230322e37322e3139362e302f32342d3234203d3e203138313533.roa (hash: 0VsRrjsdIFJeamY9VCTKavELmYTFS3ilP2PUztX74Uc=) 11: 3230322e37322e3139332e302f32342d3234203d3e203138313533.roa (hash: wJ0OIiNjTdldfLYb19hTKZ+fKESqf6C7MeF3YvJI8Ys=) 12: 3230322e37322e3139342e302f32342d3234203d3e203538353532.roa (hash: x2waDxAivuzwEakd8DLbazFG/EZswmywlTtLdaU69e8=) 13: 3230322e37322e3139352e302f32342d3234203d3e203138313533.roa (hash: SCHe3hYSRhgevYCfCBUBkvtKm+wlGx7OZOfJDoM+cQk=) 14: 3230322e37322e3139322e302f32342d3234203d3e203138313533.roa (hash: 8TVATmR1OegECSp2IvjWnV4bX9F7cZu1ILCCYkpbkRs=) 15: 3230322e37322e3230372e302f32342d3234203d3e203538333839.roa (hash: WHBbJGZmdQKaYyhDTGiF9nJvtfUgtNB8fOyt7IgLmpo=) 16: 3230322e37322e3230352e302f32342d3234203d3e203538353532.roa (hash: FGoSsoOOffTNyyww3u8Ke14hUh1FetMzPI2ZAfmyzQs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 16:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:9c:fc:2f:fe:01:51:ee:b5:46:3c:17:09:f6:44:10:9a:f7:b4:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0 Validity Not Before: Sep 21 14:44:53 2026 GMT Not After : Sep 22 16:17:53 2026 GMT Subject: CN=9DAD0E60C37A100BD3D833277B90BE8138F04D9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:be:eb:19:52:3d:c9:1d:97:d2:0c:6a:b8:c2: 2d:63:d1:bd:37:50:4e:82:77:db:f7:03:93:6d:d4: 2d:96:68:ee:f5:43:a1:5a:03:66:ef:d8:7c:44:17: a3:77:1f:e4:57:aa:95:6c:a2:e0:ab:b4:a8:09:ab: a5:ad:fd:6b:42:37:59:3e:25:3f:36:0f:45:c4:95: 68:5d:82:6a:4e:bc:37:af:d4:52:dd:85:bc:1a:46: 26:f0:91:db:7c:54:ae:92:94:53:49:8b:03:cf:dc: 56:7e:87:67:b3:30:55:fb:9f:5b:6f:d2:2b:d9:0b: 8c:ed:02:32:ef:e2:98:f2:aa:05:90:49:42:cd:ec: 93:79:42:79:60:61:11:41:c2:14:a9:9b:e1:28:c4: 5f:8b:f4:75:f0:4d:b0:48:18:f7:8b:26:01:2f:dd: 7e:6a:11:24:41:b4:6d:53:e1:f4:55:a6:1f:65:5c: 3f:f4:26:2c:20:f6:1f:52:af:5b:91:57:e4:ab:4e: 52:de:7a:40:75:d0:0e:93:1d:f8:e4:4c:fc:1d:cd: a1:16:30:4a:53:23:c3:07:80:61:27:3e:37:a2:25: c3:55:20:1d:98:db:df:39:ce:51:2d:4a:f6:9e:62: b4:19:82:48:8e:fe:bd:fe:97:a3:50:e0:60:cb:dd: 0d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AD:0E:60:C3:7A:10:0B:D3:D8:33:27:7B:90:BE:81:38:F0:4D:9C X509v3 Authority Key Identifier: keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:69:46:a4:2d:3d:55:32:a1:96:3a:ee:38:fa:da:36:bb:21: 56:ae:a5:08:de:f4:2d:de:d3:be:4d:e4:f3:25:5c:a8:ae:db: 42:46:a5:f5:36:e3:26:86:05:47:03:dd:d5:90:05:e5:93:cc: 37:e3:45:eb:d4:b8:e3:cc:72:9e:61:c8:9a:7b:c4:61:79:39: 84:fc:ab:53:ce:be:6c:8c:92:34:78:69:c1:b3:fd:2d:47:75: 1e:16:46:06:5f:b5:72:4e:77:a9:54:f7:b6:c0:c3:5d:82:75: 1e:b9:82:c3:f4:e0:43:bd:c0:0f:ff:a8:b2:38:68:49:99:52: 3c:39:cc:d2:61:aa:0f:68:2e:ff:5f:dd:fa:b2:3c:91:59:ba: b0:d5:3e:d9:3b:bf:10:66:37:7d:d7:37:fb:3b:62:c5:f1:6c: 5a:8a:c3:36:18:42:28:c0:52:79:60:67:15:1b:31:2a:ea:43: 77:d7:bb:9e:0c:b3:76:6c:74:e0:2d:58:38:bd:af:7a:bd:cd: e0:ab:c7:ec:12:4f:ef:b4:9e:3f:9b:09:fd:d6:25:42:30:b6: 88:fe:8f:c8:86:e0:d4:d4:c8:63:d3:0a:8c:21:45:8f:47:ff: bc:e4:a4:b5:b3:f4:68:bd:9c:70:16:42:49:8e:86:d7:0e:b9: 89:7e:f1:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKZz8L/4BUe61RjwXCfZEEJr3tO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU3QUIxMzM1QzRFMDdDNkQzNDYxMERBNUI5MjBDNDk2 RjZCNjFEMDAeFw0yNjA5MjExNDQ0NTNaFw0yNjA5MjIxNjE3NTNaMDMxMTAvBgNV BAMTKDlEQUQwRTYwQzM3QTEwMEJEM0Q4MzMyNzdCOTBCRTgxMzhGMDREOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2vusZUj3JHZfSDGq4wi1j0b03 UE6Cd9v3A5Nt1C2WaO71Q6FaA2bv2HxEF6N3H+RXqpVsouCrtKgJq6Wt/WtCN1k+ JT82D0XElWhdgmpOvDev1FLdhbwaRibwkdt8VK6SlFNJiwPP3FZ+h2ezMFX7n1tv 0ivZC4ztAjLv4pjyqgWQSULN7JN5QnlgYRFBwhSpm+EoxF+L9HXwTbBIGPeLJgEv 3X5qESRBtG1T4fRVph9lXD/0Jiwg9h9Sr1uRV+SrTlLeekB10A6THfjkTPwdzaEW MEpTI8MHgGEnPjeiJcNVIB2Y2985zlEtSvaeYrQZgkiO/r3+l6NQ4GDL3Q3pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUna0OYMN6EAvT2DMne5C+gTjwTZwwHwYDVR0j BBgwFoAULnqxM1xOB8bTRhDaW5IMSW9rYdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjlhY2I0YTgtNzgwNC00NTI2LTg0ZDItODY5YjkxYTY3MTlkLzAvMkU3QUIxMzM1 QzRFMDdDNkQzNDYxMERBNUI5MjBDNDk2RjZCNjFEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTdBQjEzMzVDNEUwN0M2RDM0NjEwREE1QjkyMEM0OTZGNkI2 MUQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjlhY2I0YTgtNzgwNC00NTI2LTg0 ZDItODY5YjkxYTY3MTlkLzAvMkU3QUIxMzM1QzRFMDdDNkQzNDYxMERBNUI5MjBD NDk2RjZCNjFEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlpRqQtPVUyoZY67jj62ja7IVaupQje9C3e 075N5PMlXKiu20JGpfU24yaGBUcD3dWQBeWTzDfjRevUuOPMcp5hyJp7xGF5OYT8 q1POvmyMkjR4acGz/S1HdR4WRgZftXJOd6lU97bAw12CdR65gsP04EO9wA//qLI4 aEmZUjw5zNJhqg9oLv9f3fqyPJFZurDVPtk7vxBmN33XN/s7YsXxbFqKwzYYQijA UnlgZxUbMSrqQ3fXu54Ms3ZsdOAtWDi9r3q9zeCrx+wST++0nj+bCf3WJUIwtoj+ j8iG4NTUyGPTCowhRY9H/7zkpLWz9Gi9nHAWQkmOhtcOuYl+8cA= -----END CERTIFICATE-----Generated at Tue Sep 22 01:15:51 2026 by rpki-client