$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft File: 2BF94227A09D96F51AE8819B28CA3696003CBC60.mft (raw, json) Hash identifier: vaK+au8hPKLTvW8c64AaHR48SqHrT0xJtDENzGsx0lI= Subject key identifier: AE:A9:A8:0D:58:67:A9:3B:B1:39:5C:F3:3C:D4:A0:E3:0C:04:C9:42 Authority key identifier: 2B:F9:42:27:A0:9D:96:F5:1A:E8:81:9B:28:CA:36:96:00:3C:BC:60 Certificate issuer: /CN=2BF94227A09D96F51AE8819B28CA3696003CBC60 Certificate serial: 54F3AAB276A471160794EB1D5C097542F843E499 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft Manifest number: BC Signing time: Sun 20 Sep 2026 22:19:26 +0000 Manifest this update: Sun 20 Sep 2026 22:14:26 +0000 Manifest next update: Mon 21 Sep 2026 23:42:26 +0000 Files and hashes: 1: 2BF94227A09D96F51AE8819B28CA3696003CBC60.crl (hash: w8cKdummGrEQj90BoFOZ+dolIw6i/kf9s8QuXX6iykk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.crl rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 23:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f3:aa:b2:76:a4:71:16:07:94:eb:1d:5c:09:75:42:f8:43:e4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BF94227A09D96F51AE8819B28CA3696003CBC60 Validity Not Before: Sep 20 22:14:26 2026 GMT Not After : Sep 21 23:42:26 2026 GMT Subject: CN=AEA9A80D5867A93BB1395CF33CD4A0E30C04C942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8d:d0:4e:88:bc:cf:67:8a:dc:0c:2f:1b:c2: 85:88:91:39:7f:7d:2a:e4:a6:10:bb:71:72:4e:f3: 7d:f4:2e:c1:02:40:91:17:d3:15:27:02:e2:dc:90: 63:39:be:64:e4:c5:d2:d1:3f:3e:3d:35:48:59:1e: 98:1a:d1:5f:56:30:5c:5a:2d:84:1f:f6:59:58:6b: 69:f7:a1:6b:68:d8:31:e0:9c:a3:75:33:5a:d4:4a: b6:67:7d:a6:ef:fe:3c:fc:7d:f8:aa:8c:c1:6c:f3: 26:e4:03:44:67:dd:cf:3a:e7:52:15:79:b7:0a:b9: 4e:49:48:32:32:32:1d:12:ec:ed:45:fa:a4:a7:b5: 3c:47:bc:85:0a:b0:31:62:3d:1c:0a:9b:ad:22:1a: 4f:7e:ab:4e:17:4a:37:62:3e:e5:de:7b:cf:0a:8f: 7e:1b:8a:7a:6d:d1:13:47:e2:f5:1a:53:13:91:df: ab:5f:a0:ee:54:27:25:2d:9d:1e:8d:b0:6c:ec:32: d5:b1:ce:49:1b:5b:39:f7:ef:5b:9d:49:34:20:52: 95:e5:be:45:f1:9f:d0:13:44:74:82:fb:0a:e5:16: ef:04:08:aa:4d:23:3d:8c:83:e7:b3:89:01:1a:0a: 52:78:33:ee:15:2b:7c:16:ce:a2:58:fb:16:69:e7: c4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A9:A8:0D:58:67:A9:3B:B1:39:5C:F3:3C:D4:A0:E3:0C:04:C9:42 X509v3 Authority Key Identifier: keyid:2B:F9:42:27:A0:9D:96:F5:1A:E8:81:9B:28:CA:36:96:00:3C:BC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:46:33:27:d9:6a:34:60:01:ee:04:8e:cf:37:0f:37:30:25: c7:f8:7e:72:de:fe:79:a8:6a:f3:ae:9d:5a:13:48:62:a1:84: 58:c2:a7:d1:3f:ae:7a:fa:d7:51:6c:52:57:fd:24:7e:2f:c2: 38:ca:16:d2:83:aa:68:7c:fa:7d:61:f9:5e:43:0d:88:6a:1a: 29:06:7e:a5:2f:1c:72:30:84:88:73:89:63:36:9f:63:53:77: 6b:e6:81:89:c4:c7:2e:28:71:94:63:3c:7e:19:6d:6e:52:51: a8:c2:91:07:6d:75:8f:c3:d4:25:9c:c3:76:5e:eb:e3:c5:68: 71:11:47:5f:fd:f0:5c:90:37:68:c9:11:98:18:52:6b:71:30: c8:9f:f9:a0:4b:e0:67:cf:d3:44:57:4b:8b:1f:ed:99:e1:0d: a0:58:29:91:ae:cb:ab:03:eb:55:07:a4:ae:2e:33:cf:4b:0d: 00:4c:be:35:95:a2:de:97:32:6f:03:90:9a:e3:1e:c3:d1:94: 78:7e:38:88:01:70:f3:79:2e:26:36:76:34:24:21:49:e6:e2: d9:70:49:fb:25:71:f4:62:6c:c1:aa:ff:dd:a4:ff:8d:cf:5e: 12:5e:3d:84:d5:94:a7:80:49:ce:ad:46:ce:5d:43:ad:55:66: 68:a1:f1:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVPOqsnakcRYHlOsdXAl1QvhD5JkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJGOTQyMjdBMDlEOTZGNTFBRTg4MTlCMjhDQTM2OTYw MDNDQkM2MDAeFw0yNjA5MjAyMjE0MjZaFw0yNjA5MjEyMzQyMjZaMDMxMTAvBgNV BAMTKEFFQTlBODBENTg2N0E5M0JCMTM5NUNGMzNDRDRBMEUzMEMwNEM5NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCljdBOiLzPZ4rcDC8bwoWIkTl/ fSrkphC7cXJO8330LsECQJEX0xUnAuLckGM5vmTkxdLRPz49NUhZHpga0V9WMFxa LYQf9llYa2n3oWto2DHgnKN1M1rUSrZnfabv/jz8ffiqjMFs8ybkA0Rn3c8651IV ebcKuU5JSDIyMh0S7O1F+qSntTxHvIUKsDFiPRwKm60iGk9+q04XSjdiPuXee88K j34binpt0RNH4vUaUxOR36tfoO5UJyUtnR6NsGzsMtWxzkkbWzn371udSTQgUpXl vkXxn9ATRHSC+wrlFu8ECKpNIz2Mg+eziQEaClJ4M+4VK3wWzqJY+xZp58RPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrqmoDVhnqTuxOVzzPNSg4wwEyUIwHwYDVR0j BBgwFoAUK/lCJ6CdlvUa6IGbKMo2lgA8vGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmFkZmNiNDQtYWU3YS00NDIzLWFlN2QtMDg2NDhiZjFkZWIxLzAvMkJGOTQyMjdB MDlEOTZGNTFBRTg4MTlCMjhDQTM2OTYwMDNDQkM2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQkY5NDIyN0EwOUQ5NkY1MUFFODgxOUIyOENBMzY5NjAwM0NC QzYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmFkZmNiNDQtYWU3YS00NDIzLWFl N2QtMDg2NDhiZjFkZWIxLzAvMkJGOTQyMjdBMDlEOTZGNTFBRTg4MTlCMjhDQTM2 OTYwMDNDQkM2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL9GMyfZajRgAe4Ejs83DzcwJcf4fnLe/nmo avOunVoTSGKhhFjCp9E/rnr611FsUlf9JH4vwjjKFtKDqmh8+n1h+V5DDYhqGikG fqUvHHIwhIhziWM2n2NTd2vmgYnExy4ocZRjPH4ZbW5SUajCkQdtdY/D1CWcw3Ze 6+PFaHERR1/98FyQN2jJEZgYUmtxMMif+aBL4GfP00RXS4sf7ZnhDaBYKZGuy6sD 61UHpK4uM89LDQBMvjWVot6XMm8DkJrjHsPRlHh+OIgBcPN5LiY2djQkIUnm4tlw SfslcfRibMGq/92k/43PXhJePYTVlKeASc6tRs5dQ61VZmih8aw= -----END CERTIFICATE-----Generated at Mon Sep 21 09:24:53 2026 by rpki-client