$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft File: 2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft (raw, json) Hash identifier: jNf7BM18K8mckdR9lZclLs3KMAv9wgF5PT6vXGpiye0= Subject key identifier: 29:4C:98:1D:0D:07:B1:64:C9:49:57:62:E1:0A:2A:49:D8:F3:94:91 Authority key identifier: 2D:FC:5C:3D:38:82:FE:6E:7F:9A:9E:FE:2F:6B:96:55:5F:F5:2D:D7 Certificate issuer: /CN=2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7 Certificate serial: 110C890338E7DEDD15DBDC54362D27FF966DF52F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 23:35:58 +0000 Manifest this update: Mon 21 Sep 2026 23:30:58 +0000 Manifest next update: Wed 23 Sep 2026 01:19:58 +0000 Files and hashes: 1: 2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl (hash: 5I8PL6KM1Tl6OLFFbKqZeo11eeisGFR1FCpIKDg3/J4=) 2: 3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (hash: KyTDN/npdCxMnf6sB8d1UiCU7Ow9yE5T+dZIKGap4fI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 01:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:0c:89:03:38:e7:de:dd:15:db:dc:54:36:2d:27:ff:96:6d:f5:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7 Validity Not Before: Sep 21 23:30:58 2026 GMT Not After : Sep 23 01:19:58 2026 GMT Subject: CN=294C981D0D07B164C9495762E10A2A49D8F39491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d8:74:9b:20:03:2d:58:f3:40:c7:0f:0a:85: 15:cc:d2:4e:f6:a0:05:d0:b5:ba:5d:11:cd:1e:94: 9d:5e:24:7a:b4:08:3c:af:cc:b8:29:2a:a5:fe:85: 06:62:a1:1d:15:7e:ee:3b:15:20:ec:69:dc:f5:76: 5e:63:52:86:a1:a0:ed:c4:0b:03:3d:e5:6c:61:a7: 36:5e:77:78:7e:c8:3e:99:2e:6f:aa:1e:5c:f9:56: 9a:51:93:23:1b:47:ed:9f:df:69:da:9d:83:64:bf: ae:c5:db:72:81:69:64:23:b0:f3:41:f3:86:88:73: ae:7b:27:e3:f1:08:60:ab:2c:67:ea:e2:13:1c:a1: 29:30:ea:70:74:b3:e9:83:e3:ae:f0:42:63:56:77: 65:ab:54:28:e4:b7:f1:3b:a1:6e:44:09:a1:8c:e5: 4b:e5:f2:48:c8:f5:8e:df:b1:f6:9c:a8:02:42:a1: 79:1e:49:d0:ba:75:bf:45:46:e2:df:c3:47:60:25: 63:db:78:e9:c4:fe:12:87:c3:e7:db:4d:1c:e6:87: 31:97:8a:66:3e:37:0c:dd:29:8d:88:74:43:09:50: 8c:13:b5:32:8d:da:23:f3:b0:70:b8:8f:52:5d:0e: 4d:b8:91:b0:c1:fc:4d:b4:a4:9e:f9:f1:b6:a4:37: 99:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4C:98:1D:0D:07:B1:64:C9:49:57:62:E1:0A:2A:49:D8:F3:94:91 X509v3 Authority Key Identifier: keyid:2D:FC:5C:3D:38:82:FE:6E:7F:9A:9E:FE:2F:6B:96:55:5F:F5:2D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:37:86:c7:7a:f6:71:30:0f:53:7b:3f:ba:d1:24:25:ad:c1: 24:57:a4:e2:0d:a0:90:26:6a:f9:6a:0f:01:ba:03:f5:b8:17: d2:10:18:6e:0c:00:ed:dd:78:28:4e:57:cc:37:13:88:2e:e6: 8d:83:15:ab:24:4e:18:3d:a5:20:e6:5a:df:1a:18:be:dc:1c: 34:e4:6c:60:32:b7:6f:6e:9d:26:01:87:27:c6:5a:1e:0b:26: 66:25:b2:c2:4e:65:80:a1:e2:5f:9d:3e:0f:5c:67:fa:bf:55: d6:b9:15:a3:dc:30:e4:35:b8:03:07:cd:7e:71:61:cd:fc:5f: 26:c0:e5:6d:e9:aa:0e:72:b3:0b:43:3d:5d:d8:c1:c3:c7:f1: c3:d0:eb:c3:18:4f:c6:b1:a6:b7:c5:d5:0e:c6:25:b0:49:5d: 2d:fc:e0:29:18:9a:da:83:7b:b2:2e:66:cf:9e:50:02:c3:d1: ba:cd:e1:2e:d5:6e:ba:dd:0b:a1:b8:7d:06:42:42:b3:2e:c1: 02:cc:9c:ac:ab:64:b7:d8:49:e3:24:56:8c:1b:1f:49:6e:b6: 53:24:e9:d6:7b:63:ed:28:82:23:23:8f:96:a4:57:bc:87:b5: 67:78:09:cb:91:d7:d9:fb:77:1f:a8:87:35:e1:6f:1f:6c:f9: b5:32:75:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEQyJAzjn3t0V29xUNi0n/5Zt9S8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQzVDM0QzODgyRkU2RTdGOUE5RUZFMkY2Qjk2NTU1 RkY1MkRENzAeFw0yNjA5MjEyMzMwNThaFw0yNjA5MjMwMTE5NThaMDMxMTAvBgNV BAMTKDI5NEM5ODFEMEQwN0IxNjRDOTQ5NTc2MkUxMEEyQTQ5RDhGMzk0OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42HSbIAMtWPNAxw8KhRXM0k72 oAXQtbpdEc0elJ1eJHq0CDyvzLgpKqX+hQZioR0Vfu47FSDsadz1dl5jUoahoO3E CwM95WxhpzZed3h+yD6ZLm+qHlz5VppRkyMbR+2f32nanYNkv67F23KBaWQjsPNB 84aIc657J+PxCGCrLGfq4hMcoSkw6nB0s+mD467wQmNWd2WrVCjkt/E7oW5ECaGM 5Uvl8kjI9Y7fsfacqAJCoXkeSdC6db9FRuLfw0dgJWPbeOnE/hKHw+fbTRzmhzGX imY+NwzdKY2IdEMJUIwTtTKN2iPzsHC4j1JdDk24kbDB/E20pJ758bakN5krAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKUyYHQ0HsWTJSVdi4QoqSdjzlJEwHwYDVR0j BBgwFoAULfxcPTiC/m5/mp7+L2uWVV/1LdcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVmMDAxM2ItNTlhNi00NzMzLTg5ZjgtMjhmYTNkODg1NzlmLzAvMkRGQzVDM0Qz ODgyRkU2RTdGOUE5RUZFMkY2Qjk2NTU1RkY1MkRENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREZDNUMzRDM4ODJGRTZFN0Y5QTlFRkUyRjZCOTY1NTVGRjUy REQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmVmMDAxM2ItNTlhNi00NzMzLTg5 ZjgtMjhmYTNkODg1NzlmLzAvMkRGQzVDM0QzODgyRkU2RTdGOUE5RUZFMkY2Qjk2 NTU1RkY1MkRENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKc3hsd69nEwD1N7P7rRJCWtwSRXpOINoJAm avlqDwG6A/W4F9IQGG4MAO3deChOV8w3E4gu5o2DFaskThg9pSDmWt8aGL7cHDTk bGAyt29unSYBhyfGWh4LJmYlssJOZYCh4l+dPg9cZ/q/Vda5FaPcMOQ1uAMHzX5x Yc38XybA5W3pqg5yswtDPV3YwcPH8cPQ68MYT8axprfF1Q7GJbBJXS384CkYmtqD e7IuZs+eUALD0brN4S7VbrrdC6G4fQZCQrMuwQLMnKyrZLfYSeMkVowbH0lutlMk 6dZ7Y+0ogiMjj5akV7yHtWd4CcuR19n7dx+ohzXhbx9s+bUydRI= -----END CERTIFICATE-----Generated at Tue Sep 22 14:20:19 2026 by rpki-client