$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft File: 2479BECD79D87972D2E64A75818044EA49B2F7AB.mft (raw, json) Hash identifier: A8rszdps/isDefMFbvAiYqT1u7mfAOWKnGE2uHerva4= Subject key identifier: CC:93:77:78:5F:56:D4:FE:7F:E6:EA:B3:35:32:D3:34:7E:93:25:48 Authority key identifier: 24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB Certificate issuer: /CN=2479BECD79D87972D2E64A75818044EA49B2F7AB Certificate serial: 4009E47A0D9CB25360B9913E9A75D15AF13FB703 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft Manifest number: BE Signing time: Mon 21 Sep 2026 11:00:03 +0000 Manifest this update: Mon 21 Sep 2026 10:55:03 +0000 Manifest next update: Tue 22 Sep 2026 14:12:03 +0000 Files and hashes: 1: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: W/8+xRtFQTktxO0fuk7MAz6L6AHwxOnMCS8RTW7dGss=) 2: 2479BECD79D87972D2E64A75818044EA49B2F7AB.crl (hash: BybNMDn1SAgRoX0O163KOukiHt1mMFVaN55njP+LsgY=) 3: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: aop58br7cTbLrX5Ig76Wb88/Xv5ZLtq0WiG+kxtdBWw=) 4: 3130332e3131322e3134342e302f32332d3233203d3e20313534343130.roa (hash: EBSYxoW+DLXOqCY+Bl9yoeDsBygUGPhlM9cqjS/xpGk=) 5: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: /gZ4/45D54iPNl3rFwLqcXjfv+fGeCZ/kGOEYCstAaw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 14:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:09:e4:7a:0d:9c:b2:53:60:b9:91:3e:9a:75:d1:5a:f1:3f:b7:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2479BECD79D87972D2E64A75818044EA49B2F7AB Validity Not Before: Sep 21 10:55:03 2026 GMT Not After : Sep 22 14:12:03 2026 GMT Subject: CN=CC9377785F56D4FE7FE6EAB33532D3347E932548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d3:a4:80:84:f2:dc:7f:78:d5:fc:3d:d1:45: 20:61:db:74:c5:46:03:f2:f2:31:76:f1:60:ce:ec: 34:34:a9:82:80:1f:41:36:78:75:d5:72:e2:8f:e0: b8:d5:31:78:d6:87:0e:8f:06:c2:01:b1:82:1d:82: 29:37:c8:f8:43:3e:13:e4:73:a2:57:03:52:f1:6c: ff:d7:84:d3:b6:ab:3f:de:3f:6d:88:f5:b0:7e:c7: 00:a6:0c:e1:56:87:fd:1b:9b:e2:b4:5e:98:f7:23: 79:73:9c:44:fe:0a:74:ce:6a:c1:fb:1c:8d:8b:6b: 2f:91:89:db:9e:68:b0:ee:70:ff:98:d0:7f:db:54: 7f:1c:b9:01:b1:e7:65:ed:7a:e9:75:db:78:98:10: fa:77:10:e4:34:be:bf:7f:93:f5:e6:b3:3c:0d:46: da:cd:dc:0a:3e:bb:8c:00:5e:46:f6:b0:d4:30:8f: 41:4d:16:5c:ad:cf:e7:48:89:4e:2e:19:3b:9d:57: 4d:40:3a:89:7d:60:a9:b2:3f:15:b1:97:fb:90:e6: 11:2f:f4:d3:4a:b0:4c:d4:39:42:94:e2:eb:80:c1: df:58:b2:8d:1b:ad:23:1f:97:c8:b9:13:af:74:96: 63:a2:fb:f0:25:e6:8e:c1:12:89:57:8b:b7:87:f3: 6f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:93:77:78:5F:56:D4:FE:7F:E6:EA:B3:35:32:D3:34:7E:93:25:48 X509v3 Authority Key Identifier: keyid:24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7e:f4:67:78:08:8d:d1:eb:1f:a8:d0:90:d4:22:4f:9c:52: 82:aa:1b:40:0b:c8:21:f1:59:42:73:c3:33:cd:32:b3:fe:23: d4:e8:ee:b1:5a:35:a2:96:56:7d:c2:0b:1b:09:ce:ce:4b:9d: 2a:52:58:ed:50:d6:6c:34:33:3f:a5:0c:c5:b4:5a:5b:08:99: d6:03:73:d1:d6:26:a9:f3:65:25:00:8c:08:83:33:a3:be:59: cb:27:c7:97:d4:ed:b6:ab:63:b6:f0:5f:aa:01:ff:e5:22:7d: 45:65:33:ff:c6:d6:05:fd:47:55:1a:c2:1f:42:5b:16:ec:72: 11:0d:34:e7:c2:9f:f5:19:97:9f:48:e6:ca:4f:0c:a9:18:93: ea:3f:91:7d:6b:97:6e:ac:f0:ed:94:e9:9e:43:cf:3d:d7:5a: b2:b6:13:99:0c:49:63:87:7f:0f:4a:2b:9b:13:42:ea:72:f1: 98:07:0a:96:ef:81:57:a8:d7:4b:63:c9:9a:b4:05:3f:cd:f0: 52:56:33:6a:22:c3:2c:28:43:af:b7:51:4e:90:be:2a:c9:87: 18:80:8c:45:d2:7a:e5:6d:e3:f0:b7:90:c5:f7:c0:35:ce:27: 07:6e:e1:69:55:23:3b:4d:ff:d9:21:d2:53:ea:d6:b3:ac:b2: f5:fa:0e:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQAnkeg2cslNguZE+mnXRWvE/twMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3OUJFQ0Q3OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0RUE0 OUIyRjdBQjAeFw0yNjA5MjExMDU1MDNaFw0yNjA5MjIxNDEyMDNaMDMxMTAvBgNV BAMTKENDOTM3Nzc4NUY1NkQ0RkU3RkU2RUFCMzM1MzJEMzM0N0U5MzI1NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs06SAhPLcf3jV/D3RRSBh23TF RgPy8jF28WDO7DQ0qYKAH0E2eHXVcuKP4LjVMXjWhw6PBsIBsYIdgik3yPhDPhPk c6JXA1LxbP/XhNO2qz/eP22I9bB+xwCmDOFWh/0bm+K0Xpj3I3lznET+CnTOasH7 HI2Lay+RidueaLDucP+Y0H/bVH8cuQGx52Xteul123iYEPp3EOQ0vr9/k/XmszwN RtrN3Ao+u4wAXkb2sNQwj0FNFlytz+dIiU4uGTudV01AOol9YKmyPxWxl/uQ5hEv 9NNKsEzUOUKU4uuAwd9Yso0brSMfl8i5E690lmOi+/Al5o7BEolXi7eH82+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzJN3eF9W1P5/5uqzNTLTNH6TJUgwHwYDVR0j BBgwFoAUJHm+zXnYeXLS5kp1gYBE6kmy96swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNkMDhlYjMtOTM3ZC00MzA0LTkxNjctNDYzZDdjNThkNWU0LzAvMjQ3OUJFQ0Q3 OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0RUE0OUIyRjdBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDc5QkVDRDc5RDg3OTcyRDJFNjRBNzU4MTgwNDRFQTQ5QjJG N0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGNkMDhlYjMtOTM3ZC00MzA0LTkx NjctNDYzZDdjNThkNWU0LzAvMjQ3OUJFQ0Q3OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0 RUE0OUIyRjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5+9Gd4CI3R6x+o0JDUIk+cUoKqG0ALyCHx WUJzwzPNMrP+I9To7rFaNaKWVn3CCxsJzs5LnSpSWO1Q1mw0Mz+lDMW0WlsImdYD c9HWJqnzZSUAjAiDM6O+Wcsnx5fU7barY7bwX6oB/+UifUVlM//G1gX9R1Uawh9C WxbschENNOfCn/UZl59I5spPDKkYk+o/kX1rl26s8O2U6Z5Dzz3XWrK2E5kMSWOH fw9KK5sTQupy8ZgHCpbvgVeo10tjyZq0BT/N8FJWM2oiwywoQ6+3UU6QvirJhxiA jEXSeuVt4/C3kMX3wDXOJwdu4WlVIztN/9kh0lPq1rOssvX6DkY= -----END CERTIFICATE-----Generated at Tue Sep 22 07:49:24 2026 by rpki-client