$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft File: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft (raw, json) Hash identifier: j+30CbGofdzbdbo40cIt2UySdoZkHnUbfEW/AV8q2LA= Subject key identifier: D2:1B:D6:0C:66:BB:65:D2:A1:ED:C3:3C:01:2A:C7:39:95:00:C6:31 Authority key identifier: 2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 Certificate issuer: /CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Certificate serial: 11CDE8C121AE4BC7C334CB2D352B3915F2F14FD8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft Manifest number: BF Signing time: Tue 22 Sep 2026 07:20:38 +0000 Manifest this update: Tue 22 Sep 2026 07:15:38 +0000 Manifest next update: Wed 23 Sep 2026 09:55:38 +0000 Files and hashes: 1: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: YxIG5gE82yucA04IL0UOvUpSplXnSvbMztHXZbePQI4=) 2: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: +Yvf7pOmzIGa62dYtF9IiIRwOM/GLeNEJw6+0hLCuFs=) 3: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: o8ATK3bD9zxeJufeZWJNK7oFuttO5EJXj2X9FF47zyA=) 4: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: mQrrkGIS8HoF4AiDSmw6SD2SG/T7/MXDAFnexE70y7o=) 5: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: Sc3G90iBjlZbQp4eiRWZGBi7/nNefrAvOJorxw0BbBg=) 6: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl (hash: VR8qoZ3UktYlvgWhafNCrjMhL4xXKyMLA51sJcs6Yag=) 7: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Zn0CgMhZBE1Ox5HRkdKzvhOJuMe+bbXdGHM8Z1fRLu4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:cd:e8:c1:21:ae:4b:c7:c3:34:cb:2d:35:2b:39:15:f2:f1:4f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Validity Not Before: Sep 22 07:15:38 2026 GMT Not After : Sep 23 09:55:38 2026 GMT Subject: CN=D21BD60C66BB65D2A1EDC33C012AC7399500C631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d9:ac:13:70:b9:20:b6:5a:ae:a4:33:fb:18: 0e:b3:50:ac:b8:51:23:c9:e8:c1:dd:28:3b:4e:31: 58:d6:bb:21:ef:ca:aa:f1:2c:28:f9:b5:fa:04:0e: 92:21:67:d6:20:30:db:d8:b5:1d:e9:37:c0:af:d0: a9:da:aa:38:81:1e:e3:05:8e:4a:c0:9f:28:fe:9c: 6d:6b:61:69:dc:1c:3f:bb:f0:1b:b0:04:7c:b0:3e: 29:ec:94:15:0b:c6:95:03:0f:69:4a:f4:7b:f2:32: 6b:79:1a:3c:04:d7:5d:d8:80:19:4a:0e:52:f7:c4: 1d:da:1b:e9:e7:83:bf:8c:f2:96:12:e6:c4:46:3c: 14:4e:31:da:e3:61:a3:20:41:2e:dc:86:b0:69:54: a3:16:7d:7f:c8:50:2c:6e:a6:72:4f:3b:a4:be:78: f3:66:1b:d0:63:6a:c2:f0:6e:28:ac:bf:b0:4a:7c: 51:73:ea:6d:54:d4:12:47:ac:1f:0a:55:a1:b2:31: c2:57:e2:fd:dc:cb:a8:f1:15:ad:7a:6b:0d:be:fe: 5b:65:9d:24:42:49:00:e8:3e:82:a1:d9:da:f8:17: d1:a3:f8:c3:93:54:72:ec:f6:85:0e:72:e6:44:b2: 89:2c:fa:fd:bd:86:2d:0f:bc:18:72:d7:c2:f7:20: d0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1B:D6:0C:66:BB:65:D2:A1:ED:C3:3C:01:2A:C7:39:95:00:C6:31 X509v3 Authority Key Identifier: keyid:2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:31:d3:e6:0d:28:79:fe:d6:fc:fb:a0:42:87:0c:50:20:df: 80:df:86:4a:d5:4e:b8:3b:75:10:0d:5f:63:71:1e:e8:9e:9a: ef:96:9d:fd:06:fa:b5:eb:a4:ee:77:19:71:a4:4d:76:3b:a3: ad:10:bf:0d:ac:70:88:7e:04:e4:9e:27:11:e7:b4:74:74:e7: e0:45:d3:88:35:b8:8f:d1:29:67:11:29:c2:e3:81:14:1f:5e: 69:51:63:87:fe:fb:60:8a:38:51:01:97:fd:0e:aa:d4:75:4e: 35:ef:49:58:b9:9b:7d:b2:46:f4:e5:53:24:df:1c:08:d4:53: 92:93:ef:26:48:b7:18:f9:82:ca:0a:20:52:b8:ea:e7:d7:c5: 34:05:2c:e2:f1:57:a8:d7:c3:79:db:13:e8:22:1c:b7:14:3a: 92:7f:5f:24:87:d9:60:d9:cc:81:63:75:9b:9b:82:51:5f:d3: 1a:48:27:d3:71:f6:6b:f2:c2:4b:c9:b8:fa:fd:f8:65:ad:03: 3f:29:47:33:65:c6:f6:29:37:c0:50:30:1a:2e:37:05:64:5a: ff:d5:e2:ef:39:0f:2c:d7:98:f3:a6:54:98:c6:b3:6e:7a:f0: d7:d8:be:cc:05:08:86:f7:67:ff:45:78:38:03:31:8c:c0:d1: 8a:95:98:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEc3owSGuS8fDNMstNSs5FfLxT9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlE MzBDNDYzNTAeFw0yNjA5MjIwNzE1MzhaFw0yNjA5MjMwOTU1MzhaMDMxMTAvBgNV BAMTKEQyMUJENjBDNjZCQjY1RDJBMUVEQzMzQzAxMkFDNzM5OTUwMEM2MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC72awTcLkgtlqupDP7GA6zUKy4 USPJ6MHdKDtOMVjWuyHvyqrxLCj5tfoEDpIhZ9YgMNvYtR3pN8Cv0KnaqjiBHuMF jkrAnyj+nG1rYWncHD+78BuwBHywPinslBULxpUDD2lK9HvyMmt5GjwE113YgBlK DlL3xB3aG+nng7+M8pYS5sRGPBROMdrjYaMgQS7chrBpVKMWfX/IUCxupnJPO6S+ ePNmG9BjasLwbiisv7BKfFFz6m1U1BJHrB8KVaGyMcJX4v3cy6jxFa16aw2+/ltl nSRCSQDoPoKh2dr4F9Gj+MOTVHLs9oUOcuZEsoks+v29hi0PvBhy18L3INChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0hvWDGa7ZdKh7cM8ASrHOZUAxjEwHwYDVR0j BBgwFoAULpDHQn/huQJV3YVW28nMadMMRjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTAzNmUwN2MtODI4My00M2QzLTkxNjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3 RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlEMzBDNDYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTkwQzc0MjdGRTFCOTAyNTVERDg1NTZEQkM5Q0M2OUQzMEM0 NjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUND NjlEMzBDNDYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsx0+YNKHn+1vz7oEKHDFAg34DfhkrVTrg7 dRANX2NxHuiemu+Wnf0G+rXrpO53GXGkTXY7o60Qvw2scIh+BOSeJxHntHR05+BF 04g1uI/RKWcRKcLjgRQfXmlRY4f++2CKOFEBl/0OqtR1TjXvSVi5m32yRvTlUyTf HAjUU5KT7yZItxj5gsoKIFK46ufXxTQFLOLxV6jXw3nbE+giHLcUOpJ/XySH2WDZ zIFjdZubglFf0xpIJ9Nx9mvywkvJuPr9+GWtAz8pRzNlxvYpN8BQMBouNwVkWv/V 4u85DyzXmPOmVJjGs2568NfYvswFCIb3Z/9FeDgDMYzA0YqVmJ4= -----END CERTIFICATE-----Generated at Tue Sep 22 16:05:47 2026 by rpki-client