$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft File: 2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft (raw, json) Hash identifier: Gp+pCoWqqqVPrvTx80K8O/vnW8CP9I/gsa1zDTa41tg= Subject key identifier: 40:A0:2D:92:04:B2:40:C8:41:45:5B:FC:33:3F:3A:84:17:D6:58:5A Authority key identifier: 2D:81:47:AB:32:AE:34:FE:05:99:30:1C:39:9B:A4:31:CB:D9:6A:E2 Certificate issuer: /CN=2D8147AB32AE34FE0599301C399BA431CBD96AE2 Certificate serial: 0EB3155CADC1886DA6202A53E8CD6A373788DD7E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft Manifest number: BE Signing time: Sun 20 Sep 2026 22:55:18 +0000 Manifest this update: Sun 20 Sep 2026 22:50:18 +0000 Manifest next update: Tue 22 Sep 2026 01:34:18 +0000 Files and hashes: 1: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: OX/hSObmRCzkD1qVckzfWkKuBPC5Pdod9YDgySPz4C8=) 2: 2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl (hash: wiy70ZCh0KYttmPoDffXcOPQTe3Zf08FGoH/iGeEcvk=) 3: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: RnobRsvxkM1MTdlV59E6oBUzJE/tUaI5t4eU9X2Ihxg=) 4: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: YTcLxO+mbdwk1sv6hkGjyOE34UWEs5shSWT+DleZD5E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b3:15:5c:ad:c1:88:6d:a6:20:2a:53:e8:cd:6a:37:37:88:dd:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D8147AB32AE34FE0599301C399BA431CBD96AE2 Validity Not Before: Sep 20 22:50:18 2026 GMT Not After : Sep 22 01:34:18 2026 GMT Subject: CN=40A02D9204B240C841455BFC333F3A8417D6585A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:da:55:5a:ee:3d:b5:7e:0a:ce:fc:d1:50:e5: c4:20:45:4b:7b:3b:13:6d:0d:91:9e:82:c6:61:9e: c8:2d:31:4b:59:24:06:95:29:e9:54:ee:3a:ba:7a: 8d:74:73:e9:9d:1c:46:2a:7d:75:c5:80:d5:e7:8e: 86:dc:42:d9:c1:79:2f:ae:9e:d1:43:f0:7f:65:7d: ca:7e:5c:e0:01:08:0c:5b:00:d8:65:e3:cf:ba:f0: 39:4d:03:2c:de:2b:cd:5c:06:bd:d4:ff:9b:22:63: b3:b8:70:48:e4:e3:bf:f8:df:e2:d0:fb:16:28:2c: fb:3d:48:38:6a:cb:8a:d0:e5:db:41:20:7e:d1:56: e4:94:be:2f:da:1d:cb:24:34:7a:43:c4:a3:60:db: 3e:49:88:8a:03:6e:47:a0:26:09:23:75:8b:01:ec: b6:7e:ba:7f:e3:4f:2d:79:db:21:fc:85:d9:51:03: bc:ba:f3:17:f7:07:11:ad:f5:7d:73:70:5e:d6:97: 2e:bc:6e:3e:5d:59:56:5e:f5:08:2d:94:cc:5b:ba: ff:5a:f2:de:fe:dd:77:52:c4:2a:c2:d5:5d:b1:69: 0c:ee:9b:98:a4:ca:56:05:ee:06:ac:46:b5:a6:f1: 07:00:d0:f4:78:4a:7d:63:32:1b:e4:f3:09:87:41: 46:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A0:2D:92:04:B2:40:C8:41:45:5B:FC:33:3F:3A:84:17:D6:58:5A X509v3 Authority Key Identifier: keyid:2D:81:47:AB:32:AE:34:FE:05:99:30:1C:39:9B:A4:31:CB:D9:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:37:99:b1:d1:4d:c0:37:f4:ed:1f:3f:01:2d:71:13:7a:4a: 96:4c:f6:db:bd:6d:60:61:b7:b6:bc:73:20:62:c2:de:b7:7e: 5a:8e:d8:68:d2:b3:5d:d5:4b:7c:64:0b:31:ec:c8:00:ba:98: 5e:63:95:5e:35:3f:54:1a:69:0d:71:a6:d9:53:91:0d:09:11: f5:8e:13:ca:c8:89:f9:1d:1a:33:8d:eb:75:50:5b:28:1e:46: 27:8c:c3:99:83:c9:53:f0:19:f8:5f:12:61:dc:17:55:e8:3c: 76:db:38:4a:35:92:36:b7:4a:9a:f2:5e:d2:f0:a9:9d:57:53: 05:7d:ec:76:60:60:f5:7f:38:c4:3e:12:d5:9f:6b:6c:ce:58: 3f:10:32:9e:80:76:48:cc:89:77:bf:89:78:de:ff:55:ff:ca: 46:20:ba:13:22:27:cb:3d:cb:64:0f:da:af:ab:0e:a9:a2:df: e0:fc:42:74:03:15:fa:3e:d0:81:b1:53:af:06:22:b9:d9:28: fa:04:f2:0a:7d:83:4b:d9:33:1d:6e:36:c1:a5:f5:64:f8:f7: 37:2d:c0:0e:0c:a6:c8:b4:9c:d0:ef:50:ae:33:ba:91:f2:18: 9e:4b:e8:e6:7e:a6:14:b0:d8:51:7b:2c:29:b8:25:40:9c:5f: 21:4d:2d:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDrMVXK3BiG2mICpT6M1qNzeI3X4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ4MTQ3QUIzMkFFMzRGRTA1OTkzMDFDMzk5QkE0MzFD QkQ5NkFFMjAeFw0yNjA5MjAyMjUwMThaFw0yNjA5MjIwMTM0MThaMDMxMTAvBgNV BAMTKDQwQTAyRDkyMDRCMjQwQzg0MTQ1NUJGQzMzM0YzQTg0MTdENjU4NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH2lVa7j21fgrO/NFQ5cQgRUt7 OxNtDZGegsZhnsgtMUtZJAaVKelU7jq6eo10c+mdHEYqfXXFgNXnjobcQtnBeS+u ntFD8H9lfcp+XOABCAxbANhl48+68DlNAyzeK81cBr3U/5siY7O4cEjk47/43+LQ +xYoLPs9SDhqy4rQ5dtBIH7RVuSUvi/aHcskNHpDxKNg2z5JiIoDbkegJgkjdYsB 7LZ+un/jTy152yH8hdlRA7y68xf3BxGt9X1zcF7Wly68bj5dWVZe9QgtlMxbuv9a 8t7+3XdSxCrC1V2xaQzum5ikylYF7gasRrWm8QcA0PR4Sn1jMhvk8wmHQUZRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQKAtkgSyQMhBRVv8Mz86hBfWWFowHwYDVR0j BBgwFoAULYFHqzKuNP4FmTAcOZukMcvZauIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFkYTIzZTktODRiZS00YTU0LWJjYTAtZTlhMGNhZmQxNmZlLzAvMkQ4MTQ3QUIz MkFFMzRGRTA1OTkzMDFDMzk5QkE0MzFDQkQ5NkFFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yRDgxNDdBQjMyQUUzNEZFMDU5OTMwMUMzOTlCQTQzMUNCRDk2 QUUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFkYTIzZTktODRiZS00YTU0LWJj YTAtZTlhMGNhZmQxNmZlLzAvMkQ4MTQ3QUIzMkFFMzRGRTA1OTkzMDFDMzk5QkE0 MzFDQkQ5NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEY3mbHRTcA39O0fPwEtcRN6SpZM9tu9bWBh t7a8cyBiwt63flqO2GjSs13VS3xkCzHsyAC6mF5jlV41P1QaaQ1xptlTkQ0JEfWO E8rIifkdGjON63VQWygeRieMw5mDyVPwGfhfEmHcF1XoPHbbOEo1kja3SpryXtLw qZ1XUwV97HZgYPV/OMQ+EtWfa2zOWD8QMp6AdkjMiXe/iXje/1X/ykYguhMiJ8s9 y2QP2q+rDqmi3+D8QnQDFfo+0IGxU68GIrnZKPoE8gp9g0vZMx1uNsGl9WT49zct wA4Mpsi0nNDvUK4zupHyGJ5L6OZ+phSw2FF7LCm4JUCcXyFNLQU= -----END CERTIFICATE-----Generated at Mon Sep 21 05:18:39 2026 by rpki-client