$ rpki-client -vvvf rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft File: 2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft (raw, json) Hash identifier: 5CEafFUm3K9cQ/aRN+wTO4ioDEipIu2aVkLeGtO94bY= Subject key identifier: 43:1C:20:C6:3D:74:0C:3C:C8:B5:76:23:75:13:91:C3:D2:6F:85:4E Authority key identifier: 2D:30:C3:00:58:7F:6D:81:BE:9B:55:44:3E:A8:EE:94:22:9F:CF:34 Certificate issuer: /CN=2D30C300587F6D81BE9B55443EA8EE94229FCF34 Certificate serial: 68E5FA7D2603F702C2BEDFDF169CFC3EB09BAF92 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft Manifest number: BF Signing time: Mon 21 Sep 2026 06:44:57 +0000 Manifest this update: Mon 21 Sep 2026 06:39:57 +0000 Manifest next update: Tue 22 Sep 2026 07:36:57 +0000 Files and hashes: 1: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: /HZ9PgBcY1v+LICUOzB+p9dmjd1y9vMbbZwrBhVjk44=) 2: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: tFodUbzYC2MyevsY+1U3r+nqHy3x7yy2dunKYq9vZuc=) 3: 2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl (hash: /SCRRDbxv18UaMBwceNotQ1afJ8ux0fusvHH+L8/SZs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e5:fa:7d:26:03:f7:02:c2:be:df:df:16:9c:fc:3e:b0:9b:af:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D30C300587F6D81BE9B55443EA8EE94229FCF34 Validity Not Before: Sep 21 06:39:57 2026 GMT Not After : Sep 22 07:36:57 2026 GMT Subject: CN=431C20C63D740C3CC8B57623751391C3D26F854E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:c9:8a:4f:10:af:a4:33:72:41:0c:86:57: 28:15:07:01:6b:5e:18:14:2e:87:73:b2:d4:3f:2d: 8a:33:7d:d8:3a:16:00:65:fd:3b:97:98:b6:23:0e: d3:95:84:69:fe:d8:7c:d6:c2:cb:94:5a:34:ff:7c: 90:ca:8e:dd:29:a0:45:36:fa:30:8c:d9:42:7c:48: e4:9c:70:20:30:6d:33:43:07:d0:2e:70:18:77:df: c6:6d:91:63:fa:02:32:ba:8a:9d:02:03:54:93:b3: 1b:ca:c9:06:63:83:df:f6:24:24:d4:7b:82:3f:b1: 0d:31:c9:ca:09:98:77:d7:0f:71:dc:77:ea:4c:06: 7b:c2:34:35:8f:47:21:88:c5:e6:37:fb:a1:7d:b6: 61:0b:02:62:40:0f:d0:05:1a:1f:20:cf:c0:29:a6: c5:7e:ff:db:f4:de:de:0f:71:49:dd:24:c3:50:a0: 7d:b8:7e:d4:42:31:0b:ba:09:97:0d:d4:6a:51:a1: b8:fa:86:98:4f:2b:39:94:95:ed:aa:e8:b3:ad:29: 27:36:3d:e3:21:10:56:9b:d2:44:ac:3f:e3:59:86: ce:96:3d:c6:65:23:12:37:bb:13:38:1c:38:7c:ff: a4:01:e2:5f:9c:c9:fe:5b:69:a5:bc:31:7e:94:80: 5a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1C:20:C6:3D:74:0C:3C:C8:B5:76:23:75:13:91:C3:D2:6F:85:4E X509v3 Authority Key Identifier: keyid:2D:30:C3:00:58:7F:6D:81:BE:9B:55:44:3E:A8:EE:94:22:9F:CF:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:88:be:21:89:7f:ba:f5:aa:3d:65:8e:f6:84:7e:5b:87:3b: 6f:e7:cc:7a:07:f9:75:d4:8a:3f:95:58:5c:83:a8:09:2e:c6: 22:7d:81:8b:00:78:79:6c:e5:e8:a7:2c:6a:5c:15:48:39:bd: ce:75:fb:16:29:98:e9:c9:5e:ff:71:0e:b0:14:40:94:86:cd: 7b:c2:8c:b7:0e:dd:9f:ed:aa:18:3d:8f:3b:17:fd:87:bc:a7: b4:b1:de:55:5b:d8:b9:1a:b2:dd:01:36:76:c0:9a:ae:22:20: 8f:f3:e4:95:3a:9c:00:05:61:7c:dd:51:35:79:d6:12:54:5e: da:43:f6:4a:8d:10:f0:3c:e1:5a:90:34:a2:22:1a:7c:64:7f: ca:57:ac:34:b9:9e:e5:1e:ea:65:8b:47:58:0c:85:dd:df:f6: 84:fc:2f:6f:97:99:45:97:f7:cd:44:39:3f:a1:96:04:33:2b: c2:4f:b3:4e:07:5b:e3:d9:90:5b:da:1a:9b:cb:bd:32:c5:69: 0c:76:e1:b6:cd:d1:65:f3:41:b0:a8:98:10:5c:5f:dc:9a:40: 73:ce:7a:3c:06:bf:37:9f:4d:f0:fe:dc:2e:7a:b2:2c:80:48: c7:ec:bf:86:6f:5b:67:29:ab:9e:99:c2:3e:7c:67:47:40:d6: 94:bd:dd:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaOX6fSYD9wLCvt/fFpz8PrCbr5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQzMEMzMDA1ODdGNkQ4MUJFOUI1NTQ0M0VBOEVFOTQy MjlGQ0YzNDAeFw0yNjA5MjEwNjM5NTdaFw0yNjA5MjIwNzM2NTdaMDMxMTAvBgNV BAMTKDQzMUMyMEM2M0Q3NDBDM0NDOEI1NzYyMzc1MTM5MUMzRDI2Rjg1NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxYsmKTxCvpDNyQQyGVygVBwFr XhgULodzstQ/LYozfdg6FgBl/TuXmLYjDtOVhGn+2HzWwsuUWjT/fJDKjt0poEU2 +jCM2UJ8SOSccCAwbTNDB9AucBh338ZtkWP6AjK6ip0CA1STsxvKyQZjg9/2JCTU e4I/sQ0xycoJmHfXD3Hcd+pMBnvCNDWPRyGIxeY3+6F9tmELAmJAD9AFGh8gz8Ap psV+/9v03t4PcUndJMNQoH24ftRCMQu6CZcN1GpRobj6hphPKzmUle2q6LOtKSc2 PeMhEFab0kSsP+NZhs6WPcZlIxI3uxM4HDh8/6QB4l+cyf5baaW8MX6UgFr3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQxwgxj10DDzItXYjdRORw9JvhU4wHwYDVR0j BBgwFoAULTDDAFh/bYG+m1VEPqjulCKfzzQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTRkY2VmNjUtNWRlMy00MTI5LWFjMjctNzcwNmQ3MjY2MDAxLzAvMkQzMEMzMDA1 ODdGNkQ4MUJFOUI1NTQ0M0VBOEVFOTQyMjlGQ0YzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDMwQzMwMDU4N0Y2RDgxQkU5QjU1NDQzRUE4RUU5NDIyOUZD RjM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMkQzMEMzMDA1ODdGNkQ4MUJFOUI1NTQ0M0VBOEVF OTQyMjlGQ0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2IviGJf7r1qj1ljvaEfluHO2/nzHoH+XXU ij+VWFyDqAkuxiJ9gYsAeHls5einLGpcFUg5vc51+xYpmOnJXv9xDrAUQJSGzXvC jLcO3Z/tqhg9jzsX/Ye8p7Sx3lVb2Lkast0BNnbAmq4iII/z5JU6nAAFYXzdUTV5 1hJUXtpD9kqNEPA84VqQNKIiGnxkf8pXrDS5nuUe6mWLR1gMhd3f9oT8L2+XmUWX 981EOT+hlgQzK8JPs04HW+PZkFvaGpvLvTLFaQx24bbN0WXzQbComBBcX9yaQHPO ejwGvzefTfD+3C56siyASMfsv4ZvW2cpq56Zwj58Z0dA1pS93cg= -----END CERTIFICATE-----Generated at Mon Sep 21 14:19:06 2026 by rpki-client