$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft File: 2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft (raw, json) Hash identifier: cRlJzgMLM/HTJ1Z9EP3yG6V+wQomMAWGdb3hiLfIibM= Subject key identifier: B5:11:5D:A7:A5:4B:60:34:1D:58:8D:FB:73:7B:DA:D0:78:9C:FE:F6 Authority key identifier: 26:95:C5:87:0A:02:5E:F2:E5:D5:7A:EA:E0:60:19:14:A8:CB:88:70 Certificate issuer: /CN=2695C5870A025EF2E5D57AEAE0601914A8CB8870 Certificate serial: 74BA5F21FAACB00B67D4D427EF4613784D11577F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft Manifest number: BC Signing time: Sun 20 Sep 2026 03:31:32 +0000 Manifest this update: Sun 20 Sep 2026 03:26:32 +0000 Manifest next update: Mon 21 Sep 2026 07:03:32 +0000 Files and hashes: 1: 2695C5870A025EF2E5D57AEAE0601914A8CB8870.crl (hash: fHwr4y55xAuSeMcOJtEK9w/kgUlzA1oNusw/lzjUmZY=) 2: 3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa (hash: 2FI3DRw6poz7+/6DZetNhGhzUS2lCGKW4XFdtiSijVE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.crl rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 07:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ba:5f:21:fa:ac:b0:0b:67:d4:d4:27:ef:46:13:78:4d:11:57:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2695C5870A025EF2E5D57AEAE0601914A8CB8870 Validity Not Before: Sep 20 03:26:32 2026 GMT Not After : Sep 21 07:03:32 2026 GMT Subject: CN=B5115DA7A54B60341D588DFB737BDAD0789CFEF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b3:a9:62:91:07:e1:65:a6:6f:1a:3d:a6:dc: d1:53:be:27:80:3b:3b:0e:05:f9:5a:4a:fe:53:0a: 7f:ee:29:40:a5:ae:c2:2b:a1:f4:78:28:db:1f:cc: f9:b6:06:0f:76:68:5a:32:d4:f9:09:c0:76:71:88: e9:6e:2f:21:3f:83:87:d7:da:3a:1d:fa:62:dd:51: 38:ab:5e:7f:35:c6:91:4d:d9:9e:cc:00:fa:47:3c: ee:bc:c2:6f:09:7a:67:cf:8d:dc:23:32:91:70:8d: fe:d3:78:79:11:8e:8c:c2:26:24:87:06:ed:d4:76: d4:70:d3:74:7e:0f:8a:61:a4:81:b0:a3:4e:64:c8: 04:3c:f1:8f:e3:77:b5:14:71:d4:e6:e5:e3:61:1a: 92:19:f0:70:24:37:6c:3b:91:30:5a:ba:b0:6c:1e: 9b:ad:1d:95:aa:77:25:b6:2a:cd:ff:37:70:0e:d8: 7a:85:0f:7b:13:dd:d4:b9:cb:97:54:f4:c6:16:be: 0c:a6:45:ae:b4:68:d0:80:3b:9e:51:5d:2e:12:b7: 6c:0c:e1:65:c2:43:10:b0:67:f5:e1:6c:f0:3d:a6: 44:32:c3:ea:49:82:40:2e:3d:fe:db:d6:47:13:df: 1d:c8:4f:35:5b:24:89:42:1f:06:82:30:e2:3c:b5: e2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:11:5D:A7:A5:4B:60:34:1D:58:8D:FB:73:7B:DA:D0:78:9C:FE:F6 X509v3 Authority Key Identifier: keyid:26:95:C5:87:0A:02:5E:F2:E5:D5:7A:EA:E0:60:19:14:A8:CB:88:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:e1:5a:32:20:ed:91:31:56:74:99:1c:a0:4c:31:cb:a9:50: 99:20:e9:c3:33:ec:02:8b:20:18:18:b2:a5:3a:e6:76:09:85: 5b:51:24:1d:7b:24:74:c0:6c:e7:9a:b4:06:79:c9:57:8b:3f: 88:4d:9d:ff:5f:3e:8d:da:7e:ed:27:f1:dc:cc:35:83:2e:89: 03:e3:61:3a:0e:98:92:a1:58:39:7b:12:b8:01:4c:64:a6:2f: 26:b3:41:a3:1a:0f:c1:f8:b4:43:44:1e:1b:4d:f8:55:e1:de: d8:99:3b:83:85:bc:38:ae:af:cb:6d:b8:3f:92:d3:fe:46:52: 3a:a0:85:07:08:a8:b9:e4:29:3c:e7:4d:6c:8e:59:68:af:c1: 88:fc:b7:5f:a4:8a:29:79:aa:05:d3:9f:5e:f9:79:4a:10:a1: b6:bb:16:e8:32:47:7a:df:57:7b:96:bd:08:43:fe:56:79:30: e4:fc:6a:be:f3:7a:95:9a:d4:25:bc:eb:d4:5b:d2:b1:68:58: f8:02:60:9a:f2:6b:39:54:e0:80:69:15:86:dc:ae:a0:cf:37: 91:2d:48:5e:32:3d:4c:97:7c:fa:94:e3:61:a3:5f:41:56:63: 8d:85:b3:50:64:c1:24:cf:ea:e0:5c:de:41:85:47:00:ce:a7: ea:a4:c2:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdLpfIfqssAtn1NQn70YTeE0RV38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY5NUM1ODcwQTAyNUVGMkU1RDU3QUVBRTA2MDE5MTRB OENCODg3MDAeFw0yNjA5MjAwMzI2MzJaFw0yNjA5MjEwNzAzMzJaMDMxMTAvBgNV BAMTKEI1MTE1REE3QTU0QjYwMzQxRDU4OERGQjczN0JEQUQwNzg5Q0ZFRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCus6likQfhZaZvGj2m3NFTvieA OzsOBflaSv5TCn/uKUClrsIrofR4KNsfzPm2Bg92aFoy1PkJwHZxiOluLyE/g4fX 2jod+mLdUTirXn81xpFN2Z7MAPpHPO68wm8JemfPjdwjMpFwjf7TeHkRjozCJiSH Bu3UdtRw03R+D4phpIGwo05kyAQ88Y/jd7UUcdTm5eNhGpIZ8HAkN2w7kTBaurBs HputHZWqdyW2Ks3/N3AO2HqFD3sT3dS5y5dU9MYWvgymRa60aNCAO55RXS4St2wM 4WXCQxCwZ/XhbPA9pkQyw+pJgkAuPf7b1kcT3x3ITzVbJIlCHwaCMOI8teIrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtRFdp6VLYDQdWI37c3va0Hic/vYwHwYDVR0j BBgwFoAUJpXFhwoCXvLl1Xrq4GAZFKjLiHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZkNTcyMDEtN2UyZi00OWJiLTk0MWQtOWZjYWJlODYyM2Y1LzAvMjY5NUM1ODcw QTAyNUVGMkU1RDU3QUVBRTA2MDE5MTRBOENCODg3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNjk1QzU4NzBBMDI1RUYyRTVENTdBRUFFMDYwMTkxNEE4Q0I4 ODcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZkNTcyMDEtN2UyZi00OWJiLTk0 MWQtOWZjYWJlODYyM2Y1LzAvMjY5NUM1ODcwQTAyNUVGMkU1RDU3QUVBRTA2MDE5 MTRBOENCODg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDhWjIg7ZExVnSZHKBMMcupUJkg6cMz7AKL IBgYsqU65nYJhVtRJB17JHTAbOeatAZ5yVeLP4hNnf9fPo3afu0n8dzMNYMuiQPj YToOmJKhWDl7ErgBTGSmLyazQaMaD8H4tENEHhtN+FXh3tiZO4OFvDiur8ttuD+S 0/5GUjqghQcIqLnkKTznTWyOWWivwYj8t1+kiil5qgXTn175eUoQoba7FugyR3rf V3uWvQhD/lZ5MOT8ar7zepWa1CW869Rb0rFoWPgCYJryazlU4IBpFYbcrqDPN5Et SF4yPUyXfPqU42GjX0FWY42Fs1BkwSTP6uBc3kGFRwDOp+qkwno= -----END CERTIFICATE-----Generated at Sun Sep 20 21:58:27 2026 by rpki-client