$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft File: 2CE9A084598867F6677FDE09C272DA8D05C480FC.mft (raw, json) Hash identifier: JZ56DmXs2sWEdde5tLU6Ua5c+A3rn6kYdxn8TcMdsYk= Subject key identifier: 02:9E:6B:FB:37:AF:AF:6D:08:49:04:DB:FD:6A:AC:9A:93:A2:D4:1A Authority key identifier: 2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC Certificate issuer: /CN=2CE9A084598867F6677FDE09C272DA8D05C480FC Certificate serial: 25DCCED007979C2BE85B3CD26FE60D1682EB306C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft Manifest number: BE Signing time: Sun 20 Sep 2026 21:13:14 +0000 Manifest this update: Sun 20 Sep 2026 21:08:14 +0000 Manifest next update: Mon 21 Sep 2026 21:48:14 +0000 Files and hashes: 1: 2CE9A084598867F6677FDE09C272DA8D05C480FC.crl (hash: myVq+VDaJRbIHjFOmH2jLG8WNmq4vX46AQ0UtH8vcwE=) 2: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: 7nMz4s5YYhUtNRJIR+ORKIg42vTypWbintD4uEN6yZw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:dc:ce:d0:07:97:9c:2b:e8:5b:3c:d2:6f:e6:0d:16:82:eb:30:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CE9A084598867F6677FDE09C272DA8D05C480FC Validity Not Before: Sep 20 21:08:14 2026 GMT Not After : Sep 21 21:48:14 2026 GMT Subject: CN=029E6BFB37AFAF6D084904DBFD6AAC9A93A2D41A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:60:ee:fe:bd:65:4c:c9:89:e8:88:30:cd:39: 82:e7:f7:1c:5d:9a:79:c9:e1:ef:d7:93:6d:41:52: 83:d8:92:fc:22:7d:ec:b5:75:f7:8f:1c:39:81:4a: f2:fd:44:08:e3:16:44:e2:b2:8e:42:62:8d:d6:b7: 48:3b:5f:fa:ee:76:49:fe:a6:56:81:6b:0f:e1:fd: 34:75:b9:27:8b:8e:ef:05:bc:32:f6:ce:47:cf:79: 0f:09:9b:63:13:9a:af:4f:d6:a0:47:42:e9:8d:37: 7d:4d:71:1a:38:bb:70:61:30:6b:2c:aa:b5:80:09: b5:f0:60:c2:27:ca:d4:13:2c:52:1a:cc:8a:63:30: 7a:9f:a4:38:76:31:f2:e9:0b:30:6a:ec:b2:e2:27: 55:f4:c3:1d:36:77:b1:3d:9e:81:1f:5c:b5:67:80: 87:8b:c3:78:8a:54:4a:dc:14:9d:66:4c:f2:47:ce: 4d:e6:7b:8e:1b:d8:c6:71:27:98:2c:29:21:c7:a3: ff:b1:8e:e3:1e:33:a9:4e:ce:64:a6:c8:e7:41:f7: bb:96:c1:84:54:ed:2b:89:ff:17:f5:d8:3f:94:8b: 75:d7:75:38:94:64:33:15:d2:ee:fd:77:2c:6b:f0: 11:9e:b4:65:1c:42:c4:e0:db:e2:54:1a:f0:bb:99: 80:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9E:6B:FB:37:AF:AF:6D:08:49:04:DB:FD:6A:AC:9A:93:A2:D4:1A X509v3 Authority Key Identifier: keyid:2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:20:df:d4:a6:6d:0e:41:66:ec:06:36:af:2a:bd:bc:54:65: c8:03:d3:50:c9:79:a2:ba:52:11:b4:7f:ce:46:2a:14:9f:bb: b1:78:ef:48:9e:39:b1:30:95:17:09:90:e0:7d:98:19:fc:2c: 65:f8:65:92:c5:d5:61:22:c1:46:3a:b7:a4:d4:24:c0:17:f8: c1:2e:3b:91:11:35:3b:95:f0:ce:d9:78:f7:33:f2:d5:4b:57: 92:cb:e6:07:61:41:e9:59:9b:04:bc:20:91:5b:fd:43:f0:18: 80:78:2c:93:d2:3f:16:36:e8:fb:02:01:6c:5b:95:6b:73:6a: a7:c2:01:57:ec:ea:9b:60:00:fd:71:6d:18:00:6a:9a:c5:80: 79:8a:a4:0c:ea:6f:64:a1:fe:21:66:75:79:28:a4:18:d8:66: b5:48:b8:91:5a:e7:4d:65:db:9c:28:d0:29:2d:cb:70:35:3d: 95:ca:0a:a2:c8:f6:68:27:6d:d3:7b:79:9d:fb:16:c3:56:dd: 3a:fe:d4:e7:98:71:0c:4e:a8:6a:09:90:8a:29:56:7b:97:be: f6:b2:2b:1d:ed:72:56:1b:a9:8f:be:50:57:72:3a:19:31:63: 6c:49:7b:ec:92:65:4c:4c:11:76:5e:bb:3d:b2:8f:be:9c:fb: 64:ce:9e:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJdzO0AeXnCvoWzzSb+YNFoLrMGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNFOUEwODQ1OTg4NjdGNjY3N0ZERTA5QzI3MkRBOEQw NUM0ODBGQzAeFw0yNjA5MjAyMTA4MTRaFw0yNjA5MjEyMTQ4MTRaMDMxMTAvBgNV BAMTKDAyOUU2QkZCMzdBRkFGNkQwODQ5MDREQkZENkFBQzlBOTNBMkQ0MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsYO7+vWVMyYnoiDDNOYLn9xxd mnnJ4e/Xk21BUoPYkvwifey1dfePHDmBSvL9RAjjFkTiso5CYo3Wt0g7X/rudkn+ plaBaw/h/TR1uSeLju8FvDL2zkfPeQ8Jm2MTmq9P1qBHQumNN31NcRo4u3BhMGss qrWACbXwYMInytQTLFIazIpjMHqfpDh2MfLpCzBq7LLiJ1X0wx02d7E9noEfXLVn gIeLw3iKVErcFJ1mTPJHzk3me44b2MZxJ5gsKSHHo/+xjuMeM6lOzmSmyOdB97uW wYRU7SuJ/xf12D+Ui3XXdTiUZDMV0u79dyxr8BGetGUcQsTg2+JUGvC7mYBfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAp5r+zevr20ISQTb/WqsmpOi1BowHwYDVR0j BBgwFoAULOmghFmIZ/Znf94JwnLajQXEgPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTliODE1MmUtYWE4Ni00ZDhhLTgxZGEtZTcxMDg2YjI5NTZjLzAvMkNFOUEwODQ1 OTg4NjdGNjY3N0ZERTA5QzI3MkRBOEQwNUM0ODBGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yQ0U5QTA4NDU5ODg2N0Y2Njc3RkRFMDlDMjcyREE4RDA1QzQ4 MEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvMkNFOUEwODQ1OTg4NjdGNjY3N0ZERTA5QzI3MkRB OEQwNUM0ODBGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUg39SmbQ5BZuwGNq8qvbxUZcgD01DJeaK6 UhG0f85GKhSfu7F470ieObEwlRcJkOB9mBn8LGX4ZZLF1WEiwUY6t6TUJMAX+MEu O5ERNTuV8M7ZePcz8tVLV5LL5gdhQelZmwS8IJFb/UPwGIB4LJPSPxY26PsCAWxb lWtzaqfCAVfs6ptgAP1xbRgAaprFgHmKpAzqb2Sh/iFmdXkopBjYZrVIuJFa501l 25wo0Ckty3A1PZXKCqLI9mgnbdN7eZ37FsNW3Tr+1OeYcQxOqGoJkIopVnuXvvay Kx3tclYbqY++UFdyOhkxY2xJe+ySZUxMEXZeuz2yj76c+2TOnuw= -----END CERTIFICATE-----Generated at Mon Sep 21 01:32:35 2026 by rpki-client