$ rpki-client -vvvf rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft File: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft (raw, json) Hash identifier: 8yXbXpXpFMxX9a8juVhekH2Ut0vNbEwn6a0C8C8tdW0= Subject key identifier: E7:DF:04:F5:AF:60:94:30:D8:B9:89:96:65:85:72:04:F9:23:20:A1 Authority key identifier: 2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A Certificate issuer: /CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A Certificate serial: 0FD67D764D96C977FB4756602EF96E005C983D3B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 17:52:04 +0000 Manifest this update: Sat 14 Nov 2026 17:47:04 +0000 Manifest next update: Sun 15 Nov 2026 21:51:04 +0000 Files and hashes: 1: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl (hash: puFcmobmIRGImJS2XW54kfe1qMbh4pes+h2m9NYJ3bI=) 2: 3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa (hash: VdJ1ZIQnNrJcWKeLJSeBvVO0FNQ/sxBZNurd+uNh3ek=) 3: 3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa (hash: GzkXDWcauMWYNDn5MyFD1nDjKkP9ZpScdykpa6iOEak=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 21:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d6:7d:76:4d:96:c9:77:fb:47:56:60:2e:f9:6e:00:5c:98:3d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A Validity Not Before: Nov 14 17:47:04 2026 GMT Not After : Nov 15 21:51:04 2026 GMT Subject: CN=E7DF04F5AF609430D8B9899665857204F92320A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:50:3f:3f:74:e0:54:73:f3:dc:3d:be:77: 5e:5e:58:c9:75:98:d0:a0:9f:c4:e0:99:4b:81:b3: 74:66:26:27:fb:14:b5:30:fa:0f:af:ed:24:9f:c9: f1:98:bf:c1:30:2f:82:fe:97:0a:15:f5:73:ad:1e: 90:18:1a:87:a4:d8:be:e9:ad:9d:ad:55:5b:94:4d: 57:65:1b:bb:3a:ef:d5:80:67:bc:6e:25:31:8f:02: 07:e6:c7:cd:37:e5:f1:aa:4b:82:cf:18:26:52:62: 3e:a0:ab:b5:27:11:82:54:13:70:af:3d:d1:20:33: f7:b6:c3:4e:b8:49:96:8a:d9:75:86:0f:51:fd:9d: 59:d6:4a:76:81:14:09:83:14:b3:3c:91:ab:6e:6f: ab:ca:2d:47:fd:19:71:f3:3b:65:d8:83:19:c8:70: dd:aa:6b:24:8e:2e:f8:5a:ad:f1:35:90:cc:e8:fe: ce:a1:c4:98:20:c2:80:aa:fc:d3:c6:ae:27:14:36: b1:f0:d9:dd:2c:eb:6f:4e:51:22:a6:cb:ed:d8:ed: d2:97:8d:b7:01:03:87:a6:36:e0:68:97:c3:2b:4b: ab:d3:73:e1:99:d8:ae:69:cd:b1:5d:23:c1:42:65: 05:42:de:cb:05:fe:eb:34:88:74:a1:07:5b:66:9b: 63:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DF:04:F5:AF:60:94:30:D8:B9:89:96:65:85:72:04:F9:23:20:A1 X509v3 Authority Key Identifier: keyid:2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:82:b5:c1:23:14:83:81:62:55:22:83:8c:73:56:70:d9:86: 18:3c:f2:8d:bd:14:e9:a3:d3:d3:e4:0a:59:97:b3:cc:53:75: 6f:9f:8c:83:c8:6d:01:59:5e:c6:36:99:c9:3b:21:72:6f:1f: fe:97:64:ad:54:bf:2b:0a:70:91:e2:2b:ec:52:9e:97:13:35: 74:45:c5:13:cd:67:cd:8c:1a:a6:1a:64:97:2e:30:21:f9:d1: 4e:aa:23:61:a9:3b:ad:bb:4e:c0:f1:94:2f:fc:a4:07:92:20: 54:f5:45:eb:bb:69:34:c3:ed:9c:97:3e:18:b3:3f:30:21:97: cf:5c:5b:13:0d:09:02:30:b6:fb:ca:1c:ab:07:4f:28:93:f8: 31:01:f9:8c:79:7c:06:33:22:b7:59:3e:f0:60:60:59:2a:14: 44:11:ad:79:aa:5a:fc:e5:e6:80:3a:85:49:b3:85:4b:89:4b: b7:30:33:bd:b7:05:c7:ed:80:00:19:c3:e5:77:1e:f1:48:80: 3a:f7:1c:14:3f:72:9d:7a:1f:c2:98:5a:27:05:f9:a8:2e:cb: c1:1d:5a:be:71:4a:f2:13:8a:c3:4d:52:38:ee:ba:6d:02:a1: 2e:59:30:b3:1c:45:e1:86:9a:2c:e0:2f:fa:fd:04:0e:bb:67: 25:d6:93:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9Z9dk2WyXf7R1ZgLvluAFyYPTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJGQzc0MUFBMTc3MUZDNUNFNzc5RTRDRjg4QTVDM0FG NTJGOEU3QTAeFw0yNjExMTQxNzQ3MDRaFw0yNjExMTUyMTUxMDRaMDMxMTAvBgNV BAMTKEU3REYwNEY1QUY2MDk0MzBEOEI5ODk5NjY1ODU3MjA0RjkyMzIwQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9FA/P3TgVHPz3D2+d15eWMl1 mNCgn8TgmUuBs3RmJif7FLUw+g+v7SSfyfGYv8EwL4L+lwoV9XOtHpAYGoek2L7p rZ2tVVuUTVdlG7s679WAZ7xuJTGPAgfmx8035fGqS4LPGCZSYj6gq7UnEYJUE3Cv PdEgM/e2w064SZaK2XWGD1H9nVnWSnaBFAmDFLM8katub6vKLUf9GXHzO2XYgxnI cN2qaySOLvharfE1kMzo/s6hxJggwoCq/NPGricUNrHw2d0s629OUSKmy+3Y7dKX jbcBA4emNuBol8MrS6vTc+GZ2K5pzbFdI8FCZQVC3ssF/us0iHShB1tmm2P7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU598E9a9glDDYuYmWZYVyBPkjIKEwHwYDVR0j BBgwFoAUK/x0GqF3H8XOd55M+IpcOvUvjnowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWRiZDNhNTAtODMyZS00MTI3LTk0ZTEtNDhhY2UxNjRjZjI2LzAvMkJGQzc0MUFB MTc3MUZDNUNFNzc5RTRDRjg4QTVDM0FGNTJGOEU3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQkZDNzQxQUExNzcxRkM1Q0U3NzlFNENGODhBNUMzQUY1MkY4 RTdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWRiZDNhNTAtODMyZS00MTI3LTk0 ZTEtNDhhY2UxNjRjZjI2LzAvMkJGQzc0MUFBMTc3MUZDNUNFNzc5RTRDRjg4QTVD M0FGNTJGOEU3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICCtcEjFIOBYlUig4xzVnDZhhg88o29FOmj 09PkClmXs8xTdW+fjIPIbQFZXsY2mck7IXJvH/6XZK1UvysKcJHiK+xSnpcTNXRF xRPNZ82MGqYaZJcuMCH50U6qI2GpO627TsDxlC/8pAeSIFT1Reu7aTTD7ZyXPhiz PzAhl89cWxMNCQIwtvvKHKsHTyiT+DEB+Yx5fAYzIrdZPvBgYFkqFEQRrXmqWvzl 5oA6hUmzhUuJS7cwM723BcftgAAZw+V3HvFIgDr3HBQ/cp16H8KYWicF+aguy8Ed Wr5xSvITisNNUjjuum0CoS5ZMLMcReGGmizgL/r9BA67ZyXWk9A= -----END CERTIFICATE-----Generated at Sun Nov 15 11:51:01 2026 by rpki-client