$ rpki-client -vvvf rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft File: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft (raw, json) Hash identifier: UPMf9KAARGBBOeGEjdsiApwkyNTq5nQt7XlA6QmNKLA= Subject key identifier: 51:C7:0F:99:1D:F3:18:50:9F:6D:CC:EB:D6:30:EE:03:57:D7:77:91 Authority key identifier: 2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A Certificate issuer: /CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A Certificate serial: 7E4AC0BC9EE0D41A533BC968D1034D1D02CBBC0F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft Manifest number: BF Signing time: Mon 21 Sep 2026 19:15:21 +0000 Manifest this update: Mon 21 Sep 2026 19:10:21 +0000 Manifest next update: Tue 22 Sep 2026 22:23:21 +0000 Files and hashes: 1: 3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa (hash: GzkXDWcauMWYNDn5MyFD1nDjKkP9ZpScdykpa6iOEak=) 2: 3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa (hash: VdJ1ZIQnNrJcWKeLJSeBvVO0FNQ/sxBZNurd+uNh3ek=) 3: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl (hash: gyqhNet93A+otCGBkPCaaUgzf8jiwphT6XxqUgVdOQk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:4a:c0:bc:9e:e0:d4:1a:53:3b:c9:68:d1:03:4d:1d:02:cb:bc:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A Validity Not Before: Sep 21 19:10:21 2026 GMT Not After : Sep 22 22:23:21 2026 GMT Subject: CN=51C70F991DF318509F6DCCEBD630EE0357D77791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c5:bc:9f:3e:cb:25:d8:7b:08:df:a9:84:b0: d1:5b:43:17:99:6a:87:32:67:0e:07:4d:e8:f6:7e: 34:5d:0f:d4:7c:bc:8c:ac:2d:ed:0f:d9:fc:8a:10: db:85:7b:a3:42:c5:57:bc:bb:a6:85:74:7a:98:ae: 43:1d:95:08:ca:5a:b1:43:9d:e2:55:17:31:12:a6: c8:23:c9:46:83:f4:f9:0b:56:db:8e:61:d7:4a:0f: de:52:d2:ea:1b:41:14:df:bb:4a:a0:3b:96:4d:13: d7:3e:4a:77:b1:d8:77:25:db:3e:91:7a:2e:ae:e5: d7:4b:d3:34:c8:60:09:f6:3b:6b:4d:a2:01:6a:5b: 52:27:cf:0f:f8:22:60:19:87:4d:05:20:49:fc:46: 58:63:8d:48:26:c3:13:67:fe:65:1e:99:b5:9c:29: ef:f6:bf:86:64:db:7c:04:a5:71:4c:96:81:4b:69: 66:f0:33:d2:21:d3:35:b6:d5:19:f3:79:3d:18:f7: 8e:14:e5:3b:fb:dd:8f:4e:60:47:6b:c4:dd:ea:12: b2:88:d3:b7:77:1b:98:83:56:af:63:26:6d:07:7e: 34:52:d2:7b:58:ec:0a:11:33:dd:80:ed:0b:b7:97: 2c:30:41:37:26:3e:ac:90:a9:d8:f3:06:5b:0d:15: bd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C7:0F:99:1D:F3:18:50:9F:6D:CC:EB:D6:30:EE:03:57:D7:77:91 X509v3 Authority Key Identifier: keyid:2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d2:c1:bc:39:b5:d6:ae:76:42:b1:86:3e:c7:95:96:cf:3a: 5a:b5:93:fa:fa:ff:b5:34:1f:b0:46:45:e5:0c:69:d2:a0:f8: 30:86:fe:ff:38:33:40:3e:63:65:ef:f9:19:60:b4:37:2a:12: 72:24:2c:38:5c:18:70:dd:a8:8d:ca:08:88:17:29:58:08:d2: 21:df:1b:1d:82:3b:35:47:be:ce:e1:7f:0b:54:e6:3b:42:7f: 3f:2c:be:07:03:9f:2b:30:df:c3:74:27:0c:ae:3b:35:f6:37: eb:23:42:84:35:a8:44:02:f9:8b:e3:70:a5:0d:77:2d:b6:a2: 09:6f:ac:44:01:f9:5d:00:2e:d7:ec:bb:37:1e:8a:4e:05:9a: 67:93:e6:dd:23:d1:b9:26:ae:bb:2b:17:f9:ce:6c:e5:8f:c9: de:c8:c7:ec:e8:a8:ac:30:de:ea:75:c5:ff:3e:b5:25:9f:50: 3f:46:00:a1:5a:83:56:28:1e:5c:87:88:96:ee:55:b2:73:46: 06:96:b4:38:a0:33:d8:7c:df:19:65:50:0b:a4:88:62:39:16: 9f:b8:76:d3:54:32:2a:5a:45:1b:45:e9:08:6b:9e:d6:da:2f: cb:1b:07:00:97:a5:ae:3d:5f:ad:f4:d6:fa:b9:be:e5:b3:c1: 98:cb:ed:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfkrAvJ7g1BpTO8lo0QNNHQLLvA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJGQzc0MUFBMTc3MUZDNUNFNzc5RTRDRjg4QTVDM0FG NTJGOEU3QTAeFw0yNjA5MjExOTEwMjFaFw0yNjA5MjIyMjIzMjFaMDMxMTAvBgNV BAMTKDUxQzcwRjk5MURGMzE4NTA5RjZEQ0NFQkQ2MzBFRTAzNTdENzc3OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCixbyfPssl2HsI36mEsNFbQxeZ aocyZw4HTej2fjRdD9R8vIysLe0P2fyKENuFe6NCxVe8u6aFdHqYrkMdlQjKWrFD neJVFzESpsgjyUaD9PkLVtuOYddKD95S0uobQRTfu0qgO5ZNE9c+Snex2Hcl2z6R ei6u5ddL0zTIYAn2O2tNogFqW1Inzw/4ImAZh00FIEn8RlhjjUgmwxNn/mUembWc Ke/2v4Zk23wEpXFMloFLaWbwM9Ih0zW21RnzeT0Y944U5Tv73Y9OYEdrxN3qErKI 07d3G5iDVq9jJm0HfjRS0ntY7AoRM92A7Qu3lywwQTcmPqyQqdjzBlsNFb1fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUccPmR3zGFCfbczr1jDuA1fXd5EwHwYDVR0j BBgwFoAUK/x0GqF3H8XOd55M+IpcOvUvjnowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWRiZDNhNTAtODMyZS00MTI3LTk0ZTEtNDhhY2UxNjRjZjI2LzAvMkJGQzc0MUFB MTc3MUZDNUNFNzc5RTRDRjg4QTVDM0FGNTJGOEU3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQkZDNzQxQUExNzcxRkM1Q0U3NzlFNENGODhBNUMzQUY1MkY4 RTdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWRiZDNhNTAtODMyZS00MTI3LTk0 ZTEtNDhhY2UxNjRjZjI2LzAvMkJGQzc0MUFBMTc3MUZDNUNFNzc5RTRDRjg4QTVD M0FGNTJGOEU3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfSwbw5tdaudkKxhj7HlZbPOlq1k/r6/7U0 H7BGReUMadKg+DCG/v84M0A+Y2Xv+RlgtDcqEnIkLDhcGHDdqI3KCIgXKVgI0iHf Gx2COzVHvs7hfwtU5jtCfz8svgcDnysw38N0JwyuOzX2N+sjQoQ1qEQC+YvjcKUN dy22oglvrEQB+V0ALtfsuzceik4FmmeT5t0j0bkmrrsrF/nObOWPyd7Ix+zoqKww 3up1xf8+tSWfUD9GAKFag1YoHlyHiJbuVbJzRgaWtDigM9h83xllUAukiGI5Fp+4 dtNUMipaRRtF6QhrntbaL8sbBwCXpa49X6301vq5vuWzwZjL7TE= -----END CERTIFICATE-----Generated at Tue Sep 22 09:43:37 2026 by rpki-client