$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft File: 2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft (raw, json) Hash identifier: DDvzeEtc/5+hwLVoPRpnqB8/sWAZ6jlRaQtnqFT5OY0= Subject key identifier: 30:53:AA:96:04:FB:54:C0:C0:91:E3:1F:C9:83:40:93:75:B1:97:73 Authority key identifier: 2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3 Certificate issuer: /CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3 Certificate serial: 5AB13588A08F65E4F1E65F3748E3FC0FFC84A1A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft Manifest number: BC Signing time: Sun 20 Sep 2026 14:50:23 +0000 Manifest this update: Sun 20 Sep 2026 14:45:23 +0000 Manifest next update: Mon 21 Sep 2026 17:20:23 +0000 Files and hashes: 1: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: ba9T7QeA28DMOyzLlfoljNenw5738a58LQmu3hf+TMU=) 2: 2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl (hash: 9UOzYLNC1Dnlj/zikNf9OqxvRAucUQ3qMyEzpMwuW74=) 3: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: Fc1cIIy7yp6fwFNt9JFBozT8wGm732U+MIRuBDuRJKc=) 4: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: uD4zXPlmJIJvDYKeBCRvwCSXSW9r9c2Pd73kp0tq76c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b1:35:88:a0:8f:65:e4:f1:e6:5f:37:48:e3:fc:0f:fc:84:a1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3 Validity Not Before: Sep 20 14:45:23 2026 GMT Not After : Sep 21 17:20:23 2026 GMT Subject: CN=3053AA9604FB54C0C091E31FC983409375B19773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:de:5d:4e:d1:a0:27:72:e7:27:0e:69:fe:9c: 92:34:56:68:c9:93:a3:7f:c0:5d:d1:45:fb:87:f4: a3:06:b6:66:f2:01:0c:e8:a9:2d:53:6c:2c:62:31: 04:e9:5f:fc:d5:da:a2:b8:44:bc:9c:8c:24:58:3e: 10:b6:b9:05:af:a2:ac:e4:b5:81:26:3d:41:a0:0a: 26:4c:e3:cf:39:e3:70:5e:a9:b4:b3:36:b2:26:01: b7:4d:b4:32:81:79:e4:f2:c2:fa:3d:7f:0b:ea:22: eb:40:e5:ef:2c:ba:73:7c:79:48:65:92:61:49:44: 1d:59:0a:1a:fb:4a:c5:ae:4a:c9:2c:6b:c7:92:1d: b1:fe:e1:39:be:70:39:65:dc:f1:74:e6:80:3c:e0: 0f:92:f0:0d:a9:ae:77:e5:a4:75:ea:82:69:c0:ea: 2c:71:09:6d:46:10:87:79:f6:27:47:09:a9:14:e0: 35:21:63:ee:45:87:df:58:92:c2:16:a3:f8:d8:49: 03:cc:51:f3:51:a3:f8:5d:81:c6:fc:0c:cc:91:78: f5:fe:52:2e:a8:16:ad:5e:32:71:d5:c5:48:72:01: 21:05:87:15:95:89:95:59:2f:b2:da:2b:95:6b:f7: 04:17:b9:e4:ce:4f:47:dd:9e:c1:f4:46:4d:07:b9: cc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:53:AA:96:04:FB:54:C0:C0:91:E3:1F:C9:83:40:93:75:B1:97:73 X509v3 Authority Key Identifier: keyid:2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:0d:03:b1:ee:de:0a:dd:3a:20:a7:55:ae:ed:be:ae:a1:2a: 11:3e:eb:cc:27:14:59:70:78:31:9b:9a:f0:1d:ad:df:38:08: 4d:89:7e:f0:8e:3c:e0:f7:1c:99:55:eb:5d:02:b5:82:b2:2c: a4:55:8f:67:ea:82:9e:42:92:69:1c:9e:72:bc:47:18:a8:3e: e2:13:61:fc:e7:2f:b5:b5:55:e1:9d:79:e2:29:1e:1a:8c:c0: 3b:c8:a5:4e:88:5a:db:e7:3e:97:39:90:7e:af:b5:88:ae:a2: 82:61:45:43:a5:4d:6c:c9:bf:47:3e:9b:44:8e:0d:9f:38:1f: d2:e2:aa:88:2e:eb:17:f3:8e:5c:14:9c:0e:11:d8:b2:f5:b4: 0f:cf:22:ee:48:26:d2:de:d4:37:05:ff:cd:22:22:2e:57:30: 15:7a:29:af:06:12:ee:4b:9d:c5:67:fd:05:ae:74:63:3e:8b: 0c:3f:2c:80:f8:9c:49:36:41:05:df:51:49:d5:5f:19:58:cc: eb:96:ae:58:0e:7b:1a:22:9b:15:0c:64:09:3f:7b:dc:d3:f0: cb:99:17:f0:35:8a:56:d6:31:7c:da:35:38:cd:a6:44:85:4d: 20:67:56:f8:1e:25:e2:95:79:da:57:00:74:70:2c:1b:7e:2f: 56:78:7c:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWrE1iKCPZeTx5l83SOP8D/yEoacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZGOUQ1MkFEQzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3NzZE Q0I0MzNCMzAeFw0yNjA5MjAxNDQ1MjNaFw0yNjA5MjExNzIwMjNaMDMxMTAvBgNV BAMTKDMwNTNBQTk2MDRGQjU0QzBDMDkxRTMxRkM5ODM0MDkzNzVCMTk3NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo3l1O0aAncucnDmn+nJI0VmjJ k6N/wF3RRfuH9KMGtmbyAQzoqS1TbCxiMQTpX/zV2qK4RLycjCRYPhC2uQWvoqzk tYEmPUGgCiZM488543BeqbSzNrImAbdNtDKBeeTywvo9fwvqIutA5e8sunN8eUhl kmFJRB1ZChr7SsWuSsksa8eSHbH+4Tm+cDll3PF05oA84A+S8A2prnflpHXqgmnA 6ixxCW1GEId59idHCakU4DUhY+5Fh99YksIWo/jYSQPMUfNRo/hdgcb8DMyRePX+ Ui6oFq1eMnHVxUhyASEFhxWViZVZL7LaK5Vr9wQXueTOT0fdnsH0Rk0HuczDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMFOqlgT7VMDAkeMfyYNAk3Wxl3MwHwYDVR0j BBgwFoAUL/nVKtx3f6POUar5RIuHdty0M7MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2MwNzVlZjYtYTI1MS00N2RkLThkZGEtY2FkZmY0OTdhN2U1LzAvMkZGOUQ1MkFE Qzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3NzZEQ0I0MzNCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkY5RDUyQURDNzc3RkEzQ0U1MUFBRjk0NDhCODc3NkRDQjQz M0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMkZGOUQ1MkFEQzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3 NzZEQ0I0MzNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkNA7Hu3grdOiCnVa7tvq6hKhE+68wnFFlw eDGbmvAdrd84CE2JfvCOPOD3HJlV610CtYKyLKRVj2fqgp5CkmkcnnK8RxioPuIT YfznL7W1VeGdeeIpHhqMwDvIpU6IWtvnPpc5kH6vtYiuooJhRUOlTWzJv0c+m0SO DZ84H9Liqogu6xfzjlwUnA4R2LL1tA/PIu5IJtLe1DcF/80iIi5XMBV6Ka8GEu5L ncVn/QWudGM+iww/LID4nEk2QQXfUUnVXxlYzOuWrlgOexoimxUMZAk/e9zT8MuZ F/A1ilbWMXzaNTjNpkSFTSBnVvgeJeKVedpXAHRwLBt+L1Z4fOY= -----END CERTIFICATE-----Generated at Mon Sep 21 01:15:04 2026 by rpki-client