$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft File: 2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft (raw, json) Hash identifier: +hti7sUPrgo/5CQDjYLa7mpSUMCZqXkqmzG5ueVCtTw= Subject key identifier: 7D:B4:2F:4D:4A:75:6C:10:0A:58:86:2A:9F:58:FC:10:0A:0E:F4:A3 Authority key identifier: 2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3 Certificate issuer: /CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3 Certificate serial: 72DA5AA5F068EDFB8099AE6E25A62F0E263CD232 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft Manifest number: BD Signing time: Mon 21 Sep 2026 09:23:06 +0000 Manifest this update: Mon 21 Sep 2026 09:18:06 +0000 Manifest next update: Tue 22 Sep 2026 11:50:06 +0000 Files and hashes: 1: 2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl (hash: bADgYDjDeiEEeiV9Y5SrZNX0eFxSPBiy2wifOHIKxQ0=) 2: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: uD4zXPlmJIJvDYKeBCRvwCSXSW9r9c2Pd73kp0tq76c=) 3: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: Fc1cIIy7yp6fwFNt9JFBozT8wGm732U+MIRuBDuRJKc=) 4: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: ba9T7QeA28DMOyzLlfoljNenw5738a58LQmu3hf+TMU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:da:5a:a5:f0:68:ed:fb:80:99:ae:6e:25:a6:2f:0e:26:3c:d2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3 Validity Not Before: Sep 21 09:18:06 2026 GMT Not After : Sep 22 11:50:06 2026 GMT Subject: CN=7DB42F4D4A756C100A58862A9F58FC100A0EF4A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:71:e7:2b:11:14:58:f5:5b:c0:ac:16:51:ba: 01:35:33:a0:0a:43:8a:53:e0:85:c5:9d:d7:94:fa: 78:26:a4:0f:b9:b8:8f:80:79:1d:e9:5e:82:90:c8: 06:cf:4f:7c:f1:2b:53:b2:eb:e7:7d:67:a9:ac:d2: 25:59:41:a9:76:56:e5:e1:c3:c5:a8:81:a3:a4:69: 3d:27:21:a3:a4:08:a2:cf:e0:4c:de:e9:da:32:ff: 57:2a:38:0b:42:bf:c7:56:95:51:1d:dd:89:e8:d6: 53:4a:21:fe:46:af:79:47:bf:bb:1b:e3:f3:76:7e: 71:e3:d3:30:0e:5d:6c:dc:68:04:57:57:88:22:da: ff:ff:36:96:f3:35:a8:fb:09:2e:53:2a:6d:bb:00: b6:73:9e:c3:66:48:5f:98:84:bb:92:38:7d:91:0c: c7:36:3e:c1:ff:31:76:a9:df:c1:1c:a2:fd:b7:bf: 07:1e:bd:00:f8:0a:46:1b:31:a0:5c:fe:96:cc:0e: 25:bd:c4:e3:c4:85:c8:70:61:1a:6b:51:68:14:41: 7d:53:d4:da:8e:d6:c5:50:55:01:60:97:d2:8c:5f: 5e:be:c6:f1:7b:d5:ce:48:2a:31:c2:a2:00:cf:e8: 30:b0:da:90:2c:99:eb:c5:57:e6:73:86:33:82:46: d6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B4:2F:4D:4A:75:6C:10:0A:58:86:2A:9F:58:FC:10:0A:0E:F4:A3 X509v3 Authority Key Identifier: keyid:2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:69:93:7e:d6:f1:b7:75:83:09:98:5e:d3:c7:57:95:70:d1: cc:d6:6a:8f:2a:a9:b6:82:74:f0:ab:7f:53:b8:a8:88:86:6d: 06:29:f5:d6:ac:81:3a:26:ec:70:ae:71:51:a4:a0:88:70:d3: 80:19:00:45:8d:b9:c9:c2:ce:34:0a:24:3b:ba:fa:db:71:04: cb:6f:d8:5a:7a:82:ac:fd:a0:67:e7:c1:b0:5f:1c:80:29:6d: 2f:2c:fd:46:50:8e:28:13:dc:07:65:0d:9c:cf:57:5d:05:dd: f1:94:88:7f:bd:de:49:6c:d1:dd:c7:a3:72:01:61:42:25:c7: 64:92:2a:e4:c3:1c:2c:9a:07:d9:9f:82:83:ec:21:bf:f0:96: 14:d8:69:2b:45:71:3c:18:6d:a9:77:70:57:74:3d:7c:1d:0e: 43:f5:3b:9e:9d:fe:13:49:aa:18:10:58:ed:14:ed:7b:33:a2: d5:09:b2:10:5f:f1:53:78:31:4b:80:53:9d:ae:90:a7:d1:be: 6a:dd:75:08:eb:4c:8e:1b:ac:53:06:2f:da:ee:ce:d6:c1:ba: 3e:e5:4f:02:cf:a5:c6:7c:af:5f:3f:ad:bc:60:7e:e8:b1:42: b2:40:52:52:5d:89:9b:74:e0:74:36:59:5c:08:cc:5a:90:c0: f9:76:8f:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUctpapfBo7fuAma5uJaYvDiY80jIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZGOUQ1MkFEQzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3NzZE Q0I0MzNCMzAeFw0yNjA5MjEwOTE4MDZaFw0yNjA5MjIxMTUwMDZaMDMxMTAvBgNV BAMTKDdEQjQyRjRENEE3NTZDMTAwQTU4ODYyQTlGNThGQzEwMEEwRUY0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMcecrERRY9VvArBZRugE1M6AK Q4pT4IXFndeU+ngmpA+5uI+AeR3pXoKQyAbPT3zxK1Oy6+d9Z6ms0iVZQal2VuXh w8WogaOkaT0nIaOkCKLP4Eze6doy/1cqOAtCv8dWlVEd3Yno1lNKIf5Gr3lHv7sb 4/N2fnHj0zAOXWzcaARXV4gi2v//NpbzNaj7CS5TKm27ALZznsNmSF+YhLuSOH2R DMc2PsH/MXap38Ecov23vwcevQD4CkYbMaBc/pbMDiW9xOPEhchwYRprUWgUQX1T 1NqO1sVQVQFgl9KMX16+xvF71c5IKjHCogDP6DCw2pAsmevFV+ZzhjOCRtYLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfbQvTUp1bBAKWIYqn1j8EAoO9KMwHwYDVR0j BBgwFoAUL/nVKtx3f6POUar5RIuHdty0M7MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2MwNzVlZjYtYTI1MS00N2RkLThkZGEtY2FkZmY0OTdhN2U1LzAvMkZGOUQ1MkFE Qzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3NzZEQ0I0MzNCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkY5RDUyQURDNzc3RkEzQ0U1MUFBRjk0NDhCODc3NkRDQjQz M0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMkZGOUQ1MkFEQzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3 NzZEQ0I0MzNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABpk37W8bd1gwmYXtPHV5Vw0czWao8qqbaC dPCrf1O4qIiGbQYp9dasgTom7HCucVGkoIhw04AZAEWNucnCzjQKJDu6+ttxBMtv 2Fp6gqz9oGfnwbBfHIApbS8s/UZQjigT3AdlDZzPV10F3fGUiH+93kls0d3Ho3IB YUIlx2SSKuTDHCyaB9mfgoPsIb/wlhTYaStFcTwYbal3cFd0PXwdDkP1O56d/hNJ qhgQWO0U7XszotUJshBf8VN4MUuAU52ukKfRvmrddQjrTI4brFMGL9ruztbBuj7l TwLPpcZ8r18/rbxgfuixQrJAUlJdiZt04HQ2WVwIzFqQwPl2jxI= -----END CERTIFICATE-----Generated at Mon Sep 21 15:44:46 2026 by rpki-client