$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft File: 256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft (raw, json) Hash identifier: 4tg5fdb3tPUNrSQICm3PjSESkHvi7rD9b8DSYgADT2E= Subject key identifier: 6F:97:39:68:23:28:0F:D5:81:A7:9F:49:60:DD:21:C3:0F:8A:F6:DA Authority key identifier: 25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED Certificate issuer: /CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED Certificate serial: 6D757B23FC462D3329C30136D12B2C437A528D6B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft Manifest number: BE Signing time: Mon 21 Sep 2026 05:28:29 +0000 Manifest this update: Mon 21 Sep 2026 05:23:29 +0000 Manifest next update: Tue 22 Sep 2026 06:59:29 +0000 Files and hashes: 1: 256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl (hash: IBrN2hOA07o9EweEKRIeuBNYyGSgl14kWzMw3fnuKQU=) 2: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: seLt9J4Omc3hnlGUE3OGC5XsPU9/YgeAHtEiSSm80kY=) 3: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: cfTJoIKD7v5E50NDw9RdyVoXvRV8kIdsxzrTBtYWbZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:75:7b:23:fc:46:2d:33:29:c3:01:36:d1:2b:2c:43:7a:52:8d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED Validity Not Before: Sep 21 05:23:29 2026 GMT Not After : Sep 22 06:59:29 2026 GMT Subject: CN=6F97396823280FD581A79F4960DD21C30F8AF6DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:f8:32:b8:d3:13:21:14:4c:f2:fe:01:40: 4b:33:ab:cc:7d:09:73:b9:8b:6f:c0:64:dc:15:59: 60:aa:22:f1:5e:4e:ef:c3:71:37:f3:b9:58:0b:a1: 86:5b:63:db:8e:67:10:c0:dc:cc:0c:3d:dd:e9:54: 74:b6:42:2b:d3:f7:9c:19:0d:5b:e2:99:ff:2f:f2: d6:de:c0:9e:3b:43:98:12:54:86:ed:56:a4:82:73: 40:7d:ba:d4:7d:89:55:28:ce:ca:df:dd:48:31:8a: a3:f4:17:00:3a:28:2f:ea:06:b3:0f:ee:0f:65:a8: 02:85:39:5a:75:d7:ea:f7:a4:92:7d:dd:9c:44:3d: 57:56:03:35:3b:72:f8:ea:45:d5:0f:49:fb:1a:55: 64:29:0e:da:b0:b7:4b:40:72:b7:60:f2:2d:1d:4f: c7:d2:60:17:1f:16:41:8c:17:6d:64:6a:82:a4:bf: ae:8d:fb:36:ff:3a:bc:69:c5:59:68:49:d2:e6:64: 45:28:58:84:20:f5:a4:f2:25:47:69:22:99:81:56: 15:cf:3b:6d:b7:89:8b:e8:90:32:ee:75:e9:8b:e7: 84:5f:85:6b:f3:f1:4c:4a:4d:1b:05:95:d3:dd:78: d7:71:95:63:e9:4a:f8:2e:8d:ea:f9:7e:76:f5:27: 2d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:97:39:68:23:28:0F:D5:81:A7:9F:49:60:DD:21:C3:0F:8A:F6:DA X509v3 Authority Key Identifier: keyid:25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3f:8c:3f:57:ed:e9:62:87:37:6c:d3:f7:4a:5c:26:52:82: d7:41:39:11:af:44:1a:cf:99:c0:51:43:4d:7c:a0:1e:e3:13: a0:57:be:b5:09:51:e6:93:bd:47:4e:10:db:b8:34:63:b9:76: 8f:ed:b6:da:cc:11:68:c4:ae:04:74:d5:8c:4b:68:f0:d0:3b: f0:aa:ff:7c:8c:d1:5c:25:d4:a7:83:7e:46:d9:1b:d5:4e:c1: 09:96:9e:e6:7c:ba:be:a1:52:6c:6c:7d:7c:f0:46:80:1e:af: 70:85:91:41:e3:1f:9f:77:a7:c1:7b:77:b8:db:2c:5c:17:bc: 01:b6:ea:b9:e9:cb:3c:68:43:29:4f:20:dd:f9:4a:3b:f3:eb: f8:c6:97:01:5e:71:8e:e7:93:16:ab:2e:61:82:c9:1a:90:c0: e8:e9:89:0d:0c:be:db:2d:92:31:07:50:dc:a5:17:9e:77:3f: 51:27:57:82:e7:d4:1f:99:be:ed:89:a9:1d:2d:bd:2c:83:a4: d9:9b:2e:9e:a2:44:0b:d9:95:f9:a3:db:2e:9c:46:d6:62:05: b1:3b:d3:c4:d6:4d:4b:86:c9:f6:b6:aa:b1:67:3d:7b:93:c4: fe:20:8c:f4:9d:8a:8b:3c:ac:b0:8c:11:41:26:7b:28:4a:fa: e1:3e:6a:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbXV7I/xGLTMpwwE20SssQ3pSjWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2RTAzQkMyRjFEQTRGOTAzMUU3MUM2ODE0RDAxOTBD NDQ5NDZFRDAeFw0yNjA5MjEwNTIzMjlaFw0yNjA5MjIwNjU5MjlaMDMxMTAvBgNV BAMTKDZGOTczOTY4MjMyODBGRDU4MUE3OUY0OTYwREQyMUMzMEY4QUY2REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnzPgyuNMTIRRM8v4BQEszq8x9 CXO5i2/AZNwVWWCqIvFeTu/DcTfzuVgLoYZbY9uOZxDA3MwMPd3pVHS2QivT95wZ DVvimf8v8tbewJ47Q5gSVIbtVqSCc0B9utR9iVUozsrf3UgxiqP0FwA6KC/qBrMP 7g9lqAKFOVp11+r3pJJ93ZxEPVdWAzU7cvjqRdUPSfsaVWQpDtqwt0tAcrdg8i0d T8fSYBcfFkGMF21kaoKkv66N+zb/OrxpxVloSdLmZEUoWIQg9aTyJUdpIpmBVhXP O223iYvokDLudemL54RfhWvz8UxKTRsFldPdeNdxlWPpSvgujer5fnb1Jy05AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb5c5aCMoD9WBp59JYN0hww+K9towHwYDVR0j BBgwFoAUJW4DvC8dpPkDHnHGgU0BkMRJRu0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZmZGMyYjctZjMwNS00ZTA3LWFhYzUtNDY5ZTkxMTNiMGI0LzAvMjU2RTAzQkMy RjFEQTRGOTAzMUU3MUM2ODE0RDAxOTBDNDQ5NDZFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTZFMDNCQzJGMURBNEY5MDMxRTcxQzY4MTREMDE5MEM0NDk0 NkVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvMjU2RTAzQkMyRjFEQTRGOTAzMUU3MUM2ODE0RDAx OTBDNDQ5NDZFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0/jD9X7elihzds0/dKXCZSgtdBORGvRBrP mcBRQ018oB7jE6BXvrUJUeaTvUdOENu4NGO5do/tttrMEWjErgR01YxLaPDQO/Cq /3yM0Vwl1KeDfkbZG9VOwQmWnuZ8ur6hUmxsfXzwRoAer3CFkUHjH593p8F7d7jb LFwXvAG26rnpyzxoQylPIN35Sjvz6/jGlwFecY7nkxarLmGCyRqQwOjpiQ0Mvtst kjEHUNylF553P1EnV4Ln1B+Zvu2JqR0tvSyDpNmbLp6iRAvZlfmj2y6cRtZiBbE7 08TWTUuGyfa2qrFnPXuTxP4gjPSdios8rLCMEUEmeyhK+uE+amM= -----END CERTIFICATE-----Generated at Mon Sep 21 15:48:42 2026 by rpki-client