$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft File: 2CFE6C04191B28EDA13984F5549231D1840AACEC.mft (raw, json) Hash identifier: +8uXSUot/WeauDGrX6pmNuViyhDIdMkl2F46eRQ1VJQ= Subject key identifier: 85:38:DC:C2:49:E3:50:BD:D4:6C:F1:C0:FF:FA:9F:32:93:E0:A1:FA Authority key identifier: 2C:FE:6C:04:19:1B:28:ED:A1:39:84:F5:54:92:31:D1:84:0A:AC:EC Certificate issuer: /CN=2CFE6C04191B28EDA13984F5549231D1840AACEC Certificate serial: 4B3A30DAE5EE07155BC1B8B30D6E2F51125CF9E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft Manifest number: BF Signing time: Mon 21 Sep 2026 21:02:40 +0000 Manifest this update: Mon 21 Sep 2026 20:57:40 +0000 Manifest next update: Tue 22 Sep 2026 22:27:40 +0000 Files and hashes: 1: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: dFGJI1S/FQoqvRu6ehr7n/qth/1SKexx3mS7zWvVonM=) 2: 2CFE6C04191B28EDA13984F5549231D1840AACEC.crl (hash: byRSPIGcQJTOILf6HWonaZpCgUrmmGGC6ht6b0N1QFs=) 3: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: z7Lqa5CkkfTSXbCBFY/k+Fz/ISz+SJw0HySx4HiNPMc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.crl rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:3a:30:da:e5:ee:07:15:5b:c1:b8:b3:0d:6e:2f:51:12:5c:f9:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFE6C04191B28EDA13984F5549231D1840AACEC Validity Not Before: Sep 21 20:57:40 2026 GMT Not After : Sep 22 22:27:40 2026 GMT Subject: CN=8538DCC249E350BDD46CF1C0FFFA9F3293E0A1FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:ac:42:29:af:72:f2:1b:24:28:0a:72:60: b4:37:2e:6a:b7:cb:ca:d3:db:21:3b:af:49:9c:34: fa:01:03:d6:09:eb:9c:69:d1:50:05:f7:e8:ae:ba: 44:09:f4:cb:2d:77:7a:41:19:6b:0f:dc:b5:fc:3b: 03:12:c1:19:f2:5a:8d:4e:89:bf:a1:55:17:7e:31: c8:cd:20:c2:2f:e4:09:46:2d:f5:17:ef:fe:3c:9e: 8d:62:e0:cb:23:6e:20:5f:18:9a:e8:cb:1e:14:df: af:f0:4a:2e:8b:e1:c2:3d:d0:5a:ca:95:55:4a:1e: a8:44:04:d5:be:c1:e7:c6:41:2f:cb:07:a9:0f:58: f7:c4:6f:9b:6d:d2:e7:e0:50:a6:66:38:19:2b:b7: 3a:f2:c6:a2:05:0e:50:e9:a4:53:ec:76:2b:63:9f: a4:95:a8:15:b0:ed:68:9c:7e:22:48:0a:4e:38:99: ec:b5:2a:b5:0a:be:e7:22:d6:64:e0:61:5a:89:0e: 2a:0e:5e:79:a7:29:3d:80:2c:98:a3:23:ef:fd:71: fd:a3:28:97:77:f5:38:c1:00:a8:14:b2:78:2d:22: a7:9f:0e:89:92:cb:5c:3d:d3:db:3a:11:3e:5c:13: d0:12:d0:55:12:74:aa:12:92:5b:5f:e5:13:8a:45: 98:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:38:DC:C2:49:E3:50:BD:D4:6C:F1:C0:FF:FA:9F:32:93:E0:A1:FA X509v3 Authority Key Identifier: keyid:2C:FE:6C:04:19:1B:28:ED:A1:39:84:F5:54:92:31:D1:84:0A:AC:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:36:3d:5b:37:94:a1:76:a2:c8:cb:ee:fa:06:e2:b4:ff:4d: a3:a4:bd:c2:cc:61:f3:6d:cf:77:03:b7:69:92:96:29:6c:54: db:bf:41:cf:98:f8:0d:60:07:99:46:20:79:da:3e:37:35:bc: f7:10:01:e6:c0:82:17:83:0c:03:ac:d0:95:fb:55:52:91:b0: 73:96:d2:fd:d3:e0:c9:80:74:83:14:4d:9a:9d:2f:91:f8:c6: 68:93:e5:4d:86:20:47:7e:ef:bb:c3:8f:ac:16:29:0a:db:1c: b0:ed:5d:89:31:52:46:6a:40:99:62:a7:6c:07:37:24:10:44: 3f:88:f6:4a:d1:c1:0d:d0:6c:5d:a6:9b:b2:14:ea:91:b9:5f: 91:46:93:4a:75:37:dc:41:2d:c8:b2:03:18:53:9e:02:f0:f5: be:27:3b:e2:1c:f8:7a:14:2f:d5:0c:c1:de:8f:65:57:89:6b: ef:72:92:53:74:d8:8f:76:fe:84:47:2b:7c:dd:34:bd:b8:1f: 56:82:f5:1b:1f:4c:e5:1c:f7:7f:af:00:e7:53:4b:f3:47:e6: cc:20:4e:76:03:8d:8c:65:6f:a2:81:8e:93:c0:9c:13:af:a6: 38:e9:f1:06:d9:c0:ed:21:8f:82:29:27:2b:c6:ec:d3:68:0c: 56:6d:5a:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSzow2uXuBxVbwbizDW4vURJc+eEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRTZDMDQxOTFCMjhFREExMzk4NEY1NTQ5MjMxRDE4 NDBBQUNFQzAeFw0yNjA5MjEyMDU3NDBaFw0yNjA5MjIyMjI3NDBaMDMxMTAvBgNV BAMTKDg1MzhEQ0MyNDlFMzUwQkRENDZDRjFDMEZGRkE5RjMyOTNFMEExRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9uqxCKa9y8hskKApyYLQ3Lmq3 y8rT2yE7r0mcNPoBA9YJ65xp0VAF9+iuukQJ9Mstd3pBGWsP3LX8OwMSwRnyWo1O ib+hVRd+McjNIMIv5AlGLfUX7/48no1i4MsjbiBfGJroyx4U36/wSi6L4cI90FrK lVVKHqhEBNW+wefGQS/LB6kPWPfEb5tt0ufgUKZmOBkrtzryxqIFDlDppFPsditj n6SVqBWw7WicfiJICk44mey1KrUKvuci1mTgYVqJDioOXnmnKT2ALJijI+/9cf2j KJd39TjBAKgUsngtIqefDomSy1w909s6ET5cE9AS0FUSdKoSkltf5ROKRZjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhTjcwknjUL3UbPHA//qfMpPgofowHwYDVR0j BBgwFoAULP5sBBkbKO2hOYT1VJIx0YQKrOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU5MDhiODMtN2Y0NC00NmUwLTg1MzUtNmZiODRiNTlkNThhLzAvMkNGRTZDMDQx OTFCMjhFREExMzk4NEY1NTQ5MjMxRDE4NDBBQUNFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0ZFNkMwNDE5MUIyOEVEQTEzOTg0RjU1NDkyMzFEMTg0MEFB Q0VDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU5MDhiODMtN2Y0NC00NmUwLTg1 MzUtNmZiODRiNTlkNThhLzAvMkNGRTZDMDQxOTFCMjhFREExMzk4NEY1NTQ5MjMx RDE4NDBBQUNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALc2PVs3lKF2osjL7voG4rT/TaOkvcLMYfNt z3cDt2mSlilsVNu/Qc+Y+A1gB5lGIHnaPjc1vPcQAebAgheDDAOs0JX7VVKRsHOW 0v3T4MmAdIMUTZqdL5H4xmiT5U2GIEd+77vDj6wWKQrbHLDtXYkxUkZqQJlip2wH NyQQRD+I9krRwQ3QbF2mm7IU6pG5X5FGk0p1N9xBLciyAxhTngLw9b4nO+Ic+HoU L9UMwd6PZVeJa+9yklN02I92/oRHK3zdNL24H1aC9RsfTOUc93+vAOdTS/NH5swg TnYDjYxlb6KBjpPAnBOvpjjp8QbZwO0hj4IpJyvG7NNoDFZtWg0= -----END CERTIFICATE-----Generated at Tue Sep 22 01:05:46 2026 by rpki-client