$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft File: 2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft (raw, json) Hash identifier: GpNSn55fuLVoQGKd4Vji+L7ePQWy4LE65BC12keiOLg= Subject key identifier: 55:DD:5E:E9:6F:5C:F4:93:1C:2D:8D:90:76:9E:DE:BE:A5:85:CB:67 Authority key identifier: 2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32 Certificate issuer: /CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32 Certificate serial: 01E88391C162C515C887A6492534668E1278A197 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft Manifest number: D7 Signing time: Sat 10 Oct 2026 04:22:18 +0000 Manifest this update: Sat 10 Oct 2026 04:17:18 +0000 Manifest next update: Sun 11 Oct 2026 07:48:18 +0000 Files and hashes: 1: 3130332e35322e36302e302f32332d3233203d3e20313339343237.roa (hash: wZpRBXgVxARx5THQhkidt3uYEJCBivcYi7zf6PFHOe8=) 2: 2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl (hash: nZ+YP9K4NZJVHEnhDafVAuQEFC/0RdMgKfMU5OWwNrU=) 3: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: WTrF0cDS2UOT2PvqICS4rHLAPEa2DituaEKy6TilvQo=) 4: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: rpaRQ6pLcg3h8lZWS5mZP3KVaWJuOAbOO/JXcmWKPAY=) 5: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: Ks9YnRvxTe5fupbuzzjnQ7H1k8qTkpLLIojCNDLV9tI=) 6: 3130332e35322e36302e302f32342d3234203d3e20313339343237.roa (hash: oRYTuCJLLdMWXGYdD1e1WCx/FrIV0BiHCyH2sk8DrtM=) 7: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: gQZiPSYPZragbcbOQFwUKBcBf5Wr0XRio1UQ/GfXKcY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 04:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:e8:83:91:c1:62:c5:15:c8:87:a6:49:25:34:66:8e:12:78:a1:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32 Validity Not Before: Oct 10 04:17:18 2026 GMT Not After : Oct 11 07:48:18 2026 GMT Subject: CN=55DD5EE96F5CF4931C2D8D90769EDEBEA585CB67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b0:36:23:e6:f4:cf:df:0e:b2:c9:13:87:8f: fc:cd:92:10:ce:5c:2e:e4:b5:c7:0f:86:17:ce:c2: 72:2a:79:fc:b3:a3:3d:af:b1:13:67:8e:30:12:f9: 85:3c:f1:37:3f:fa:ec:63:87:56:72:e2:d7:63:1c: 34:c9:a3:31:36:ad:39:ac:ff:0e:2a:e6:bd:c9:fc: 78:49:4a:f1:00:a4:bf:4a:6e:19:04:90:68:57:83: e5:eb:5e:82:e2:62:98:db:ab:9c:37:1a:9e:40:fc: 2c:77:0b:ee:c9:55:69:fc:e2:be:e4:54:1f:7d:8c: 61:c1:af:5d:de:a0:57:6f:03:fb:33:a6:dc:3a:e3: 32:97:7a:8c:2f:78:95:f8:57:d9:c1:27:64:4f:c0: 33:38:55:05:20:ce:71:be:7e:55:9d:20:e4:4f:b8: cc:4f:13:99:08:d4:06:0b:3d:40:62:bb:e6:fd:bb: a8:88:ed:7b:98:13:a3:03:03:87:3b:c2:b3:d8:6e: 90:35:ee:e1:0d:db:7b:13:85:b9:11:de:b1:8a:f6: 3d:9a:6a:1c:88:50:6e:9c:10:a9:df:e3:18:3c:a9: e0:d7:a4:9b:e3:07:08:5a:67:66:f8:2a:9b:19:d4: 51:2d:2d:48:45:3e:fe:30:cd:b6:3c:fb:ee:f3:21: 92:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DD:5E:E9:6F:5C:F4:93:1C:2D:8D:90:76:9E:DE:BE:A5:85:CB:67 X509v3 Authority Key Identifier: keyid:2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2c:8c:63:71:23:d7:7e:f6:fd:ae:df:f4:44:a3:3b:bf:04: 65:55:56:fb:dd:ca:06:84:3a:fe:84:fb:1c:2e:09:58:af:24: 73:0d:79:11:f4:20:9f:32:03:f8:3a:6d:36:aa:02:9c:a6:3a: 18:04:bb:d3:a6:09:d6:b6:11:15:3c:d1:49:1c:40:ea:27:bb: 01:92:cc:24:b9:68:12:ee:6a:f0:4f:fb:44:40:eb:14:b5:3e: 04:1b:63:2d:ca:50:a5:f4:bf:b5:61:55:61:9e:91:45:58:fb: f4:8c:a2:1a:1a:c8:1e:8d:89:89:b7:c9:e1:37:87:6b:d2:68: 0c:ed:57:c0:a1:e2:81:b0:8d:e4:34:48:b0:39:4c:45:1c:02: dc:25:47:e5:83:7f:4b:57:b4:2a:c3:be:37:82:6a:5f:b6:3f: 85:5f:14:93:e6:f0:d9:09:dc:05:0e:a1:43:84:36:17:02:f4: 12:ca:4d:1e:d6:c4:d9:43:b2:26:5b:73:48:4e:04:ec:f2:08: f0:e8:c6:14:52:fc:2c:a0:87:2a:e9:e3:84:8b:b7:3e:dd:87: c6:65:60:0a:a9:49:fc:d2:74:8d:2c:6b:f5:f0:5e:30:8e:3c: 2b:97:1d:eb:19:d5:0a:21:9e:a8:09:af:1b:e4:1e:ea:23:47: c2:e0:d9:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAeiDkcFixRXIh6ZJJTRmjhJ4oZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCRDgxMjk1RUEzRkEzODY3MDgyMDcyRDFCREU0MUNC RkIzRkIzMjAeFw0yNjEwMTAwNDE3MThaFw0yNjEwMTEwNzQ4MThaMDMxMTAvBgNV BAMTKDU1REQ1RUU5NkY1Q0Y0OTMxQzJEOEQ5MDc2OUVERUJFQTU4NUNCNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHsDYj5vTP3w6yyROHj/zNkhDO XC7ktccPhhfOwnIqefyzoz2vsRNnjjAS+YU88Tc/+uxjh1Zy4tdjHDTJozE2rTms /w4q5r3J/HhJSvEApL9KbhkEkGhXg+XrXoLiYpjbq5w3Gp5A/Cx3C+7JVWn84r7k VB99jGHBr13eoFdvA/szptw64zKXeowveJX4V9nBJ2RPwDM4VQUgznG+flWdIORP uMxPE5kI1AYLPUBiu+b9u6iI7XuYE6MDA4c7wrPYbpA17uEN23sThbkR3rGK9j2a ahyIUG6cEKnf4xg8qeDXpJvjBwhaZ2b4KpsZ1FEtLUhFPv4wzbY8++7zIZLJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVd1e6W9c9JMcLY2Qdp7evqWFy2cwHwYDVR0j BBgwFoAULL2BKV6j+jhnCCBy0b3kHL+z+zIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDYxYjhjY2MtNmMyMi00MjRlLTk2MTQtOGFiOGFkMjg4NDljLzAvMkNCRDgxMjk1 RUEzRkEzODY3MDgyMDcyRDFCREU0MUNCRkIzRkIzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0JEODEyOTVFQTNGQTM4NjcwODIwNzJEMUJERTQxQ0JGQjNG QjMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDYxYjhjY2MtNmMyMi00MjRlLTk2 MTQtOGFiOGFkMjg4NDljLzAvMkNCRDgxMjk1RUEzRkEzODY3MDgyMDcyRDFCREU0 MUNCRkIzRkIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8sjGNxI9d+9v2u3/REozu/BGVVVvvdygaE Ov6E+xwuCVivJHMNeRH0IJ8yA/g6bTaqApymOhgEu9OmCda2ERU80UkcQOonuwGS zCS5aBLuavBP+0RA6xS1PgQbYy3KUKX0v7VhVWGekUVY+/SMohoayB6NiYm3yeE3 h2vSaAztV8Ch4oGwjeQ0SLA5TEUcAtwlR+WDf0tXtCrDvjeCal+2P4VfFJPm8NkJ 3AUOoUOENhcC9BLKTR7WxNlDsiZbc0hOBOzyCPDoxhRS/Cyghyrp44SLtz7dh8Zl YAqpSfzSdI0sa/XwXjCOPCuXHesZ1QohnqgJrxvkHuojR8Lg2ac= -----END CERTIFICATE-----Generated at Sat Oct 10 13:03:29 2026 by rpki-client