$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft File: 2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft (raw, json) Hash identifier: 31i5hHqK0KVfckIHQBctTROtV1tMct3nY2eE0I+G/aE= Subject key identifier: F5:CB:30:9D:80:56:7E:12:27:0B:D7:68:7F:99:76:65:B7:FC:E0:00 Authority key identifier: 2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88 Certificate issuer: /CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88 Certificate serial: 52DE23C8DB9EFE3769CCECAB3E79B1C41261ABF4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft Manifest number: BF Signing time: Mon 21 Sep 2026 07:46:16 +0000 Manifest this update: Mon 21 Sep 2026 07:41:16 +0000 Manifest next update: Tue 22 Sep 2026 10:51:16 +0000 Files and hashes: 1: 2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl (hash: XSRy5c2wXAHw1uH3FQj91Vik8a05yMJ0Qa64CTW4jMI=) 2: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: BwjnFjz5sFQQdxCMf3i5N8Aax7h3Sveq3upFP+p+HDs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:de:23:c8:db:9e:fe:37:69:cc:ec:ab:3e:79:b1:c4:12:61:ab:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88 Validity Not Before: Sep 21 07:41:16 2026 GMT Not After : Sep 22 10:51:16 2026 GMT Subject: CN=F5CB309D80567E12270BD7687F997665B7FCE000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:23:6e:02:c6:cc:3f:1d:d0:9f:bc:06:3a:42: 43:70:18:6e:fb:8e:25:cf:b9:3b:f8:e2:70:51:33: a4:46:1b:88:d6:af:b2:20:e2:be:e7:a6:c8:62:28: 9b:17:1b:83:27:fe:6a:66:15:12:82:48:39:01:5e: 7a:cf:33:90:92:fa:7d:5c:c2:53:2d:4e:c0:b9:c7: de:4c:0e:9f:da:ba:77:39:4f:61:9e:39:b3:2c:68: 59:ad:5e:0b:05:a2:0b:ae:3c:dd:c9:2d:ce:c3:00: fa:47:28:44:94:d4:46:f1:bd:07:bf:3b:a6:37:83: 28:0c:c1:dd:c8:05:b2:6c:d4:46:ac:a6:1c:a9:b6: f4:b9:aa:35:28:14:52:a5:af:c9:ae:84:a5:37:91: 7c:7f:83:5e:8e:72:34:a5:05:4f:49:6d:2f:cd:ed: 1d:cb:11:20:63:ce:03:a3:b7:d6:f7:95:5a:db:dd: d6:fb:8b:3b:82:ca:ab:22:30:d1:3d:3e:50:97:01: 1e:36:84:17:78:75:75:0e:0e:e5:54:3a:b4:42:9b: d4:93:92:3b:a1:87:24:94:cb:6b:98:8f:06:7b:d8: 28:5c:49:c5:55:16:2e:fd:c9:90:32:6c:77:95:c5: 1b:51:14:4e:b7:3c:75:ba:c4:04:9c:e2:cf:25:9d: a3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CB:30:9D:80:56:7E:12:27:0B:D7:68:7F:99:76:65:B7:FC:E0:00 X509v3 Authority Key Identifier: keyid:2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:35:68:50:30:69:7a:e6:d1:81:3f:a2:95:84:fb:e3:ab:c9: bc:78:04:5d:6d:88:0c:c2:49:57:90:3d:24:08:c5:1e:31:1a: 40:7f:46:46:6c:20:ba:04:4c:a2:3e:a6:84:62:20:53:9e:63: 67:40:1c:37:f5:eb:75:5c:e4:a7:27:df:52:35:6e:4b:68:0d: 6e:57:47:f1:52:3e:01:c2:a5:41:50:a2:84:35:f2:83:20:aa: cb:26:e5:d8:39:a5:55:48:c0:1b:87:f4:b3:9a:83:8f:7e:86: bd:40:71:e5:96:62:a0:f0:ed:8e:b1:ca:ab:76:70:e3:f6:17: 8d:f0:bb:3b:69:b7:06:86:a3:d7:09:e0:6b:5d:05:68:24:82: bb:2f:3e:c5:6c:e2:9f:e6:63:8d:64:67:70:6d:89:ae:85:6b: 67:6c:be:93:ac:ae:a9:c3:44:90:f0:c7:4c:e4:0f:58:f8:f4: a4:8f:76:37:7c:fc:72:c0:eb:16:89:a0:d5:a2:14:44:46:e0: f0:09:33:9c:5c:e6:f6:de:04:2d:22:e2:6f:a1:84:3f:23:80: b5:85:ff:a8:ca:d3:51:23:bb:06:42:a2:ea:b7:2b:6f:37:cc: c7:26:77:d1:08:dd:48:c4:97:e7:1f:0a:be:f1:6f:89:ef:6b: c1:95:42:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUt4jyNue/jdpzOyrPnmxxBJhq/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVCOENCRTdBNDc5Mjc3QUMwM0VFODBGMzY1REQ4ODNC RTM4REQ4ODAeFw0yNjA5MjEwNzQxMTZaFw0yNjA5MjIxMDUxMTZaMDMxMTAvBgNV BAMTKEY1Q0IzMDlEODA1NjdFMTIyNzBCRDc2ODdGOTk3NjY1QjdGQ0UwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+I24Cxsw/HdCfvAY6QkNwGG77 jiXPuTv44nBRM6RGG4jWr7Ig4r7npshiKJsXG4Mn/mpmFRKCSDkBXnrPM5CS+n1c wlMtTsC5x95MDp/aunc5T2GeObMsaFmtXgsFoguuPN3JLc7DAPpHKESU1EbxvQe/ O6Y3gygMwd3IBbJs1EasphyptvS5qjUoFFKlr8muhKU3kXx/g16OcjSlBU9JbS/N 7R3LESBjzgOjt9b3lVrb3db7izuCyqsiMNE9PlCXAR42hBd4dXUODuVUOrRCm9ST kjuhhySUy2uYjwZ72ChcScVVFi79yZAybHeVxRtRFE63PHW6xASc4s8lnaP1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9cswnYBWfhInC9dof5l2Zbf84AAwHwYDVR0j BBgwFoAULrjL56R5J3rAPugPNl3Yg7443YgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRiOTJlODktOTJkNS00MDY0LTk1MTEtMDY3ZTM1MzY3OWNlLzAvMkVCOENCRTdB NDc5Mjc3QUMwM0VFODBGMzY1REQ4ODNCRTM4REQ4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRUI4Q0JFN0E0NzkyNzdBQzAzRUU4MEYzNjVERDg4M0JFMzhE RDg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvMkVCOENCRTdBNDc5Mjc3QUMwM0VFODBGMzY1REQ4 ODNCRTM4REQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM41aFAwaXrm0YE/opWE++Orybx4BF1tiAzC SVeQPSQIxR4xGkB/RkZsILoETKI+poRiIFOeY2dAHDf163Vc5Kcn31I1bktoDW5X R/FSPgHCpUFQooQ18oMgqssm5dg5pVVIwBuH9LOag49+hr1AceWWYqDw7Y6xyqt2 cOP2F43wuztptwaGo9cJ4GtdBWgkgrsvPsVs4p/mY41kZ3Btia6Fa2dsvpOsrqnD RJDwx0zkD1j49KSPdjd8/HLA6xaJoNWiFERG4PAJM5xc5vbeBC0i4m+hhD8jgLWF /6jK01EjuwZCouq3K283zMcmd9EI3UjEl+cfCr7xb4nva8GVQpg= -----END CERTIFICATE-----Generated at Mon Sep 21 17:00:57 2026 by rpki-client