$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft File: 2FE1FA7D4DD3388355BABAD73020013D485C168C.mft (raw, json) Hash identifier: u/BVaDFIJ2A2Kgh6wOuTmXeIJk8EHkvI6DtJv0MMbwM= Subject key identifier: E7:6E:93:29:59:54:B4:CF:6F:E0:CA:22:21:74:2D:15:01:BC:63:1E Authority key identifier: 2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C Certificate issuer: /CN=2FE1FA7D4DD3388355BABAD73020013D485C168C Certificate serial: 3DF67576ACB24FAEE89185136C482FD7B0CDA49F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft Manifest number: BD Signing time: Sun 20 Sep 2026 10:14:45 +0000 Manifest this update: Sun 20 Sep 2026 10:09:45 +0000 Manifest next update: Mon 21 Sep 2026 13:49:45 +0000 Files and hashes: 1: 3130332e39352e32322e302f32332d3233203d3e20313530353537.roa (hash: aB7QEaSEcJTWbjfIxBku5UcRO6NDRrQsqaho45FCjZI=) 2: 2FE1FA7D4DD3388355BABAD73020013D485C168C.crl (hash: 5MLAFvpQe+vdJxd2S/SkW3eOwvP/tFLbdMm9Z1RGvaA=) 3: 3130332e39352e32322e302f32342d3234203d3e20313530353537.roa (hash: UmfUI05XEmk9hWgPXOd+povgJcvWbtg+6u6rN6Z8bBg=) 4: 3130332e39352e32332e302f32342d3234203d3e20313530353537.roa (hash: QUvsonqLXdsih84z12pFdTCBAMOMy8pmVg5n4B/zEOQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.crl rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 13:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f6:75:76:ac:b2:4f:ae:e8:91:85:13:6c:48:2f:d7:b0:cd:a4:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FE1FA7D4DD3388355BABAD73020013D485C168C Validity Not Before: Sep 20 10:09:45 2026 GMT Not After : Sep 21 13:49:45 2026 GMT Subject: CN=E76E93295954B4CF6FE0CA2221742D1501BC631E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:70:2e:5b:3e:96:57:99:d9:83:31:75:19:6b: e2:21:a3:e6:7d:0a:0a:b8:cf:7f:3a:d3:d0:db:51: ec:eb:79:eb:29:64:5a:7a:8e:b7:28:76:4a:67:7a: 8f:0d:be:97:34:11:65:99:27:2c:ab:ee:9e:5c:5b: 0d:8d:98:46:51:14:b8:0e:4e:29:bd:b5:4f:3c:cc: e8:55:7e:45:4d:2e:ca:0c:3c:57:4a:a5:83:5b:80: 49:36:5b:2f:5b:b1:de:2b:6e:53:5b:ce:f3:e6:0d: ac:ee:28:6a:78:32:a6:6f:bd:50:e3:da:04:54:4d: 44:89:ff:84:38:b8:b9:11:92:78:60:cc:33:8a:51: 2d:f0:18:22:d2:c3:84:f2:74:71:ba:27:f5:33:45: cd:8e:bc:f7:8b:68:81:f0:dd:f8:02:f8:58:bd:cb: 4e:ac:6e:25:bd:1a:02:8c:59:8b:00:9b:b0:9b:fd: 46:41:2e:07:11:ea:9d:09:0e:45:db:45:95:49:38: 49:64:d2:e5:f8:7d:8f:61:6a:15:a7:ee:b7:88:d4: 0a:31:e9:8f:16:d2:6e:c1:85:34:d8:63:80:b7:ee: 6e:02:70:aa:37:8f:e7:52:1c:e6:50:f1:ac:70:46: 78:26:35:cb:9c:7c:ab:b1:32:fb:33:23:3b:6d:7e: 83:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6E:93:29:59:54:B4:CF:6F:E0:CA:22:21:74:2D:15:01:BC:63:1E X509v3 Authority Key Identifier: keyid:2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:67:4d:e6:6a:4a:24:80:43:a9:84:b7:64:cd:bb:e4:20:cc: eb:50:43:87:76:5d:fc:4f:e3:4d:5b:55:b5:c6:a6:1f:bd:72: ee:d0:b9:e7:b6:ef:59:f6:08:04:6c:60:5c:07:dd:55:55:56: e6:c8:92:64:74:71:7d:52:f1:93:9a:79:37:14:77:aa:cc:44: 26:90:3a:9e:a2:a1:3d:da:ad:33:ce:f3:8d:a9:01:64:07:79: 2c:a6:9a:8e:36:82:0f:0f:dc:9e:79:b8:c7:05:98:7e:c0:bf: 6f:1f:79:0e:9f:ee:aa:8f:e9:4e:6d:b8:43:d0:c6:60:d6:62: 9d:c5:d5:4b:8f:da:a7:09:78:ba:d1:24:28:1f:f8:00:be:ac: 32:62:79:43:2b:f3:37:e6:74:86:f3:02:fa:e9:d1:55:d5:ab: 23:b8:cf:ab:7b:20:70:dc:b9:a2:86:61:46:68:f7:e3:ab:4f: ee:09:9a:3e:b9:7d:fa:cc:ad:ac:67:3a:a9:0d:c9:55:9f:be: 0f:a7:2c:c7:e7:9b:9e:e1:74:9b:c5:cf:88:03:e8:70:e6:4b: 4a:32:40:2e:f7:49:b4:6f:bd:3c:2f:c4:55:76:05:24:36:ef: b6:d8:7d:3e:73:4a:75:a5:fe:01:0d:15:3e:75:bb:8c:28:cb: d3:ac:50:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPfZ1dqyyT67okYUTbEgv17DNpJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZFMUZBN0Q0REQzMzg4MzU1QkFCQUQ3MzAyMDAxM0Q0 ODVDMTY4QzAeFw0yNjA5MjAxMDA5NDVaFw0yNjA5MjExMzQ5NDVaMDMxMTAvBgNV BAMTKEU3NkU5MzI5NTk1NEI0Q0Y2RkUwQ0EyMjIxNzQyRDE1MDFCQzYzMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+cC5bPpZXmdmDMXUZa+Iho+Z9 Cgq4z38609DbUezreespZFp6jrcodkpneo8Nvpc0EWWZJyyr7p5cWw2NmEZRFLgO Tim9tU88zOhVfkVNLsoMPFdKpYNbgEk2Wy9bsd4rblNbzvPmDazuKGp4MqZvvVDj 2gRUTUSJ/4Q4uLkRknhgzDOKUS3wGCLSw4TydHG6J/UzRc2OvPeLaIHw3fgC+Fi9 y06sbiW9GgKMWYsAm7Cb/UZBLgcR6p0JDkXbRZVJOElk0uX4fY9hahWn7reI1Aox 6Y8W0m7BhTTYY4C37m4CcKo3j+dSHOZQ8axwRngmNcucfKuxMvszIzttfoMJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU526TKVlUtM9v4MoiIXQtFQG8Yx4wHwYDVR0j BBgwFoAUL+H6fU3TOINVurrXMCABPUhcFowwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZkNGY4NjktNGRiNi00YjBhLWFhYjYtY2RlNDdiNDQ3ZDc3LzAvMkZFMUZBN0Q0 REQzMzg4MzU1QkFCQUQ3MzAyMDAxM0Q0ODVDMTY4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkUxRkE3RDRERDMzODgzNTVCQUJBRDczMDIwMDEzRDQ4NUMx NjhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZkNGY4NjktNGRiNi00YjBhLWFh YjYtY2RlNDdiNDQ3ZDc3LzAvMkZFMUZBN0Q0REQzMzg4MzU1QkFCQUQ3MzAyMDAx M0Q0ODVDMTY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5nTeZqSiSAQ6mEt2TNu+QgzOtQQ4d2XfxP 401bVbXGph+9cu7Quee271n2CARsYFwH3VVVVubIkmR0cX1S8ZOaeTcUd6rMRCaQ Op6ioT3arTPO842pAWQHeSymmo42gg8P3J55uMcFmH7Av28feQ6f7qqP6U5tuEPQ xmDWYp3F1UuP2qcJeLrRJCgf+AC+rDJieUMr8zfmdIbzAvrp0VXVqyO4z6t7IHDc uaKGYUZo9+OrT+4Jmj65ffrMraxnOqkNyVWfvg+nLMfnm57hdJvFz4gD6HDmS0oy QC73SbRvvTwvxFV2BSQ277bYfT5zSnWl/gENFT51u4woy9OsUGA= -----END CERTIFICATE-----Generated at Mon Sep 21 05:32:49 2026 by rpki-client