$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft File: 2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft (raw, json) Hash identifier: KLLvliwc4rm8zMslI6Jztv7RqCtLaLZH49kNgdvpJjE= Subject key identifier: F8:D5:86:81:70:59:E2:E0:93:0A:F9:03:08:54:9C:45:57:AD:09:52 Authority key identifier: 2C:A6:27:0F:A0:99:DB:2B:77:ED:B7:EA:A9:30:40:FF:23:6B:21:4B Certificate issuer: /CN=2CA6270FA099DB2B77EDB7EAA93040FF236B214B Certificate serial: 1EE491606C58A17BBF45A549572074D34761238F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft Manifest number: BE Signing time: Mon 21 Sep 2026 19:10:14 +0000 Manifest this update: Mon 21 Sep 2026 19:05:14 +0000 Manifest next update: Tue 22 Sep 2026 21:50:14 +0000 Files and hashes: 1: 3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (hash: RYdUas2TasB0Egv36O3FoGBWixKmz+f1qKRhr6wdPhI=) 2: 2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl (hash: j/LET8vZHRbeXwBQODxzlSoePvUx/WHTyWU4ytmyY0k=) 3: 3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (hash: 7n3FY8Iu2mTaPEdpSsiUuLrwQ3K9YP1KBkJ8ERWrHmg=) 4: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (hash: 5yASRqMJGpH3BlgDiF4qbtYdpHoRGPLyhQdyV1pz60w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 21:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e4:91:60:6c:58:a1:7b:bf:45:a5:49:57:20:74:d3:47:61:23:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA6270FA099DB2B77EDB7EAA93040FF236B214B Validity Not Before: Sep 21 19:05:14 2026 GMT Not After : Sep 22 21:50:14 2026 GMT Subject: CN=F8D586817059E2E0930AF90308549C4557AD0952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:70:89:73:fe:14:30:72:90:a2:40:07:34: 3f:64:27:eb:ca:7c:d2:a9:7c:0d:f2:42:66:3e:44: d9:24:61:ba:b8:b3:8f:f0:21:83:f2:0a:05:b8:95: f0:43:9a:d7:1e:fa:b2:4f:df:24:9c:40:1b:c5:cf: 35:3c:6d:21:84:f0:08:2c:f1:57:4b:5a:bd:1e:b6: 71:3e:08:e3:8b:dc:36:f4:b7:ff:11:48:8e:ef:d8: 7f:80:18:fd:b1:55:46:f5:cf:b2:d7:24:03:41:b5: 48:97:f8:66:f2:f5:3c:4d:3b:b1:8e:b3:e9:94:f6: 8d:d1:cc:64:a7:9d:f8:28:3a:34:0c:31:78:f1:2f: 70:9a:f6:4f:b6:be:3d:de:f7:03:e4:30:02:ba:6c: 7a:eb:42:02:67:d2:63:cf:6d:7b:64:d5:e2:e1:40: 42:1c:78:d7:a5:8c:17:fa:8e:34:6c:29:0a:53:85: 17:ba:43:51:aa:1e:a0:8b:53:c1:c6:f3:68:11:f1: 46:da:2e:e6:c2:06:7a:16:f7:7f:40:93:48:d2:04: 9d:79:c5:c4:3b:77:a6:d2:12:f4:9c:0a:6c:92:7f: 7a:9a:ca:79:c0:03:21:80:03:dd:71:2a:07:de:89: 26:47:75:44:57:11:00:df:ff:53:ad:5a:d2:98:4c: 01:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D5:86:81:70:59:E2:E0:93:0A:F9:03:08:54:9C:45:57:AD:09:52 X509v3 Authority Key Identifier: keyid:2C:A6:27:0F:A0:99:DB:2B:77:ED:B7:EA:A9:30:40:FF:23:6B:21:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:74:18:7a:d6:73:99:2b:19:91:0b:46:a2:15:bc:41:79:65: b1:c2:b9:24:65:b6:04:8f:66:d2:77:dd:bc:bb:ba:49:27:0b: a0:fa:65:e3:6b:5c:46:db:7d:ef:0c:0a:2e:e5:b2:ab:b7:b4: 0a:b8:61:da:a7:b2:da:da:4e:9d:36:ef:ab:d1:8c:40:09:39: 2f:e1:f0:2f:7b:ef:5f:a7:8b:a6:81:2c:69:ee:53:91:9d:4a: 0f:6c:9f:28:c9:ae:94:68:9c:1e:6d:2d:96:df:8c:eb:12:84: 4f:a5:c1:76:69:74:a0:be:b6:2b:fd:46:0a:bf:34:30:b7:da: 14:74:28:13:cc:5c:8c:10:a8:22:eb:81:28:7a:26:f8:e3:41: 8f:79:6c:83:61:fd:82:29:3f:42:c2:6c:e9:b9:ac:cd:06:0a: 3d:79:8b:8e:f0:c3:ac:89:19:88:3b:0a:0f:33:79:e7:37:ae: 7e:2b:ac:83:9f:19:10:44:fd:ff:3a:11:78:bb:d1:75:60:dd: be:5b:f4:c1:1d:12:92:a4:ad:5b:86:b0:5e:56:86:22:bd:c5: d9:bd:f0:3d:01:4c:b1:52:12:e3:b2:fd:44:c6:f7:89:d3:48: c2:03:c5:99:ab:e5:61:71:48:2d:34:77:35:71:aa:5c:1e:e9: 56:fe:29:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHuSRYGxYoXu/RaVJVyB000dhI48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNjI3MEZBMDk5REIyQjc3RURCN0VBQTkzMDQwRkYy MzZCMjE0QjAeFw0yNjA5MjExOTA1MTRaFw0yNjA5MjIyMTUwMTRaMDMxMTAvBgNV BAMTKEY4RDU4NjgxNzA1OUUyRTA5MzBBRjkwMzA4NTQ5QzQ1NTdBRDA5NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEd3CJc/4UMHKQokAHND9kJ+vK fNKpfA3yQmY+RNkkYbq4s4/wIYPyCgW4lfBDmtce+rJP3yScQBvFzzU8bSGE8Ags 8VdLWr0etnE+COOL3Db0t/8RSI7v2H+AGP2xVUb1z7LXJANBtUiX+Gby9TxNO7GO s+mU9o3RzGSnnfgoOjQMMXjxL3Ca9k+2vj3e9wPkMAK6bHrrQgJn0mPPbXtk1eLh QEIceNeljBf6jjRsKQpThRe6Q1GqHqCLU8HG82gR8UbaLubCBnoW939Ak0jSBJ15 xcQ7d6bSEvScCmySf3qaynnAAyGAA91xKgfeiSZHdURXEQDf/1OtWtKYTAHLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+NWGgXBZ4uCTCvkDCFScRVetCVIwHwYDVR0j BBgwFoAULKYnD6CZ2yt37bfqqTBA/yNrIUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY3YTdmMGUtOGQwNy00NWRlLTgyNTItM2JmZmMwNWU1NjQ5LzAvMkNBNjI3MEZB MDk5REIyQjc3RURCN0VBQTkzMDQwRkYyMzZCMjE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0E2MjcwRkEwOTlEQjJCNzdFREI3RUFBOTMwNDBGRjIzNkIy MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTY3YTdmMGUtOGQwNy00NWRlLTgy NTItM2JmZmMwNWU1NjQ5LzAvMkNBNjI3MEZBMDk5REIyQjc3RURCN0VBQTkzMDQw RkYyMzZCMjE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAx0GHrWc5krGZELRqIVvEF5ZbHCuSRltgSP ZtJ33by7ukknC6D6ZeNrXEbbfe8MCi7lsqu3tAq4YdqnstraTp0276vRjEAJOS/h 8C9771+ni6aBLGnuU5GdSg9snyjJrpRonB5tLZbfjOsShE+lwXZpdKC+tiv9Rgq/ NDC32hR0KBPMXIwQqCLrgSh6JvjjQY95bINh/YIpP0LCbOm5rM0GCj15i47ww6yJ GYg7Cg8zeec3rn4rrIOfGRBE/f86EXi70XVg3b5b9MEdEpKkrVuGsF5WhiK9xdm9 8D0BTLFSEuOy/UTG94nTSMIDxZmr5WFxSC00dzVxqlwe6Vb+KXM= -----END CERTIFICATE-----Generated at Tue Sep 22 08:38:06 2026 by rpki-client