$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft File: 2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft (raw, json) Hash identifier: vF2dttTe9oYMvzmgHVpuTnnioflglk/21DC6YZgnQEU= Subject key identifier: 2D:AE:F1:8F:5E:98:15:6B:C6:38:7B:FF:5B:4F:E8:74:32:73:35:7E Authority key identifier: 2F:37:45:DB:26:30:B1:D0:4A:3E:69:E4:9A:12:ED:7D:D5:65:CC:82 Certificate issuer: /CN=2F3745DB2630B1D04A3E69E49A12ED7DD565CC82 Certificate serial: 03F206D132BE3FEF6DFA8BD1EB2439CEC7469878 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft Manifest number: BE Signing time: Mon 21 Sep 2026 20:11:24 +0000 Manifest this update: Mon 21 Sep 2026 20:06:24 +0000 Manifest next update: Tue 22 Sep 2026 20:26:24 +0000 Files and hashes: 1: 2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl (hash: Veiq8U4z/PIbmd81SYKD7B2G4R3x56sxTGnFdgdEzT8=) 2: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: hXr95hFUQi4QPei7lbvEDGK3/fJ8wC4HwUseAin+nsU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f2:06:d1:32:be:3f:ef:6d:fa:8b:d1:eb:24:39:ce:c7:46:98:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F3745DB2630B1D04A3E69E49A12ED7DD565CC82 Validity Not Before: Sep 21 20:06:24 2026 GMT Not After : Sep 22 20:26:24 2026 GMT Subject: CN=2DAEF18F5E98156BC6387BFF5B4FE8743273357E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:69:7e:9a:9d:74:b5:fe:ca:b5:f3:e9:5c:1d: 48:5b:8d:ac:a3:06:18:df:e2:f6:af:41:61:48:3c: ff:6f:5c:63:d5:2b:34:20:fa:3f:7f:c3:5e:39:9a: 2f:e6:95:59:f6:83:52:6d:8f:06:af:48:b8:08:ab: 4e:c0:46:56:31:2b:28:5b:eb:b1:e2:0a:b7:43:8a: 09:1b:fc:59:5c:26:4c:6d:4a:1e:25:7a:0b:95:15: b4:de:4d:ca:6f:e4:cf:a8:e2:a2:8e:f9:0d:b7:d8: b3:33:c1:33:aa:88:4b:fc:96:3a:f7:f2:ff:01:cc: 61:71:db:d6:c0:30:03:df:13:b6:a0:24:68:1e:a1: ba:47:28:d9:e2:2e:db:6a:b3:81:9a:ce:19:af:da: ce:5e:28:99:42:d9:57:58:75:9c:cb:6c:dd:c3:ab: 55:59:e2:99:95:68:32:5b:a2:07:50:8d:2f:db:a9: cd:89:30:9e:55:0f:54:c2:6e:4b:e2:fa:a7:14:d8: 31:5c:67:39:78:70:28:06:50:24:dd:93:7e:c5:06: 19:fb:c8:7d:2e:66:48:29:32:f0:f6:bf:b8:b1:df: 79:23:7a:76:3e:1a:19:1c:51:cd:bc:c6:86:0e:fd: f9:66:96:53:a7:fe:57:61:d9:f9:04:60:b0:38:7c: 93:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AE:F1:8F:5E:98:15:6B:C6:38:7B:FF:5B:4F:E8:74:32:73:35:7E X509v3 Authority Key Identifier: keyid:2F:37:45:DB:26:30:B1:D0:4A:3E:69:E4:9A:12:ED:7D:D5:65:CC:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a3:ba:9b:4e:12:fb:f4:21:fc:c0:7e:58:17:da:1f:47:b3: 41:f0:ac:59:17:52:fd:0b:ee:ba:07:91:da:8f:b1:25:c9:71: 61:d3:cb:2d:b0:0b:a8:b5:c4:eb:4d:a7:16:fc:49:b1:6a:50: 22:77:41:d6:6d:5f:42:4a:99:be:af:85:6c:9e:c7:b8:3d:f6: 3c:fe:a7:2e:bd:d3:c7:37:01:6f:a9:77:6f:04:14:c2:76:64: f7:49:25:49:67:00:bf:47:bb:5a:4a:77:10:eb:2d:2c:2f:da: e9:5e:99:8f:97:d0:c7:e0:14:38:a2:28:2e:20:cc:b1:14:18: 5e:d0:5d:17:ca:60:28:3d:c1:29:29:ef:73:42:da:ff:5c:94: 06:93:5f:d3:36:fb:33:f5:b0:b0:e6:dd:50:d1:b2:c9:c8:e9: ab:49:a4:0b:65:de:af:9d:08:7a:51:26:aa:a4:c4:64:4f:c1: 12:57:ef:57:be:5c:c3:b2:1a:8f:27:0c:d8:6c:2c:54:d8:33: 31:c4:35:78:a6:98:fb:bf:2f:0f:82:31:6c:2f:fb:0e:b0:5c: 8b:2d:f0:03:0a:93:d5:4e:7e:e4:95:c7:be:98:ae:8f:85:61: 67:21:b5:bf:a8:a3:d0:99:36:c6:ef:15:19:2a:07:42:3b:09: b6:de:38:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA/IG0TK+P+9t+ovR6yQ5zsdGmHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYzNzQ1REIyNjMwQjFEMDRBM0U2OUU0OUExMkVEN0RE NTY1Q0M4MjAeFw0yNjA5MjEyMDA2MjRaFw0yNjA5MjIyMDI2MjRaMDMxMTAvBgNV BAMTKDJEQUVGMThGNUU5ODE1NkJDNjM4N0JGRjVCNEZFODc0MzI3MzM1N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeaX6anXS1/sq18+lcHUhbjayj Bhjf4vavQWFIPP9vXGPVKzQg+j9/w145mi/mlVn2g1JtjwavSLgIq07ARlYxKyhb 67HiCrdDigkb/FlcJkxtSh4leguVFbTeTcpv5M+o4qKO+Q232LMzwTOqiEv8ljr3 8v8BzGFx29bAMAPfE7agJGgeobpHKNniLttqs4Gazhmv2s5eKJlC2VdYdZzLbN3D q1VZ4pmVaDJbogdQjS/bqc2JMJ5VD1TCbkvi+qcU2DFcZzl4cCgGUCTdk37FBhn7 yH0uZkgpMvD2v7ix33kjenY+GhkcUc28xoYO/flmllOn/ldh2fkEYLA4fJNzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULa7xj16YFWvGOHv/W0/odDJzNX4wHwYDVR0j BBgwFoAULzdF2yYwsdBKPmnkmhLtfdVlzIIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTc4YThiMzktM2FlMy00ZGU3LTkzNjYtMjFmOWVhMDQzMjVhLzAvMkYzNzQ1REIy NjMwQjFEMDRBM0U2OUU0OUExMkVEN0RENTY1Q0M4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRjM3NDVEQjI2MzBCMUQwNEEzRTY5RTQ5QTEyRUQ3REQ1NjVD QzgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTc4YThiMzktM2FlMy00ZGU3LTkz NjYtMjFmOWVhMDQzMjVhLzAvMkYzNzQ1REIyNjMwQjFEMDRBM0U2OUU0OUExMkVE N0RENTY1Q0M4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWjuptOEvv0IfzAflgX2h9Hs0HwrFkXUv0L 7roHkdqPsSXJcWHTyy2wC6i1xOtNpxb8SbFqUCJ3QdZtX0JKmb6vhWyex7g99jz+ py6908c3AW+pd28EFMJ2ZPdJJUlnAL9Hu1pKdxDrLSwv2ulemY+X0MfgFDiiKC4g zLEUGF7QXRfKYCg9wSkp73NC2v9clAaTX9M2+zP1sLDm3VDRssnI6atJpAtl3q+d CHpRJqqkxGRPwRJX71e+XMOyGo8nDNhsLFTYMzHENXimmPu/Lw+CMWwv+w6wXIst 8AMKk9VOfuSVx76Yro+FYWchtb+oo9CZNsbvFRkqB0I7CbbeOCU= -----END CERTIFICATE-----Generated at Tue Sep 22 06:32:34 2026 by rpki-client