$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft File: 2BD3626FA7C4C8A787225E35241AD5992151D359.mft (raw, json) Hash identifier: R5qpMJoSaUb7jz53E2vkyvj6u66uEYSTmZzt9jlwwPk= Subject key identifier: A4:F9:12:53:D8:03:19:64:16:4A:19:E3:B9:E2:1C:A7:D3:81:56:94 Authority key identifier: 2B:D3:62:6F:A7:C4:C8:A7:87:22:5E:35:24:1A:D5:99:21:51:D3:59 Certificate issuer: /CN=2BD3626FA7C4C8A787225E35241AD5992151D359 Certificate serial: 482810ECA00EC34F74CA6588EBE0929EAB2D88E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft Manifest number: CD Signing time: Thu 01 Oct 2026 18:54:13 +0000 Manifest this update: Thu 01 Oct 2026 18:49:13 +0000 Manifest next update: Fri 02 Oct 2026 21:56:13 +0000 Files and hashes: 1: 3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa (hash: Lts+nDghqdeOjHPLJupIS91t89Hz46DHGxSYyuVdlFI=) 2: 2BD3626FA7C4C8A787225E35241AD5992151D359.crl (hash: i7FZ9Yfa+1I33megFBArbwlwyxTQNiuzw5Hh0yt0jr8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.crl rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 11:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:28:10:ec:a0:0e:c3:4f:74:ca:65:88:eb:e0:92:9e:ab:2d:88:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BD3626FA7C4C8A787225E35241AD5992151D359 Validity Not Before: Oct 1 18:49:13 2026 GMT Not After : Oct 2 21:56:13 2026 GMT Subject: CN=A4F91253D8031964164A19E3B9E21CA7D3815694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:23:13:ff:a4:40:57:5a:f9:f9:0b:bc:6c:71: 03:82:df:2e:a1:8f:66:d2:19:f4:82:c4:1f:d9:71: 98:24:27:6f:39:35:90:74:aa:31:1f:74:2c:da:d1: 20:2b:40:95:df:86:71:2c:51:49:23:d1:64:2a:14: ec:54:47:2a:a5:5e:6e:6e:30:21:ee:e8:25:9a:2a: d7:68:26:55:26:2e:fd:52:78:03:52:08:b0:a3:e0: 06:6f:70:33:ae:09:d8:cf:1e:5b:1d:a1:b0:00:d6: 87:af:67:f0:52:11:e7:5c:ab:73:3a:e4:84:c0:ce: 4b:58:90:d0:7f:a9:62:bd:2a:ca:0b:17:6a:12:4e: 6c:01:80:aa:ef:54:9b:74:7d:14:18:e4:1b:52:84: 78:e1:9f:fb:db:cf:50:1f:fd:7f:6e:5c:9f:3e:4f: 2d:31:e5:fd:a8:4f:92:fe:9a:90:b7:d3:65:4a:8d: 02:1b:73:c5:ac:3f:4f:68:39:59:94:76:41:e7:0f: 52:81:94:a7:bc:a4:a8:54:9a:6d:eb:63:ba:4c:5e: 3e:55:91:7a:bc:d1:9a:f2:68:8a:79:7e:7e:f2:03: b3:0f:20:5b:40:30:31:97:08:d8:f5:49:ab:7c:ce: d9:7a:09:b8:0d:5d:0f:8b:1d:da:cc:a8:ff:78:b9: 63:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F9:12:53:D8:03:19:64:16:4A:19:E3:B9:E2:1C:A7:D3:81:56:94 X509v3 Authority Key Identifier: keyid:2B:D3:62:6F:A7:C4:C8:A7:87:22:5E:35:24:1A:D5:99:21:51:D3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:d1:77:2e:77:0f:3d:8d:37:29:96:a1:73:ef:d1:c5:90:0e: 98:5b:23:0c:3a:54:c4:f1:ad:52:42:4b:de:15:3f:e6:cd:78: 07:a0:63:cc:35:c9:3f:c2:b3:82:d3:07:c0:f4:ba:73:88:42: 56:52:8b:c6:65:45:8e:ee:d4:cf:69:ec:60:8f:d6:99:ff:39: 63:42:c8:b2:c5:f9:21:29:9f:7f:b0:97:6f:17:89:84:dd:80: a3:e8:0c:8b:e0:0d:98:f4:98:08:f6:0b:3a:38:17:20:1d:2d: 8c:58:dd:e4:05:f2:b8:84:08:91:c7:23:43:7d:f6:04:93:c6: c7:98:af:3a:07:1e:be:13:e9:39:9f:95:11:14:01:9f:2e:26: d9:a9:4d:ae:36:96:cf:6b:25:cd:4c:33:cb:75:01:eb:13:a3: 8c:ca:aa:f2:8f:81:78:30:a5:92:fe:73:af:f4:03:5c:bb:0c: 32:6c:7f:a5:2e:25:15:5d:35:e7:b7:25:98:bf:e1:db:dc:a0: 30:ed:68:8a:0c:0e:29:85:39:01:3d:f0:59:5f:31:5d:e7:e3: cf:71:6e:af:7e:55:1f:8d:61:c1:6b:83:22:a2:4f:95:5d:7b: 75:e5:63:a9:a4:3a:db:28:30:e6:62:82:b7:0c:12:ca:ee:a8: 37:f0:38:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSCgQ7KAOw090ymWI6+CSnqstiOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJEMzYyNkZBN0M0QzhBNzg3MjI1RTM1MjQxQUQ1OTky MTUxRDM1OTAeFw0yNjEwMDExODQ5MTNaFw0yNjEwMDIyMTU2MTNaMDMxMTAvBgNV BAMTKEE0RjkxMjUzRDgwMzE5NjQxNjRBMTlFM0I5RTIxQ0E3RDM4MTU2OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpIxP/pEBXWvn5C7xscQOC3y6h j2bSGfSCxB/ZcZgkJ285NZB0qjEfdCza0SArQJXfhnEsUUkj0WQqFOxURyqlXm5u MCHu6CWaKtdoJlUmLv1SeANSCLCj4AZvcDOuCdjPHlsdobAA1oevZ/BSEedcq3M6 5ITAzktYkNB/qWK9KsoLF2oSTmwBgKrvVJt0fRQY5BtShHjhn/vbz1Af/X9uXJ8+ Ty0x5f2oT5L+mpC302VKjQIbc8WsP09oOVmUdkHnD1KBlKe8pKhUmm3rY7pMXj5V kXq80ZryaIp5fn7yA7MPIFtAMDGXCNj1Sat8ztl6CbgNXQ+LHdrMqP94uWPPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpPkSU9gDGWQWShnjueIcp9OBVpQwHwYDVR0j BBgwFoAUK9Nib6fEyKeHIl41JBrVmSFR01kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjI3NDRkZGUtN2MxZi00Y2JhLTkzYzAtOWYwNjY5ZWVlZDkyLzAvMkJEMzYyNkZB N0M0QzhBNzg3MjI1RTM1MjQxQUQ1OTkyMTUxRDM1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQkQzNjI2RkE3QzRDOEE3ODcyMjVFMzUyNDFBRDU5OTIxNTFE MzU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjI3NDRkZGUtN2MxZi00Y2JhLTkz YzAtOWYwNjY5ZWVlZDkyLzAvMkJEMzYyNkZBN0M0QzhBNzg3MjI1RTM1MjQxQUQ1 OTkyMTUxRDM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELRdy53Dz2NNymWoXPv0cWQDphbIww6VMTx rVJCS94VP+bNeAegY8w1yT/Cs4LTB8D0unOIQlZSi8ZlRY7u1M9p7GCP1pn/OWNC yLLF+SEpn3+wl28XiYTdgKPoDIvgDZj0mAj2Czo4FyAdLYxY3eQF8riECJHHI0N9 9gSTxseYrzoHHr4T6TmflREUAZ8uJtmpTa42ls9rJc1MM8t1AesTo4zKqvKPgXgw pZL+c6/0A1y7DDJsf6UuJRVdNee3JZi/4dvcoDDtaIoMDimFOQE98FlfMV3n489x bq9+VR+NYcFrgyKiT5Vde3XlY6mkOtsoMOZigrcMEsruqDfwOHo= -----END CERTIFICATE-----Generated at Thu Oct 1 23:17:46 2026 by rpki-client