$ rpki-client -vvvf rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft File: 2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft (raw, json) Hash identifier: 4WzqPS5zcJDhdCA5YbLdHH4iK7APC5BUyosULF4R4ZQ= Subject key identifier: 4E:07:16:86:FE:B8:3C:7C:15:9A:83:35:D3:A3:71:33:A6:2F:D7:FD Authority key identifier: 2E:1A:4B:EC:A1:A3:FE:AE:F0:C7:92:4E:EE:B4:50:3F:88:5A:87:7C Certificate issuer: /CN=2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C Certificate serial: 1D40A475824B5BBF8AFBA1F3E005A2DFBB675A62 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 19:19:51 +0000 Manifest this update: Wed 23 Sep 2026 19:14:51 +0000 Manifest next update: Thu 24 Sep 2026 21:55:51 +0000 Files and hashes: 1: 2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl (hash: ROblnT5uz76EADtKiGM7GZdAu3wvYmNlPSjivvYg4Xo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:40:a4:75:82:4b:5b:bf:8a:fb:a1:f3:e0:05:a2:df:bb:67:5a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C Validity Not Before: Sep 23 19:14:51 2026 GMT Not After : Sep 24 21:55:51 2026 GMT Subject: CN=4E071686FEB83C7C159A8335D3A37133A62FD7FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:db:d1:a5:41:3b:10:a5:04:11:24:93:46: 09:c7:e2:0c:8a:f8:28:53:28:91:f5:ef:52:20:ab: 62:54:75:77:3e:6f:ef:46:4c:5c:b9:bc:33:3f:03: d7:e7:7d:62:ee:c5:9b:92:8e:a6:23:a1:e6:8a:21: 0f:d0:3b:f5:a5:e9:35:36:f9:28:ab:25:e8:7f:8b: 88:6a:20:1a:1a:e4:b0:a4:e3:20:98:89:dd:4e:c3: f2:4e:2e:78:58:37:5e:e2:72:25:74:72:c9:5d:a9: 77:29:2a:f6:f1:c6:bc:9a:6b:c8:5a:b3:c8:54:a9: 6c:b2:89:4a:4f:3c:06:80:63:9c:98:03:00:1b:cd: e2:0a:57:30:39:2c:9b:a2:60:49:82:ee:ab:72:02: 05:4b:c1:44:86:8a:dd:30:d9:38:c4:a5:7a:62:e4: d5:27:d1:23:66:44:ef:83:9a:74:d6:1d:1b:84:db: 57:ef:b5:fd:ed:b9:bf:19:11:b5:d2:83:d5:56:69: 4e:b4:90:10:5e:f5:21:56:85:e8:e9:89:8c:60:9d: 86:03:8d:f1:f3:bf:64:ff:e5:dc:8c:5e:64:49:ae: 1c:0f:80:1e:73:fb:36:7e:fb:1e:36:61:8f:95:6c: ca:84:cc:66:66:1f:d9:d8:07:f8:7a:10:63:62:fc: 24:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:07:16:86:FE:B8:3C:7C:15:9A:83:35:D3:A3:71:33:A6:2F:D7:FD X509v3 Authority Key Identifier: keyid:2E:1A:4B:EC:A1:A3:FE:AE:F0:C7:92:4E:EE:B4:50:3F:88:5A:87:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:1e:8b:fe:97:e8:1b:92:46:11:14:ff:c1:72:4e:e9:74:ef: 9b:97:76:7f:14:85:26:b0:cd:2f:5a:c7:49:57:e1:14:b2:0c: d5:7d:f3:de:a6:3d:af:8e:90:ae:3a:18:57:b9:75:01:36:2f: f3:2e:27:43:bf:78:03:bb:52:20:b3:38:cb:5d:51:ed:f0:79: c4:80:4d:57:cf:90:35:2f:8d:5f:ad:66:6a:16:27:eb:64:7d: 77:4a:a7:31:f5:63:21:ff:32:89:f0:2f:0e:6a:5d:20:91:75: e0:02:b7:8f:9f:af:10:19:19:a6:ec:d1:8e:28:9c:4e:e4:cd: 11:71:cf:b2:f0:a8:48:05:72:8a:7f:79:44:6c:4d:83:dc:2c: 5f:ad:5d:31:05:ff:4b:2f:24:64:ec:f9:fd:3a:d9:6b:f7:39: 97:af:90:6a:2d:69:ec:6e:82:4f:91:8f:d0:a8:98:bd:c7:e8: dc:a5:3d:09:3b:f0:21:1a:a3:35:7f:17:16:11:27:53:f5:5a: de:be:4b:ce:a8:d3:99:69:17:a9:a5:81:14:32:93:5a:ec:48: 13:ec:5a:83:c3:64:b3:ca:5c:7f:4c:da:ca:80:0d:d0:d2:a7: 42:c1:bb:7b:cd:11:f4:f7:73:1f:b2:b6:c0:6a:98:4a:ff:f4: cc:27:38:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHUCkdYJLW7+K+6Hz4AWi37tnWmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxQTRCRUNBMUEzRkVBRUYwQzc5MjRFRUVCNDUwM0Y4 ODVBODc3QzAeFw0yNjA5MjMxOTE0NTFaFw0yNjA5MjQyMTU1NTFaMDMxMTAvBgNV BAMTKDRFMDcxNjg2RkVCODNDN0MxNTlBODMzNUQzQTM3MTMzQTYyRkQ3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB+9vRpUE7EKUEESSTRgnH4gyK +ChTKJH171Igq2JUdXc+b+9GTFy5vDM/A9fnfWLuxZuSjqYjoeaKIQ/QO/Wl6TU2 +SirJeh/i4hqIBoa5LCk4yCYid1Ow/JOLnhYN17iciV0csldqXcpKvbxxryaa8ha s8hUqWyyiUpPPAaAY5yYAwAbzeIKVzA5LJuiYEmC7qtyAgVLwUSGit0w2TjEpXpi 5NUn0SNmRO+DmnTWHRuE21fvtf3tub8ZEbXSg9VWaU60kBBe9SFWhejpiYxgnYYD jfHzv2T/5dyMXmRJrhwPgB5z+zZ++x42YY+VbMqEzGZmH9nYB/h6EGNi/CRNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTgcWhv64PHwVmoM106NxM6Yv1/0wHwYDVR0j BBgwFoAULhpL7KGj/q7wx5JO7rRQP4hah3wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDEzNjhhZTMtZGQxMi00YWEzLTg5NDgtNTQ2ZGUwNGM1MWU0LzAvMkUxQTRCRUNB MUEzRkVBRUYwQzc5MjRFRUVCNDUwM0Y4ODVBODc3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yRTFBNEJFQ0ExQTNGRUFFRjBDNzkyNEVFRUI0NTAzRjg4NUE4 NzdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDEzNjhhZTMtZGQxMi00YWEzLTg5 NDgtNTQ2ZGUwNGM1MWU0LzAvMkUxQTRCRUNBMUEzRkVBRUYwQzc5MjRFRUVCNDUw M0Y4ODVBODc3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0ei/6X6BuSRhEU/8FyTul075uXdn8UhSaw zS9ax0lX4RSyDNV9896mPa+OkK46GFe5dQE2L/MuJ0O/eAO7UiCzOMtdUe3wecSA TVfPkDUvjV+tZmoWJ+tkfXdKpzH1YyH/MonwLw5qXSCRdeACt4+frxAZGabs0Y4o nE7kzRFxz7LwqEgFcop/eURsTYPcLF+tXTEF/0svJGTs+f062Wv3OZevkGotaexu gk+Rj9ComL3H6NylPQk78CEaozV/FxYRJ1P1Wt6+S86o05lpF6mlgRQyk1rsSBPs WoPDZLPKXH9M2sqADdDSp0LBu3vNEfT3cx+ytsBqmEr/9MwnOGc= -----END CERTIFICATE-----Generated at Thu Sep 24 00:56:46 2026 by rpki-client