$ rpki-client -vvvf rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft File: 2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft (raw, json) Hash identifier: lfe5O9E/82GculBNuBNK7X3cg5oKuKZOTESrZnWWqKM= Subject key identifier: A2:3C:BA:F2:46:0B:92:E7:6B:6B:DB:F4:CE:05:C8:14:4B:97:53:B1 Authority key identifier: 2B:5A:07:8B:9D:8A:31:7D:A7:A2:AD:40:20:90:C9:AE:72:A1:D0:F4 Certificate issuer: /CN=2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4 Certificate serial: 0EB7D967AEA0205C2EA6D8B6E850FEF06ED3E62C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 13:07:09 +0000 Manifest this update: Thu 24 Sep 2026 13:02:09 +0000 Manifest next update: Fri 25 Sep 2026 13:38:09 +0000 Files and hashes: 1: 3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa (hash: SSJvSdL4NA21o/quBBkRYHXaBZlnNisf6npebpyix0w=) 2: 3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa (hash: F/SUGaqSrvN9l0bA+VVFhafqTQPYwg8gVdDw3HwYYEg=) 3: 3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa (hash: cjqOi69hQ/DuVUUYy0IY+fZE1a6xIzJfgF06BFHgrL0=) 4: 3130332e3130302e39392e302f32342d3234203d3e20313336383338.roa (hash: YEpJ9MshH91OnFv/znxkxIYveM8j2r6OPnOxKsElZA4=) 5: 3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa (hash: I+MpxcufYeam5pksOgKwBNTewvekIqJYxt3l7XuR42Q=) 6: 2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl (hash: eF8JwQdzaY3RqsYLwpqzcZUouvKRalmB8G/3/u1CxeA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b7:d9:67:ae:a0:20:5c:2e:a6:d8:b6:e8:50:fe:f0:6e:d3:e6:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4 Validity Not Before: Sep 24 13:02:09 2026 GMT Not After : Sep 25 13:38:09 2026 GMT Subject: CN=A23CBAF2460B92E76B6BDBF4CE05C8144B9753B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7a:67:94:21:7a:4f:25:27:9d:f1:8e:eb:eb: 7b:cc:95:e6:22:cc:9d:49:82:85:6d:1f:50:54:9d: 5b:d9:22:45:23:fa:4b:0b:f6:4a:c0:5d:5a:6d:f5: 63:b9:a3:4d:93:27:7a:f7:19:76:e8:3d:36:93:14: ba:1c:d2:68:bf:29:97:9d:00:14:67:11:30:85:8d: 6b:1b:4c:59:a6:e5:ae:e5:56:21:02:cc:cc:95:f1: 76:67:43:72:bc:49:ad:75:b9:db:76:43:07:41:36: 2f:84:97:28:eb:aa:8c:d5:da:7b:90:9f:b4:94:24: ad:1a:31:21:c6:6b:aa:ac:77:bc:ba:98:57:13:5c: 56:bf:6b:65:45:93:81:04:9a:e7:e7:b3:c6:96:3e: 77:8d:17:ac:7b:be:7a:0a:c2:5e:96:5d:7c:86:f5: 90:e1:23:ad:70:57:94:f0:ff:e4:a6:45:58:f8:f3: e2:6b:93:39:40:ce:0f:22:b1:bb:86:ca:73:a7:da: 61:ef:04:3a:f3:cc:88:56:fb:f8:6e:7a:96:50:79: 4e:da:83:63:7b:a6:17:27:9f:d9:fa:c8:5c:0f:fe: 62:8c:9f:a6:52:7c:99:b0:2c:0c:2a:94:15:63:dd: 0d:8b:df:32:43:72:b0:8c:6b:0f:87:90:00:5e:41: c6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3C:BA:F2:46:0B:92:E7:6B:6B:DB:F4:CE:05:C8:14:4B:97:53:B1 X509v3 Authority Key Identifier: keyid:2B:5A:07:8B:9D:8A:31:7D:A7:A2:AD:40:20:90:C9:AE:72:A1:D0:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:bf:42:c5:4e:69:2b:6c:b1:78:62:bc:c6:50:d7:2c:6d:99: 52:87:26:84:7e:3c:8f:31:6f:50:f3:bc:ab:a7:7c:90:d0:18: 08:03:cd:9d:65:b7:20:17:b5:f3:a6:65:72:fe:61:86:ac:93: c7:45:57:ea:e5:b9:5e:d7:77:dc:c6:fc:f5:44:bd:93:ad:eb: 7b:e2:60:02:75:74:83:72:01:da:98:39:ca:9a:9b:d3:ac:21: 38:50:28:60:e6:8c:aa:b6:7d:b6:4c:ba:fb:2c:25:68:63:4d: 2b:12:29:c4:d6:54:eb:3c:42:e8:90:f3:3e:82:21:27:4e:16: 5b:18:fb:9a:3f:9d:01:08:a9:30:2e:df:f5:f0:9f:00:86:b3: ad:b0:eb:f4:99:b5:b3:b3:63:dd:11:a0:fb:03:e3:48:0c:39: 65:df:81:55:60:d8:27:6a:73:30:47:03:32:47:0f:3b:6b:dc: 3e:ef:d5:5d:2e:b4:5d:37:99:39:11:3d:66:99:c9:3a:bc:68: e0:bd:a0:e7:4b:2f:ed:88:49:80:fe:15:69:7a:72:24:87:8d: 6e:46:37:a7:20:e2:d1:8d:47:17:1a:e1:fe:d2:a0:16:b1:42: df:4a:30:27:77:12:13:de:bc:c0:b4:8f:37:cc:fa:26:6a:de: c0:e1:88:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDrfZZ66gIFwupti26FD+8G7T5iwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI1QTA3OEI5RDhBMzE3REE3QTJBRDQwMjA5MEM5QUU3 MkExRDBGNDAeFw0yNjA5MjQxMzAyMDlaFw0yNjA5MjUxMzM4MDlaMDMxMTAvBgNV BAMTKEEyM0NCQUYyNDYwQjkyRTc2QjZCREJGNENFMDVDODE0NEI5NzUzQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTemeUIXpPJSed8Y7r63vMleYi zJ1JgoVtH1BUnVvZIkUj+ksL9krAXVpt9WO5o02TJ3r3GXboPTaTFLoc0mi/KZed ABRnETCFjWsbTFmm5a7lViECzMyV8XZnQ3K8Sa11udt2QwdBNi+ElyjrqozV2nuQ n7SUJK0aMSHGa6qsd7y6mFcTXFa/a2VFk4EEmufns8aWPneNF6x7vnoKwl6WXXyG 9ZDhI61wV5Tw/+SmRVj48+JrkzlAzg8isbuGynOn2mHvBDrzzIhW+/huepZQeU7a g2N7phcnn9n6yFwP/mKMn6ZSfJmwLAwqlBVj3Q2L3zJDcrCMaw+HkABeQcbRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUojy68kYLkudra9v0zgXIFEuXU7EwHwYDVR0j BBgwFoAUK1oHi52KMX2noq1AIJDJrnKh0PQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTNkODA2NDMtZDVlOS00MWFmLTk0ZGYtNmQ5NGZiZjQ2NDg3LzAvMkI1QTA3OEI5 RDhBMzE3REE3QTJBRDQwMjA5MEM5QUU3MkExRDBGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQjVBMDc4QjlEOEEzMTdEQTdBMkFENDAyMDkwQzlBRTcyQTFE MEY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTNkODA2NDMtZDVlOS00MWFmLTk0 ZGYtNmQ5NGZiZjQ2NDg3LzAvMkI1QTA3OEI5RDhBMzE3REE3QTJBRDQwMjA5MEM5 QUU3MkExRDBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACO/QsVOaStssXhivMZQ1yxtmVKHJoR+PI8x b1DzvKunfJDQGAgDzZ1ltyAXtfOmZXL+YYask8dFV+rluV7Xd9zG/PVEvZOt63vi YAJ1dINyAdqYOcqam9OsIThQKGDmjKq2fbZMuvssJWhjTSsSKcTWVOs8QuiQ8z6C ISdOFlsY+5o/nQEIqTAu3/XwnwCGs62w6/SZtbOzY90RoPsD40gMOWXfgVVg2Cdq czBHAzJHDztr3D7v1V0utF03mTkRPWaZyTq8aOC9oOdLL+2ISYD+FWl6ciSHjW5G N6cg4tGNRxca4f7SoBaxQt9KMCd3EhPevMC0jzfM+iZq3sDhiL4= -----END CERTIFICATE-----Generated at Thu Sep 24 23:33:30 2026 by rpki-client