$ rpki-client -vvvf rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft File: 2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft (raw, json) Hash identifier: j8jLjMuPKj4AuVAD6rCFqTIgk9PQ8pKBphBKyL/nFmE= Subject key identifier: B2:68:FA:89:00:C4:A8:7B:DD:75:22:9B:8B:A6:BF:3C:8E:76:9E:81 Authority key identifier: 2C:F0:62:4C:97:05:2A:18:8B:12:C2:D8:DF:D6:92:56:BE:AE:A0:A3 Certificate issuer: /CN=2CF0624C97052A188B12C2D8DFD69256BEAEA0A3 Certificate serial: 100ABEFDC69A22A5FADA99E44CC2795C1037DECB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 15:55:48 +0000 Manifest this update: Wed 23 Sep 2026 15:50:48 +0000 Manifest next update: Thu 24 Sep 2026 19:41:48 +0000 Files and hashes: 1: 3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa (hash: JklHOE9UnXIvsKlW/PC+ZLgav3mgVpKETno9/XOSONo=) 2: 2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl (hash: 2yjG+IYivY+J2X2qdtcufgnUl5t7/0Zes8hOP0DJ+LQ=) 3: 3131372e3132312e3230332e302f32342d3234203d3e203436303239.roa (hash: khNOf5qfeVAtCDmI+P0qU0wtTsenc+owEXE7IuCFTL4=) 4: 3131372e3132312e3230302e302f32342d3234203d3e203436303239.roa (hash: jjDQyLwOLFkeP+V5865OD4J5ZSFyfyGf7kRLTYcgAUA=) 5: 3131372e3132312e3230322e302f32342d3234203d3e203436303239.roa (hash: G6layxH6VqJ35uHJZhmjgga72kPwjzbEYW/yD2TBIJU=) 6: 3131372e3132312e3230342e302f32342d3234203d3e203436303239.roa (hash: 9xyVMpzGgMxzPTr0/YEPxhsOk4K0WU7VoWYP2UAihTY=) 7: 3131372e3132312e3230352e302f32342d3234203d3e203436303239.roa (hash: UH+sfXi3uyUzmqtZ5a3kiK88kT3KnsNHU+6St14pVbU=) 8: 3131372e3132312e3230372e302f32342d3234203d3e203436303239.roa (hash: 5qjiHCREo3yTZVwviMFSFaOdgsJ0Wu7pJnWioBrnUw8=) 9: 3131372e3132312e3230312e302f32342d3234203d3e203436303239.roa (hash: Gt77/DpvHcyfECJ/rzUv8b/LftlAsDwob9ro6Az9CBg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0a:be:fd:c6:9a:22:a5:fa:da:99:e4:4c:c2:79:5c:10:37:de:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CF0624C97052A188B12C2D8DFD69256BEAEA0A3 Validity Not Before: Sep 23 15:50:48 2026 GMT Not After : Sep 24 19:41:48 2026 GMT Subject: CN=B268FA8900C4A87BDD75229B8BA6BF3C8E769E81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f4:23:8d:10:99:12:4a:e0:ca:59:21:9a:f7: 6d:6d:8c:dd:f1:d0:a4:68:72:11:fd:a5:43:ac:6d: d1:d9:ed:aa:7d:23:2a:a3:9a:f9:1a:4c:57:b3:8f: a8:9e:ec:bd:ab:fc:d8:f6:68:44:2f:c5:93:8d:db: dd:22:97:c2:8b:86:fb:0a:ce:d3:05:29:7c:89:25: f4:88:b4:d0:6c:29:19:d6:e7:30:12:3c:24:bc:d0: ee:32:27:e3:d5:d2:c3:e4:b3:e6:fe:e6:c7:aa:b2: c5:aa:bc:af:6c:6e:0f:20:0d:ea:2c:3e:f9:45:1c: 1e:7a:05:e7:19:fb:1b:c1:75:48:95:e3:85:2d:92: e1:97:e1:a3:ce:dd:cd:ca:af:e5:bc:57:ba:61:f0: f2:42:17:72:1a:27:a5:87:e2:a7:5a:e0:0b:5e:7e: 11:5d:25:0f:17:a0:68:8b:69:82:4e:8c:68:d9:5d: b5:eb:67:d8:5a:e8:68:46:8a:fb:45:f3:c2:a5:e4: c9:5e:c1:4c:ea:67:ab:f2:e4:02:64:51:c2:cb:f0: 98:3b:39:d4:ff:4f:27:9c:1d:93:1d:b4:ec:1b:58: 74:7a:6d:ee:fe:24:9e:aa:46:bd:18:0c:51:bf:2e: 1f:90:b1:84:d3:ab:06:17:a3:c5:c3:27:96:f0:e3: e1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:68:FA:89:00:C4:A8:7B:DD:75:22:9B:8B:A6:BF:3C:8E:76:9E:81 X509v3 Authority Key Identifier: keyid:2C:F0:62:4C:97:05:2A:18:8B:12:C2:D8:DF:D6:92:56:BE:AE:A0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:bd:9e:1e:35:6a:27:5f:48:34:3d:23:ff:04:64:de:f6:0b: 28:3b:38:c6:ed:d1:18:70:9c:c0:8c:95:4c:0d:6f:03:c5:e4: c6:67:fb:fa:0b:c5:88:1f:42:f9:41:b5:a9:9e:93:c2:54:f6: 28:ab:5f:bb:53:a5:5e:10:ff:8c:4d:08:49:3a:9c:b9:1d:54: d9:b6:2a:38:e7:1d:82:8a:56:15:a5:1e:a9:69:83:e7:4b:c2: 23:43:1e:23:63:dd:c7:88:7a:ef:bc:c5:b9:3c:61:0b:b5:83: c9:23:7c:35:b8:17:ab:21:8b:50:54:31:7d:cb:95:1d:f0:dd: 18:4b:1e:53:30:51:d9:3f:07:94:fe:c9:e1:76:32:0f:83:3b: b2:fa:42:b4:b5:52:a9:ae:d8:e8:d3:1b:ff:96:51:19:d5:ff: 18:cc:38:00:74:f9:9d:aa:35:38:68:06:2a:96:ca:0c:b1:78: 9d:d8:71:35:ca:44:30:24:2b:54:a6:81:ba:96:e0:c7:05:7d: f6:ca:d9:1a:86:3d:f5:29:7d:0c:81:4a:a8:88:9d:27:60:f5: c4:97:4a:15:0f:1c:4b:9e:40:2e:12:49:bc:b1:e0:40:89:35: 43:e2:a7:8b:90:fc:56:27:97:35:e3:6b:bf:64:87:1b:31:28: e7:59:4b:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEAq+/caaIqX62pnkTMJ5XBA33sswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGMDYyNEM5NzA1MkExODhCMTJDMkQ4REZENjkyNTZC RUFFQTBBMzAeFw0yNjA5MjMxNTUwNDhaFw0yNjA5MjQxOTQxNDhaMDMxMTAvBgNV BAMTKEIyNjhGQTg5MDBDNEE4N0JERDc1MjI5QjhCQTZCRjNDOEU3NjlFODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk9CONEJkSSuDKWSGa921tjN3x 0KRochH9pUOsbdHZ7ap9IyqjmvkaTFezj6ie7L2r/Nj2aEQvxZON290il8KLhvsK ztMFKXyJJfSItNBsKRnW5zASPCS80O4yJ+PV0sPks+b+5seqssWqvK9sbg8gDeos PvlFHB56BecZ+xvBdUiV44UtkuGX4aPO3c3Kr+W8V7ph8PJCF3IaJ6WH4qda4Ate fhFdJQ8XoGiLaYJOjGjZXbXrZ9ha6GhGivtF88Kl5MlewUzqZ6vy5AJkUcLL8Jg7 OdT/TyecHZMdtOwbWHR6be7+JJ6qRr0YDFG/Lh+QsYTTqwYXo8XDJ5bw4+HNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsmj6iQDEqHvddSKbi6a/PI52noEwHwYDVR0j BBgwFoAULPBiTJcFKhiLEsLY39aSVr6uoKMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTUzYjA2N2MtZWNjOS00ZGNhLTk4N2QtYjk1NzY4MTVmODU1LzAvMkNGMDYyNEM5 NzA1MkExODhCMTJDMkQ4REZENjkyNTZCRUFFQTBBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0YwNjI0Qzk3MDUyQTE4OEIxMkMyRDhERkQ2OTI1NkJFQUVB MEEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTUzYjA2N2MtZWNjOS00ZGNhLTk4 N2QtYjk1NzY4MTVmODU1LzAvMkNGMDYyNEM5NzA1MkExODhCMTJDMkQ4REZENjky NTZCRUFFQTBBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJe9nh41aidfSDQ9I/8EZN72Cyg7OMbt0Rhw nMCMlUwNbwPF5MZn+/oLxYgfQvlBtamek8JU9iirX7tTpV4Q/4xNCEk6nLkdVNm2 KjjnHYKKVhWlHqlpg+dLwiNDHiNj3ceIeu+8xbk8YQu1g8kjfDW4F6shi1BUMX3L lR3w3RhLHlMwUdk/B5T+yeF2Mg+DO7L6QrS1Uqmu2OjTG/+WURnV/xjMOAB0+Z2q NThoBiqWygyxeJ3YcTXKRDAkK1SmgbqW4McFffbK2RqGPfUpfQyBSqiInSdg9cSX ShUPHEueQC4SSbyx4ECJNUPip4uQ/FYnlzXja79khxsxKOdZSzI= -----END CERTIFICATE-----Generated at Thu Sep 24 02:03:00 2026 by rpki-client