$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft File: 2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft (raw, json) Hash identifier: MzOeL0ctciaopJwFzMOH/4jLyhr7+Y87pW72J4uVTJc= Subject key identifier: BD:DD:3A:5B:66:FE:85:E0:DB:3C:0D:44:80:AC:94:A4:EA:BC:73:6A Authority key identifier: 2E:5B:4D:91:9A:E6:E0:98:45:4A:21:D8:3B:EE:48:9C:0A:1D:F6:87 Certificate issuer: /CN=2E5B4D919AE6E098454A21D83BEE489C0A1DF687 Certificate serial: 757059C1BB476745FAE4DD5B1C8B3202844E9B66 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 02:59:23 +0000 Manifest this update: Thu 24 Sep 2026 02:54:23 +0000 Manifest next update: Fri 25 Sep 2026 06:42:23 +0000 Files and hashes: 1: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: w0l4Z0QTqPW7n9jh4ktHZnj4TWLQC1w9BHsCnnP0SC0=) 2: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: hXYZBw+zcNWgfpkr4qfi2P6UAXZrhjOtAH+ubipVz38=) 3: 2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl (hash: lW9ok0PjEhI3U2gNSyt+dldH5lGV3hncEfo/F3KQbPE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:70:59:c1:bb:47:67:45:fa:e4:dd:5b:1c:8b:32:02:84:4e:9b:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E5B4D919AE6E098454A21D83BEE489C0A1DF687 Validity Not Before: Sep 24 02:54:23 2026 GMT Not After : Sep 25 06:42:23 2026 GMT Subject: CN=BDDD3A5B66FE85E0DB3C0D4480AC94A4EABC736A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:24:9b:fc:08:25:f6:40:5a:e4:32:79:ef:43: 0e:f4:14:56:0c:5f:eb:1c:bd:52:7d:11:d4:8d:a7: a4:55:0e:00:0f:25:13:aa:81:39:ec:5e:8a:99:bb: 54:1e:94:f4:cd:4e:cb:28:3f:ad:36:f8:6b:b3:6e: da:c0:70:7a:6b:78:66:b1:94:25:32:58:14:55:93: b5:d0:97:09:41:5a:6d:c9:67:f6:c8:b5:31:0f:ac: 7e:b2:f7:ec:f7:2f:54:22:89:0e:e9:ee:1b:78:fd: f4:f3:bb:16:18:42:39:fb:6c:dc:93:fa:f4:3f:fb: e0:3c:82:e6:f0:25:38:70:7d:a9:bd:0a:0d:eb:d4: 7a:9b:bc:bf:cc:64:da:ee:14:76:6e:f7:e9:eb:46: 3e:5c:c3:20:12:7e:a6:81:a8:9d:f1:52:8e:74:32: 24:f9:68:d3:e9:2d:a4:76:bc:b7:98:ba:8a:92:ee: f4:c3:59:f9:3d:a9:a5:4e:c3:98:21:3e:87:bf:a4: cb:01:cf:38:e1:7f:e2:0d:3a:e6:29:a7:ea:a3:53: 8b:4c:56:4e:d0:8c:54:9f:b0:a7:45:d2:cb:9a:d1: c0:cf:33:f3:33:d1:bb:98:e5:dd:df:b4:99:e3:35: ba:6b:c9:44:a3:59:af:64:56:03:99:6d:6e:d1:b1: a9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DD:3A:5B:66:FE:85:E0:DB:3C:0D:44:80:AC:94:A4:EA:BC:73:6A X509v3 Authority Key Identifier: keyid:2E:5B:4D:91:9A:E6:E0:98:45:4A:21:D8:3B:EE:48:9C:0A:1D:F6:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:f0:c1:de:64:23:bd:42:f9:2e:e9:b4:60:8b:79:b5:45:f7: 20:7d:18:3b:90:2b:01:45:bf:3a:3c:c8:b9:da:57:a6:33:0f: 34:f7:79:4a:82:31:60:45:49:88:fb:39:f9:14:df:77:d3:55: c1:e2:a4:1e:7e:7b:2e:6c:dd:8c:50:2b:f3:2a:03:be:b3:58: 84:1c:32:c1:79:c1:68:1e:53:6c:bc:11:dd:07:3a:26:e8:0d: d1:ff:b6:84:33:14:49:64:d0:cd:d1:fe:bb:ea:b1:05:2f:1c: fe:7f:c2:9f:d5:82:c5:1d:78:6a:8a:26:b8:cc:fc:89:1f:e4: 60:01:78:b0:e3:5b:e6:c6:c0:32:4a:f3:f2:6a:7a:47:ce:37: f8:87:65:32:27:17:d0:f5:3d:c4:aa:86:45:23:ba:17:7a:b5: e4:78:07:4e:a8:e3:5a:64:4f:cb:e6:86:9f:93:a1:d4:44:48: ff:52:e2:f2:b1:86:27:f2:38:7b:ce:d2:96:de:5f:91:ef:2f: 2d:5b:94:ae:a5:da:00:aa:c2:c8:5a:8c:f3:77:a1:46:0a:90: 18:e9:07:7e:4e:2a:14:47:eb:e6:c0:99:ba:a7:2a:f9:17:1c: 29:20:95:0e:15:a9:c8:7b:8d:d1:2b:78:3a:d9:ae:be:bc:05: 94:c3:6e:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdXBZwbtHZ0X65N1bHIsyAoROm2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU1QjREOTE5QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4OUMw QTFERjY4NzAeFw0yNjA5MjQwMjU0MjNaFw0yNjA5MjUwNjQyMjNaMDMxMTAvBgNV BAMTKEJEREQzQTVCNjZGRTg1RTBEQjNDMEQ0NDgwQUM5NEE0RUFCQzczNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaJJv8CCX2QFrkMnnvQw70FFYM X+scvVJ9EdSNp6RVDgAPJROqgTnsXoqZu1QelPTNTssoP602+GuzbtrAcHpreGax lCUyWBRVk7XQlwlBWm3JZ/bItTEPrH6y9+z3L1QiiQ7p7ht4/fTzuxYYQjn7bNyT +vQ/++A8gubwJThwfam9Cg3r1HqbvL/MZNruFHZu9+nrRj5cwyASfqaBqJ3xUo50 MiT5aNPpLaR2vLeYuoqS7vTDWfk9qaVOw5ghPoe/pMsBzzjhf+INOuYpp+qjU4tM Vk7QjFSfsKdF0sua0cDPM/Mz0buY5d3ftJnjNbpryUSjWa9kVgOZbW7RsakhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvd06W2b+heDbPA1EgKyUpOq8c2owHwYDVR0j BBgwFoAULltNkZrm4JhFSiHYO+5InAod9ocwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkM2RkNzktODYzNS00ODU3LThhM2MtOTg1OTU0NTE2ZjllLzAvMkU1QjREOTE5 QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4OUMwQTFERjY4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTVCNEQ5MTlBRTZFMDk4NDU0QTIxRDgzQkVFNDg5QzBBMURG Njg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkM2RkNzktODYzNS00ODU3LThh M2MtOTg1OTU0NTE2ZjllLzAvMkU1QjREOTE5QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4 OUMwQTFERjY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHwwd5kI71C+S7ptGCLebVF9yB9GDuQKwFF vzo8yLnaV6YzDzT3eUqCMWBFSYj7OfkU33fTVcHipB5+ey5s3YxQK/MqA76zWIQc MsF5wWgeU2y8Ed0HOiboDdH/toQzFElk0M3R/rvqsQUvHP5/wp/VgsUdeGqKJrjM /Ikf5GABeLDjW+bGwDJK8/JqekfON/iHZTInF9D1PcSqhkUjuhd6teR4B06o41pk T8vmhp+TodRESP9S4vKxhifyOHvO0pbeX5HvLy1blK6l2gCqwshajPN3oUYKkBjp B35OKhRH6+bAmbqnKvkXHCkglQ4Vqch7jdEreDrZrr68BZTDbuQ= -----END CERTIFICATE-----Generated at Thu Sep 24 22:53:14 2026 by rpki-client