$ rpki-client -vvvf rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft File: 2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft (raw, json) Hash identifier: 8LG+sQgvutgOo/xmCqGj7HykfyM0o1ab6Ir9VWr401g= Subject key identifier: 65:BB:8F:49:8C:37:BB:3D:38:CC:56:57:BD:55:2D:77:8E:39:D9:E4 Authority key identifier: 2C:7A:30:2B:26:8D:C5:40:59:CE:B8:8F:7A:C2:19:8D:98:52:CB:D3 Certificate issuer: /CN=2C7A302B268DC54059CEB88F7AC2198D9852CBD3 Certificate serial: 47ACA9407FE01F6F63B0FD99F00DB1D65D620236 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 11:45:02 +0000 Manifest this update: Fri 25 Sep 2026 11:40:02 +0000 Manifest next update: Sat 26 Sep 2026 14:32:02 +0000 Files and hashes: 1: 2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl (hash: FDfW4lFW5/zS3oEUzKQ+WpXRbn6UkESesSXCyT5wKZI=) 2: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: bJqqtyMrUB6ove5aksmXoGy9PsBIFYzerBlsfdZy7oQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 14:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ac:a9:40:7f:e0:1f:6f:63:b0:fd:99:f0:0d:b1:d6:5d:62:02:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C7A302B268DC54059CEB88F7AC2198D9852CBD3 Validity Not Before: Sep 25 11:40:02 2026 GMT Not After : Sep 26 14:32:02 2026 GMT Subject: CN=65BB8F498C37BB3D38CC5657BD552D778E39D9E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c8:7f:c4:1e:b7:3a:3f:a2:c4:6c:66:d3:e9: 01:6e:f8:22:a6:9d:c5:3b:f7:b7:12:fb:d5:a2:a4: e1:69:93:16:20:a6:b4:2e:d0:16:dc:ef:c8:47:1c: e9:27:2b:25:bc:42:78:00:d3:3f:1c:9e:02:6c:52: ce:7a:01:3b:d9:25:77:ef:de:4d:8a:e9:cd:53:75: df:ed:07:b7:3d:18:0f:42:17:0d:37:63:5a:ab:d1: 00:e4:4d:c9:89:cb:db:17:9f:e3:41:c5:76:ad:14: 29:8e:4c:60:25:62:70:01:7f:fc:cd:55:00:8a:89: 37:2c:6b:11:c3:e2:11:2a:b8:db:dd:ee:ba:6d:45: 45:2d:72:7e:3f:70:da:a3:9f:17:44:76:d0:fa:1d: d6:5f:cd:0e:d9:19:76:d4:11:3d:ce:05:a0:2b:3a: a5:c5:c5:f8:48:7d:6a:2b:59:02:75:9c:69:e8:3a: 21:84:f1:8a:c5:04:dd:db:9f:a0:d1:bd:ee:59:a2: 1d:71:19:ff:21:94:d4:99:16:4b:66:3c:d6:9f:cb: f3:c7:0d:57:57:01:15:11:b1:25:9c:26:8a:9e:0a: f0:3f:aa:62:ee:53:c2:7a:be:3b:62:e8:cb:1e:b7: 50:24:31:8f:82:4c:88:79:43:38:16:c3:79:47:e1: 2d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BB:8F:49:8C:37:BB:3D:38:CC:56:57:BD:55:2D:77:8E:39:D9:E4 X509v3 Authority Key Identifier: keyid:2C:7A:30:2B:26:8D:C5:40:59:CE:B8:8F:7A:C2:19:8D:98:52:CB:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:57:f9:61:e6:76:05:97:91:d1:a4:9b:f6:77:1c:ec:f5:c9: 0a:0c:f3:27:38:e5:ff:12:b1:bd:af:36:55:30:64:a8:31:46: 01:2e:f5:17:ed:fc:42:a5:ec:63:1a:05:6f:3a:35:5e:79:5b: 01:96:ab:5e:e4:13:f2:75:2b:01:25:4b:79:af:d1:b5:e3:ca: 0f:be:e4:0e:7e:ac:c7:40:f8:9d:01:8a:18:4e:b3:3e:8c:52: 52:2f:33:4a:1a:c8:0a:21:4b:f5:e9:52:49:fd:09:0c:0a:0c: 0e:61:32:59:e3:e5:b7:a0:e2:5d:74:8b:db:b9:7d:05:3b:69: 60:e0:18:28:23:a9:60:16:24:6f:dd:02:14:ee:4d:fc:49:d7: 55:58:e0:02:14:e9:88:8e:84:a8:2a:31:b3:f2:47:34:0b:c2: b8:ef:3d:27:f2:a2:ed:57:4c:84:97:e4:98:e2:2a:3f:2e:f9: f1:b5:dc:c1:f9:f0:1f:cd:68:95:76:cc:a0:8d:cd:0b:b9:1c: 88:d4:d0:72:a0:91:52:c9:2a:9e:b4:61:99:5e:44:86:59:16: 77:62:3b:77:e8:92:65:5b:ef:54:86:a9:9b:37:ac:c6:7a:83: c3:0b:63:35:f6:d4:3d:19:0b:51:21:c1:df:0f:e5:9b:95:e1: 22:ac:5d:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR6ypQH/gH29jsP2Z8A2x1l1iAjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM3QTMwMkIyNjhEQzU0MDU5Q0VCODhGN0FDMjE5OEQ5 ODUyQ0JEMzAeFw0yNjA5MjUxMTQwMDJaFw0yNjA5MjYxNDMyMDJaMDMxMTAvBgNV BAMTKDY1QkI4RjQ5OEMzN0JCM0QzOENDNTY1N0JENTUyRDc3OEUzOUQ5RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCyH/EHrc6P6LEbGbT6QFu+CKm ncU797cS+9WipOFpkxYgprQu0Bbc78hHHOknKyW8QngA0z8cngJsUs56ATvZJXfv 3k2K6c1Tdd/tB7c9GA9CFw03Y1qr0QDkTcmJy9sXn+NBxXatFCmOTGAlYnABf/zN VQCKiTcsaxHD4hEquNvd7rptRUUtcn4/cNqjnxdEdtD6HdZfzQ7ZGXbUET3OBaAr OqXFxfhIfWorWQJ1nGnoOiGE8YrFBN3bn6DRve5Zoh1xGf8hlNSZFktmPNafy/PH DVdXARURsSWcJoqeCvA/qmLuU8J6vjti6Mset1AkMY+CTIh5QzgWw3lH4S1jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZbuPSYw3uz04zFZXvVUtd4452eQwHwYDVR0j BBgwFoAULHowKyaNxUBZzriPesIZjZhSy9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA1YWY4MjItYmVhOS00OGYzLWFhMTItYjI3MzcxNjJmYzQyLzAvMkM3QTMwMkIy NjhEQzU0MDU5Q0VCODhGN0FDMjE5OEQ5ODUyQ0JEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQzdBMzAyQjI2OERDNTQwNTlDRUI4OEY3QUMyMTk4RDk4NTJD QkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA1YWY4MjItYmVhOS00OGYzLWFh MTItYjI3MzcxNjJmYzQyLzAvMkM3QTMwMkIyNjhEQzU0MDU5Q0VCODhGN0FDMjE5 OEQ5ODUyQ0JEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdX+WHmdgWXkdGkm/Z3HOz1yQoM8yc45f8S sb2vNlUwZKgxRgEu9Rft/EKl7GMaBW86NV55WwGWq17kE/J1KwElS3mv0bXjyg++ 5A5+rMdA+J0BihhOsz6MUlIvM0oayAohS/XpUkn9CQwKDA5hMlnj5beg4l10i9u5 fQU7aWDgGCgjqWAWJG/dAhTuTfxJ11VY4AIU6YiOhKgqMbPyRzQLwrjvPSfyou1X TISX5JjiKj8u+fG13MH58B/NaJV2zKCNzQu5HIjU0HKgkVLJKp60YZleRIZZFndi O3fokmVb71SGqZs3rMZ6g8MLYzX21D0ZC1Ehwd8P5ZuV4SKsXQs= -----END CERTIFICATE-----Generated at Sat Sep 26 01:49:08 2026 by rpki-client