$ rpki-client -vvvf rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft File: 2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft (raw, json) Hash identifier: oOKIg7GU2CSMhgy7imEOH9SSSE/xXdWdrokUk5x5aps= Subject key identifier: D1:28:D6:B2:9B:2B:0C:FE:AE:A4:63:8C:28:D1:C9:4F:8B:C4:FE:BD Authority key identifier: 2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14 Certificate issuer: /CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714 Certificate serial: 7B9E8C92E7D6D29C1E07BD2D7D1DF5042504EF5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 16:36:33 +0000 Manifest this update: Wed 23 Sep 2026 16:31:33 +0000 Manifest next update: Thu 24 Sep 2026 19:38:33 +0000 Files and hashes: 1: 3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (hash: ib7HPEQ/1sTUx6nXpMyLf2LdpmFve2tZtQrzXQVTi5I=) 2: 3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa (hash: hq7t6IGdrToWC5Y/u0/ln3majWig7C7xPRHwOMHho0s=) 3: 3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (hash: HyudSDnKB8bCiy0S2RrKH+D8dZ2RY7de+E6PViymOWI=) 4: 2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl (hash: f64o7eaLTIYxq682hkBIWmrs6VCbb7FT/tqo4dXHRN0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:9e:8c:92:e7:d6:d2:9c:1e:07:bd:2d:7d:1d:f5:04:25:04:ef:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714 Validity Not Before: Sep 23 16:31:33 2026 GMT Not After : Sep 24 19:38:33 2026 GMT Subject: CN=D128D6B29B2B0CFEAEA4638C28D1C94F8BC4FEBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bc:86:d9:f1:8e:b1:21:05:76:67:6c:26:c6: 47:3f:a3:f6:7d:7b:9d:b7:0a:27:df:90:5e:35:69: 77:a1:0d:74:73:f9:43:be:31:b5:2f:10:ee:1b:ee: 81:18:e5:23:b9:f9:ba:d9:57:9c:26:65:4c:72:b7: b1:6b:0a:eb:41:84:41:7d:e5:e7:64:7d:89:c2:81: e7:34:40:b8:80:9f:8b:8f:94:7d:98:5c:c5:3a:65: cb:73:b0:49:cc:b2:fb:fa:5c:af:c5:94:b2:be:bf: 5c:7f:40:1b:b7:06:03:01:93:74:c5:98:32:36:16: c9:bd:9b:16:64:36:68:28:2f:b3:85:f4:b5:43:3b: 14:a9:ac:d1:ab:a3:03:a5:43:5b:1b:fe:39:bd:75: fb:db:a5:85:03:e1:c1:da:ec:dc:de:10:cc:c4:df: e0:08:92:26:5b:c6:b1:77:50:a1:84:0d:f3:1d:a8: bd:2e:cd:8a:f9:b0:7b:d7:1c:27:4c:88:c0:6c:33: 69:4d:80:70:53:f2:e5:a1:69:50:cf:27:af:13:3d: 3b:b7:6d:7c:b2:71:27:c9:98:15:1f:f2:78:e4:6b: 9b:b3:07:f7:88:c6:b4:75:ea:ab:c5:b7:26:df:d3: a9:c2:04:c4:dc:59:6c:2b:48:8d:40:1b:fc:50:a5: 2d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:28:D6:B2:9B:2B:0C:FE:AE:A4:63:8C:28:D1:C9:4F:8B:C4:FE:BD X509v3 Authority Key Identifier: keyid:2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:c8:03:ef:aa:c9:e9:63:8f:50:e5:8e:a6:f0:54:0d:09:bb: 54:17:b9:76:4e:d6:2f:23:df:0e:51:7a:1c:65:d0:c6:03:ea: 38:bf:f7:1b:21:98:47:1b:5a:23:63:a8:ae:75:b2:45:63:7d: db:ee:b8:31:a6:60:3b:1f:f5:fd:05:e2:65:b2:07:ce:61:77: ca:89:66:ee:f6:2e:0c:c5:85:29:96:82:9c:3d:5f:82:e3:64: f5:44:14:45:95:68:03:15:cf:d0:41:f7:96:34:43:ae:d1:20: e8:e3:9c:0d:2b:ac:15:f7:3f:85:30:e9:72:c8:8a:2f:b1:7d: 6f:df:e9:0e:d6:bc:1f:b4:2b:86:7b:04:fa:d4:d3:e2:ea:d9: 09:6b:f0:bf:75:3b:82:4e:35:e1:3d:ae:66:4a:82:20:bb:61: 03:6b:57:b5:d7:c3:da:9c:a5:c3:9d:8b:4f:a7:9c:7c:be:2a: 0f:ed:06:6a:de:1e:f1:cc:67:21:7e:0c:9b:be:ef:11:fd:07: 71:8a:43:21:42:a7:9b:20:89:be:eb:37:a6:c7:a6:ab:02:65: 88:80:0e:e8:2b:ed:d8:5f:05:95:2f:05:c7:4c:bf:cb:53:b1: 1d:3e:35:b9:e9:86:38:e9:5c:1e:30:e5:4a:0c:aa:ab:d8:68: a2:e0:68:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe56MkufW0pweB70tfR31BCUE71swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRBRkMyNTAzMDUwOUFENzEyNkJCRDkzQUJDQ0I5NUU3 QTE4NjcxNDAeFw0yNjA5MjMxNjMxMzNaFw0yNjA5MjQxOTM4MzNaMDMxMTAvBgNV BAMTKEQxMjhENkIyOUIyQjBDRkVBRUE0NjM4QzI4RDFDOTRGOEJDNEZFQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7vIbZ8Y6xIQV2Z2wmxkc/o/Z9 e523CiffkF41aXehDXRz+UO+MbUvEO4b7oEY5SO5+brZV5wmZUxyt7FrCutBhEF9 5edkfYnCgec0QLiAn4uPlH2YXMU6ZctzsEnMsvv6XK/FlLK+v1x/QBu3BgMBk3TF mDI2Fsm9mxZkNmgoL7OF9LVDOxSprNGrowOlQ1sb/jm9dfvbpYUD4cHa7NzeEMzE 3+AIkiZbxrF3UKGEDfMdqL0uzYr5sHvXHCdMiMBsM2lNgHBT8uWhaVDPJ68TPTu3 bXyycSfJmBUf8njka5uzB/eIxrR16qvFtybf06nCBMTcWWwrSI1AG/xQpS29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0SjWspsrDP6upGOMKNHJT4vE/r0wHwYDVR0j BBgwFoAULa/CUDBQmtcSa72Tq8y5XnoYZxQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0YmI0YzgtNmZjZi00ZmZmLWJkY2MtZmUxZmNjZWUxMDQ1LzAvMkRBRkMyNTAz MDUwOUFENzEyNkJCRDkzQUJDQ0I5NUU3QTE4NjcxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREFGQzI1MDMwNTA5QUQ3MTI2QkJEOTNBQkNDQjk1RTdBMTg2 NzE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0YmI0YzgtNmZjZi00ZmZmLWJk Y2MtZmUxZmNjZWUxMDQ1LzAvMkRBRkMyNTAzMDUwOUFENzEyNkJCRDkzQUJDQ0I5 NUU3QTE4NjcxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATIA++qyeljj1DljqbwVA0Ju1QXuXZO1i8j 3w5Rehxl0MYD6ji/9xshmEcbWiNjqK51skVjfdvuuDGmYDsf9f0F4mWyB85hd8qJ Zu72LgzFhSmWgpw9X4LjZPVEFEWVaAMVz9BB95Y0Q67RIOjjnA0rrBX3P4Uw6XLI ii+xfW/f6Q7WvB+0K4Z7BPrU0+Lq2Qlr8L91O4JONeE9rmZKgiC7YQNrV7XXw9qc pcOdi0+nnHy+Kg/tBmreHvHMZyF+DJu+7xH9B3GKQyFCp5sgib7rN6bHpqsCZYiA Dugr7dhfBZUvBcdMv8tTsR0+NbnphjjpXB4w5UoMqqvYaKLgaMg= -----END CERTIFICATE-----Generated at Thu Sep 24 05:52:06 2026 by rpki-client