$ rpki-client -vvvf rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft File: 2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft (raw, json) Hash identifier: SkGHh+xNeNixiAlb3NVMYlhVjyjaNSNP6Bro/k0f8o8= Subject key identifier: F2:D2:37:27:BC:26:23:A5:D3:B7:16:19:F8:63:31:A8:2D:F5:1E:9B Authority key identifier: 2D:88:AC:79:1B:0C:C1:B7:D9:21:EC:E6:60:CD:E0:CF:2E:E8:ED:72 Certificate issuer: /CN=2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72 Certificate serial: 3CE770B6EB80D38DB5F6E43BDD681AEE6F1EF4C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 19:55:33 +0000 Manifest this update: Wed 23 Sep 2026 19:50:33 +0000 Manifest next update: Thu 24 Sep 2026 20:36:33 +0000 Files and hashes: 1: 2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl (hash: J4dwnV7LhIAfJU8fwiVLPPdaZrsecFqgigJ4OK0umfk=) 2: 3130332e3136322e3234302e302f32332d3234203d3e20313431363731.roa (hash: 4S3CjwY52E8pJFph27PsS9L2iHBVLGusILVU9iKtoiI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e7:70:b6:eb:80:d3:8d:b5:f6:e4:3b:dd:68:1a:ee:6f:1e:f4:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72 Validity Not Before: Sep 23 19:50:33 2026 GMT Not After : Sep 24 20:36:33 2026 GMT Subject: CN=F2D23727BC2623A5D3B71619F86331A82DF51E9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cd:f3:07:dc:62:9e:d8:88:56:3f:ba:e7:b2: 18:da:2e:f1:9a:18:77:f5:13:e2:f0:cf:bf:5b:bf: 48:0a:93:71:a0:fb:1d:88:fc:ac:3e:0b:30:85:03: 87:3d:5f:62:60:48:8f:42:81:af:93:0f:10:64:78: 99:15:4b:24:96:3e:38:d5:4b:63:73:50:31:de:4b: 9f:1f:fc:ba:a9:86:1b:d8:65:c9:f1:2e:08:f9:9f: 1e:94:03:9c:9c:ea:31:fd:bb:aa:f4:55:b0:f7:bb: c5:88:5e:b5:4d:23:f2:bf:3f:c6:a9:5a:1b:73:0c: 76:50:c8:5e:bb:ef:b1:26:34:40:fd:ba:ad:51:da: 94:ec:14:cf:81:32:df:cb:37:6e:20:4e:92:40:94: 70:40:ca:9b:03:8a:48:27:ca:90:81:07:46:15:21: ff:9e:3c:90:1d:82:09:70:17:b2:3f:cb:4f:05:cc: f4:f3:6d:c3:71:cf:89:f9:07:e3:a3:9f:cf:c9:2c: bd:a6:ea:e5:1d:e0:6d:f6:71:5a:0a:2e:c2:12:00: 08:1d:35:6e:cf:5a:31:96:f7:0d:e4:a5:0e:12:74: 7b:78:a2:b0:cf:19:f1:2d:ad:6b:53:c4:6e:55:df: 12:52:71:a7:bb:cb:6a:e4:cb:be:f7:82:59:34:58: 07:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D2:37:27:BC:26:23:A5:D3:B7:16:19:F8:63:31:A8:2D:F5:1E:9B X509v3 Authority Key Identifier: keyid:2D:88:AC:79:1B:0C:C1:B7:D9:21:EC:E6:60:CD:E0:CF:2E:E8:ED:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:2f:95:e8:fb:69:ef:7b:e5:f3:3c:86:fa:1d:fa:9e:fe:3e: 7e:62:c1:cd:df:b4:05:fc:99:1a:6b:d5:e5:66:3d:d3:f9:47: c0:29:09:68:f7:59:51:a1:f9:f9:77:81:8b:96:3c:2b:7a:7a: f4:b1:26:67:5b:54:10:29:bb:4a:9e:c1:e7:9d:f0:95:43:16: 42:10:95:34:1c:97:60:f3:a1:33:88:c3:78:ae:0b:ab:37:6f: 0a:45:a9:6d:89:5c:d9:25:11:18:ca:24:95:0f:3a:1b:52:93: ae:ce:2f:8f:7b:06:8a:69:e0:27:bb:84:ca:17:5b:39:99:93: ea:a3:b0:68:e2:a0:8d:95:bd:41:82:87:64:43:50:af:f0:2f: 9f:51:65:c5:c5:95:d8:d3:69:22:bf:0c:ba:49:e3:e2:fa:ce: 2b:26:42:f7:48:0d:1c:c6:19:0f:c7:9d:09:d4:53:c5:43:34: 20:82:25:e1:68:86:cd:d3:fc:b1:a9:e0:a8:03:5a:ad:c5:5d: 88:90:da:5e:f9:3f:79:af:71:1d:43:5e:f1:58:b5:7a:ec:7b: b9:8f:80:66:68:64:fa:1e:00:0d:87:2d:b1:6d:9e:88:f5:bf: aa:d1:34:08:08:67:37:83:07:5f:da:91:29:1b:6b:ae:27:4c: 8d:42:78:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPOdwtuuA04219uQ73Wga7m8e9MIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ4OEFDNzkxQjBDQzFCN0Q5MjFFQ0U2NjBDREUwQ0Yy RUU4RUQ3MjAeFw0yNjA5MjMxOTUwMzNaFw0yNjA5MjQyMDM2MzNaMDMxMTAvBgNV BAMTKEYyRDIzNzI3QkMyNjIzQTVEM0I3MTYxOUY4NjMzMUE4MkRGNTFFOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgzfMH3GKe2IhWP7rnshjaLvGa GHf1E+Lwz79bv0gKk3Gg+x2I/Kw+CzCFA4c9X2JgSI9Cga+TDxBkeJkVSySWPjjV S2NzUDHeS58f/LqphhvYZcnxLgj5nx6UA5yc6jH9u6r0VbD3u8WIXrVNI/K/P8ap WhtzDHZQyF6777EmNED9uq1R2pTsFM+BMt/LN24gTpJAlHBAypsDikgnypCBB0YV If+ePJAdgglwF7I/y08FzPTzbcNxz4n5B+Ojn8/JLL2m6uUd4G32cVoKLsISAAgd NW7PWjGW9w3kpQ4SdHt4orDPGfEtrWtTxG5V3xJScae7y2rky773glk0WAcPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8tI3J7wmI6XTtxYZ+GMxqC31HpswHwYDVR0j BBgwFoAULYiseRsMwbfZIezmYM3gzy7o7XIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjMwMjRkMjQtOWZhYS00YWIwLThmYTQtMGNlNjA4YzZkMGEzLzAvMkQ4OEFDNzkx QjBDQzFCN0Q5MjFFQ0U2NjBDREUwQ0YyRUU4RUQ3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDg4QUM3OTFCMENDMUI3RDkyMUVDRTY2MENERTBDRjJFRThF RDcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjMwMjRkMjQtOWZhYS00YWIwLThm YTQtMGNlNjA4YzZkMGEzLzAvMkQ4OEFDNzkxQjBDQzFCN0Q5MjFFQ0U2NjBDREUw Q0YyRUU4RUQ3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEvlej7ae975fM8hvod+p7+Pn5iwc3ftAX8 mRpr1eVmPdP5R8ApCWj3WVGh+fl3gYuWPCt6evSxJmdbVBApu0qeweed8JVDFkIQ lTQcl2DzoTOIw3iuC6s3bwpFqW2JXNklERjKJJUPOhtSk67OL497Bopp4Ce7hMoX WzmZk+qjsGjioI2VvUGCh2RDUK/wL59RZcXFldjTaSK/DLpJ4+L6zismQvdIDRzG GQ/HnQnUU8VDNCCCJeFohs3T/LGp4KgDWq3FXYiQ2l75P3mvcR1DXvFYtXrse7mP gGZoZPoeAA2HLbFtnoj1v6rRNAgIZzeDB1/akSkba64nTI1CeMA= -----END CERTIFICATE-----Generated at Thu Sep 24 06:04:13 2026 by rpki-client