$ rpki-client -vvvf rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft File: 2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft (raw, json) Hash identifier: WNuAVaGppUXsqLOHcB6GTI+7GsuzZl5+484tQm8TX24= Subject key identifier: A8:8E:30:2C:20:55:9F:75:76:C3:47:C5:B9:E1:D2:02:27:19:F0:B1 Authority key identifier: 2F:F2:8E:C3:1F:A9:59:5D:4C:93:72:E0:37:8B:12:7B:FC:07:D5:43 Certificate issuer: /CN=2FF28EC31FA9595D4C9372E0378B127BFC07D543 Certificate serial: 56F2DA695BF1D061086E27CF28CB908466B92D20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 21:07:11 +0000 Manifest this update: Wed 23 Sep 2026 21:02:11 +0000 Manifest next update: Thu 24 Sep 2026 22:56:11 +0000 Files and hashes: 1: 2FF28EC31FA9595D4C9372E0378B127BFC07D543.crl (hash: EDl18KbVtuUgK+XgmUrG/pPss368LcTP0i3LDOkfB6Q=) 2: 3130332e37382e3135382e302f32342d3234203d3e20313530323438.roa (hash: WBevjDBrr8T3lRgtMCROWKCPpKkw27Bp5qV284oO8bo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.crl rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f2:da:69:5b:f1:d0:61:08:6e:27:cf:28:cb:90:84:66:b9:2d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FF28EC31FA9595D4C9372E0378B127BFC07D543 Validity Not Before: Sep 23 21:02:11 2026 GMT Not After : Sep 24 22:56:11 2026 GMT Subject: CN=A88E302C20559F7576C347C5B9E1D2022719F0B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:dd:87:2e:45:78:a6:e6:c7:f0:c7:3f:26:5a: ec:5c:96:56:fb:f2:e8:35:28:49:0c:be:de:c3:d5: af:af:7b:c0:98:26:9f:bd:3f:42:26:b7:9d:02:c1: 91:28:9f:77:e0:eb:3a:93:17:7e:9d:a7:59:b5:a0: 19:8e:87:af:82:10:ea:ac:15:70:10:c0:97:58:a4: 1c:91:ea:71:80:ae:3d:15:ee:7c:73:de:41:5c:20: 43:61:d8:c3:62:16:34:27:bb:99:19:55:5d:de:99: ab:df:ea:a8:94:28:d6:95:c8:4d:ed:7f:a4:86:3e: 49:d4:3f:41:29:b1:5b:41:de:20:bf:5c:f4:c1:58: cd:ee:02:d6:5d:79:f4:0c:0d:7c:d5:21:ea:cc:19: 6d:44:0f:d8:78:67:85:22:1f:f7:d9:54:92:10:93: 42:27:52:3c:f6:79:08:d3:08:48:66:ab:7e:f0:51: 02:28:3d:d8:a1:a8:62:18:94:df:6b:d3:95:3c:db: 4f:e0:bc:71:91:fd:27:69:25:03:7f:4f:f9:3b:0f: 2f:37:0c:d7:f4:d8:c4:ef:d3:cd:0a:ab:f4:5f:7a: 7f:9e:66:75:4b:c5:b2:b5:5a:a1:52:5e:ec:d7:a8: 9e:f2:88:f9:82:cb:5d:e8:31:fc:eb:cc:d5:34:e7: 29:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8E:30:2C:20:55:9F:75:76:C3:47:C5:B9:E1:D2:02:27:19:F0:B1 X509v3 Authority Key Identifier: keyid:2F:F2:8E:C3:1F:A9:59:5D:4C:93:72:E0:37:8B:12:7B:FC:07:D5:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ee:49:3b:bd:0b:a8:0f:c3:16:77:b0:09:1d:32:c2:f7:cc: 54:b7:58:45:79:3d:f0:5b:ce:f8:7a:47:38:6e:dc:2e:53:11: 1c:e6:2b:7f:a6:e8:f2:6c:51:06:49:12:ca:c4:9e:fd:20:00: 5c:1f:48:67:bc:e1:4b:af:90:81:3d:1a:95:91:d0:56:35:e5: 17:b1:8c:0a:35:8d:d5:48:2e:b3:a6:5f:a0:6d:99:af:b3:fc: 2d:3b:4b:3e:cb:9b:84:17:ab:77:1c:54:78:1c:17:7b:8f:7a: 44:5c:6e:07:53:81:d3:b6:8c:8e:ff:02:ba:2c:0e:58:27:2c: b3:03:18:9c:2d:35:e0:63:e2:55:bc:09:1a:64:21:ed:0a:5b: 49:ef:38:0f:21:c0:14:84:ab:c1:a1:9f:aa:28:e8:64:6e:a2: 32:87:3e:c9:61:72:47:96:8b:48:5f:73:ec:7a:27:59:9f:19: 46:95:91:9b:1c:d4:11:d2:a4:63:2d:17:b2:0f:a2:71:a0:d9: e8:9c:55:80:64:48:fa:18:c6:40:a5:67:87:91:4f:03:08:46: 6d:84:ab:65:90:1d:d9:36:7c:f0:8a:52:8e:dd:9c:50:33:ed: b0:61:96:a2:18:82:ac:28:87:53:e6:bd:b7:ef:fb:b5:12:cf: 8c:19:ee:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVvLaaVvx0GEIbifPKMuQhGa5LSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZGMjhFQzMxRkE5NTk1RDRDOTM3MkUwMzc4QjEyN0JG QzA3RDU0MzAeFw0yNjA5MjMyMTAyMTFaFw0yNjA5MjQyMjU2MTFaMDMxMTAvBgNV BAMTKEE4OEUzMDJDMjA1NTlGNzU3NkMzNDdDNUI5RTFEMjAyMjcxOUYwQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf3YcuRXim5sfwxz8mWuxcllb7 8ug1KEkMvt7D1a+ve8CYJp+9P0Imt50CwZEon3fg6zqTF36dp1m1oBmOh6+CEOqs FXAQwJdYpByR6nGArj0V7nxz3kFcIENh2MNiFjQnu5kZVV3emavf6qiUKNaVyE3t f6SGPknUP0EpsVtB3iC/XPTBWM3uAtZdefQMDXzVIerMGW1ED9h4Z4UiH/fZVJIQ k0InUjz2eQjTCEhmq37wUQIoPdihqGIYlN9r05U820/gvHGR/SdpJQN/T/k7Dy83 DNf02MTv080Kq/Rfen+eZnVLxbK1WqFSXuzXqJ7yiPmCy13oMfzrzNU05yldAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqI4wLCBVn3V2w0fFueHSAicZ8LEwHwYDVR0j BBgwFoAUL/KOwx+pWV1Mk3LgN4sSe/wH1UMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjZjMDYwZmItZTkzNi00YTIzLWJiZTItOTQ0NTdiZjcwOWJmLzAvMkZGMjhFQzMx RkE5NTk1RDRDOTM3MkUwMzc4QjEyN0JGQzA3RDU0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkYyOEVDMzFGQTk1OTVENEM5MzcyRTAzNzhCMTI3QkZDMDdE NTQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjZjMDYwZmItZTkzNi00YTIzLWJi ZTItOTQ0NTdiZjcwOWJmLzAvMkZGMjhFQzMxRkE5NTk1RDRDOTM3MkUwMzc4QjEy N0JGQzA3RDU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3uSTu9C6gPwxZ3sAkdMsL3zFS3WEV5PfBb zvh6Rzhu3C5TERzmK3+m6PJsUQZJEsrEnv0gAFwfSGe84UuvkIE9GpWR0FY15Rex jAo1jdVILrOmX6Btma+z/C07Sz7Lm4QXq3ccVHgcF3uPekRcbgdTgdO2jI7/Aros DlgnLLMDGJwtNeBj4lW8CRpkIe0KW0nvOA8hwBSEq8Ghn6oo6GRuojKHPslhckeW i0hfc+x6J1mfGUaVkZsc1BHSpGMtF7IPonGg2eicVYBkSPoYxkClZ4eRTwMIRm2E q2WQHdk2fPCKUo7dnFAz7bBhlqIYgqwoh1Pmvbfv+7USz4wZ7hE= -----END CERTIFICATE-----Generated at Thu Sep 24 06:06:23 2026 by rpki-client