$ rpki-client -vvvf rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft File: 2C54A4433C48711637614DBB101ACAC627FB4444.mft (raw, json) Hash identifier: Uy92p005n7vl1rNKhaQOivuzcYB9k1n60DZAD/ddf18= Subject key identifier: E5:FA:98:C4:24:71:04:2B:59:C4:23:C5:5B:73:E1:6A:05:6B:8F:EE Authority key identifier: 2C:54:A4:43:3C:48:71:16:37:61:4D:BB:10:1A:CA:C6:27:FB:44:44 Certificate issuer: /CN=2C54A4433C48711637614DBB101ACAC627FB4444 Certificate serial: 16B49C8762B8B204D6C57CA03AE817D311F58F7B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 13:07:20 +0000 Manifest this update: Wed 23 Sep 2026 13:02:20 +0000 Manifest next update: Thu 24 Sep 2026 17:03:20 +0000 Files and hashes: 1: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: Z5Se0ZyJ7MpGnb/9is2oDoz8gpk4WBt/gi9IC5o2uZ8=) 2: 2C54A4433C48711637614DBB101ACAC627FB4444.crl (hash: 6VHHlK8/nZYXeXN3NuigVNxAzMcxZLBukRZxvsG5yG0=) 3: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: tiLkhdsZaOrcZG1DisK5BBKtAsDDLSd1a7ljRi2LuI0=) 4: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: WB2X6Qgdpit+yQSWxUcjxbLeviD7P5xB5Bfdmss/apw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.crl rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b4:9c:87:62:b8:b2:04:d6:c5:7c:a0:3a:e8:17:d3:11:f5:8f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C54A4433C48711637614DBB101ACAC627FB4444 Validity Not Before: Sep 23 13:02:20 2026 GMT Not After : Sep 24 17:03:20 2026 GMT Subject: CN=E5FA98C42471042B59C423C55B73E16A056B8FEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0f:ab:55:0a:f9:0d:23:0a:30:1c:56:55:84: 5c:55:d7:1a:9b:f3:6c:d5:83:d1:a1:e0:71:10:49: 0b:1e:4c:70:82:5a:b6:c4:c8:9e:c9:32:b5:7d:e1: 26:94:a2:75:44:5e:79:a2:56:21:bb:bf:aa:62:a3: 93:8c:10:aa:56:9a:10:25:c5:38:e8:29:26:aa:99: 76:0f:9b:3e:1b:21:97:79:82:d0:a9:46:60:e2:c6: f8:18:47:ce:74:ca:d8:3d:60:1a:08:8f:34:12:28: 4c:c3:49:ad:21:d5:3b:f7:a0:cd:f9:af:6c:e0:fe: c0:3a:32:98:c8:02:13:55:70:6c:61:78:34:ae:71: c6:69:1f:3c:40:1b:a9:db:e6:49:bf:7a:98:d3:6a: 86:fd:8b:18:ec:5e:4f:69:f5:e8:f1:c3:85:cb:14: 31:75:22:c3:17:2c:8d:f2:58:e3:41:55:e2:a8:bb: 52:b9:12:d8:dd:12:69:d1:76:fb:ab:90:23:38:d3: 3f:1a:1b:97:fd:48:c0:40:4e:ed:bb:8e:51:5e:7a: 9d:31:25:01:73:a7:22:5a:80:da:55:66:72:05:a9: 66:8a:8f:39:30:c6:c2:f7:e7:fc:96:01:c2:59:e1: 42:75:78:fa:29:d5:21:11:ff:af:52:6f:9b:e4:7c: a2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FA:98:C4:24:71:04:2B:59:C4:23:C5:5B:73:E1:6A:05:6B:8F:EE X509v3 Authority Key Identifier: keyid:2C:54:A4:43:3C:48:71:16:37:61:4D:BB:10:1A:CA:C6:27:FB:44:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:be:f1:ef:6f:d8:52:95:96:eb:08:53:3b:81:d4:8e:07:72: 68:e5:49:3c:a2:18:5e:9e:9f:d1:0e:18:4e:b7:9d:bb:31:0e: 13:04:79:dc:d1:82:ea:3f:62:c5:e1:8a:03:0a:a8:9f:dc:96: 7d:66:5a:dc:3d:f6:71:9b:5c:e7:14:24:c1:d1:a2:e2:32:ad: be:bc:0a:20:74:56:06:48:b3:2f:c9:69:28:8b:09:70:52:5b: 1b:5a:82:b5:6f:f9:2a:be:4d:13:98:3b:8b:66:e0:6a:db:6a: 1b:6a:53:35:d6:f7:1f:c8:30:d9:15:58:43:9a:d3:2d:c0:e3: f4:71:62:ad:e4:55:ed:8c:f9:6e:13:fb:2d:04:26:58:b0:ff: 00:00:67:57:81:c0:c2:7c:14:d1:3b:cf:e5:eb:fb:64:b2:94: c2:74:30:89:31:bf:84:ad:60:71:52:dd:75:e8:0b:bc:1d:17: 7a:ac:a7:92:ae:81:fa:82:e4:6e:f8:52:16:4a:21:12:1b:28: bf:3e:78:04:04:84:83:c9:85:08:32:cd:de:ac:76:2e:bc:16: 21:c4:38:60:6c:74:1e:ac:33:04:eb:4f:ed:8c:e6:8c:03:67: 5b:fe:79:97:a0:2a:cd:66:b5:5f:51:31:38:3e:9c:97:5a:83: db:b5:a9:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFrSch2K4sgTWxXygOugX0xH1j3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM1NEE0NDMzQzQ4NzExNjM3NjE0REJCMTAxQUNBQzYy N0ZCNDQ0NDAeFw0yNjA5MjMxMzAyMjBaFw0yNjA5MjQxNzAzMjBaMDMxMTAvBgNV BAMTKEU1RkE5OEM0MjQ3MTA0MkI1OUM0MjNDNTVCNzNFMTZBMDU2QjhGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFD6tVCvkNIwowHFZVhFxV1xqb 82zVg9Gh4HEQSQseTHCCWrbEyJ7JMrV94SaUonVEXnmiViG7v6pio5OMEKpWmhAl xTjoKSaqmXYPmz4bIZd5gtCpRmDixvgYR850ytg9YBoIjzQSKEzDSa0h1Tv3oM35 r2zg/sA6MpjIAhNVcGxheDSuccZpHzxAG6nb5km/epjTaob9ixjsXk9p9ejxw4XL FDF1IsMXLI3yWONBVeKou1K5EtjdEmnRdvurkCM40z8aG5f9SMBATu27jlFeep0x JQFzpyJagNpVZnIFqWaKjzkwxsL35/yWAcJZ4UJ1ePop1SER/69Sb5vkfKIzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5fqYxCRxBCtZxCPFW3PhagVrj+4wHwYDVR0j BBgwFoAULFSkQzxIcRY3YU27EBrKxif7REQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjhjNzdlZWUtOWJjYy00MDFlLThmNGQtNWYyMzY3NTYyNzU3LzAvMkM1NEE0NDMz QzQ4NzExNjM3NjE0REJCMTAxQUNBQzYyN0ZCNDQ0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQzU0QTQ0MzNDNDg3MTE2Mzc2MTREQkIxMDFBQ0FDNjI3RkI0 NDQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjhjNzdlZWUtOWJjYy00MDFlLThm NGQtNWYyMzY3NTYyNzU3LzAvMkM1NEE0NDMzQzQ4NzExNjM3NjE0REJCMTAxQUNB QzYyN0ZCNDQ0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIy+8e9v2FKVlusIUzuB1I4HcmjlSTyiGF6e n9EOGE63nbsxDhMEedzRguo/YsXhigMKqJ/cln1mWtw99nGbXOcUJMHRouIyrb68 CiB0VgZIsy/JaSiLCXBSWxtagrVv+Sq+TROYO4tm4GrbahtqUzXW9x/IMNkVWEOa 0y3A4/RxYq3kVe2M+W4T+y0EJliw/wAAZ1eBwMJ8FNE7z+Xr+2SylMJ0MIkxv4St YHFS3XXoC7wdF3qsp5KugfqC5G74UhZKIRIbKL8+eAQEhIPJhQgyzd6sdi68FiHE OGBsdB6sMwTrT+2M5owDZ1v+eZegKs1mtV9RMTg+nJdag9u1qR0= -----END CERTIFICATE-----Generated at Wed Sep 23 23:42:25 2026 by rpki-client