$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft File: C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft (raw, json) Hash identifier: ew5rpddSW/BBkTKWTpmyWS9zl5UGEuqovtuHI203wdk= Subject key identifier: 53:5D:10:C6:10:26:8D:DF:16:31:77:4E:76:03:A8:1D:73:B0:28:AC Authority key identifier: C2:D3:13:86:7B:0B:49:66:C3:72:AB:0F:92:BE:8E:E8:78:20:EF:88 Certificate issuer: /CN=C2D313867B0B4966C372AB0F92BE8EE87820EF88 Certificate serial: 7315D38A1F7353461C753A623ECEF9FDACE1D537 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft Manifest number: D2 Signing time: Tue 06 Oct 2026 06:52:13 +0000 Manifest this update: Tue 06 Oct 2026 06:47:13 +0000 Manifest next update: Wed 07 Oct 2026 09:33:13 +0000 Files and hashes: 1: C2D313867B0B4966C372AB0F92BE8EE87820EF88.crl (hash: oIEf8ZgdPXHAqf3nubUQ0bvZ0T0KsH4NhdT2uNAzCac=) 2: 3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa (hash: Y+vREFE/EG16t2/cwbDbHoF+QrWyIBN3buYGvhuls/U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.crl rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 08:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:15:d3:8a:1f:73:53:46:1c:75:3a:62:3e:ce:f9:fd:ac:e1:d5:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D313867B0B4966C372AB0F92BE8EE87820EF88 Validity Not Before: Oct 6 06:47:13 2026 GMT Not After : Oct 7 09:33:13 2026 GMT Subject: CN=535D10C610268DDF1631774E7603A81D73B028AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7a:56:87:86:62:60:ee:80:0f:1a:c5:8b:37: 17:d1:ed:36:64:7f:e1:1a:91:75:a1:9c:54:fb:0b: 47:2d:16:3f:98:ac:3e:fc:96:d0:92:84:38:13:80: 90:78:91:98:95:a2:b3:e7:5c:29:b4:15:79:73:83: 72:1f:00:4c:d9:4e:25:28:db:ce:bf:df:e2:e7:67: db:78:09:50:cd:6e:04:e5:7c:b5:4a:de:2d:cb:20: ef:2e:ae:b0:22:be:d5:71:9c:33:aa:ec:dd:19:17: 1e:0a:c5:c2:d5:48:2c:96:e0:53:57:a4:56:20:b0: 50:30:d3:f4:b3:6e:37:64:d8:e3:46:03:56:e3:e4: ec:d6:b5:eb:b6:b2:01:78:bd:a6:72:9f:a0:19:06: 41:12:1e:12:41:90:43:90:c2:52:8a:28:a5:2a:f2: 6c:4e:00:40:ce:54:d2:18:0f:d9:9f:4d:36:fd:66: 7f:aa:cd:5b:63:9d:5a:58:34:4c:9d:d4:95:aa:b9: 62:15:29:f2:63:c2:f9:17:ea:34:ea:26:32:a1:f3: ba:67:c8:a0:ce:ec:f1:89:35:72:5b:b5:5e:ab:20: 07:54:8f:38:50:80:e4:b8:ff:ed:01:44:31:be:71: bf:9a:1e:16:82:45:63:af:7a:5b:f8:52:5d:64:06: 29:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5D:10:C6:10:26:8D:DF:16:31:77:4E:76:03:A8:1D:73:B0:28:AC X509v3 Authority Key Identifier: keyid:C2:D3:13:86:7B:0B:49:66:C3:72:AB:0F:92:BE:8E:E8:78:20:EF:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c4:88:7c:70:55:ad:5f:ae:bd:13:32:bb:b0:12:b7:0e:bb: 92:8e:25:f3:d1:69:f1:93:81:75:a1:0e:44:9b:ad:01:56:a7: bd:84:57:e4:d4:a5:a1:44:5b:0a:62:7e:ac:5e:5f:1b:53:27: 75:8e:8c:9c:66:c4:4e:c5:ab:78:0f:ca:2e:22:30:53:ca:ab: d2:a2:1b:b9:b6:ff:93:66:f8:6c:89:91:66:c7:9e:27:38:64: 40:28:19:70:86:a2:89:86:3a:67:66:e1:ed:41:c9:8c:55:38: bd:e5:b3:3d:b7:83:c7:93:1a:94:a9:d4:c1:ab:61:d2:b7:cb: d6:ee:03:89:d9:f0:f6:60:d7:38:cc:36:6e:f4:19:35:fd:23: 7a:09:f5:18:4b:30:a4:04:a6:08:43:a4:57:f9:73:2c:c5:01: e0:ea:f0:31:87:33:14:cf:b8:6f:9f:a7:9e:4d:af:6d:c5:67: 07:f1:26:3d:37:c0:59:ae:9c:75:d0:6e:94:fe:aa:99:b6:a7: 57:eb:62:71:92:f9:31:9c:d5:0c:c4:2e:c3:b4:c7:7f:2b:5d: dd:02:d5:42:a8:e5:4e:5f:b6:af:60:99:0b:84:77:cd:00:c0: a1:8c:83:a8:e4:4c:6d:0f:ae:0e:c5:55:c7:85:02:66:a1:7e: f7:df:22:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcxXTih9zU0YcdTpiPs75/azh1TcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJEMzEzODY3QjBCNDk2NkMzNzJBQjBGOTJCRThFRTg3 ODIwRUY4ODAeFw0yNjEwMDYwNjQ3MTNaFw0yNjEwMDcwOTMzMTNaMDMxMTAvBgNV BAMTKDUzNUQxMEM2MTAyNjhEREYxNjMxNzc0RTc2MDNBODFENzNCMDI4QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZelaHhmJg7oAPGsWLNxfR7TZk f+EakXWhnFT7C0ctFj+YrD78ltCShDgTgJB4kZiVorPnXCm0FXlzg3IfAEzZTiUo 286/3+LnZ9t4CVDNbgTlfLVK3i3LIO8urrAivtVxnDOq7N0ZFx4KxcLVSCyW4FNX pFYgsFAw0/Szbjdk2ONGA1bj5OzWteu2sgF4vaZyn6AZBkESHhJBkEOQwlKKKKUq 8mxOAEDOVNIYD9mfTTb9Zn+qzVtjnVpYNEyd1JWquWIVKfJjwvkX6jTqJjKh87pn yKDO7PGJNXJbtV6rIAdUjzhQgOS4/+0BRDG+cb+aHhaCRWOvelv4Ul1kBil/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU10QxhAmjd8WMXdOdgOoHXOwKKwwHwYDVR0j BBgwFoAUwtMThnsLSWbDcqsPkr6O6Hgg74gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMxNzM2OWEtYmNjMS00MmJjLWI4YjItZjk2ZDUwZDM3NDlkLzAvQzJEMzEzODY3 QjBCNDk2NkMzNzJBQjBGOTJCRThFRTg3ODIwRUY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkQzMTM4NjdCMEI0OTY2QzM3MkFCMEY5MkJFOEVFODc4MjBF Rjg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMxNzM2OWEtYmNjMS00MmJjLWI4 YjItZjk2ZDUwZDM3NDlkLzAvQzJEMzEzODY3QjBCNDk2NkMzNzJBQjBGOTJCRThF RTg3ODIwRUY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvEiHxwVa1frr0TMruwErcOu5KOJfPRafGT gXWhDkSbrQFWp72EV+TUpaFEWwpifqxeXxtTJ3WOjJxmxE7Fq3gPyi4iMFPKq9Ki G7m2/5Nm+GyJkWbHnic4ZEAoGXCGoomGOmdm4e1ByYxVOL3lsz23g8eTGpSp1MGr YdK3y9buA4nZ8PZg1zjMNm70GTX9I3oJ9RhLMKQEpghDpFf5cyzFAeDq8DGHMxTP uG+fp55Nr23FZwfxJj03wFmunHXQbpT+qpm2p1frYnGS+TGc1QzELsO0x38rXd0C 1UKo5U5ftq9gmQuEd80AwKGMg6jkTG0Prg7FVceFAmahfvffIo8= -----END CERTIFICATE-----Generated at Tue Oct 6 21:33:58 2026 by rpki-client