$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft File: 2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft (raw, json) Hash identifier: FX64ejiABRU0QmC4IwjW49ExuVeDtJQu4lLQXUUdzd0= Subject key identifier: 56:A2:2D:72:4F:5F:A9:A1:84:40:88:65:74:84:30:DF:2B:F4:EC:FC Authority key identifier: 2D:4E:F7:6F:F5:F1:DE:08:B9:FB:7C:AE:D4:9A:F7:AD:4C:60:18:35 Certificate issuer: /CN=2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835 Certificate serial: 74D87B8C60B84713B091BB4EBD59CD8F74D41976 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 20:10:57 +0000 Manifest this update: Wed 23 Sep 2026 20:05:57 +0000 Manifest next update: Thu 24 Sep 2026 22:07:57 +0000 Files and hashes: 1: 2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl (hash: +kmuMqL3r70FPPFv2XdrS9K/ksu/IxZRmKhbLqwJgxc=) 2: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: abfZiYldhdnO1xBcxOi/v0tih5cS8BcQKFP2Z8xIlZI=) 3: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: +vElMuoXueIlORLkNX9hNN9LTELx3Cm8ZNhxGm0p8LM=) 4: 3130332e31392e35362e302f32322d3232203d3e20313332363337.roa (hash: JZgdRbJu890tbXcbh9Oxv/c/hndsIuQkwCj004yU0ZY=) 5: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (hash: gCsatGRm4KYeS4xTuGnz+oT2rG5lR5XCvd8UnIJR5JU=) 6: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: Lvw5pO2bg6firYOVJrL24L/mVS2H6b/TJe2TV+FnMQs=) 7: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: Qy2f1Th+IuSFin6EsJuwgkXChR1+TY6gnLgDe+ouGOE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d8:7b:8c:60:b8:47:13:b0:91:bb:4e:bd:59:cd:8f:74:d4:19:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835 Validity Not Before: Sep 23 20:05:57 2026 GMT Not After : Sep 24 22:07:57 2026 GMT Subject: CN=56A22D724F5FA9A184408865748430DF2BF4ECFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:b9:45:ac:bb:6c:b9:ca:aa:0f:49:9c:69: 28:3a:8f:08:32:37:b2:a9:fc:fe:f8:3d:f2:cf:18: 01:4b:30:ea:97:f3:4d:40:a9:9f:66:4c:88:2f:53: 24:9c:56:59:92:55:03:77:8a:5f:18:27:0c:ae:c5: 37:8f:90:54:13:7e:83:7f:3a:dc:ed:be:63:fb:a4: e8:90:1e:26:01:ae:fa:25:4c:d8:fe:46:ce:2f:1e: a3:40:67:7d:55:ee:17:e2:d5:0e:4f:85:8a:84:16: 6f:e5:7d:5e:ec:25:4e:5b:4f:77:c1:df:e1:0d:8b: 1e:d8:19:9c:b5:49:cc:85:2a:b1:fa:98:a3:e8:24: fd:e1:86:04:be:89:b9:a3:8d:95:02:cf:11:1c:fe: 16:05:5a:49:55:2f:8c:ae:8e:56:73:a3:57:eb:1d: d0:a8:95:ae:58:3a:35:52:92:3a:c6:8e:a6:44:d0: bb:37:8b:14:14:eb:2b:bf:36:8a:2d:b5:f6:13:f0: 6d:45:6d:61:8c:ce:44:fa:d9:af:e2:f2:ca:02:d6: 23:95:1c:41:39:f7:87:4b:4f:95:2b:0c:89:d8:5f: 37:8c:22:ee:1e:5f:39:d7:2d:53:a1:04:e1:e3:89: 89:1f:2b:03:72:93:1c:91:fa:91:2d:26:e4:08:b5: 1d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A2:2D:72:4F:5F:A9:A1:84:40:88:65:74:84:30:DF:2B:F4:EC:FC X509v3 Authority Key Identifier: keyid:2D:4E:F7:6F:F5:F1:DE:08:B9:FB:7C:AE:D4:9A:F7:AD:4C:60:18:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:94:be:0f:bc:28:30:5a:16:24:6c:70:bc:81:8d:ec:8b:85: 23:cf:c3:c5:f5:fb:59:92:c3:d4:75:f0:e7:74:2c:24:13:22: be:04:ce:b9:ee:7e:11:b8:bf:25:81:ae:94:c7:29:b6:a0:b8: 0c:0c:41:18:da:d8:72:e8:ae:96:9c:13:34:7c:38:5e:2f:87: 04:7c:32:db:85:2f:99:67:2b:c3:a3:e8:fe:fb:2b:3d:0a:a3: dd:4e:84:62:3e:0a:04:99:d2:26:8f:ba:22:52:f9:58:d5:ed: f5:e5:ba:f6:47:4f:f1:ad:68:f2:87:97:57:00:c8:ca:c6:fb: f5:f9:77:bf:9d:ca:d6:6d:6f:a7:5d:99:20:0c:49:9e:8f:34: 40:85:d3:05:1b:0a:26:fd:df:3d:02:a6:78:25:7b:41:a5:fa: f6:48:38:f3:89:3e:b2:ef:da:86:d4:b9:46:6a:79:98:88:9d: b0:af:ba:4b:d7:c1:bd:ed:0a:4a:cc:e7:3a:2f:a0:dd:01:52: 87:7b:50:6f:75:c6:92:f2:03:80:7f:32:c8:c0:35:d5:c3:60: a7:f2:20:69:04:3d:8a:bb:05:ed:c1:26:56:fb:2e:02:b7:e8: d1:cb:37:01:88:78:a4:cc:9f:f2:10:78:b8:d1:24:70:cd:b3: fa:0e:a1:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdNh7jGC4RxOwkbtOvVnNj3TUGXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ0RUY3NkZGNUYxREUwOEI5RkI3Q0FFRDQ5QUY3QUQ0 QzYwMTgzNTAeFw0yNjA5MjMyMDA1NTdaFw0yNjA5MjQyMjA3NTdaMDMxMTAvBgNV BAMTKDU2QTIyRDcyNEY1RkE5QTE4NDQwODg2NTc0ODQzMERGMkJGNEVDRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7p7lFrLtsucqqD0mcaSg6jwgy N7Kp/P74PfLPGAFLMOqX801AqZ9mTIgvUyScVlmSVQN3il8YJwyuxTePkFQTfoN/ OtztvmP7pOiQHiYBrvolTNj+Rs4vHqNAZ31V7hfi1Q5PhYqEFm/lfV7sJU5bT3fB 3+ENix7YGZy1ScyFKrH6mKPoJP3hhgS+ibmjjZUCzxEc/hYFWklVL4yujlZzo1fr HdCola5YOjVSkjrGjqZE0Ls3ixQU6yu/NoottfYT8G1FbWGMzkT62a/i8soC1iOV HEE594dLT5UrDInYXzeMIu4eXznXLVOhBOHjiYkfKwNykxyR+pEtJuQItR1LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVqItck9fqaGEQIhldIQw3yv07PwwHwYDVR0j BBgwFoAULU73b/Xx3gi5+3yu1Jr3rUxgGDUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQwOTI3ZTYtOGEwYS00ZmE3LTg5NjktOWZiOWQ2OTQzOTdjLzAvMkQ0RUY3NkZG NUYxREUwOEI5RkI3Q0FFRDQ5QUY3QUQ0QzYwMTgzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDRFRjc2RkY1RjFERTA4QjlGQjdDQUVENDlBRjdBRDRDNjAx ODM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQwOTI3ZTYtOGEwYS00ZmE3LTg5 NjktOWZiOWQ2OTQzOTdjLzAvMkQ0RUY3NkZGNUYxREUwOEI5RkI3Q0FFRDQ5QUY3 QUQ0QzYwMTgzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaUvg+8KDBaFiRscLyBjeyLhSPPw8X1+1mS w9R18Od0LCQTIr4EzrnufhG4vyWBrpTHKbaguAwMQRja2HLorpacEzR8OF4vhwR8 MtuFL5lnK8Oj6P77Kz0Ko91OhGI+CgSZ0iaPuiJS+VjV7fXluvZHT/GtaPKHl1cA yMrG+/X5d7+dytZtb6ddmSAMSZ6PNECF0wUbCib93z0Cpngle0Gl+vZIOPOJPrLv 2obUuUZqeZiInbCvukvXwb3tCkrM5zovoN0BUod7UG91xpLyA4B/MsjANdXDYKfy IGkEPYq7Be3BJlb7LgK36NHLNwGIeKTMn/IQeLjRJHDNs/oOoS8= -----END CERTIFICATE-----Generated at Thu Sep 24 12:14:45 2026 by rpki-client