$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft File: 2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft (raw, json) Hash identifier: Q09sA+scYu62ACK2RVP/UrzCrwOno/xWYK+2N81tZhU= Subject key identifier: B0:BD:30:E0:FA:0B:04:C6:20:DA:CC:05:E1:D6:3E:A8:BC:17:1D:F7 Authority key identifier: 27:69:DC:A3:F8:9F:0B:44:81:12:7F:F4:E7:DB:34:D7:95:7B:9B:9A Certificate issuer: /CN=2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A Certificate serial: 31E48DBE6F5B03F776CA34F22E9500FAE90B8C38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 14:43:31 +0000 Manifest this update: Fri 25 Sep 2026 14:38:31 +0000 Manifest next update: Sat 26 Sep 2026 17:26:31 +0000 Files and hashes: 1: 3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa (hash: SxuSRhZVuQ01C/J4fBuk49O3beWTR2sEuK9CbWvLAoU=) 2: 2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.crl (hash: gDVVCbtQvwsta+sPEhyggDtfyvDuk5KcQ89meTUEqBc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.crl rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e4:8d:be:6f:5b:03:f7:76:ca:34:f2:2e:95:00:fa:e9:0b:8c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A Validity Not Before: Sep 25 14:38:31 2026 GMT Not After : Sep 26 17:26:31 2026 GMT Subject: CN=B0BD30E0FA0B04C620DACC05E1D63EA8BC171DF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:6a:f6:6a:42:d6:58:d6:0b:83:28:16:df: 3f:b2:b9:6c:f6:29:15:9d:67:b1:00:72:2e:64:4a: 95:71:1e:45:27:9c:fc:f5:ba:40:91:bc:37:c6:e0: cf:b6:8a:5b:63:30:d9:32:76:94:e2:6e:1b:0f:f0: 22:9b:c4:66:5b:b0:48:98:56:ce:ad:37:11:e7:80: d4:db:d8:20:bf:5b:7c:2a:a5:fa:de:e4:21:b9:7f: 9e:f1:5b:ac:2d:3e:fc:65:0b:ed:b4:87:4c:44:ad: 3f:9a:0c:1d:50:25:7c:7b:db:f5:87:1b:4f:54:b7: cf:9e:4a:7f:a6:fe:3b:df:56:93:5f:ad:3a:7c:a6: 3b:52:8a:82:10:8a:c8:e4:e0:b3:58:ae:09:0f:d6: 3d:d5:01:45:75:68:ed:5e:6c:44:ab:27:c9:93:7d: dd:d4:52:e7:20:70:b0:b0:29:b0:2e:85:73:ea:f3: c4:76:23:ef:8d:b0:ce:ce:e3:09:da:70:0b:ef:74: 31:ba:bd:bd:ab:b6:25:e0:37:69:21:bc:aa:1d:59: 13:0f:1f:98:65:b3:7b:cb:54:5b:a1:a1:03:ca:7f: e7:b2:51:c9:68:37:db:e6:40:25:e4:34:cb:b9:e7: 08:03:a2:07:b5:7c:ce:1a:8b:68:55:16:27:28:07: c7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BD:30:E0:FA:0B:04:C6:20:DA:CC:05:E1:D6:3E:A8:BC:17:1D:F7 X509v3 Authority Key Identifier: keyid:27:69:DC:A3:F8:9F:0B:44:81:12:7F:F4:E7:DB:34:D7:95:7B:9B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:2c:6a:be:7a:ae:d6:1d:a6:9e:60:87:f7:44:3d:b1:75:01: 0d:e8:b5:9a:02:a2:34:59:2c:37:e9:03:00:c2:ee:6e:69:41: ce:8d:aa:3b:a5:81:4f:18:7c:0e:ca:76:42:7e:a4:fa:f6:75: b1:5a:ba:07:71:31:83:a9:b5:b5:3b:81:d2:4b:96:15:76:9f: ff:3b:be:dc:c0:64:21:9b:1b:cd:23:6f:22:39:f8:29:2c:98: 33:21:16:fd:de:ee:c3:76:a4:be:a5:41:3d:83:77:51:f5:76: 51:5a:97:d5:ed:87:7c:2b:0c:cf:b6:48:cd:32:e1:72:b9:b9: d0:dc:0d:31:74:62:c6:64:17:22:c4:ec:f1:41:b0:36:29:48: 25:ad:47:71:9d:5b:d4:1b:98:e2:09:08:25:a1:33:72:a4:9d: df:ca:9d:29:c8:80:f8:b3:53:25:70:4b:ba:23:ea:13:0b:ae: 04:77:2c:e8:e8:e2:0a:26:6f:34:15:02:86:f5:59:5c:92:31: fa:67:c4:78:a5:5e:4a:a1:ea:48:9f:fd:ad:a3:30:5a:c9:d3: a5:25:92:e7:1b:64:89:04:62:ef:13:1b:61:60:f4:40:8a:a6: d4:c6:0c:7c:08:d9:6e:5b:b9:12:8b:48:39:47:ea:67:8c:51: f6:42:4f:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMeSNvm9bA/d2yjTyLpUA+ukLjDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc2OURDQTNGODlGMEI0NDgxMTI3RkY0RTdEQjM0RDc5 NTdCOUI5QTAeFw0yNjA5MjUxNDM4MzFaFw0yNjA5MjYxNzI2MzFaMDMxMTAvBgNV BAMTKEIwQkQzMEUwRkEwQjA0QzYyMERBQ0MwNUUxRDYzRUE4QkMxNzFERjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr4mr2akLWWNYLgygW3z+yuWz2 KRWdZ7EAci5kSpVxHkUnnPz1ukCRvDfG4M+2iltjMNkydpTibhsP8CKbxGZbsEiY Vs6tNxHngNTb2CC/W3wqpfre5CG5f57xW6wtPvxlC+20h0xErT+aDB1QJXx72/WH G09Ut8+eSn+m/jvfVpNfrTp8pjtSioIQisjk4LNYrgkP1j3VAUV1aO1ebESrJ8mT fd3UUucgcLCwKbAuhXPq88R2I++NsM7O4wnacAvvdDG6vb2rtiXgN2khvKodWRMP H5hls3vLVFuhoQPKf+eyUcloN9vmQCXkNMu55wgDoge1fM4ai2hVFicoB8fjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsL0w4PoLBMYg2swF4dY+qLwXHfcwHwYDVR0j BBgwFoAUJ2nco/ifC0SBEn/059s015V7m5owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmUzYTEzOGUtYTJiMi00NjA0LWFkNTAtM2NhYjc1MGE3NWU3LzAvMjc2OURDQTNG ODlGMEI0NDgxMTI3RkY0RTdEQjM0RDc5NTdCOUI5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNzY5RENBM0Y4OUYwQjQ0ODExMjdGRjRFN0RCMzRENzk1N0I5 QjlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmUzYTEzOGUtYTJiMi00NjA0LWFk NTAtM2NhYjc1MGE3NWU3LzAvMjc2OURDQTNGODlGMEI0NDgxMTI3RkY0RTdEQjM0 RDc5NTdCOUI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL4sar56rtYdpp5gh/dEPbF1AQ3otZoCojRZ LDfpAwDC7m5pQc6NqjulgU8YfA7KdkJ+pPr2dbFaugdxMYOptbU7gdJLlhV2n/87 vtzAZCGbG80jbyI5+CksmDMhFv3e7sN2pL6lQT2Dd1H1dlFal9Xth3wrDM+2SM0y 4XK5udDcDTF0YsZkFyLE7PFBsDYpSCWtR3GdW9QbmOIJCCWhM3Kknd/KnSnIgPiz UyVwS7oj6hMLrgR3LOjo4gombzQVAob1WVySMfpnxHilXkqh6kif/a2jMFrJ06Ul kucbZIkEYu8TG2Fg9ECKptTGDHwI2W5buRKLSDlH6meMUfZCTxc= -----END CERTIFICATE-----Generated at Sat Sep 26 08:15:52 2026 by rpki-client