$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft File: C2F21005CDD8F19E492720297D0BA5C66395653F.mft (raw, json) Hash identifier: hz9zfCsFoqPG5taOdVzUuBZoQh3kLXCH4lVLZ1n25YY= Subject key identifier: B4:3A:39:8B:80:A7:31:3C:2E:1E:5D:26:72:C1:0F:EF:8A:35:CE:1A Authority key identifier: C2:F2:10:05:CD:D8:F1:9E:49:27:20:29:7D:0B:A5:C6:63:95:65:3F Certificate issuer: /CN=C2F21005CDD8F19E492720297D0BA5C66395653F Certificate serial: 10478CBC1BB0CDE694201115EB0C5530AB130C25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft Manifest number: C1 Signing time: Fri 25 Sep 2026 00:15:28 +0000 Manifest this update: Fri 25 Sep 2026 00:10:28 +0000 Manifest next update: Sat 26 Sep 2026 01:41:28 +0000 Files and hashes: 1: C2F21005CDD8F19E492720297D0BA5C66395653F.crl (hash: qajxeqowqXQt25PU9QiwKf3rHO4DWhsrtwTwWsbV/Js=) 2: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: 4WF38lDugkx4g5GWHdzVk5hRBqpGlU+mntDxAYWnRfU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.crl rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 01:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:47:8c:bc:1b:b0:cd:e6:94:20:11:15:eb:0c:55:30:ab:13:0c:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2F21005CDD8F19E492720297D0BA5C66395653F Validity Not Before: Sep 25 00:10:28 2026 GMT Not After : Sep 26 01:41:28 2026 GMT Subject: CN=B43A398B80A7313C2E1E5D2672C10FEF8A35CE1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:47:f5:f2:54:85:43:5a:ae:d4:6c:6d:0c:e1: a1:6a:f5:5c:e0:26:c0:3d:52:a9:ca:a4:fe:3d:24: 8b:72:0e:a5:0a:4e:2a:9c:b9:5b:2a:c7:be:89:a8: ce:57:a7:17:5b:19:46:64:96:96:bf:d9:03:38:14: 29:7a:01:46:77:c9:e2:fa:9a:63:c2:92:5a:a2:22: a1:4a:69:e2:20:6f:c7:4e:b3:43:b2:77:a6:d8:74: 62:24:de:f6:a7:6e:c2:81:c0:12:8f:55:bd:3e:96: dd:ed:14:11:2c:15:79:6b:24:1e:ce:49:57:f9:0e: 16:fb:31:60:66:77:a4:cc:0a:f0:0a:b3:75:19:95: 62:46:2d:34:db:5e:51:4c:84:e7:04:57:df:85:70: 3a:10:84:e4:72:76:29:5a:66:94:fc:e3:67:f9:09: 2e:e5:2e:c2:0a:a7:5f:f2:38:8a:bd:91:5b:a2:b5: dc:e3:f5:2f:40:c4:73:64:ff:97:55:e3:be:e8:a8: 58:04:94:ae:43:88:f7:7a:39:a8:9e:55:d0:62:1b: d4:56:30:62:e5:14:ff:cc:3f:26:31:8e:c9:22:4c: 8d:63:90:47:93:00:e0:95:75:fb:10:42:c9:03:ed: 6c:bc:be:ba:84:31:59:68:49:ea:cb:b0:75:fe:2b: b8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3A:39:8B:80:A7:31:3C:2E:1E:5D:26:72:C1:0F:EF:8A:35:CE:1A X509v3 Authority Key Identifier: keyid:C2:F2:10:05:CD:D8:F1:9E:49:27:20:29:7D:0B:A5:C6:63:95:65:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:82:34:8c:b0:33:f7:6d:d6:94:9f:47:07:69:5e:10:b4:47: cd:22:18:08:bb:c3:c6:9b:6d:68:4c:dc:4f:5e:43:23:33:87: 92:58:72:44:1b:28:43:71:f0:62:d7:05:be:d4:13:da:86:d5: 2c:4e:cd:c8:9f:2f:40:1d:e2:f1:e8:ee:1c:35:fe:c2:a1:ea: ee:24:d9:e7:b0:d1:cd:ee:94:cb:7a:5c:78:e7:46:6c:04:57: a8:b4:09:53:54:c8:dc:5c:de:9b:52:1b:a8:09:d8:d9:a2:01: 57:f5:45:cc:41:86:51:74:a1:e8:32:d1:d0:4e:f8:21:2e:b2: c6:59:46:97:83:cb:03:03:71:21:13:53:9d:8e:23:0a:80:33: 29:27:22:44:ea:b3:0c:be:b9:b6:88:4d:1d:b0:a9:d8:a8:1c: af:ba:e3:47:b9:8c:57:96:98:4e:7e:b4:5f:6f:98:ad:23:93: 3d:0b:30:ec:f4:85:7e:70:ae:4b:1d:3a:5c:3d:41:b5:45:a2: 71:b2:bd:63:3b:40:e6:d9:16:aa:2d:3f:2e:e7:71:5a:7b:05: ef:a2:f2:4a:f7:2a:7e:b1:5a:49:9e:bf:79:fa:64:43:f2:ae: d5:2c:62:e0:4f:f6:c4:e5:ee:d7:13:05:fb:4a:6e:54:16:ad: 43:0d:ca:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEEeMvBuwzeaUIBEV6wxVMKsTDCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJGMjEwMDVDREQ4RjE5RTQ5MjcyMDI5N0QwQkE1QzY2 Mzk1NjUzRjAeFw0yNjA5MjUwMDEwMjhaFw0yNjA5MjYwMTQxMjhaMDMxMTAvBgNV BAMTKEI0M0EzOThCODBBNzMxM0MyRTFFNUQyNjcyQzEwRkVGOEEzNUNFMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXR/XyVIVDWq7UbG0M4aFq9Vzg JsA9UqnKpP49JItyDqUKTiqcuVsqx76JqM5XpxdbGUZklpa/2QM4FCl6AUZ3yeL6 mmPCklqiIqFKaeIgb8dOs0Oyd6bYdGIk3vanbsKBwBKPVb0+lt3tFBEsFXlrJB7O SVf5Dhb7MWBmd6TMCvAKs3UZlWJGLTTbXlFMhOcEV9+FcDoQhORydilaZpT842f5 CS7lLsIKp1/yOIq9kVuitdzj9S9AxHNk/5dV477oqFgElK5DiPd6OaieVdBiG9RW MGLlFP/MPyYxjskiTI1jkEeTAOCVdfsQQskD7Wy8vrqEMVloSerLsHX+K7gTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtDo5i4CnMTwuHl0mcsEP74o1zhowHwYDVR0j BBgwFoAUwvIQBc3Y8Z5JJyApfQulxmOVZT8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZmYmFmNzEtMmQ1Ny00ZTRhLTkxZDAtY2FjOGFiMGFjZWZlLzAvQzJGMjEwMDVD REQ4RjE5RTQ5MjcyMDI5N0QwQkE1QzY2Mzk1NjUzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkYyMTAwNUNERDhGMTlFNDkyNzIwMjk3RDBCQTVDNjYzOTU2 NTNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvQzJGMjEwMDVDREQ4RjE5RTQ5MjcyMDI5N0QwQkE1 QzY2Mzk1NjUzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaCNIywM/dt1pSfRwdpXhC0R80iGAi7w8ab bWhM3E9eQyMzh5JYckQbKENx8GLXBb7UE9qG1SxOzcifL0Ad4vHo7hw1/sKh6u4k 2eew0c3ulMt6XHjnRmwEV6i0CVNUyNxc3ptSG6gJ2NmiAVf1RcxBhlF0oegy0dBO +CEussZZRpeDywMDcSETU52OIwqAMyknIkTqswy+ubaITR2wqdioHK+640e5jFeW mE5+tF9vmK0jkz0LMOz0hX5wrksdOlw9QbVFonGyvWM7QObZFqotPy7ncVp7Be+i 8kr3Kn6xWkmev3n6ZEPyrtUsYuBP9sTl7tcTBftKblQWrUMNyh8= -----END CERTIFICATE-----Generated at Fri Sep 25 17:32:15 2026 by rpki-client