$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft File: 2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft (raw, json) Hash identifier: S7SqSZx4zI+2vn5rTnk2VyrTsdUFrEgKNTOQ1Q4eWYY= Subject key identifier: 72:DD:22:86:01:48:2A:FA:32:6A:44:28:C6:D5:0A:FC:6F:AA:D6:0B Authority key identifier: 2A:C4:B9:21:8D:44:A8:AF:6A:89:3D:00:D5:F2:8F:34:AD:B8:3E:ED Certificate issuer: /CN=2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED Certificate serial: 6C72887E78F70DDC49F391857B575443D23EF5BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 18:44:11 +0000 Manifest this update: Wed 23 Sep 2026 18:39:11 +0000 Manifest next update: Thu 24 Sep 2026 22:20:11 +0000 Files and hashes: 1: 2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl (hash: 0zFA5JSKznRpfStnDYSvLn3eYQ/ZMmSsdS6gDwC6Sz4=) 2: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: Yu7TLcR1tuusuhDSrYnM4of9BN5qOWkNLvH5+MvtCeE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:72:88:7e:78:f7:0d:dc:49:f3:91:85:7b:57:54:43:d2:3e:f5:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED Validity Not Before: Sep 23 18:39:11 2026 GMT Not After : Sep 24 22:20:11 2026 GMT Subject: CN=72DD228601482AFA326A4428C6D50AFC6FAAD60B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cc:bf:fe:eb:a3:1c:2d:2a:b6:f7:f8:37:e0: 18:81:92:5d:5d:a3:ac:94:d2:07:71:fd:23:c1:84: 6d:e7:25:37:cb:ba:fb:21:7f:3e:8d:0f:2c:ac:58: 24:76:97:d6:71:52:31:e2:a8:1d:ff:d3:69:33:da: 4d:61:a1:9b:5d:ce:10:b4:8c:39:b3:42:65:88:87: 30:6d:9b:4d:3d:32:99:80:78:21:a3:9f:d2:ef:16: fa:49:8a:93:47:3b:f8:ca:7d:0c:26:8e:a5:22:3e: 9c:56:ce:13:e3:e4:f6:0d:c9:25:8f:8a:aa:e9:0a: d7:b9:22:2c:52:ed:04:d0:7f:bd:fb:83:22:44:d0: 9e:dc:09:29:35:cd:ef:2c:a1:da:1a:52:6f:47:25: ca:03:86:79:59:74:90:b1:64:5e:5c:47:61:35:42: 84:ba:a0:c6:c1:1c:20:c0:b9:b5:db:4b:95:32:ef: 9a:3f:6d:96:52:b8:3f:2b:01:cc:66:b5:4f:23:71: 91:15:48:7e:a8:ab:c7:16:bd:2d:a9:0b:b9:f1:d8: 2c:d0:ca:32:d3:24:f0:f0:b1:68:ba:3d:26:bd:1a: 28:79:07:ce:31:c4:52:95:0a:41:0d:55:d3:9d:d4: 8a:14:a6:85:f9:12:57:59:0c:c5:07:87:75:ec:54: 58:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DD:22:86:01:48:2A:FA:32:6A:44:28:C6:D5:0A:FC:6F:AA:D6:0B X509v3 Authority Key Identifier: keyid:2A:C4:B9:21:8D:44:A8:AF:6A:89:3D:00:D5:F2:8F:34:AD:B8:3E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:2b:2c:36:09:a5:ec:e6:00:c5:2a:93:6b:6d:85:a9:2a:63: 26:1c:cb:eb:e1:24:2d:f5:f0:e7:f5:10:32:10:62:f2:16:5c: 21:da:ad:2e:cd:25:9f:3d:75:58:5e:8c:52:78:7b:32:a4:bb: 01:72:2a:dd:0d:44:7f:3f:1d:b0:83:46:97:60:2b:9c:f7:43: 76:ea:28:83:72:a9:cd:bf:16:cc:17:cb:59:1d:dd:97:38:16: ed:54:c1:30:b7:bb:3e:48:c3:d0:a3:46:f4:9e:1c:bc:3d:e4: d7:87:b5:4b:2d:92:e5:7b:0d:42:0a:95:7c:97:85:42:97:28: 0e:ac:e8:4b:03:57:76:ee:35:09:5d:28:81:fc:e8:0f:b8:31: 3b:eb:ed:11:34:c8:f4:d2:94:16:f4:17:4f:47:c5:38:ce:40: 3a:69:1c:78:4e:b2:a5:da:47:b8:3b:d5:3f:12:05:94:ee:91: dd:af:47:8b:bd:6b:bb:88:3e:44:b3:f7:16:af:5c:5a:5f:78: 58:6d:04:81:4a:b7:e5:7d:d8:c9:ea:af:8e:66:40:d6:c3:dd: 02:7d:4f:13:da:55:47:26:a5:3f:c0:d3:5f:66:64:be:51:d2: fa:b5:5a:0d:d3:83:07:17:6c:9c:b0:13:2b:b4:c8:23:c1:4d: c1:27:4b:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbHKIfnj3DdxJ85GFe1dUQ9I+9b0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFDNEI5MjE4RDQ0QThBRjZBODkzRDAwRDVGMjhGMzRB REI4M0VFRDAeFw0yNjA5MjMxODM5MTFaFw0yNjA5MjQyMjIwMTFaMDMxMTAvBgNV BAMTKDcyREQyMjg2MDE0ODJBRkEzMjZBNDQyOEM2RDUwQUZDNkZBQUQ2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZzL/+66McLSq29/g34BiBkl1d o6yU0gdx/SPBhG3nJTfLuvshfz6NDyysWCR2l9ZxUjHiqB3/02kz2k1hoZtdzhC0 jDmzQmWIhzBtm009MpmAeCGjn9LvFvpJipNHO/jKfQwmjqUiPpxWzhPj5PYNySWP iqrpCte5IixS7QTQf737gyJE0J7cCSk1ze8sodoaUm9HJcoDhnlZdJCxZF5cR2E1 QoS6oMbBHCDAubXbS5Uy75o/bZZSuD8rAcxmtU8jcZEVSH6oq8cWvS2pC7nx2CzQ yjLTJPDwsWi6PSa9Gih5B84xxFKVCkENVdOd1IoUpoX5EldZDMUHh3XsVFixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUct0ihgFIKvoyakQoxtUK/G+q1gswHwYDVR0j BBgwFoAUKsS5IY1EqK9qiT0A1fKPNK24Pu0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4NmNiNWQtZjA3ZC00MjZhLThlNWUtYTc3YTk3OGRkMmVlLzAvMkFDNEI5MjE4 RDQ0QThBRjZBODkzRDAwRDVGMjhGMzRBREI4M0VFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUM0QjkyMThENDRBOEFGNkE4OTNEMDBENUYyOEYzNEFEQjgz RUVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvMkFDNEI5MjE4RDQ0QThBRjZBODkzRDAwRDVGMjhG MzRBREI4M0VFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQrLDYJpezmAMUqk2tthakqYyYcy+vhJC31 8Of1EDIQYvIWXCHarS7NJZ89dVhejFJ4ezKkuwFyKt0NRH8/HbCDRpdgK5z3Q3bq KINyqc2/FswXy1kd3Zc4Fu1UwTC3uz5Iw9CjRvSeHLw95NeHtUstkuV7DUIKlXyX hUKXKA6s6EsDV3buNQldKIH86A+4MTvr7RE0yPTSlBb0F09HxTjOQDppHHhOsqXa R7g71T8SBZTukd2vR4u9a7uIPkSz9xavXFpfeFhtBIFKt+V92Mnqr45mQNbD3QJ9 TxPaVUcmpT/A019mZL5R0vq1Wg3TgwcXbJywEyu0yCPBTcEnS3E= -----END CERTIFICATE-----Generated at Thu Sep 24 01:57:41 2026 by rpki-client