$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft File: 2E714C194A9AD07684B017C191F12805054E1FC8.mft (raw, json) Hash identifier: 4hIPSKHVBKRHN6gOriAFzX4fqK2RHDfWg0ysjICm7HM= Subject key identifier: F9:B4:C2:27:61:93:E5:E9:C3:56:9B:AF:85:AE:45:67:4A:C0:E5:F8 Authority key identifier: 2E:71:4C:19:4A:9A:D0:76:84:B0:17:C1:91:F1:28:05:05:4E:1F:C8 Certificate issuer: /CN=2E714C194A9AD07684B017C191F12805054E1FC8 Certificate serial: 62192F8031CD94EB9742D48A6D5BF7BEE2D5E105 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 19:55:38 +0000 Manifest this update: Wed 23 Sep 2026 19:50:38 +0000 Manifest next update: Thu 24 Sep 2026 22:54:38 +0000 Files and hashes: 1: 3130332e3136302e3139332e302f32342d3234203d3e20313530353433.roa (hash: pi7opShYJXpPoFXhyGT9aMrMLC59BMPBUsNaZoHvFnY=) 2: 2E714C194A9AD07684B017C191F12805054E1FC8.crl (hash: WZJ+yTyAgzF+SCAy775WqQqyjdmAH3TXVJ6BRPUSLsk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.crl rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:19:2f:80:31:cd:94:eb:97:42:d4:8a:6d:5b:f7:be:e2:d5:e1:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E714C194A9AD07684B017C191F12805054E1FC8 Validity Not Before: Sep 23 19:50:38 2026 GMT Not After : Sep 24 22:54:38 2026 GMT Subject: CN=F9B4C2276193E5E9C3569BAF85AE45674AC0E5F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:10:87:59:bd:be:24:ad:85:38:ad:68:49:1b: ef:66:9e:79:c6:0a:32:25:d9:36:02:ae:c3:4d:67: 44:36:87:fc:5d:b1:32:67:02:69:dc:1f:38:f4:98: 46:e2:69:e5:45:7a:72:fb:52:c0:d3:21:97:f6:a0: 75:d8:9b:c7:f1:f4:a0:97:09:c3:97:49:c7:91:c7: cf:a0:4b:aa:e2:1f:bb:f9:58:8c:00:71:48:94:30: 1e:0e:4e:11:52:46:57:d3:5a:74:b3:92:45:48:46: 14:ec:d9:f9:ca:90:98:12:03:15:f4:a7:be:43:5b: e1:bd:79:23:e5:e6:b1:a1:6b:6b:0e:44:fe:9f:bd: 31:73:ab:f7:02:43:eb:96:e0:6f:01:25:36:df:97: 93:e1:1e:5b:fc:34:2a:e4:49:14:a3:68:2d:89:1b: 5e:87:e3:ad:b9:0d:83:31:2a:ad:a0:4a:75:58:f5: 65:cd:00:2a:5a:45:74:52:0f:30:eb:b9:03:2a:b6: d8:e7:dc:80:fd:1d:fc:af:37:ba:5c:51:45:aa:e7: 06:57:58:67:45:b3:24:f0:2c:c2:fd:eb:c7:eb:c2: 5b:6e:31:f1:c5:19:37:b1:c2:5e:16:f8:4f:91:c5: a2:e5:07:40:77:38:c2:2d:63:38:6e:cc:91:22:27: d8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B4:C2:27:61:93:E5:E9:C3:56:9B:AF:85:AE:45:67:4A:C0:E5:F8 X509v3 Authority Key Identifier: keyid:2E:71:4C:19:4A:9A:D0:76:84:B0:17:C1:91:F1:28:05:05:4E:1F:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:63:3e:b7:d7:d8:3f:3d:88:f1:1f:27:f1:b8:2c:fc:6d:eb: e4:9e:c7:1a:1a:21:16:6c:55:14:d8:9d:9f:7d:16:f4:bf:56: a8:03:bb:a3:b4:c0:9c:8f:9b:22:49:92:bb:7d:0a:f6:52:66: 60:e3:79:21:34:58:95:69:70:df:f3:c7:85:b5:15:96:92:48: bd:b3:b3:c0:50:5a:5c:4e:05:d8:b0:93:c4:42:30:52:3f:03: 25:26:18:c1:5c:6e:2e:c8:34:ed:95:6c:da:bb:b1:d4:05:4c: 42:3f:55:32:47:d8:d2:5a:1c:5f:95:57:b9:ca:4e:5d:3f:6a: 32:a9:d6:39:08:60:d7:68:96:aa:4d:70:4b:6c:6d:8b:15:9b: c3:37:1b:33:1b:06:1e:96:68:ba:8e:d7:62:7d:bc:db:32:6e: 32:a7:a5:4a:ab:53:c0:2e:c4:8e:55:88:1b:38:37:76:3d:a5: cf:7b:6c:be:0d:ea:9e:22:27:58:81:0f:05:45:15:b9:0e:6f: b1:3e:07:79:6a:16:d9:7f:a3:4d:10:e6:86:15:97:11:44:b8: 92:d3:43:14:d6:26:21:91:26:d7:8f:70:fc:48:0b:ff:06:ee: 55:31:38:bb:93:4c:ac:4d:d4:8a:74:8b:95:37:ad:c4:a7:5e: 4d:e7:cd:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYhkvgDHNlOuXQtSKbVv3vuLV4QUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU3MTRDMTk0QTlBRDA3Njg0QjAxN0MxOTFGMTI4MDUw NTRFMUZDODAeFw0yNjA5MjMxOTUwMzhaFw0yNjA5MjQyMjU0MzhaMDMxMTAvBgNV BAMTKEY5QjRDMjI3NjE5M0U1RTlDMzU2OUJBRjg1QUU0NTY3NEFDMEU1RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0EIdZvb4krYU4rWhJG+9mnnnG CjIl2TYCrsNNZ0Q2h/xdsTJnAmncHzj0mEbiaeVFenL7UsDTIZf2oHXYm8fx9KCX CcOXSceRx8+gS6riH7v5WIwAcUiUMB4OThFSRlfTWnSzkkVIRhTs2fnKkJgSAxX0 p75DW+G9eSPl5rGha2sORP6fvTFzq/cCQ+uW4G8BJTbfl5PhHlv8NCrkSRSjaC2J G16H4625DYMxKq2gSnVY9WXNACpaRXRSDzDruQMqttjn3ID9HfyvN7pcUUWq5wZX WGdFsyTwLML968frwltuMfHFGTexwl4W+E+RxaLlB0B3OMItYzhuzJEiJ9ijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+bTCJ2GT5enDVpuvha5FZ0rA5fgwHwYDVR0j BBgwFoAULnFMGUqa0HaEsBfBkfEoBQVOH8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NiM2IwMGItYWQ3Yi00ODQ5LWIwYjItZTI0OWEyZmE2MDRhLzAvMkU3MTRDMTk0 QTlBRDA3Njg0QjAxN0MxOTFGMTI4MDUwNTRFMUZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTcxNEMxOTRBOUFEMDc2ODRCMDE3QzE5MUYxMjgwNTA1NEUx RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NiM2IwMGItYWQ3Yi00ODQ5LWIw YjItZTI0OWEyZmE2MDRhLzAvMkU3MTRDMTk0QTlBRDA3Njg0QjAxN0MxOTFGMTI4 MDUwNTRFMUZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZjPrfX2D89iPEfJ/G4LPxt6+SexxoaIRZs VRTYnZ99FvS/VqgDu6O0wJyPmyJJkrt9CvZSZmDjeSE0WJVpcN/zx4W1FZaSSL2z s8BQWlxOBdiwk8RCMFI/AyUmGMFcbi7INO2VbNq7sdQFTEI/VTJH2NJaHF+VV7nK Tl0/ajKp1jkIYNdolqpNcEtsbYsVm8M3GzMbBh6WaLqO12J9vNsybjKnpUqrU8Au xI5ViBs4N3Y9pc97bL4N6p4iJ1iBDwVFFbkOb7E+B3lqFtl/o00Q5oYVlxFEuJLT QxTWJiGRJtePcPxIC/8G7lUxOLuTTKxN1Ip0i5U3rcSnXk3nzWc= -----END CERTIFICATE-----Generated at Thu Sep 24 15:55:03 2026 by rpki-client