$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft File: 2DFA9ABE82F079690092186CFE591462760D0F8A.mft (raw, json) Hash identifier: pHEp5A8JvAaOW/qFOKuqvZ+cHpfoQvuw2vu4FDzhHu4= Subject key identifier: 1B:36:A6:13:80:FF:4C:91:5F:EC:EA:16:66:A3:4D:B5:EC:93:93:59 Authority key identifier: 2D:FA:9A:BE:82:F0:79:69:00:92:18:6C:FE:59:14:62:76:0D:0F:8A Certificate issuer: /CN=2DFA9ABE82F079690092186CFE591462760D0F8A Certificate serial: 0EA426C278FA09FD125B363319CEF564A6B731FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft Manifest number: C8 Signing time: Tue 29 Sep 2026 02:02:09 +0000 Manifest this update: Tue 29 Sep 2026 01:57:09 +0000 Manifest next update: Wed 30 Sep 2026 02:12:09 +0000 Files and hashes: 1: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: W/hw+IjAyZrPFulBFkYLnFPX3SzGksOOsryB2xI+HDo=) 2: 2DFA9ABE82F079690092186CFE591462760D0F8A.crl (hash: whIf9/axaQfm2E/cDHWhbDMAC9BJRYmtUEiZ7as+fK8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.crl rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a4:26:c2:78:fa:09:fd:12:5b:36:33:19:ce:f5:64:a6:b7:31:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFA9ABE82F079690092186CFE591462760D0F8A Validity Not Before: Sep 29 01:57:09 2026 GMT Not After : Sep 30 02:12:09 2026 GMT Subject: CN=1B36A61380FF4C915FECEA1666A34DB5EC939359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b8:ed:0a:e5:1d:b8:ee:fb:06:49:46:79:72: 83:89:4e:51:9b:ff:b3:1b:aa:e9:8b:fb:f0:80:88: 6d:b1:37:30:0e:67:cc:02:db:20:8c:0e:5d:d7:50: 61:91:47:96:bd:c4:85:11:3f:d1:ee:2e:7b:c8:ce: 3f:e5:6f:fe:e4:ee:1f:58:f8:10:8c:d1:dd:bf:82: 7d:d6:4f:ee:2f:d4:3a:45:39:14:45:a1:a9:8a:9b: 1e:2b:1c:b5:85:72:2d:a5:d8:59:ad:dd:69:ca:26: a3:30:64:93:0a:77:f3:9a:0c:d4:d8:06:50:77:14: 08:3f:87:00:28:41:ed:bf:c1:9e:ae:39:b6:1d:bb: 45:70:7d:81:b1:a5:33:e3:eb:fd:20:b0:20:a0:0f: d2:ff:1d:77:28:04:02:58:3f:40:09:04:5d:f6:dd: 6e:44:43:8d:42:2b:2f:f2:33:57:ef:31:59:60:5f: 5d:84:2e:99:9f:67:96:55:84:95:3f:d4:57:6d:0d: 0a:0c:40:64:a3:e1:c3:bb:f2:b1:f0:34:a4:88:e4: 8e:12:6f:d3:eb:94:8a:28:b8:7d:e0:82:7f:a3:c2: c3:68:bd:f1:b9:e7:86:b4:59:38:ea:97:ef:b8:ea: c4:b2:86:38:87:d2:43:74:68:96:42:8f:69:7a:aa: 81:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:36:A6:13:80:FF:4C:91:5F:EC:EA:16:66:A3:4D:B5:EC:93:93:59 X509v3 Authority Key Identifier: keyid:2D:FA:9A:BE:82:F0:79:69:00:92:18:6C:FE:59:14:62:76:0D:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:0d:3a:4a:88:13:56:37:8f:97:ac:88:ac:d3:f9:b8:0a:20: 07:dc:a5:b2:41:ac:a7:1e:ae:14:a7:2d:80:f4:e1:a1:f5:80: 11:59:45:9b:96:fa:bb:ce:e4:ec:aa:1e:34:9f:3a:37:f8:69: 02:a1:c2:89:4e:2e:45:e7:98:c2:48:f1:f0:5c:7d:89:e1:b9: 67:64:59:9a:da:a1:47:5a:fb:f7:31:4f:ef:db:48:01:76:0b: c7:5a:46:6d:18:44:dd:14:4b:97:4f:52:6c:81:68:d5:1a:fd: 3a:94:80:a0:c0:de:7e:29:58:95:5c:52:10:c6:ef:ad:40:53: b1:4f:91:40:17:8c:ef:a1:66:8e:7a:0a:b3:3c:93:05:93:d0: 5c:60:a5:1b:5d:6c:f1:cc:be:24:c8:56:84:1f:d4:29:bd:22: ec:d7:57:1a:65:e0:de:8c:bf:e4:f4:60:a8:37:f7:87:55:e7: 90:1f:28:0d:03:9e:e1:99:44:19:4d:b8:af:16:f6:eb:1a:e3: b9:31:74:c6:5f:e9:d1:bc:85:ce:c8:3c:60:b2:e4:72:3c:4c: 20:91:1a:0e:42:73:b6:97:3f:37:6a:5b:5f:6d:aa:46:6f:20: de:f4:ef:44:30:77:79:25:38:8c:5b:db:fe:c1:b3:51:91:86: 99:b4:27:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDqQmwnj6Cf0SWzYzGc71ZKa3MfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQTlBQkU4MkYwNzk2OTAwOTIxODZDRkU1OTE0NjI3 NjBEMEY4QTAeFw0yNjA5MjkwMTU3MDlaFw0yNjA5MzAwMjEyMDlaMDMxMTAvBgNV BAMTKDFCMzZBNjEzODBGRjRDOTE1RkVDRUExNjY2QTM0REI1RUM5MzkzNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXuO0K5R247vsGSUZ5coOJTlGb /7MbqumL+/CAiG2xNzAOZ8wC2yCMDl3XUGGRR5a9xIURP9HuLnvIzj/lb/7k7h9Y +BCM0d2/gn3WT+4v1DpFORRFoamKmx4rHLWFci2l2Fmt3WnKJqMwZJMKd/OaDNTY BlB3FAg/hwAoQe2/wZ6uObYdu0VwfYGxpTPj6/0gsCCgD9L/HXcoBAJYP0AJBF32 3W5EQ41CKy/yM1fvMVlgX12ELpmfZ5ZVhJU/1FdtDQoMQGSj4cO78rHwNKSI5I4S b9PrlIoouH3ggn+jwsNovfG554a0WTjql++46sSyhjiH0kN0aJZCj2l6qoFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGzamE4D/TJFf7OoWZqNNteyTk1kwHwYDVR0j BBgwFoAULfqavoLweWkAkhhs/lkUYnYND4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGNjYzJhZjQtYTYyZC00NzA4LWI2ODgtMTg5MjU5NGJhOTg5LzAvMkRGQTlBQkU4 MkYwNzk2OTAwOTIxODZDRkU1OTE0NjI3NjBEMEY4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREZBOUFCRTgyRjA3OTY5MDA5MjE4NkNGRTU5MTQ2Mjc2MEQw RjhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvMkRGQTlBQkU4MkYwNzk2OTAwOTIxODZDRkU1OTE0 NjI3NjBEMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4NOkqIE1Y3j5esiKzT+bgKIAfcpbJBrKce rhSnLYD04aH1gBFZRZuW+rvO5OyqHjSfOjf4aQKhwolOLkXnmMJI8fBcfYnhuWdk WZraoUda+/cxT+/bSAF2C8daRm0YRN0US5dPUmyBaNUa/TqUgKDA3n4pWJVcUhDG 761AU7FPkUAXjO+hZo56CrM8kwWT0FxgpRtdbPHMviTIVoQf1Cm9IuzXVxpl4N6M v+T0YKg394dV55AfKA0DnuGZRBlNuK8W9usa47kxdMZf6dG8hc7IPGCy5HI8TCCR Gg5Cc7aXPzdqW19tqkZvIN7070Qwd3klOIxb2/7Bs1GRhpm0J80= -----END CERTIFICATE-----Generated at Tue Sep 29 13:29:54 2026 by rpki-client