$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft File: 2C1233B548C07507C6EF58E2A03DD8309F820753.mft (raw, json) Hash identifier: xEcLuiTekZ0uId2IQblgE2wXY2b8uaNZuaWVL7AbG2o= Subject key identifier: 98:37:BA:7D:B1:B1:55:4B:82:EB:47:0E:E3:BC:CF:E0:70:55:8C:9B Authority key identifier: 2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53 Certificate issuer: /CN=2C1233B548C07507C6EF58E2A03DD8309F820753 Certificate serial: 0F2BDD5D7C3DC28D0315BC8E964C8E7EAE87F9AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 04:31:09 +0000 Manifest this update: Thu 24 Sep 2026 04:26:09 +0000 Manifest next update: Fri 25 Sep 2026 05:52:09 +0000 Files and hashes: 1: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: bvFzrT6armN3+NSh25eEAeVsS6vGdsFIsCLC0MUnl3s=) 2: 2C1233B548C07507C6EF58E2A03DD8309F820753.crl (hash: M5f6SmqSO+shVnxkqcl+KYhKvPHj6Oq5vXto1FgMJ8s=) 3: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: /6iiyBTTzA+gJYo5W8sFnueJYX/K6dQcso0XDUc2u/0=) 4: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 0GUMhzS+5NIthW1wvl37lL5c5ztTRVnrHP+oCvOX4MA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2b:dd:5d:7c:3d:c2:8d:03:15:bc:8e:96:4c:8e:7e:ae:87:f9:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C1233B548C07507C6EF58E2A03DD8309F820753 Validity Not Before: Sep 24 04:26:09 2026 GMT Not After : Sep 25 05:52:09 2026 GMT Subject: CN=9837BA7DB1B1554B82EB470EE3BCCFE070558C9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f9:46:b5:8c:03:e2:35:d2:0a:ca:72:67:5e: e3:a2:a7:b7:64:67:27:5f:9d:fb:96:c6:7d:ad:a1: ac:8a:6d:43:34:f5:40:3f:c1:b1:dd:13:61:e0:7d: 0e:ea:6b:1f:5b:01:14:ec:ad:77:79:53:70:14:ab: d9:f9:ca:50:45:8c:38:78:ec:49:19:3a:92:1d:9f: 12:d0:b5:12:e8:b7:0b:13:80:87:6f:1e:d4:02:c1: 0d:ec:c3:27:15:28:8c:07:75:93:55:1a:a0:7e:1f: b8:b8:ba:8e:a2:b1:56:8f:66:30:5f:a2:41:ca:78: 04:11:c1:08:e2:d7:46:02:08:ee:0b:1e:60:78:b8: af:c5:1b:df:80:3c:86:82:9b:07:21:51:69:4e:99: 30:3e:50:47:55:0d:7e:ae:8c:5b:49:5e:01:6d:02: bd:f4:7c:15:18:50:03:6e:54:17:0a:52:16:e7:24: 98:c4:4c:04:79:d6:5a:e4:f8:b9:48:dc:18:41:d8: 6c:a3:46:7f:64:b7:f2:af:22:00:a4:46:bb:4b:07: e5:99:7a:b4:9b:4a:27:b8:3d:15:e3:ab:35:a7:78: e4:56:49:39:cc:cf:2f:94:9c:ba:fb:aa:d5:27:b1: c7:27:2d:a7:49:d5:ab:ac:d9:27:fb:08:20:3e:aa: 79:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:37:BA:7D:B1:B1:55:4B:82:EB:47:0E:E3:BC:CF:E0:70:55:8C:9B X509v3 Authority Key Identifier: keyid:2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c0:2a:bc:f9:f7:cd:77:a8:a7:2e:4a:9b:4a:bd:b1:22:59: bc:0f:d4:7c:2b:7a:5a:93:cf:64:b0:88:a4:ee:e7:0c:00:89: 53:e8:59:4e:5c:bc:5a:00:9b:98:c3:22:52:36:9d:b8:1c:55: 1e:00:1d:26:db:f6:06:0c:ca:a0:12:8d:bb:70:d4:39:4c:d9: 76:90:57:15:fd:4f:28:3d:ce:10:ba:76:1f:b2:ba:30:e6:96: 08:d5:9c:29:f0:d4:52:c1:af:7c:04:6e:b0:73:46:04:e7:bc: f2:6b:44:75:f1:29:3f:1a:cb:4f:93:33:9f:2e:ac:5d:b2:84: 3f:75:8d:94:34:52:5d:2f:fa:5f:4d:82:04:75:49:a7:fe:ef: a9:89:53:6b:20:fb:af:5c:d7:04:6b:5b:8a:3b:be:52:96:66: 2a:95:bc:35:9a:f0:07:6f:5e:28:a7:57:2f:ee:93:fb:7f:47: ac:ba:69:39:03:12:e8:02:10:fb:bf:77:d9:df:80:78:a2:5c: 48:d4:62:1a:05:d2:f4:33:57:1c:1d:e7:89:c3:bb:38:7b:37: 1f:7c:9e:ef:7c:8e:c9:72:6c:74:27:da:f7:89:bc:35:fc:de: 01:f1:07:1a:1c:e2:c7:eb:da:42:8b:64:8a:07:3f:f8:8c:48: 21:44:b7:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDyvdXXw9wo0DFbyOlkyOfq6H+aowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMxMjMzQjU0OEMwNzUwN0M2RUY1OEUyQTAzREQ4MzA5 RjgyMDc1MzAeFw0yNjA5MjQwNDI2MDlaFw0yNjA5MjUwNTUyMDlaMDMxMTAvBgNV BAMTKDk4MzdCQTdEQjFCMTU1NEI4MkVCNDcwRUUzQkNDRkUwNzA1NThDOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3+Ua1jAPiNdIKynJnXuOip7dk ZydfnfuWxn2toayKbUM09UA/wbHdE2HgfQ7qax9bARTsrXd5U3AUq9n5ylBFjDh4 7EkZOpIdnxLQtRLotwsTgIdvHtQCwQ3swycVKIwHdZNVGqB+H7i4uo6isVaPZjBf okHKeAQRwQji10YCCO4LHmB4uK/FG9+APIaCmwchUWlOmTA+UEdVDX6ujFtJXgFt Ar30fBUYUANuVBcKUhbnJJjETAR51lrk+LlI3BhB2GyjRn9kt/KvIgCkRrtLB+WZ erSbSie4PRXjqzWneORWSTnMzy+UnLr7qtUnsccnLadJ1aus2Sf7CCA+qnkdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmDe6fbGxVUuC60cO47zP4HBVjJswHwYDVR0j BBgwFoAULBIztUjAdQfG71jioD3YMJ+CB1MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTFlOTQyNDMtODdmMC00MjZmLWE5Y2EtNGMxOWVkYjA2YjQyLzAvMkMxMjMzQjU0 OEMwNzUwN0M2RUY1OEUyQTAzREQ4MzA5RjgyMDc1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQzEyMzNCNTQ4QzA3NTA3QzZFRjU4RTJBMDNERDgzMDlGODIw NzUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5 Y2EtNGMxOWVkYjA2YjQyLzAvMkMxMjMzQjU0OEMwNzUwN0M2RUY1OEUyQTAzREQ4 MzA5RjgyMDc1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3AKrz59813qKcuSptKvbEiWbwP1HwrelqT z2SwiKTu5wwAiVPoWU5cvFoAm5jDIlI2nbgcVR4AHSbb9gYMyqASjbtw1DlM2XaQ VxX9Tyg9zhC6dh+yujDmlgjVnCnw1FLBr3wEbrBzRgTnvPJrRHXxKT8ay0+TM58u rF2yhD91jZQ0Ul0v+l9NggR1Saf+76mJU2sg+69c1wRrW4o7vlKWZiqVvDWa8Adv XiinVy/uk/t/R6y6aTkDEugCEPu/d9nfgHiiXEjUYhoF0vQzVxwd54nDuzh7Nx98 nu98jslybHQn2veJvDX83gHxBxoc4sfr2kKLZIoHP/iMSCFEt2Y= -----END CERTIFICATE-----Generated at Thu Sep 24 14:11:11 2026 by rpki-client