$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft File: 2DFC13D85715AA04782C2A3D86F83844385F896D.mft (raw, json) Hash identifier: fUWlehjx9NXcCtGH/+DzfQMZBrJ9p1Mcp1JX3kjlmRQ= Subject key identifier: 56:E3:5D:22:04:DF:D8:2F:07:1C:FB:38:E2:14:F3:86:01:74:0E:0D Authority key identifier: 2D:FC:13:D8:57:15:AA:04:78:2C:2A:3D:86:F8:38:44:38:5F:89:6D Certificate issuer: /CN=2DFC13D85715AA04782C2A3D86F83844385F896D Certificate serial: 7B57699761773ADA27F43EC294B44B370987A10A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 01:33:08 +0000 Manifest this update: Wed 23 Sep 2026 01:28:08 +0000 Manifest next update: Thu 24 Sep 2026 05:04:08 +0000 Files and hashes: 1: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: 2yToa31P3viNdlJSz6LX8aSdNJBJoeEJaRZoiY3wK8c=) 2: 2DFC13D85715AA04782C2A3D86F83844385F896D.crl (hash: uvHnWlJvMeTf2M5Ju6UwQdcRLrKyx+ki4OkbN0c9uy0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.crl rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 05:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:57:69:97:61:77:3a:da:27:f4:3e:c2:94:b4:4b:37:09:87:a1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFC13D85715AA04782C2A3D86F83844385F896D Validity Not Before: Sep 23 01:28:08 2026 GMT Not After : Sep 24 05:04:08 2026 GMT Subject: CN=56E35D2204DFD82F071CFB38E214F38601740E0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b1:01:b2:a4:d6:11:f6:e7:28:53:26:2b:98: 1f:01:65:5d:16:1d:1a:5d:d2:96:38:3d:b0:66:78: d9:75:8c:39:fb:02:0d:63:01:05:bf:44:c4:aa:de: b1:05:9f:0f:a1:64:45:e3:71:f0:78:ec:ae:82:0e: b8:e1:60:ad:6d:9c:fc:a2:6f:2d:81:d8:37:27:5a: 6c:aa:be:15:30:65:42:3c:ae:d9:01:b2:e3:29:b4: 2f:00:45:03:fc:6c:ed:5e:04:5b:05:30:c4:8b:5c: 48:98:cd:4b:61:2d:d5:9b:ba:0a:d5:38:f1:85:9b: c5:36:a2:f1:19:08:f6:b6:be:e1:13:47:1e:cf:75: af:4d:50:75:f9:65:51:37:c7:87:7f:dd:c5:3c:c7: 03:b1:79:f6:25:65:a0:1e:f7:ac:49:69:a3:38:47: 6f:f7:3b:29:c4:c3:7d:69:2b:dd:ac:de:1e:15:1f: 07:81:b6:63:7a:1d:96:ff:fe:cd:55:db:07:c0:85: 4d:21:7b:ae:a8:14:1d:4a:eb:61:85:d9:ef:2c:ce: 19:3d:84:fd:9d:41:15:bc:d1:ae:a3:cb:ec:d1:68: 0c:d1:22:bf:4c:5b:e0:0b:cf:1f:8a:94:e1:33:25: d2:02:a8:d3:30:1a:90:27:6e:4a:30:3c:52:a2:b5: 3b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E3:5D:22:04:DF:D8:2F:07:1C:FB:38:E2:14:F3:86:01:74:0E:0D X509v3 Authority Key Identifier: keyid:2D:FC:13:D8:57:15:AA:04:78:2C:2A:3D:86:F8:38:44:38:5F:89:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:a7:42:0a:73:9a:c3:04:d8:3a:05:9c:0d:bd:ea:f2:ef:6e: c4:79:1f:b6:d3:bd:75:25:98:4b:3a:1c:87:ca:8e:cf:29:c9: f3:f8:8f:d3:8f:49:40:82:a9:ab:d6:2f:fc:16:86:4e:b1:8d: a1:63:b4:38:82:23:19:0e:53:a4:21:99:22:23:eb:c4:3c:1b: d9:b7:b9:f1:06:4b:02:1b:e6:1a:d7:c3:ee:e0:a0:06:19:8f: 7a:5c:7f:a0:eb:8a:cb:f3:89:45:9f:04:48:84:8f:39:66:6f: 5d:4d:d0:b3:8c:64:e0:d9:5d:6b:41:b2:e7:c3:30:e8:8a:be: 99:04:3c:6a:68:df:86:f3:6b:29:ea:c2:60:06:a5:83:88:c0: f6:23:49:c1:fa:5e:9c:cb:aa:63:50:b9:9b:4c:9d:35:91:09: 54:ee:35:cb:66:c0:c4:1d:db:3b:b5:74:7c:ef:1b:e2:27:5b: 53:16:e2:9c:27:cf:2e:91:6d:ea:01:8a:4a:23:20:1c:d2:5e: bf:b9:b5:05:0b:35:ab:66:41:af:fe:47:fc:49:0b:fe:aa:b2: ca:68:4c:43:a5:91:ed:64:18:d9:6d:6b:af:fc:8e:41:39:2a: 5f:fe:53:3c:53:9b:fd:46:44:82:69:e7:3b:e0:df:c2:5f:36: 80:94:63:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe1dpl2F3Oton9D7ClLRLNwmHoQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQzEzRDg1NzE1QUEwNDc4MkMyQTNEODZGODM4NDQz ODVGODk2RDAeFw0yNjA5MjMwMTI4MDhaFw0yNjA5MjQwNTA0MDhaMDMxMTAvBgNV BAMTKDU2RTM1RDIyMDRERkQ4MkYwNzFDRkIzOEUyMTRGMzg2MDE3NDBFMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIsQGypNYR9ucoUyYrmB8BZV0W HRpd0pY4PbBmeNl1jDn7Ag1jAQW/RMSq3rEFnw+hZEXjcfB47K6CDrjhYK1tnPyi by2B2DcnWmyqvhUwZUI8rtkBsuMptC8ARQP8bO1eBFsFMMSLXEiYzUthLdWbugrV OPGFm8U2ovEZCPa2vuETRx7Pda9NUHX5ZVE3x4d/3cU8xwOxefYlZaAe96xJaaM4 R2/3OynEw31pK92s3h4VHweBtmN6HZb//s1V2wfAhU0he66oFB1K62GF2e8szhk9 hP2dQRW80a6jy+zRaAzRIr9MW+ALzx+KlOEzJdICqNMwGpAnbkowPFKitTuXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVuNdIgTf2C8HHPs44hTzhgF0Dg0wHwYDVR0j BBgwFoAULfwT2FcVqgR4LCo9hvg4RDhfiW0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTliMDdhOWUtNjJkZi00ODA4LTlkMmEtYTZlNjg4NGJjYmJiLzAvMkRGQzEzRDg1 NzE1QUEwNDc4MkMyQTNEODZGODM4NDQzODVGODk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yREZDMTNEODU3MTVBQTA0NzgyQzJBM0Q4NkY4Mzg0NDM4NUY4 OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvMkRGQzEzRDg1NzE1QUEwNDc4MkMyQTNEODZGODM4 NDQzODVGODk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWnQgpzmsME2DoFnA296vLvbsR5H7bTvXUl mEs6HIfKjs8pyfP4j9OPSUCCqavWL/wWhk6xjaFjtDiCIxkOU6QhmSIj68Q8G9m3 ufEGSwIb5hrXw+7goAYZj3pcf6DrisvziUWfBEiEjzlmb11N0LOMZODZXWtBsufD MOiKvpkEPGpo34bzaynqwmAGpYOIwPYjScH6XpzLqmNQuZtMnTWRCVTuNctmwMQd 2zu1dHzvG+InW1MW4pwnzy6RbeoBikojIBzSXr+5tQULNatmQa/+R/xJC/6qsspo TEOlke1kGNlta6/8jkE5Kl/+UzxTm/1GRIJp5zvg38JfNoCUY4k= -----END CERTIFICATE-----Generated at Wed Sep 23 10:44:08 2026 by rpki-client