$ rpki-client -vvvf rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft File: 2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft (raw, json) Hash identifier: EKxZdxoILN2ZfYYj3TMfdACz4f+qTmJVP9FrK8tI/gQ= Subject key identifier: 54:07:C1:BB:40:39:0D:AF:F1:A1:65:D2:EC:4A:FC:F5:16:62:BC:62 Authority key identifier: 24:69:BE:3E:79:EE:62:4D:E9:C3:D6:D6:30:7B:64:82:C1:DE:83:2E Certificate issuer: /CN=2469BE3E79EE624DE9C3D6D6307B6482C1DE832E Certificate serial: 2A94E946EC90D200B5EF2D74FEB03C297AFD1612 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 23:19:28 +0000 Manifest this update: Thu 24 Sep 2026 23:14:28 +0000 Manifest next update: Fri 25 Sep 2026 23:51:28 +0000 Files and hashes: 1: 2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.crl (hash: rPRpOimpsUW7LhKb5o7/H28viwY7GNbr9vIj5KOWMfY=) 2: 323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa (hash: kBjc6OXZ/6vxacL9UgjRAviZ4OmFuFSXJVueUFg8fnE=) 3: 3130332e3134382e3139322e302f32332d3233203d3e20313339393935.roa (hash: IoDA8uRnuH2Y6CGJmD83Fs8xZFkU0MuwdHuMYgo3MNI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.crl rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 23:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:94:e9:46:ec:90:d2:00:b5:ef:2d:74:fe:b0:3c:29:7a:fd:16:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2469BE3E79EE624DE9C3D6D6307B6482C1DE832E Validity Not Before: Sep 24 23:14:28 2026 GMT Not After : Sep 25 23:51:28 2026 GMT Subject: CN=5407C1BB40390DAFF1A165D2EC4AFCF51662BC62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c0:ff:e0:a5:db:ce:8f:20:29:6c:19:87:ba: e2:fc:36:bc:95:7a:c5:c7:b8:f9:c9:3b:14:0b:f6: c5:ff:ad:45:a9:90:e4:ef:08:d3:4e:9a:e2:92:62: b0:9b:2b:93:f3:02:dc:b1:ca:47:2e:39:41:19:e5: 9f:12:d3:cb:29:af:08:39:0b:14:b4:0f:12:3b:77: 60:18:fe:cb:a4:ab:e6:8c:89:58:ad:08:33:c1:77: f3:08:dc:09:ef:fa:c4:7d:6e:76:07:57:7f:87:db: 2f:1b:e4:56:b5:b3:7b:c8:e2:07:e3:b8:c2:7f:0c: 7a:5d:89:f2:02:99:3b:bd:99:83:0f:e5:79:c6:32: 11:da:d8:8f:ec:52:64:bd:2b:9c:d6:7b:d6:b8:af: c5:5b:4e:53:9f:49:fa:db:c3:f6:1b:82:0f:9f:c7: ba:58:1c:8f:33:17:e6:6f:8c:53:f4:85:c1:e5:5d: a1:04:ab:35:5e:b0:9e:8a:6d:40:54:dd:78:f9:2a: b7:83:60:21:90:26:1a:29:d0:2d:28:14:9a:5a:d5: 58:9b:72:f1:a0:78:db:f1:21:09:53:bd:f9:29:95: 3e:c7:81:f7:a6:bb:79:29:ae:ba:bc:4b:f8:43:e7: 0b:b1:9b:11:53:fb:c5:9d:3b:13:29:20:68:3b:d2: 62:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:07:C1:BB:40:39:0D:AF:F1:A1:65:D2:EC:4A:FC:F5:16:62:BC:62 X509v3 Authority Key Identifier: keyid:24:69:BE:3E:79:EE:62:4D:E9:C3:D6:D6:30:7B:64:82:C1:DE:83:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a3:76:31:19:aa:d1:21:41:aa:44:c7:5f:eb:d4:e8:a9:0b: 6d:54:3b:3e:1f:a2:0b:39:f6:28:22:d2:f8:cd:2d:d4:99:35: b2:24:43:27:ac:9f:7a:dd:44:7f:b9:c0:4d:b3:ea:e0:6a:f5: 9e:a0:65:5e:af:38:f5:a8:c7:38:e7:4b:36:3a:5b:51:72:ad: a1:fc:a3:b3:31:57:02:49:af:2e:01:a9:34:fe:7a:6a:3a:36: a9:9f:eb:51:dc:c2:3b:48:c4:c3:ba:e4:46:41:94:4c:33:04: 4b:a5:e0:27:de:40:41:3d:ba:6c:92:b5:67:59:47:5d:ee:5c: 9b:25:ba:21:f6:d0:58:d0:f3:a8:9d:02:de:51:38:17:f8:4f: c9:d2:4d:3e:b9:39:43:e0:58:ad:49:2c:2c:ff:b7:5d:2e:8a: db:f3:c4:56:8c:49:28:b3:1f:89:3b:f6:b9:7a:87:7a:26:00: 7b:6e:16:ef:54:4b:18:e1:ff:3f:f4:84:15:d6:5d:b2:c8:1a: 61:f5:5a:07:28:b3:c5:f9:ea:a3:20:d4:f6:3b:a7:9f:78:da: d6:f5:3d:ac:85:df:a3:d1:eb:17:2d:ff:f4:7a:ef:97:09:0f: 88:bf:93:ce:ec:31:49:f7:41:55:57:c7:eb:73:88:9d:3a:23: 38:61:4a:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKpTpRuyQ0gC17y10/rA8KXr9FhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ2OUJFM0U3OUVFNjI0REU5QzNENkQ2MzA3QjY0ODJD MURFODMyRTAeFw0yNjA5MjQyMzE0MjhaFw0yNjA5MjUyMzUxMjhaMDMxMTAvBgNV BAMTKDU0MDdDMUJCNDAzOTBEQUZGMUExNjVEMkVDNEFGQ0Y1MTY2MkJDNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpwP/gpdvOjyApbBmHuuL8NryV esXHuPnJOxQL9sX/rUWpkOTvCNNOmuKSYrCbK5PzAtyxykcuOUEZ5Z8S08sprwg5 CxS0DxI7d2AY/sukq+aMiVitCDPBd/MI3Anv+sR9bnYHV3+H2y8b5Fa1s3vI4gfj uMJ/DHpdifICmTu9mYMP5XnGMhHa2I/sUmS9K5zWe9a4r8VbTlOfSfrbw/Ybgg+f x7pYHI8zF+ZvjFP0hcHlXaEEqzVesJ6KbUBU3Xj5KreDYCGQJhop0C0oFJpa1Vib cvGgeNvxIQlTvfkplT7Hgfemu3kprrq8S/hD5wuxmxFT+8WdOxMpIGg70mLLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVAfBu0A5Da/xoWXS7Er89RZivGIwHwYDVR0j BBgwFoAUJGm+PnnuYk3pw9bWMHtkgsHegy4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjBiNTkwZTgtNGY4OS00Nzg1LWFlNzktMmJmZmZhMmM1MmM5LzAvMjQ2OUJFM0U3 OUVFNjI0REU5QzNENkQ2MzA3QjY0ODJDMURFODMyRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDY5QkUzRTc5RUU2MjRERTlDM0Q2RDYzMDdCNjQ4MkMxREU4 MzJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjBiNTkwZTgtNGY4OS00Nzg1LWFl NzktMmJmZmZhMmM1MmM5LzAvMjQ2OUJFM0U3OUVFNjI0REU5QzNENkQ2MzA3QjY0 ODJDMURFODMyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmjdjEZqtEhQapEx1/r1OipC21UOz4fogs5 9igi0vjNLdSZNbIkQyesn3rdRH+5wE2z6uBq9Z6gZV6vOPWoxzjnSzY6W1FyraH8 o7MxVwJJry4BqTT+emo6Nqmf61HcwjtIxMO65EZBlEwzBEul4CfeQEE9umyStWdZ R13uXJsluiH20FjQ86idAt5ROBf4T8nSTT65OUPgWK1JLCz/t10uitvzxFaMSSiz H4k79rl6h3omAHtuFu9USxjh/z/0hBXWXbLIGmH1Wgcos8X56qMg1PY7p5942tb1 PayF36PR6xct//R675cJD4i/k87sMUn3QVVXx+tziJ06IzhhSjA= -----END CERTIFICATE-----Generated at Fri Sep 25 17:49:36 2026 by rpki-client