$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft File: 2BF94227A09D96F51AE8819B28CA3696003CBC60.mft (raw, json) Hash identifier: hmAs8JF2Mg/G+J6/OTJOcHxjj+t3L8iiZjI41eJXWRE= Subject key identifier: 23:EA:7A:8C:87:37:BD:2B:FA:7C:C3:DE:BF:1C:2D:15:EE:37:19:0A Authority key identifier: 2B:F9:42:27:A0:9D:96:F5:1A:E8:81:9B:28:CA:36:96:00:3C:BC:60 Certificate issuer: /CN=2BF94227A09D96F51AE8819B28CA3696003CBC60 Certificate serial: 03CCC8A5C356E59423506B125913DB110A4DAB5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft Manifest number: C3 Signing time: Sat 26 Sep 2026 00:41:01 +0000 Manifest this update: Sat 26 Sep 2026 00:36:01 +0000 Manifest next update: Sun 27 Sep 2026 01:34:01 +0000 Files and hashes: 1: 2BF94227A09D96F51AE8819B28CA3696003CBC60.crl (hash: r5Sbk4DzLEVrz1FFCMqbO39Wegv6Vzna+Qb2q3sDvZs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.crl rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:cc:c8:a5:c3:56:e5:94:23:50:6b:12:59:13:db:11:0a:4d:ab:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BF94227A09D96F51AE8819B28CA3696003CBC60 Validity Not Before: Sep 26 00:36:01 2026 GMT Not After : Sep 27 01:34:01 2026 GMT Subject: CN=23EA7A8C8737BD2BFA7CC3DEBF1C2D15EE37190A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:a4:49:e4:8b:ee:9d:89:37:22:6d:ca:5e: d7:62:76:b0:9b:d4:ba:9a:5d:17:90:98:81:f1:cd: 4b:b1:54:b9:4e:5e:3d:ae:d3:aa:8a:b0:b4:46:02: d0:09:b0:90:93:d7:19:ae:6a:8b:da:20:ee:a8:c2: 99:a5:83:f0:2a:7d:7d:09:10:82:62:fa:b4:3b:8d: 4c:04:cf:15:24:17:22:c2:63:da:c7:34:37:69:4e: 84:fe:5b:c5:62:2f:f9:69:f5:66:f1:f5:8a:cf:61: 71:20:a9:1c:ff:bb:0e:89:df:83:dc:7b:6a:d6:74: 58:c8:92:b9:58:ab:f0:28:9d:7a:9c:21:4b:73:28: 79:ee:39:9e:91:ea:32:db:c6:25:12:81:0a:7e:bf: 24:33:a1:fd:21:68:2b:8f:b9:13:37:44:4b:84:87: 42:23:32:8d:5b:5b:3c:2c:66:4f:fa:81:38:9e:7c: 00:46:f2:39:bd:d0:ac:83:a6:84:30:5a:68:13:c0: 46:00:21:ce:f5:34:68:83:e7:0a:8d:bb:7c:0f:51: 9b:eb:42:06:13:c7:5b:42:ee:4e:f4:28:90:76:95: e4:c9:d1:b1:09:60:14:3e:f3:7f:91:56:aa:9b:82: 19:f5:f3:70:d3:5c:e1:76:07:b7:30:b2:61:49:04: 29:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:EA:7A:8C:87:37:BD:2B:FA:7C:C3:DE:BF:1C:2D:15:EE:37:19:0A X509v3 Authority Key Identifier: keyid:2B:F9:42:27:A0:9D:96:F5:1A:E8:81:9B:28:CA:36:96:00:3C:BC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:48:18:28:fe:37:04:47:a8:11:82:87:58:97:f1:06:50:98: ef:9b:0e:8c:8a:a2:35:37:5c:c6:3d:fd:5d:50:11:55:64:ca: c6:4a:c5:ae:d3:12:ba:a5:02:9c:8c:d8:04:25:7f:77:31:f1: 25:69:e3:24:23:7d:0e:7e:de:a5:c9:6f:37:bc:11:98:9e:72: be:a3:e8:43:8a:39:8e:6d:56:8e:e6:4a:37:18:ad:8d:48:47: 1c:d5:ab:9e:95:f8:b5:be:5f:16:f4:da:b0:a3:5b:c8:a1:2c: d3:77:f8:a3:25:c1:82:65:ba:0e:a3:7a:9f:6e:9b:04:3f:ec: 97:47:33:7f:32:aa:a4:5d:d4:f6:23:fb:db:95:5e:f2:18:d3: 82:5b:3a:a1:2c:0f:dd:2a:9b:da:0a:4a:5f:ae:1d:00:86:69: a8:a2:57:34:9a:7b:93:af:bf:1d:66:5a:c4:ee:4e:f4:a5:fe: 5c:ac:cc:fc:89:30:5a:1f:63:b9:cd:cf:98:42:e9:a2:9a:a0: f9:15:aa:6a:0b:70:c4:d8:50:1d:b8:e1:c7:4c:a4:25:2a:e1: 8d:35:7a:5c:c7:00:1a:c8:05:1a:58:f3:2a:1a:c8:e2:e6:f1: a0:9e:41:5c:04:f0:ca:cb:00:4b:9f:92:fb:8f:30:08:38:13: 2d:6b:c5:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA8zIpcNW5ZQjUGsSWRPbEQpNq1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJGOTQyMjdBMDlEOTZGNTFBRTg4MTlCMjhDQTM2OTYw MDNDQkM2MDAeFw0yNjA5MjYwMDM2MDFaFw0yNjA5MjcwMTM0MDFaMDMxMTAvBgNV BAMTKDIzRUE3QThDODczN0JEMkJGQTdDQzNERUJGMUMyRDE1RUUzNzE5MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4UqRJ5IvunYk3Im3KXtdidrCb 1LqaXReQmIHxzUuxVLlOXj2u06qKsLRGAtAJsJCT1xmuaovaIO6owpmlg/AqfX0J EIJi+rQ7jUwEzxUkFyLCY9rHNDdpToT+W8ViL/lp9Wbx9YrPYXEgqRz/uw6J34Pc e2rWdFjIkrlYq/AonXqcIUtzKHnuOZ6R6jLbxiUSgQp+vyQzof0haCuPuRM3REuE h0IjMo1bWzwsZk/6gTiefABG8jm90KyDpoQwWmgTwEYAIc71NGiD5wqNu3wPUZvr QgYTx1tC7k70KJB2leTJ0bEJYBQ+83+RVqqbghn183DTXOF2B7cwsmFJBCkhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI+p6jIc3vSv6fMPevxwtFe43GQowHwYDVR0j BBgwFoAUK/lCJ6CdlvUa6IGbKMo2lgA8vGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmFkZmNiNDQtYWU3YS00NDIzLWFlN2QtMDg2NDhiZjFkZWIxLzAvMkJGOTQyMjdB MDlEOTZGNTFBRTg4MTlCMjhDQTM2OTYwMDNDQkM2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQkY5NDIyN0EwOUQ5NkY1MUFFODgxOUIyOENBMzY5NjAwM0NC QzYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmFkZmNiNDQtYWU3YS00NDIzLWFl N2QtMDg2NDhiZjFkZWIxLzAvMkJGOTQyMjdBMDlEOTZGNTFBRTg4MTlCMjhDQTM2 OTYwMDNDQkM2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFIGCj+NwRHqBGCh1iX8QZQmO+bDoyKojU3 XMY9/V1QEVVkysZKxa7TErqlApyM2AQlf3cx8SVp4yQjfQ5+3qXJbze8EZiecr6j 6EOKOY5tVo7mSjcYrY1IRxzVq56V+LW+Xxb02rCjW8ihLNN3+KMlwYJlug6jep9u mwQ/7JdHM38yqqRd1PYj+9uVXvIY04JbOqEsD90qm9oKSl+uHQCGaaiiVzSae5Ov vx1mWsTuTvSl/lyszPyJMFofY7nNz5hC6aKaoPkVqmoLcMTYUB244cdMpCUq4Y01 elzHABrIBRpY8yoayOLm8aCeQVwE8MrLAEufkvuPMAg4Ey1rxSo= -----END CERTIFICATE-----Generated at Sat Sep 26 03:57:00 2026 by rpki-client