$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft File: 2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft (raw, json) Hash identifier: DNIU1De5cKX4lFrHAOpIxAjdImpalTcOz22JB5mk8Ls= Subject key identifier: 52:E8:9A:35:3D:4E:EC:C9:B9:76:BC:89:0B:1E:0D:20:88:92:A5:03 Authority key identifier: 2D:FC:5C:3D:38:82:FE:6E:7F:9A:9E:FE:2F:6B:96:55:5F:F5:2D:D7 Certificate issuer: /CN=2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7 Certificate serial: 2F373BF955AD756AD06A883F9D2B1D74FE8B888E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 12:46:57 +0000 Manifest this update: Wed 23 Sep 2026 12:41:57 +0000 Manifest next update: Thu 24 Sep 2026 14:29:57 +0000 Files and hashes: 1: 3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (hash: KyTDN/npdCxMnf6sB8d1UiCU7Ow9yE5T+dZIKGap4fI=) 2: 2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl (hash: lzWsfUd66bt79QhdBzomA02JzLaBtoCkRCSWGZfeK7c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:37:3b:f9:55:ad:75:6a:d0:6a:88:3f:9d:2b:1d:74:fe:8b:88:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7 Validity Not Before: Sep 23 12:41:57 2026 GMT Not After : Sep 24 14:29:57 2026 GMT Subject: CN=52E89A353D4EECC9B976BC890B1E0D208892A503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0f:a8:ea:86:80:45:7a:a2:bb:24:50:f0:75: 68:2a:e5:77:ca:2e:f7:2b:60:e8:36:39:a1:34:dd: 03:92:20:7f:13:30:40:09:fc:94:11:38:7b:76:a0: c9:b3:44:da:8b:56:36:f6:41:5b:99:70:35:f5:32: 37:b7:1c:05:26:f9:4e:d6:e4:5e:4b:e7:1b:cc:6d: ac:4e:00:a1:c7:1d:7a:e2:c1:d9:f9:61:a8:38:dd: d2:e1:8e:40:3f:2a:78:21:69:f1:a8:db:6d:aa:43: 94:d9:d5:00:57:4e:e6:2b:da:4a:f2:fb:41:ac:0b: eb:96:e6:a1:9e:5e:92:27:58:03:0d:6a:2e:9d:99: a2:c6:69:07:54:a7:c0:0e:2f:66:8e:b5:de:63:32: 02:f7:1f:68:34:ab:c3:65:15:01:ff:4b:d5:5a:98: 22:2a:46:de:4f:a7:65:86:de:e9:8c:0a:b4:72:14: d2:fc:5f:71:ed:1b:5c:08:93:2a:d9:6e:e2:85:e6: 01:1e:b8:07:07:a5:cf:4f:b7:77:4f:9a:42:8b:3a: c7:b9:8e:1a:21:03:0a:55:04:fc:72:63:e2:77:0d: 48:66:20:dd:5e:53:74:c3:7f:2b:1a:2f:5d:18:9d: 17:27:1b:68:4b:6f:c5:4e:bb:4e:30:82:c2:10:27: 72:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E8:9A:35:3D:4E:EC:C9:B9:76:BC:89:0B:1E:0D:20:88:92:A5:03 X509v3 Authority Key Identifier: keyid:2D:FC:5C:3D:38:82:FE:6E:7F:9A:9E:FE:2F:6B:96:55:5F:F5:2D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:fb:cf:4b:cc:12:4c:91:5f:65:20:2e:72:a6:44:5b:c2:9d: 17:d6:06:f0:04:cc:68:64:28:6c:d2:15:29:f2:bf:cc:0f:1b: f2:b1:9c:a4:f2:77:48:fa:0e:31:59:58:f7:09:99:b5:ba:d2: ba:dd:7f:f7:9d:2a:0d:3f:fa:19:94:3f:b7:db:87:04:ac:8e: 1f:3e:07:f8:35:ea:87:17:b2:92:b2:eb:5c:5d:54:3e:88:23: 28:9d:1c:d4:21:cd:e6:b6:1d:6e:32:54:be:dc:74:78:73:32: 9f:3c:d8:de:49:d3:0f:75:bb:b0:a6:ed:bb:cf:3f:0f:30:6c: 6f:a5:02:83:f7:72:7a:55:da:52:03:e8:45:5c:ec:7c:17:c5: f4:2a:c5:7d:b9:2c:25:d5:9d:e7:00:a6:f2:4a:27:1d:82:e8: 34:34:f2:11:08:75:88:52:78:2d:23:f5:82:e8:da:83:b9:5f: ca:ef:c8:f2:9e:c7:9e:4e:a4:91:43:ef:ce:84:5d:59:06:3d: 5d:d3:2c:e8:95:05:a2:4c:21:ed:c7:cd:9b:dc:1a:a0:79:1b: d0:e7:75:0e:fa:bd:3c:20:32:bb:7c:d1:6c:ca:28:79:7a:22: 78:da:f7:78:76:25:1c:84:dc:a7:03:ce:f8:7a:2f:65:98:59: 84:01:80:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULzc7+VWtdWrQaog/nSsddP6LiI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQzVDM0QzODgyRkU2RTdGOUE5RUZFMkY2Qjk2NTU1 RkY1MkRENzAeFw0yNjA5MjMxMjQxNTdaFw0yNjA5MjQxNDI5NTdaMDMxMTAvBgNV BAMTKDUyRTg5QTM1M0Q0RUVDQzlCOTc2QkM4OTBCMUUwRDIwODg5MkE1MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVD6jqhoBFeqK7JFDwdWgq5XfK LvcrYOg2OaE03QOSIH8TMEAJ/JQROHt2oMmzRNqLVjb2QVuZcDX1Mje3HAUm+U7W 5F5L5xvMbaxOAKHHHXriwdn5Yag43dLhjkA/KnghafGo222qQ5TZ1QBXTuYr2kry +0GsC+uW5qGeXpInWAMNai6dmaLGaQdUp8AOL2aOtd5jMgL3H2g0q8NlFQH/S9Va mCIqRt5Pp2WG3umMCrRyFNL8X3HtG1wIkyrZbuKF5gEeuAcHpc9Pt3dPmkKLOse5 jhohAwpVBPxyY+J3DUhmIN1eU3TDfysaL10YnRcnG2hLb8VOu04wgsIQJ3LlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUuiaNT1O7Mm5dryJCx4NIIiSpQMwHwYDVR0j BBgwFoAULfxcPTiC/m5/mp7+L2uWVV/1LdcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVmMDAxM2ItNTlhNi00NzMzLTg5ZjgtMjhmYTNkODg1NzlmLzAvMkRGQzVDM0Qz ODgyRkU2RTdGOUE5RUZFMkY2Qjk2NTU1RkY1MkRENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREZDNUMzRDM4ODJGRTZFN0Y5QTlFRkUyRjZCOTY1NTVGRjUy REQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmVmMDAxM2ItNTlhNi00NzMzLTg5 ZjgtMjhmYTNkODg1NzlmLzAvMkRGQzVDM0QzODgyRkU2RTdGOUE5RUZFMkY2Qjk2 NTU1RkY1MkRENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJn7z0vMEkyRX2UgLnKmRFvCnRfWBvAEzGhk KGzSFSnyv8wPG/KxnKTyd0j6DjFZWPcJmbW60rrdf/edKg0/+hmUP7fbhwSsjh8+ B/g16ocXspKy61xdVD6IIyidHNQhzea2HW4yVL7cdHhzMp882N5J0w91u7Cm7bvP Pw8wbG+lAoP3cnpV2lID6EVc7HwXxfQqxX25LCXVnecApvJKJx2C6DQ08hEIdYhS eC0j9YLo2oO5X8rvyPKex55OpJFD786EXVkGPV3TLOiVBaJMIe3HzZvcGqB5G9Dn dQ76vTwgMrt80WzKKHl6Inja93h2JRyE3KcDzvh6L2WYWYQBgHg= -----END CERTIFICATE-----Generated at Wed Sep 23 21:48:25 2026 by rpki-client