$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft File: 2479BECD79D87972D2E64A75818044EA49B2F7AB.mft (raw, json) Hash identifier: dGRqp3RyLAwqHQcS+ZrdQuo9wjHXjUE6N5H3Q4Ot7E8= Subject key identifier: 39:18:1C:AF:CC:58:F4:FA:B2:68:17:6E:5A:6E:47:15:2F:15:00:51 Authority key identifier: 24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB Certificate issuer: /CN=2479BECD79D87972D2E64A75818044EA49B2F7AB Certificate serial: 5E1E81CA5AAE0B38344D9B2E9CB7CCC66560A326 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 12:00:28 +0000 Manifest this update: Thu 24 Sep 2026 11:55:28 +0000 Manifest next update: Fri 25 Sep 2026 12:45:28 +0000 Files and hashes: 1: 3130332e3131322e3134342e302f32332d3233203d3e20313534343130.roa (hash: EBSYxoW+DLXOqCY+Bl9yoeDsBygUGPhlM9cqjS/xpGk=) 2: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: W/8+xRtFQTktxO0fuk7MAz6L6AHwxOnMCS8RTW7dGss=) 3: 2479BECD79D87972D2E64A75818044EA49B2F7AB.crl (hash: Y6qUbhCZHL2lRHYQ2UE/QKK5bsZdzbgSD/l7Bm+U8j8=) 4: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: /gZ4/45D54iPNl3rFwLqcXjfv+fGeCZ/kGOEYCstAaw=) 5: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: aop58br7cTbLrX5Ig76Wb88/Xv5ZLtq0WiG+kxtdBWw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:1e:81:ca:5a:ae:0b:38:34:4d:9b:2e:9c:b7:cc:c6:65:60:a3:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2479BECD79D87972D2E64A75818044EA49B2F7AB Validity Not Before: Sep 24 11:55:28 2026 GMT Not After : Sep 25 12:45:28 2026 GMT Subject: CN=39181CAFCC58F4FAB268176E5A6E47152F150051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:da:cf:05:0d:87:16:08:e9:14:7a:08:bf:2a: fc:46:5a:93:c7:58:5a:7e:42:0b:f0:bf:a9:5d:02: 28:90:c6:27:15:59:7f:c1:bf:2a:6e:62:d5:4e:50: 62:7d:71:dd:71:65:b0:e9:9e:12:d4:dc:ca:fc:16: ed:b3:80:42:29:83:78:fb:34:2a:99:9f:b1:de:8f: d9:c2:6d:be:46:62:c8:38:51:fd:d0:72:5f:b0:2a: b3:a8:45:5d:c0:02:b5:2c:d8:2e:40:80:88:7a:e1: 43:31:03:c4:83:d8:11:26:c5:6f:5b:88:e9:02:38: 5b:11:2e:76:fb:6e:04:52:61:94:7a:b9:f5:4a:59: f2:9c:68:fe:24:9a:65:20:93:f5:64:34:a2:62:d1: c7:8c:78:3f:db:c3:2b:91:38:f2:ff:cd:3b:65:28: b4:e7:3c:ed:5f:c8:78:a2:0c:79:b9:e8:5d:92:a4: 24:3b:92:95:4f:24:01:ce:51:50:b4:39:7e:70:9f: ee:26:37:cc:cf:42:86:07:f6:b5:e6:97:9e:47:59: c5:ec:b3:88:24:e4:46:e8:12:bf:43:cf:c4:a5:59: 80:33:f2:38:35:f2:7b:39:53:e2:04:2e:10:06:c4: e8:4f:0d:2d:72:91:64:17:bf:a1:f9:86:c7:39:bb: 19:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:18:1C:AF:CC:58:F4:FA:B2:68:17:6E:5A:6E:47:15:2F:15:00:51 X509v3 Authority Key Identifier: keyid:24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:06:74:44:1a:74:ae:7b:1c:da:63:88:5a:8d:1e:95:27:89: da:3b:24:08:a2:52:c5:f6:02:82:3b:de:a0:8b:2c:ec:9b:81: 8f:22:98:0b:8d:d9:28:74:f9:34:4b:7e:ed:62:b4:c6:be:07: 77:8d:e5:42:8c:75:ce:3a:d5:0f:8b:b6:d6:18:c0:33:42:f3: 93:32:e6:ca:92:de:57:41:09:5a:43:ba:b7:3b:da:3c:48:47: f7:1d:1b:49:24:41:8b:d9:ac:df:bc:ff:ed:00:96:49:c4:63: 40:3d:00:aa:06:1f:81:51:43:14:d3:97:6b:c2:d8:c4:11:7c: f0:45:29:1c:10:c9:c7:e9:ca:0b:a3:c6:b6:9c:c4:ed:a1:0b: 5f:eb:f4:4f:27:e1:9f:aa:aa:4b:c4:ae:1c:1a:e8:fe:8e:c9: 5d:b7:bb:dc:a8:b0:ef:33:c8:e4:be:73:6b:3e:63:1f:f3:d6: c7:26:b8:20:c8:2c:04:d0:f5:d0:78:49:2f:79:68:4c:9b:16: 48:17:0a:43:83:77:1f:a5:e7:23:14:0b:f5:12:9d:81:97:70: e1:1e:8a:16:b0:e6:02:54:e1:3f:c1:4a:20:72:b9:1b:ae:83: d4:98:16:fc:9a:6b:18:82:e7:c9:6d:f0:39:a0:26:b7:51:22: 18:92:43:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXh6BylquCzg0TZsunLfMxmVgoyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3OUJFQ0Q3OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0RUE0 OUIyRjdBQjAeFw0yNjA5MjQxMTU1MjhaFw0yNjA5MjUxMjQ1MjhaMDMxMTAvBgNV BAMTKDM5MTgxQ0FGQ0M1OEY0RkFCMjY4MTc2RTVBNkU0NzE1MkYxNTAwNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd2s8FDYcWCOkUegi/KvxGWpPH WFp+Qgvwv6ldAiiQxicVWX/BvypuYtVOUGJ9cd1xZbDpnhLU3Mr8Fu2zgEIpg3j7 NCqZn7Hej9nCbb5GYsg4Uf3Qcl+wKrOoRV3AArUs2C5AgIh64UMxA8SD2BEmxW9b iOkCOFsRLnb7bgRSYZR6ufVKWfKcaP4kmmUgk/VkNKJi0ceMeD/bwyuROPL/zTtl KLTnPO1fyHiiDHm56F2SpCQ7kpVPJAHOUVC0OX5wn+4mN8zPQoYH9rXml55HWcXs s4gk5EboEr9Dz8SlWYAz8jg18ns5U+IELhAGxOhPDS1ykWQXv6H5hsc5uxmDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUORgcr8xY9PqyaBduWm5HFS8VAFEwHwYDVR0j BBgwFoAUJHm+zXnYeXLS5kp1gYBE6kmy96swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNkMDhlYjMtOTM3ZC00MzA0LTkxNjctNDYzZDdjNThkNWU0LzAvMjQ3OUJFQ0Q3 OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0RUE0OUIyRjdBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDc5QkVDRDc5RDg3OTcyRDJFNjRBNzU4MTgwNDRFQTQ5QjJG N0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGNkMDhlYjMtOTM3ZC00MzA0LTkx NjctNDYzZDdjNThkNWU0LzAvMjQ3OUJFQ0Q3OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0 RUE0OUIyRjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMGdEQadK57HNpjiFqNHpUnido7JAiiUsX2 AoI73qCLLOybgY8imAuN2Sh0+TRLfu1itMa+B3eN5UKMdc461Q+LttYYwDNC85My 5sqS3ldBCVpDurc72jxIR/cdG0kkQYvZrN+8/+0AlknEY0A9AKoGH4FRQxTTl2vC 2MQRfPBFKRwQycfpygujxracxO2hC1/r9E8n4Z+qqkvErhwa6P6OyV23u9yosO8z yOS+c2s+Yx/z1scmuCDILATQ9dB4SS95aEybFkgXCkODdx+l5yMUC/USnYGXcOEe ihaw5gJU4T/BSiByuRuug9SYFvyaaxiC58lt8DmgJrdRIhiSQ+w= -----END CERTIFICATE-----Generated at Thu Sep 24 23:34:24 2026 by rpki-client