$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft File: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft (raw, json) Hash identifier: 8RJ1q3lOxUR57P3L/QmDpELbP/r9xJaBu7VvQV2gXgY= Subject key identifier: 09:FB:F5:34:79:17:FC:30:F7:01:94:34:8F:83:3D:0A:8D:B1:57:86 Authority key identifier: 2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 Certificate issuer: /CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Certificate serial: 3E5A4B7B77B7CC2013CFD402B987750EA7F7E201 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 10:38:51 +0000 Manifest this update: Thu 24 Sep 2026 10:33:51 +0000 Manifest next update: Fri 25 Sep 2026 11:59:51 +0000 Files and hashes: 1: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Zn0CgMhZBE1Ox5HRkdKzvhOJuMe+bbXdGHM8Z1fRLu4=) 2: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: YxIG5gE82yucA04IL0UOvUpSplXnSvbMztHXZbePQI4=) 3: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: +Yvf7pOmzIGa62dYtF9IiIRwOM/GLeNEJw6+0hLCuFs=) 4: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: o8ATK3bD9zxeJufeZWJNK7oFuttO5EJXj2X9FF47zyA=) 5: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: Sc3G90iBjlZbQp4eiRWZGBi7/nNefrAvOJorxw0BbBg=) 6: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl (hash: n6OHEjrxceMJs1lirOPGXp3+xF38lxxjVIu0GF/yzis=) 7: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: mQrrkGIS8HoF4AiDSmw6SD2SG/T7/MXDAFnexE70y7o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:5a:4b:7b:77:b7:cc:20:13:cf:d4:02:b9:87:75:0e:a7:f7:e2:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Validity Not Before: Sep 24 10:33:51 2026 GMT Not After : Sep 25 11:59:51 2026 GMT Subject: CN=09FBF5347917FC30F70194348F833D0A8DB15786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:6a:4d:45:04:ab:f9:34:b5:ab:6e:e2:84: 6c:34:99:c6:a2:13:cd:8e:0a:0b:3a:38:44:0b:96: 88:cc:a1:0a:b3:6d:b8:db:e7:f8:27:ff:29:06:2d: 6e:a6:23:e8:6b:df:29:bc:f6:ce:b1:20:d4:30:e3: 7b:85:15:d3:18:3a:05:5d:e7:03:9c:ac:c2:c3:d2: 30:dc:0c:01:af:a2:34:89:49:56:58:7a:59:be:63: d0:d9:a0:30:d7:24:76:97:44:e6:99:97:75:72:0e: 01:d2:ba:df:ff:86:33:67:68:54:a0:7d:7e:58:74: 3b:d4:2b:02:a8:ba:89:20:3d:1e:f5:4e:38:45:f7: f6:c6:b8:91:e7:e5:a4:f7:d4:23:97:0a:44:c0:aa: 42:bf:b2:fa:37:f3:25:27:a4:a4:b7:9c:d9:2b:ff: 19:00:2e:e2:2d:7f:5c:11:ec:44:f0:5a:e9:25:6e: 13:3d:9e:77:a6:1f:86:92:d0:af:a6:66:53:77:8b: 16:dd:ea:99:b4:84:f2:57:1a:c0:bc:cb:42:8b:78: 68:8e:97:b4:7d:3a:5e:d4:12:d2:6b:4a:51:a0:e2: 41:58:76:f9:6e:ea:86:1a:79:4d:df:16:1d:4d:12: d6:99:c9:3d:b1:f7:70:53:cf:be:11:fa:ae:98:29: d2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FB:F5:34:79:17:FC:30:F7:01:94:34:8F:83:3D:0A:8D:B1:57:86 X509v3 Authority Key Identifier: keyid:2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7d:b6:ff:c1:ca:c1:1a:ae:5c:9e:1e:a0:56:2d:46:67:94: 29:7c:5c:ef:5d:af:83:da:9c:05:33:4d:91:0a:3b:bd:34:03: 99:2a:2e:23:85:fe:a4:2d:ca:c6:e2:51:23:b3:d8:b1:e7:c0: 38:10:76:8c:b8:02:43:c9:e7:7d:7e:a0:63:84:ea:0b:d2:84: 98:fd:fe:01:19:28:48:95:7c:8a:75:80:a9:fd:ca:d2:2a:63: 85:eb:ed:82:59:f6:a8:54:24:87:23:02:06:56:67:52:2c:67: 7c:10:fc:4e:0b:29:d1:dd:45:88:2a:f6:e7:55:62:e7:d1:a7: 06:b8:2c:5b:21:a9:ae:13:7f:e2:59:41:4f:08:34:e9:8c:09: ff:f6:0c:11:bb:bb:8c:24:21:49:9d:0b:34:ca:ae:dd:de:91: ba:69:a3:d2:aa:59:2f:9b:dd:0c:7b:4b:5c:a9:b1:60:f6:a1: 17:47:80:90:f6:7b:2c:cb:e2:45:ce:88:43:c0:18:68:72:73: 36:b4:e6:7b:75:d8:f6:31:b0:67:3b:c6:c4:63:c1:b4:7f:62: fc:88:27:67:19:9e:ce:5f:1a:54:33:74:e1:e6:31:4b:9a:3d: 2d:e0:0a:ad:4e:fb:c3:d0:a9:88:66:d2:c7:5d:5b:0e:cf:80: e6:be:be:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPlpLe3e3zCATz9QCuYd1Dqf34gEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlE MzBDNDYzNTAeFw0yNjA5MjQxMDMzNTFaFw0yNjA5MjUxMTU5NTFaMDMxMTAvBgNV BAMTKDA5RkJGNTM0NzkxN0ZDMzBGNzAxOTQzNDhGODMzRDBBOERCMTU3ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3R2pNRQSr+TS1q27ihGw0mcai E82OCgs6OEQLlojMoQqzbbjb5/gn/ykGLW6mI+hr3ym89s6xINQw43uFFdMYOgVd 5wOcrMLD0jDcDAGvojSJSVZYelm+Y9DZoDDXJHaXROaZl3VyDgHSut//hjNnaFSg fX5YdDvUKwKouokgPR71TjhF9/bGuJHn5aT31COXCkTAqkK/svo38yUnpKS3nNkr /xkALuItf1wR7ETwWuklbhM9nnemH4aS0K+mZlN3ixbd6pm0hPJXGsC8y0KLeGiO l7R9Ol7UEtJrSlGg4kFYdvlu6oYaeU3fFh1NEtaZyT2x93BTz74R+q6YKdL1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCfv1NHkX/DD3AZQ0j4M9Co2xV4YwHwYDVR0j BBgwFoAULpDHQn/huQJV3YVW28nMadMMRjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTAzNmUwN2MtODI4My00M2QzLTkxNjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3 RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlEMzBDNDYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTkwQzc0MjdGRTFCOTAyNTVERDg1NTZEQkM5Q0M2OUQzMEM0 NjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUND NjlEMzBDNDYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJp9tv/BysEarlyeHqBWLUZnlCl8XO9dr4Pa nAUzTZEKO700A5kqLiOF/qQtysbiUSOz2LHnwDgQdoy4AkPJ531+oGOE6gvShJj9 /gEZKEiVfIp1gKn9ytIqY4Xr7YJZ9qhUJIcjAgZWZ1IsZ3wQ/E4LKdHdRYgq9udV YufRpwa4LFshqa4Tf+JZQU8INOmMCf/2DBG7u4wkIUmdCzTKrt3ekbppo9KqWS+b 3Qx7S1ypsWD2oRdHgJD2eyzL4kXOiEPAGGhycza05nt12PYxsGc7xsRjwbR/YvyI J2cZns5fGlQzdOHmMUuaPS3gCq1O+8PQqYhm0sddWw7PgOa+vtI= -----END CERTIFICATE-----Generated at Fri Sep 25 01:14:41 2026 by rpki-client