$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft File: 2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft (raw, json) Hash identifier: bUZNdKid0037vY7CQnsQfqO5pn/3/UpI5JN1a234/dc= Subject key identifier: 16:3D:B5:FF:A6:C7:7F:DC:C8:B6:B9:9D:8D:AA:CD:7A:CA:55:05:BC Authority key identifier: 2D:81:47:AB:32:AE:34:FE:05:99:30:1C:39:9B:A4:31:CB:D9:6A:E2 Certificate issuer: /CN=2D8147AB32AE34FE0599301C399BA431CBD96AE2 Certificate serial: 69A80B4B77E68760BB18C24F56A9C1EA5BE6741B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 20:31:22 +0000 Manifest this update: Wed 23 Sep 2026 20:26:22 +0000 Manifest next update: Fri 25 Sep 2026 00:27:22 +0000 Files and hashes: 1: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: YTcLxO+mbdwk1sv6hkGjyOE34UWEs5shSWT+DleZD5E=) 2: 2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl (hash: vkPtF1XAiV09LcTwzZ9XwZgCqRYMLNX6nFIvqQ2jIqE=) 3: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: OX/hSObmRCzkD1qVckzfWkKuBPC5Pdod9YDgySPz4C8=) 4: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: RnobRsvxkM1MTdlV59E6oBUzJE/tUaI5t4eU9X2Ihxg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a8:0b:4b:77:e6:87:60:bb:18:c2:4f:56:a9:c1:ea:5b:e6:74:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D8147AB32AE34FE0599301C399BA431CBD96AE2 Validity Not Before: Sep 23 20:26:22 2026 GMT Not After : Sep 25 00:27:22 2026 GMT Subject: CN=163DB5FFA6C77FDCC8B6B99D8DAACD7ACA5505BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5b:c6:50:2f:32:36:7b:06:e7:13:d6:22:b8: 6a:c1:00:b4:45:a4:30:15:1c:1b:74:45:49:00:e6: a0:e1:6e:9e:4c:b3:aa:57:0a:a4:a6:c1:27:27:5c: ce:27:8c:9d:a4:96:0f:5c:7a:28:40:44:da:00:01: 90:16:6b:b6:6f:ff:21:94:94:2a:b0:70:94:9b:dc: d0:a1:c5:30:89:93:cb:96:7e:5d:1d:b2:c6:8d:c3: fc:8e:a0:c8:a2:16:a5:29:a0:77:21:c4:8e:0e:04: d9:81:c0:07:8e:17:18:29:f4:c1:af:5d:31:75:1b: d0:86:90:be:3b:fb:23:9a:a9:e6:ff:98:a7:d2:f6: 54:90:42:71:e0:7c:22:6d:e3:a1:bc:a7:c2:c0:5c: 68:b8:02:11:8f:ae:fb:dd:6c:9f:2f:fc:69:43:cd: c9:a8:21:c9:1f:ca:2d:d6:ff:9f:45:2e:5a:81:a8: b2:bf:37:1a:9a:58:5c:53:4f:a1:55:7a:5d:6a:9d: 28:74:2e:30:f4:2e:a1:05:b1:c3:bc:19:99:c0:ce: b9:1b:06:1c:94:e3:9e:84:b0:5b:b8:80:fa:11:70: 14:8c:3c:f4:21:be:de:2a:7a:1c:4f:c4:b0:05:87: c4:be:e4:15:65:51:79:72:eb:27:ed:7f:39:17:56: 3e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3D:B5:FF:A6:C7:7F:DC:C8:B6:B9:9D:8D:AA:CD:7A:CA:55:05:BC X509v3 Authority Key Identifier: keyid:2D:81:47:AB:32:AE:34:FE:05:99:30:1C:39:9B:A4:31:CB:D9:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:14:95:16:e3:e1:79:5e:b3:0f:d1:a5:0d:61:56:61:73:63: 5f:89:d4:2e:55:8d:ae:44:36:e7:77:17:aa:c6:36:aa:2c:2f: 24:c9:f0:77:ed:cb:14:70:82:a0:f2:71:10:cd:85:0f:0b:86: 96:5e:31:95:73:2c:a5:e6:8d:ec:5d:78:8d:17:7c:d0:0f:f1: 98:07:82:f1:6d:a3:c9:d0:54:75:7d:8c:b3:69:94:13:80:47: 26:8a:a7:02:06:3c:a9:76:82:4b:80:15:59:42:f8:63:d0:d0: 79:57:7a:cf:d9:ee:75:aa:73:16:8b:ab:bd:12:51:a1:85:09: 9f:38:2d:92:b5:45:f7:e5:e6:06:dd:ec:04:0c:1f:72:85:59: c8:c0:c2:c0:a0:db:ce:be:df:c1:29:8c:b3:1e:b3:57:6f:c1: c3:fc:36:d0:e0:5f:41:6f:ce:4d:f4:a6:25:c7:2d:7e:cc:42: 7d:ad:fd:60:7f:53:90:96:14:84:ab:e1:d4:eb:cb:e0:27:97: 3b:2e:d7:f8:2f:78:7b:22:fa:36:04:d9:fb:1c:2c:e5:08:d3: 3a:e5:2c:75:0b:0e:46:be:d5:42:af:4b:6f:bd:d7:3c:9c:ee: 3f:7f:67:a5:13:c0:63:39:4d:8d:e0:84:f6:b9:42:bd:09:fa: 2e:99:25:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaagLS3fmh2C7GMJPVqnB6lvmdBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ4MTQ3QUIzMkFFMzRGRTA1OTkzMDFDMzk5QkE0MzFD QkQ5NkFFMjAeFw0yNjA5MjMyMDI2MjJaFw0yNjA5MjUwMDI3MjJaMDMxMTAvBgNV BAMTKDE2M0RCNUZGQTZDNzdGRENDOEI2Qjk5RDhEQUFDRDdBQ0E1NTA1QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAW8ZQLzI2ewbnE9YiuGrBALRF pDAVHBt0RUkA5qDhbp5Ms6pXCqSmwScnXM4njJ2klg9ceihARNoAAZAWa7Zv/yGU lCqwcJSb3NChxTCJk8uWfl0dssaNw/yOoMiiFqUpoHchxI4OBNmBwAeOFxgp9MGv XTF1G9CGkL47+yOaqeb/mKfS9lSQQnHgfCJt46G8p8LAXGi4AhGPrvvdbJ8v/GlD zcmoIckfyi3W/59FLlqBqLK/NxqaWFxTT6FVel1qnSh0LjD0LqEFscO8GZnAzrkb BhyU456EsFu4gPoRcBSMPPQhvt4qehxPxLAFh8S+5BVlUXly6yftfzkXVj57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFj21/6bHf9zItrmdjarNespVBbwwHwYDVR0j BBgwFoAULYFHqzKuNP4FmTAcOZukMcvZauIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFkYTIzZTktODRiZS00YTU0LWJjYTAtZTlhMGNhZmQxNmZlLzAvMkQ4MTQ3QUIz MkFFMzRGRTA1OTkzMDFDMzk5QkE0MzFDQkQ5NkFFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yRDgxNDdBQjMyQUUzNEZFMDU5OTMwMUMzOTlCQTQzMUNCRDk2 QUUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFkYTIzZTktODRiZS00YTU0LWJj YTAtZTlhMGNhZmQxNmZlLzAvMkQ4MTQ3QUIzMkFFMzRGRTA1OTkzMDFDMzk5QkE0 MzFDQkQ5NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUUlRbj4Xlesw/RpQ1hVmFzY1+J1C5Vja5E Nud3F6rGNqosLyTJ8HftyxRwgqDycRDNhQ8LhpZeMZVzLKXmjexdeI0XfNAP8ZgH gvFto8nQVHV9jLNplBOARyaKpwIGPKl2gkuAFVlC+GPQ0HlXes/Z7nWqcxaLq70S UaGFCZ84LZK1Rffl5gbd7AQMH3KFWcjAwsCg286+38EpjLMes1dvwcP8NtDgX0Fv zk30piXHLX7MQn2t/WB/U5CWFISr4dTry+Anlzsu1/gveHsi+jYE2fscLOUI0zrl LHULDka+1UKvS2+91zyc7j9/Z6UTwGM5TY3ghPa5Qr0J+i6ZJTI= -----END CERTIFICATE-----Generated at Wed Sep 23 23:46:53 2026 by rpki-client