$ rpki-client -vvvf rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft File: 2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft (raw, json) Hash identifier: mnfazecJzoKBbn/R3honOFP5Q5KhxdwDn4cJPGzsT9w= Subject key identifier: 4E:43:64:CE:E2:27:4E:1B:3F:C8:82:6B:3C:E9:49:9C:FD:27:18:CA Authority key identifier: 2D:30:C3:00:58:7F:6D:81:BE:9B:55:44:3E:A8:EE:94:22:9F:CF:34 Certificate issuer: /CN=2D30C300587F6D81BE9B55443EA8EE94229FCF34 Certificate serial: 5CB0C3C39142D516CFAB634628CC8CC89FB282FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 13:38:01 +0000 Manifest this update: Wed 23 Sep 2026 13:33:01 +0000 Manifest next update: Thu 24 Sep 2026 14:40:01 +0000 Files and hashes: 1: 2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl (hash: 1AV8tBjrFh6+NUOcZZBYtkhZToc6Hzzyj/0jFyBP450=) 2: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: /HZ9PgBcY1v+LICUOzB+p9dmjd1y9vMbbZwrBhVjk44=) 3: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: tFodUbzYC2MyevsY+1U3r+nqHy3x7yy2dunKYq9vZuc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b0:c3:c3:91:42:d5:16:cf:ab:63:46:28:cc:8c:c8:9f:b2:82:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D30C300587F6D81BE9B55443EA8EE94229FCF34 Validity Not Before: Sep 23 13:33:01 2026 GMT Not After : Sep 24 14:40:01 2026 GMT Subject: CN=4E4364CEE2274E1B3FC8826B3CE9499CFD2718CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:69:14:6d:ea:89:0d:8f:da:b4:c8:44:4c: 0d:35:5b:61:69:e5:0d:6f:b3:27:dd:8c:06:70:47: 62:17:88:b4:40:77:1d:bf:da:07:08:70:ff:e2:b4: 24:73:50:4e:32:36:59:ed:8d:07:41:23:e7:b0:e2: 7f:e6:71:f0:30:3e:2e:c1:85:1f:41:f9:8f:dd:af: e5:e2:3a:f7:9e:0b:b7:54:27:ae:88:60:be:79:87: 88:13:44:bd:53:b5:f2:fd:b9:ea:e0:70:e6:8a:22: 48:86:88:ee:3f:fc:07:39:27:92:92:e1:b7:15:f0: fe:98:47:6b:12:dd:a6:ad:48:8d:e4:b1:08:27:ba: b0:41:fd:1a:03:d6:35:4c:18:cb:0f:e2:b7:91:f4: f4:44:0b:98:40:fb:d5:20:81:5c:1f:96:36:80:04: 77:da:9d:f9:87:7f:0e:e9:3a:87:70:ff:55:40:ad: b5:db:bd:a1:eb:53:13:f8:de:69:a0:39:ac:9b:70: 0b:45:c6:a6:80:a8:77:f4:91:01:a2:4f:50:9c:e3: 13:af:02:53:14:44:6a:8c:ee:9e:cd:4c:f6:24:f2: 72:aa:f2:d1:bb:2b:16:84:6b:76:b8:bb:0b:32:b3: c6:9e:76:6c:c5:3f:2a:c6:5d:5d:59:8e:98:62:aa: 27:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:43:64:CE:E2:27:4E:1B:3F:C8:82:6B:3C:E9:49:9C:FD:27:18:CA X509v3 Authority Key Identifier: keyid:2D:30:C3:00:58:7F:6D:81:BE:9B:55:44:3E:A8:EE:94:22:9F:CF:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:bc:cb:c5:5d:77:89:45:74:7d:f1:69:45:7a:e9:aa:d8:fe: 3d:b5:de:4c:30:82:6e:bb:c0:9d:49:c8:a6:4b:26:a8:2a:b4: 5f:78:3d:78:70:f4:a1:db:e6:9b:57:ea:38:ee:cd:9a:82:1d: c2:08:bf:2f:56:f6:27:be:4e:5c:cb:7b:a4:79:b6:5e:47:94: ab:58:9e:d5:ee:08:ca:67:9a:9e:b9:b2:c4:10:02:be:68:ff: 37:45:df:d3:8c:4d:53:18:01:97:c4:17:92:32:b6:13:a6:e6: df:de:f3:8d:0f:72:8c:32:4a:74:cb:81:33:cc:9b:ff:9c:a3: aa:97:88:93:1b:0e:54:13:e9:10:0e:26:8d:43:b3:da:8e:0c: e5:79:aa:48:ea:19:4e:06:e2:9f:7e:3f:45:62:76:50:41:cf: 25:0c:42:4f:46:12:93:f2:97:93:0b:c4:c4:ea:1f:13:5e:fc: c0:be:2c:53:6e:b6:3e:c3:a5:af:b8:1c:64:7d:25:bc:81:c9: bd:d1:e5:1b:63:11:9c:cb:0d:16:62:55:af:ea:43:3e:d8:7f: b4:79:ff:4c:4f:1d:74:69:a2:c8:52:cf:25:49:8a:31:0a:31: 98:2f:3c:96:72:a9:94:5c:0c:6d:06:91:73:ab:0a:d1:77:13: 7e:5e:99:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXLDDw5FC1RbPq2NGKMyMyJ+ygvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQzMEMzMDA1ODdGNkQ4MUJFOUI1NTQ0M0VBOEVFOTQy MjlGQ0YzNDAeFw0yNjA5MjMxMzMzMDFaFw0yNjA5MjQxNDQwMDFaMDMxMTAvBgNV BAMTKDRFNDM2NENFRTIyNzRFMUIzRkM4ODI2QjNDRTk0OTlDRkQyNzE4Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rGkUbeqJDY/atMhETA01W2Fp 5Q1vsyfdjAZwR2IXiLRAdx2/2gcIcP/itCRzUE4yNlntjQdBI+ew4n/mcfAwPi7B hR9B+Y/dr+XiOveeC7dUJ66IYL55h4gTRL1TtfL9uergcOaKIkiGiO4//Ac5J5KS 4bcV8P6YR2sS3aatSI3ksQgnurBB/RoD1jVMGMsP4reR9PREC5hA+9UggVwfljaA BHfanfmHfw7pOodw/1VArbXbvaHrUxP43mmgOaybcAtFxqaAqHf0kQGiT1Cc4xOv AlMURGqM7p7NTPYk8nKq8tG7KxaEa3a4uwsys8aedmzFPyrGXV1ZjphiqidpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTkNkzuInThs/yIJrPOlJnP0nGMowHwYDVR0j BBgwFoAULTDDAFh/bYG+m1VEPqjulCKfzzQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTRkY2VmNjUtNWRlMy00MTI5LWFjMjctNzcwNmQ3MjY2MDAxLzAvMkQzMEMzMDA1 ODdGNkQ4MUJFOUI1NTQ0M0VBOEVFOTQyMjlGQ0YzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDMwQzMwMDU4N0Y2RDgxQkU5QjU1NDQzRUE4RUU5NDIyOUZD RjM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMkQzMEMzMDA1ODdGNkQ4MUJFOUI1NTQ0M0VBOEVF OTQyMjlGQ0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALi8y8Vdd4lFdH3xaUV66arY/j213kwwgm67 wJ1JyKZLJqgqtF94PXhw9KHb5ptX6jjuzZqCHcIIvy9W9ie+TlzLe6R5tl5HlKtY ntXuCMpnmp65ssQQAr5o/zdF39OMTVMYAZfEF5IythOm5t/e840PcowySnTLgTPM m/+co6qXiJMbDlQT6RAOJo1Ds9qODOV5qkjqGU4G4p9+P0VidlBBzyUMQk9GEpPy l5MLxMTqHxNe/MC+LFNutj7Dpa+4HGR9JbyByb3R5RtjEZzLDRZiVa/qQz7Yf7R5 /0xPHXRposhSzyVJijEKMZgvPJZyqZRcDG0GkXOrCtF3E35emU8= -----END CERTIFICATE-----Generated at Thu Sep 24 00:32:33 2026 by rpki-client