$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft File: 2CE9A084598867F6677FDE09C272DA8D05C480FC.mft (raw, json) Hash identifier: gPR+5mMKaBTU4bhjbvnbycRPN+T6rYX6Mxt8S7ZGjR4= Subject key identifier: A9:80:AB:09:20:FF:49:62:98:FC:15:BA:84:F6:29:EE:27:07:C9:C3 Authority key identifier: 2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC Certificate issuer: /CN=2CE9A084598867F6677FDE09C272DA8D05C480FC Certificate serial: 4CFE5220B4923643204B5E072C5ADAFFD6400377 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 04:41:50 +0000 Manifest this update: Wed 23 Sep 2026 04:36:50 +0000 Manifest next update: Thu 24 Sep 2026 08:39:50 +0000 Files and hashes: 1: 2CE9A084598867F6677FDE09C272DA8D05C480FC.crl (hash: q1j2jtVvu17EUXhOPLEEOfJI2NJ12QXk/5R/e2JpfDE=) 2: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: 7nMz4s5YYhUtNRJIR+ORKIg42vTypWbintD4uEN6yZw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fe:52:20:b4:92:36:43:20:4b:5e:07:2c:5a:da:ff:d6:40:03:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CE9A084598867F6677FDE09C272DA8D05C480FC Validity Not Before: Sep 23 04:36:50 2026 GMT Not After : Sep 24 08:39:50 2026 GMT Subject: CN=A980AB0920FF496298FC15BA84F629EE2707C9C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:7a:60:60:4f:11:96:27:b6:a5:42:e6:2d: f7:a8:3d:89:28:19:5b:34:2f:a4:a5:51:22:af:9e: d0:38:1f:c7:2c:a7:96:d3:1e:18:61:ca:3e:bd:5d: 24:47:81:b5:ff:47:1c:7a:ab:04:bf:92:ea:02:be: 6c:db:38:f0:c7:a9:e7:a2:80:63:83:71:80:c6:37: dd:7e:65:37:5e:71:3b:c9:c4:3c:66:07:fb:2b:10: bb:18:af:3c:d4:82:97:af:b9:31:68:2d:20:15:66: 06:59:9a:25:d7:36:81:e6:22:f6:f6:dd:85:b4:56: 0c:59:84:7e:8f:91:f9:9f:ab:42:f7:41:3c:e0:62: 31:4c:08:d9:c8:5b:4f:13:0e:72:dc:1f:2c:09:46: 0d:40:1d:a1:ad:93:f4:5f:9c:dc:f9:00:45:23:82: c6:ea:ee:a1:ec:61:24:37:1e:d1:29:e7:f5:f4:94: 45:0d:33:5b:af:c8:47:19:ca:4f:d2:68:63:20:5f: 8c:1c:83:71:bd:48:5e:6d:6c:51:e7:98:6f:c3:00: d2:28:56:2f:cb:de:66:de:49:11:9e:91:63:32:2d: 3d:79:9a:56:b3:0e:08:c0:69:c1:95:be:16:a6:f1: cd:f4:6b:bd:c4:f8:5f:7c:25:d5:08:3c:18:94:fa: 96:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:80:AB:09:20:FF:49:62:98:FC:15:BA:84:F6:29:EE:27:07:C9:C3 X509v3 Authority Key Identifier: keyid:2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:20:5e:58:d6:56:37:29:26:a2:a5:42:0e:f2:3e:d4:68:3a: 49:1c:67:da:76:6f:4a:a9:b5:ef:8d:8a:55:88:31:d9:1a:ff: 44:eb:06:00:f4:50:1c:12:df:30:72:de:6f:e3:cd:23:6a:db: 56:0c:09:f1:de:94:ca:18:95:6b:bc:51:7c:9a:b9:06:57:79: de:6a:f7:fe:3b:ef:9d:9f:c0:1f:96:53:47:5d:19:74:05:13: 4e:2c:e8:0f:07:65:d9:cc:be:7b:f0:8c:21:5f:4a:3b:73:b2: 5c:1d:d7:8d:ba:d6:45:db:d2:98:6a:f0:15:2a:3b:57:23:4f: 71:dc:fd:da:a1:8d:c8:a2:32:56:27:b5:7e:69:e0:07:45:a9: f9:cf:35:2f:37:24:87:b4:2f:f4:70:e6:7d:a2:5e:da:0f:a7: b5:91:5c:d6:da:cb:f9:80:8a:e6:b7:18:9c:08:e8:3a:78:8a: 6d:39:6d:71:87:c1:31:96:1d:db:63:00:82:66:b6:e4:60:87: a0:b2:b4:b2:64:0f:b7:8c:d3:c6:2b:24:38:ef:58:f3:e3:af: 98:b4:2c:f3:4c:60:4e:b0:a9:78:7d:71:32:ca:ab:b2:05:fd: 34:a2:fa:3e:e0:ce:0f:f4:cb:d2:b2:57:d5:03:c7:77:ab:9b: 14:ac:3c:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTP5SILSSNkMgS14HLFra/9ZAA3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNFOUEwODQ1OTg4NjdGNjY3N0ZERTA5QzI3MkRBOEQw NUM0ODBGQzAeFw0yNjA5MjMwNDM2NTBaFw0yNjA5MjQwODM5NTBaMDMxMTAvBgNV BAMTKEE5ODBBQjA5MjBGRjQ5NjI5OEZDMTVCQTg0RjYyOUVFMjcwN0M5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI5HpgYE8Rlie2pULmLfeoPYko GVs0L6SlUSKvntA4H8csp5bTHhhhyj69XSRHgbX/Rxx6qwS/kuoCvmzbOPDHqeei gGODcYDGN91+ZTdecTvJxDxmB/srELsYrzzUgpevuTFoLSAVZgZZmiXXNoHmIvb2 3YW0VgxZhH6Pkfmfq0L3QTzgYjFMCNnIW08TDnLcHywJRg1AHaGtk/RfnNz5AEUj gsbq7qHsYSQ3HtEp5/X0lEUNM1uvyEcZyk/SaGMgX4wcg3G9SF5tbFHnmG/DANIo Vi/L3mbeSRGekWMyLT15mlazDgjAacGVvham8c30a73E+F98JdUIPBiU+pZXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqYCrCSD/SWKY/BW6hPYp7icHycMwHwYDVR0j BBgwFoAULOmghFmIZ/Znf94JwnLajQXEgPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTliODE1MmUtYWE4Ni00ZDhhLTgxZGEtZTcxMDg2YjI5NTZjLzAvMkNFOUEwODQ1 OTg4NjdGNjY3N0ZERTA5QzI3MkRBOEQwNUM0ODBGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yQ0U5QTA4NDU5ODg2N0Y2Njc3RkRFMDlDMjcyREE4RDA1QzQ4 MEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvMkNFOUEwODQ1OTg4NjdGNjY3N0ZERTA5QzI3MkRB OEQwNUM0ODBGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcgXljWVjcpJqKlQg7yPtRoOkkcZ9p2b0qp te+NilWIMdka/0TrBgD0UBwS3zBy3m/jzSNq21YMCfHelMoYlWu8UXyauQZXed5q 9/47752fwB+WU0ddGXQFE04s6A8HZdnMvnvwjCFfSjtzslwd14261kXb0phq8BUq O1cjT3Hc/dqhjciiMlYntX5p4AdFqfnPNS83JIe0L/Rw5n2iXtoPp7WRXNbay/mA iua3GJwI6Dp4im05bXGHwTGWHdtjAIJmtuRgh6CytLJkD7eM08YrJDjvWPPjr5i0 LPNMYE6wqXh9cTLKq7IF/TSi+j7gzg/0y9KyV9UDx3ermxSsPDU= -----END CERTIFICATE-----Generated at Wed Sep 23 22:15:24 2026 by rpki-client