$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft File: 2CE9A084598867F6677FDE09C272DA8D05C480FC.mft (raw, json) Hash identifier: HLhfJc0dkn4fXkyV4dwwDKpYsRcLDggLrfkX3cOacfQ= Subject key identifier: 73:BF:80:C5:09:0F:DE:12:6E:39:5C:B6:A0:11:B2:1B:A5:3C:A7:C7 Authority key identifier: 2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC Certificate issuer: /CN=2CE9A084598867F6677FDE09C272DA8D05C480FC Certificate serial: 66684339F49A97A6C1AF82DAE88FF55F9B6988F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 03:08:19 +0000 Manifest this update: Sat 14 Nov 2026 03:03:19 +0000 Manifest next update: Sun 15 Nov 2026 05:11:19 +0000 Files and hashes: 1: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: 7nMz4s5YYhUtNRJIR+ORKIg42vTypWbintD4uEN6yZw=) 2: 2CE9A084598867F6677FDE09C272DA8D05C480FC.crl (hash: +/4MGlboii62SrdtLWdepYUUSKpulsaY4vxIVuGEY24=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 05:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:68:43:39:f4:9a:97:a6:c1:af:82:da:e8:8f:f5:5f:9b:69:88:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CE9A084598867F6677FDE09C272DA8D05C480FC Validity Not Before: Nov 14 03:03:19 2026 GMT Not After : Nov 15 05:11:19 2026 GMT Subject: CN=73BF80C5090FDE126E395CB6A011B21BA53CA7C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2a:10:fd:00:f3:e1:96:27:51:8d:46:23:f1: 79:15:e4:a5:69:60:e5:22:a9:ec:46:92:fc:d5:4b: aa:06:52:df:ca:21:d1:db:75:df:e7:53:85:4b:e6: 9a:75:d2:64:fa:6a:14:e6:b6:55:eb:0b:17:55:b1: 3e:8e:6c:f7:1e:22:54:1d:75:5b:70:21:a5:56:65: a2:f9:e1:7a:25:7d:3a:ef:6e:90:c9:54:2a:ba:a2: b4:6d:00:73:d1:38:9d:93:2b:99:e8:7b:29:3b:41: f5:49:65:d9:f7:81:95:cd:51:23:38:59:f0:88:34: b6:c0:8f:62:e6:03:13:17:83:f0:bc:78:bb:4b:cd: 6d:32:5f:5e:af:c7:f8:94:ae:6f:f4:f4:96:39:11: 7b:7e:72:84:ba:8b:a8:1d:e8:38:c8:eb:0f:2d:f5: af:d3:cd:6b:12:04:60:70:b1:26:71:9c:0e:20:5d: 2c:6e:52:c9:28:10:a3:dd:91:5a:38:c3:ac:6f:4a: d5:ef:51:82:f0:07:6a:9a:ee:27:16:2a:8f:7f:4e: 7a:fc:a0:7a:ad:6c:f7:d1:17:f9:b7:7e:57:aa:1c: f8:4f:e8:6f:32:75:6c:cd:ae:3a:07:99:bc:e5:91: e0:76:51:8e:af:a8:31:f1:b3:f2:79:86:60:12:77: be:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BF:80:C5:09:0F:DE:12:6E:39:5C:B6:A0:11:B2:1B:A5:3C:A7:C7 X509v3 Authority Key Identifier: keyid:2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:fb:7e:05:aa:67:2c:d2:e7:e2:66:c8:bc:17:ea:c3:dc:07: 04:03:81:d5:f8:e8:eb:aa:67:08:8d:71:0b:83:9a:8b:a4:8b: 35:be:ef:e9:df:1c:61:6a:64:e4:96:e7:b6:19:69:d3:0c:0a: 9b:0b:ab:4c:e2:b8:b2:d5:34:1c:95:b2:c3:73:13:30:dd:8c: 9f:2b:55:8f:4a:8e:76:bc:65:24:4a:3c:85:78:48:5a:a8:19: d3:1f:55:55:f0:91:88:c5:43:0b:e4:ef:e0:1c:7c:75:53:fc: 46:03:3b:a9:fe:23:91:80:29:a6:5c:c0:43:a3:36:35:16:f4: 89:7a:f3:13:a0:0c:cd:22:da:01:d1:9c:ea:31:88:1f:cd:db: 89:33:c4:a7:d5:95:39:f1:d0:97:96:fc:6c:4e:c1:e0:90:ea: 10:c0:35:36:1b:28:37:97:d4:06:c8:dd:2d:20:db:6e:5e:e4: 4d:bb:0c:85:48:23:7b:ea:10:a3:21:51:ab:f5:85:99:77:b6: 17:b7:49:10:8d:ba:c0:8f:d9:57:bd:bf:e1:43:32:b4:dd:de: 0a:cf:2c:c7:12:e7:ad:45:71:d1:4f:f2:d2:66:28:95:22:f0: c5:e7:48:c4:e2:8d:96:07:21:a7:52:6d:38:2d:3a:11:ca:05: 76:92:8c:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZmhDOfSal6bBr4La6I/1X5tpiPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNFOUEwODQ1OTg4NjdGNjY3N0ZERTA5QzI3MkRBOEQw NUM0ODBGQzAeFw0yNjExMTQwMzAzMTlaFw0yNjExMTUwNTExMTlaMDMxMTAvBgNV BAMTKDczQkY4MEM1MDkwRkRFMTI2RTM5NUNCNkEwMTFCMjFCQTUzQ0E3QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1KhD9APPhlidRjUYj8XkV5KVp YOUiqexGkvzVS6oGUt/KIdHbdd/nU4VL5pp10mT6ahTmtlXrCxdVsT6ObPceIlQd dVtwIaVWZaL54XolfTrvbpDJVCq6orRtAHPROJ2TK5noeyk7QfVJZdn3gZXNUSM4 WfCINLbAj2LmAxMXg/C8eLtLzW0yX16vx/iUrm/09JY5EXt+coS6i6gd6DjI6w8t 9a/TzWsSBGBwsSZxnA4gXSxuUskoEKPdkVo4w6xvStXvUYLwB2qa7icWKo9/Tnr8 oHqtbPfRF/m3fleqHPhP6G8ydWzNrjoHmbzlkeB2UY6vqDHxs/J5hmASd77JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc7+AxQkP3hJuOVy2oBGyG6U8p8cwHwYDVR0j BBgwFoAULOmghFmIZ/Znf94JwnLajQXEgPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTliODE1MmUtYWE4Ni00ZDhhLTgxZGEtZTcxMDg2YjI5NTZjLzAvMkNFOUEwODQ1 OTg4NjdGNjY3N0ZERTA5QzI3MkRBOEQwNUM0ODBGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yQ0U5QTA4NDU5ODg2N0Y2Njc3RkRFMDlDMjcyREE4RDA1QzQ4 MEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvMkNFOUEwODQ1OTg4NjdGNjY3N0ZERTA5QzI3MkRB OEQwNUM0ODBGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFb7fgWqZyzS5+JmyLwX6sPcBwQDgdX46Ouq ZwiNcQuDmoukizW+7+nfHGFqZOSW57YZadMMCpsLq0ziuLLVNByVssNzEzDdjJ8r VY9Kjna8ZSRKPIV4SFqoGdMfVVXwkYjFQwvk7+AcfHVT/EYDO6n+I5GAKaZcwEOj NjUW9Il68xOgDM0i2gHRnOoxiB/N24kzxKfVlTnx0JeW/GxOweCQ6hDANTYbKDeX 1AbI3S0g225e5E27DIVII3vqEKMhUav1hZl3the3SRCNusCP2Ve9v+FDMrTd3grP LMcS561FcdFP8tJmKJUi8MXnSMTijZYHIadSbTgtOhHKBXaSjNU= -----END CERTIFICATE-----Generated at Sat Nov 14 22:20:53 2026 by rpki-client