$ rpki-client -vvvf rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft File: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft (raw, json) Hash identifier: MsNm8UMPFrBossyZzXyg9mn5N01fn4qGqEGVhp98LRg= Subject key identifier: 86:2C:D4:6B:73:48:45:A5:B6:9D:11:C4:9E:E9:00:DA:2E:97:A3:8B Authority key identifier: 2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A Certificate issuer: /CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A Certificate serial: 2BD78A6D5BCD03F93113C6527FECE75EE2308CBE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 04:51:42 +0000 Manifest this update: Thu 24 Sep 2026 04:46:42 +0000 Manifest next update: Fri 25 Sep 2026 04:53:42 +0000 Files and hashes: 1: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl (hash: klXsYjwB6RLULaXq630pMHTb9hqAebTUmB0AoEM7NfA=) 2: 3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa (hash: GzkXDWcauMWYNDn5MyFD1nDjKkP9ZpScdykpa6iOEak=) 3: 3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa (hash: VdJ1ZIQnNrJcWKeLJSeBvVO0FNQ/sxBZNurd+uNh3ek=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d7:8a:6d:5b:cd:03:f9:31:13:c6:52:7f:ec:e7:5e:e2:30:8c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A Validity Not Before: Sep 24 04:46:42 2026 GMT Not After : Sep 25 04:53:42 2026 GMT Subject: CN=862CD46B734845A5B69D11C49EE900DA2E97A38B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cb:a3:b4:a2:5b:2a:7a:bc:c8:d1:53:9a:88: a2:68:3a:af:90:a9:91:67:97:d2:97:5f:84:a1:84: b1:2d:c9:da:c6:47:ec:50:36:57:92:36:34:e9:69: c5:5b:f8:f1:6d:98:be:29:f1:18:34:a6:e8:05:38: 76:57:69:dd:9d:28:3d:d4:f9:d7:eb:11:e0:4c:a4: 86:f0:77:b6:ec:4d:2f:4e:5a:74:69:d3:65:89:04: 2c:5e:08:7a:ee:cb:57:15:57:8b:ad:06:2a:54:05: 64:f1:da:4c:b7:3c:5d:d1:4b:97:1e:24:78:d7:aa: e7:16:d3:2f:38:d4:5e:15:e8:1e:7b:24:09:46:cf: 12:2a:c7:40:f9:be:7a:fa:1d:5c:98:1e:4c:09:b6: 3f:56:e5:6c:36:de:66:f7:2b:3c:7f:38:97:6c:c7: e3:6a:2e:08:50:c1:55:42:6c:9e:33:91:40:e8:20: 35:87:39:ba:cc:b4:9f:88:f3:e4:69:d1:c3:88:fb: 51:e3:c1:74:6e:75:6b:8f:34:06:7f:d2:05:e2:5d: 05:de:2a:c8:50:ac:3c:df:55:1d:91:a8:1b:43:8b: aa:9c:89:ec:b0:5f:e2:8f:d7:1b:52:b7:c6:27:25: 7c:96:4f:80:41:0f:d5:3a:19:da:01:4a:8e:9c:5c: a7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2C:D4:6B:73:48:45:A5:B6:9D:11:C4:9E:E9:00:DA:2E:97:A3:8B X509v3 Authority Key Identifier: keyid:2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:7f:16:54:b3:45:c9:9d:e1:95:9a:36:bb:2d:20:32:78:ff: 62:54:7b:a5:0c:cb:fb:cb:b5:58:66:a8:a5:50:af:fa:cf:92: b0:d5:7f:d6:9d:68:8a:19:37:84:c0:f9:d4:80:3e:d0:e4:f3: be:1b:63:41:c3:1d:52:0e:d0:42:31:08:e3:f5:22:58:33:24: 41:4a:cc:94:ab:26:35:44:d7:e9:9b:17:c3:72:70:71:c1:ea: 4a:cd:d6:bd:ab:bf:dd:08:72:09:58:28:9f:1b:61:f9:8e:86: c0:17:91:21:5d:69:d7:f1:32:09:74:02:2b:4a:b9:61:30:d2: 8b:2f:9e:99:0a:bc:cf:c8:38:b6:73:3b:9c:a3:75:14:19:e1: f0:5e:0b:df:97:a5:4d:83:32:51:e5:8b:ca:f8:9a:80:4a:69: 5c:24:ca:39:4d:6f:e3:96:5f:e6:bf:39:eb:f0:42:be:3e:e9: 34:56:d4:5f:33:c3:db:32:da:c1:59:5c:09:c7:cd:28:b9:85: d3:99:68:e4:c4:e5:54:ad:f6:85:56:6e:9d:ce:51:ee:00:d5: a6:af:d8:13:df:31:00:ea:81:06:f1:ba:fc:d4:30:24:e2:6c: f3:f3:45:d1:b3:b0:0d:ca:0f:b1:06:9b:78:ee:a1:ef:e1:ba: b9:5d:56:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK9eKbVvNA/kxE8ZSf+znXuIwjL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJGQzc0MUFBMTc3MUZDNUNFNzc5RTRDRjg4QTVDM0FG NTJGOEU3QTAeFw0yNjA5MjQwNDQ2NDJaFw0yNjA5MjUwNDUzNDJaMDMxMTAvBgNV BAMTKDg2MkNENDZCNzM0ODQ1QTVCNjlEMTFDNDlFRTkwMERBMkU5N0EzOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCay6O0olsqerzI0VOaiKJoOq+Q qZFnl9KXX4ShhLEtydrGR+xQNleSNjTpacVb+PFtmL4p8Rg0pugFOHZXad2dKD3U +dfrEeBMpIbwd7bsTS9OWnRp02WJBCxeCHruy1cVV4utBipUBWTx2ky3PF3RS5ce JHjXqucW0y841F4V6B57JAlGzxIqx0D5vnr6HVyYHkwJtj9W5Ww23mb3Kzx/OJds x+NqLghQwVVCbJ4zkUDoIDWHObrMtJ+I8+Rp0cOI+1HjwXRudWuPNAZ/0gXiXQXe KshQrDzfVR2RqBtDi6qcieywX+KP1xtSt8YnJXyWT4BBD9U6GdoBSo6cXKdpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhizUa3NIRaW2nRHEnukA2i6Xo4swHwYDVR0j BBgwFoAUK/x0GqF3H8XOd55M+IpcOvUvjnowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWRiZDNhNTAtODMyZS00MTI3LTk0ZTEtNDhhY2UxNjRjZjI2LzAvMkJGQzc0MUFB MTc3MUZDNUNFNzc5RTRDRjg4QTVDM0FGNTJGOEU3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQkZDNzQxQUExNzcxRkM1Q0U3NzlFNENGODhBNUMzQUY1MkY4 RTdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWRiZDNhNTAtODMyZS00MTI3LTk0 ZTEtNDhhY2UxNjRjZjI2LzAvMkJGQzc0MUFBMTc3MUZDNUNFNzc5RTRDRjg4QTVD M0FGNTJGOEU3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABF/FlSzRcmd4ZWaNrstIDJ4/2JUe6UMy/vL tVhmqKVQr/rPkrDVf9adaIoZN4TA+dSAPtDk874bY0HDHVIO0EIxCOP1IlgzJEFK zJSrJjVE1+mbF8NycHHB6krN1r2rv90IcglYKJ8bYfmOhsAXkSFdadfxMgl0AitK uWEw0osvnpkKvM/IOLZzO5yjdRQZ4fBeC9+XpU2DMlHli8r4moBKaVwkyjlNb+OW X+a/OevwQr4+6TRW1F8zw9sy2sFZXAnHzSi5hdOZaOTE5VSt9oVWbp3OUe4A1aav 2BPfMQDqgQbxuvzUMCTibPPzRdGzsA3KD7EGm3juoe/hurldViI= -----END CERTIFICATE-----Generated at Thu Sep 24 11:39:30 2026 by rpki-client