$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft File: 2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft (raw, json) Hash identifier: Z0pQaEjg8V9408NyP95356uKeR8Xuh7l7+VotRGeBTs= Subject key identifier: 90:45:CD:40:0D:20:C6:6B:49:B1:5D:9E:D3:B7:C8:8C:23:C1:0D:5D Authority key identifier: 2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3 Certificate issuer: /CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3 Certificate serial: 649E5D39ED73239FD7CD0A85B07122DAC58BDEA5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 07:04:25 +0000 Manifest this update: Fri 25 Sep 2026 06:59:25 +0000 Manifest next update: Sat 26 Sep 2026 07:34:25 +0000 Files and hashes: 1: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: ba9T7QeA28DMOyzLlfoljNenw5738a58LQmu3hf+TMU=) 2: 2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl (hash: /+l2lON1FTFqwpfS0yWm5iJmJX4tvYFCKuPF6Mtx2wo=) 3: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: Fc1cIIy7yp6fwFNt9JFBozT8wGm732U+MIRuBDuRJKc=) 4: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: uD4zXPlmJIJvDYKeBCRvwCSXSW9r9c2Pd73kp0tq76c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 07:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:9e:5d:39:ed:73:23:9f:d7:cd:0a:85:b0:71:22:da:c5:8b:de:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3 Validity Not Before: Sep 25 06:59:25 2026 GMT Not After : Sep 26 07:34:25 2026 GMT Subject: CN=9045CD400D20C66B49B15D9ED3B7C88C23C10D5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:95:2b:34:b4:ce:fd:53:86:5d:cf:1a:57:22: 8e:74:4d:88:16:e7:6a:72:ee:d0:ee:58:31:9a:e4: 3a:e8:7d:0e:b5:14:01:4a:a4:7a:c1:89:85:33:6a: dd:c4:e5:4c:8f:2c:f9:22:5d:83:bd:53:f2:6b:40: 5d:b2:cb:d7:d4:34:ca:73:49:76:e2:89:aa:f8:33: 1a:5e:02:f7:c1:73:81:29:dc:6d:74:b9:15:9b:41: af:e9:df:6e:8d:7e:0b:71:f8:ca:26:f3:92:21:81: 77:ce:3e:ac:ec:11:c0:ce:48:1f:6e:91:1f:69:21: 5b:90:08:95:7e:b9:3a:99:c0:69:21:1e:fd:e0:7c: 52:c3:65:0a:4a:97:57:89:7f:aa:7a:01:6b:c6:47: c5:bd:88:85:e6:2e:de:79:1e:b4:1c:e2:fc:e8:e5: 48:2f:27:e2:f5:5b:45:fe:b8:55:17:f9:9a:32:cc: e6:c9:ad:e1:8b:f8:a2:dc:7f:0c:90:ee:5b:84:fc: 1a:d2:0a:34:f6:d8:25:f8:60:11:26:2e:f2:77:86: e5:09:0a:ec:97:8c:95:12:08:fc:f1:e5:a5:78:61: 98:c1:0d:8b:8a:36:26:a7:52:4a:11:e2:97:70:db: 3a:00:ab:16:e5:8e:4a:33:98:8b:3b:9c:8e:e0:8f: b0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:45:CD:40:0D:20:C6:6B:49:B1:5D:9E:D3:B7:C8:8C:23:C1:0D:5D X509v3 Authority Key Identifier: keyid:2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5b:3e:7f:a1:28:b2:75:c2:5e:3a:05:63:dd:02:36:7d:8d: a6:5c:19:8d:90:6b:f0:87:a1:79:e1:15:df:9d:70:2d:64:25: 92:3a:2f:b0:ea:93:79:97:76:34:73:8a:db:5b:6d:18:bb:9d: c8:1f:43:5e:01:a6:bf:45:fd:4e:47:da:54:d8:1f:26:11:01: 11:52:50:44:75:44:57:b1:2b:c1:b4:95:0e:a0:bf:f1:a6:6a: 4f:14:03:38:fa:a3:56:4e:82:ef:04:6b:8a:ba:47:9a:b7:c5: d7:a8:d0:94:cc:d6:67:08:9f:cb:80:67:84:ea:d4:fa:9a:f0: b3:5b:2e:09:cb:59:88:44:5a:58:98:46:4f:1d:e7:3f:5b:c7: 55:55:75:11:44:d6:d7:50:eb:7d:c4:2a:a1:ee:c0:bb:7e:61: e3:8a:76:54:71:88:93:a2:b2:31:4d:0a:1c:16:91:91:75:02: a6:ed:18:44:f9:52:d3:cb:49:63:71:71:1e:e4:6c:ef:22:5e: 9e:11:6f:43:4a:04:84:df:40:27:6c:74:01:f1:a0:97:f7:7b: 8d:3c:6b:11:ad:42:0e:63:5a:3d:e5:c7:64:ae:10:9c:24:18: c8:c9:73:49:e2:b4:89:49:61:f6:a7:fe:64:16:9c:39:d8:28: 8e:0b:4f:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZJ5dOe1zI5/XzQqFsHEi2sWL3qUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZGOUQ1MkFEQzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3NzZE Q0I0MzNCMzAeFw0yNjA5MjUwNjU5MjVaFw0yNjA5MjYwNzM0MjVaMDMxMTAvBgNV BAMTKDkwNDVDRDQwMEQyMEM2NkI0OUIxNUQ5RUQzQjdDODhDMjNDMTBENUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTlSs0tM79U4ZdzxpXIo50TYgW 52py7tDuWDGa5DrofQ61FAFKpHrBiYUzat3E5UyPLPkiXYO9U/JrQF2yy9fUNMpz SXbiiar4MxpeAvfBc4Ep3G10uRWbQa/p326Nfgtx+Mom85IhgXfOPqzsEcDOSB9u kR9pIVuQCJV+uTqZwGkhHv3gfFLDZQpKl1eJf6p6AWvGR8W9iIXmLt55HrQc4vzo 5UgvJ+L1W0X+uFUX+ZoyzObJreGL+KLcfwyQ7luE/BrSCjT22CX4YBEmLvJ3huUJ CuyXjJUSCPzx5aV4YZjBDYuKNianUkoR4pdw2zoAqxbljkozmIs7nI7gj7DJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkEXNQA0gxmtJsV2e07fIjCPBDV0wHwYDVR0j BBgwFoAUL/nVKtx3f6POUar5RIuHdty0M7MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2MwNzVlZjYtYTI1MS00N2RkLThkZGEtY2FkZmY0OTdhN2U1LzAvMkZGOUQ1MkFE Qzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3NzZEQ0I0MzNCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkY5RDUyQURDNzc3RkEzQ0U1MUFBRjk0NDhCODc3NkRDQjQz M0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMkZGOUQ1MkFEQzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3 NzZEQ0I0MzNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtbPn+hKLJ1wl46BWPdAjZ9jaZcGY2Qa/CH oXnhFd+dcC1kJZI6L7Dqk3mXdjRzittbbRi7ncgfQ14Bpr9F/U5H2lTYHyYRARFS UER1RFexK8G0lQ6gv/Gmak8UAzj6o1ZOgu8Ea4q6R5q3xdeo0JTM1mcIn8uAZ4Tq 1Pqa8LNbLgnLWYhEWliYRk8d5z9bx1VVdRFE1tdQ633EKqHuwLt+YeOKdlRxiJOi sjFNChwWkZF1AqbtGET5UtPLSWNxcR7kbO8iXp4Rb0NKBITfQCdsdAHxoJf3e408 axGtQg5jWj3lx2SuEJwkGMjJc0nitIlJYfan/mQWnDnYKI4LT40= -----END CERTIFICATE-----Generated at Fri Sep 25 14:48:20 2026 by rpki-client