$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft File: 256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft (raw, json) Hash identifier: jHwhka00vtH31rEQ6h3Ko5pwefrTA9e6isEW+Bfp3N0= Subject key identifier: 15:F3:BD:A6:81:9B:C7:40:7B:35:B0:35:76:3B:A5:E8:0F:00:21:D1 Authority key identifier: 25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED Certificate issuer: /CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED Certificate serial: 31E41C1F4EB0C2FC7EDD6C788DF2E9BEFDA51F7C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 04:56:48 +0000 Manifest this update: Thu 24 Sep 2026 04:51:48 +0000 Manifest next update: Fri 25 Sep 2026 08:14:48 +0000 Files and hashes: 1: 256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl (hash: jcZjqdLVoMzDovNmAIoKzvIy5bf/7XIRSaUF5EXMjLE=) 2: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: cfTJoIKD7v5E50NDw9RdyVoXvRV8kIdsxzrTBtYWbZI=) 3: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: seLt9J4Omc3hnlGUE3OGC5XsPU9/YgeAHtEiSSm80kY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e4:1c:1f:4e:b0:c2:fc:7e:dd:6c:78:8d:f2:e9:be:fd:a5:1f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED Validity Not Before: Sep 24 04:51:48 2026 GMT Not After : Sep 25 08:14:48 2026 GMT Subject: CN=15F3BDA6819BC7407B35B035763BA5E80F0021D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2b:0e:01:a8:81:08:66:e9:5d:b2:3a:46:3a: 82:3a:d9:66:48:a4:d8:89:54:0b:37:25:fd:7b:dc: 38:39:18:8f:7d:7f:d2:9b:1f:3e:c7:15:be:d7:59: ac:87:7d:5e:ae:9f:38:ea:80:e1:73:fa:71:b5:62: 99:27:a8:17:13:6d:5c:94:47:ac:ff:bc:f3:db:b0: b6:80:50:18:b1:d4:ef:4d:59:30:ef:7d:04:35:ac: c3:5e:19:8e:60:ad:cb:52:5c:6f:37:6a:81:24:e9: 40:56:cb:b0:c4:90:ed:6e:ab:41:7b:f4:e6:fb:cd: a4:24:87:ed:05:df:a5:cd:91:ae:38:7a:ce:5c:47: bf:3a:30:74:df:4d:ae:bf:42:6c:a1:0b:3c:b3:e7: 55:3c:46:3b:c7:e6:c9:ec:2f:bd:64:37:25:e3:2c: 72:ff:68:ca:b0:28:99:fe:c6:95:7a:2a:1a:fc:34: 3b:40:ea:12:93:0f:d0:2e:91:c4:e8:18:16:3e:14: ab:3a:ca:34:ce:53:33:41:db:91:81:c4:d8:87:e4: fe:f3:f2:c4:85:8e:48:04:2d:84:a5:52:e7:10:e2: 5d:58:dc:dc:f0:b1:07:f0:71:1f:88:0f:e7:71:f7: c2:8c:36:5a:bf:ec:bc:b7:be:cf:52:4c:a0:c4:4b: 0b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F3:BD:A6:81:9B:C7:40:7B:35:B0:35:76:3B:A5:E8:0F:00:21:D1 X509v3 Authority Key Identifier: keyid:25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6f:4a:f0:c9:6a:32:ba:99:5f:e5:49:d6:46:83:00:5c:99: 22:b7:78:4b:d8:48:b6:8f:1c:ac:16:6f:59:3c:64:f5:ef:d1: 1c:cb:a8:b0:0a:63:71:13:78:c1:98:77:61:a1:cc:08:72:f6: 52:02:7b:a9:90:7f:12:33:0c:22:8f:a2:89:64:83:12:8a:ee: b6:92:f0:79:41:d7:e8:3e:cc:52:63:94:e2:19:5a:1f:e5:f3: 4b:fe:c1:a5:99:64:3b:71:a9:50:22:84:1f:7d:c1:22:9c:c1: 92:8a:9a:31:b5:fb:d9:58:a1:a8:39:31:10:a3:08:fa:9b:9f: c7:08:4b:8a:ac:b0:e3:4a:4e:9f:11:c5:e5:94:12:64:52:7f: 96:d0:24:fc:6f:15:f1:3f:8a:91:68:d2:25:b9:1a:d6:3e:3c: 38:44:dd:b3:86:c2:3e:ae:d2:b8:f7:db:db:0c:51:f2:21:bf: 6d:e8:7a:9f:d9:c6:4a:94:cb:70:67:07:88:2f:2c:32:42:9e: 3f:b7:b7:93:48:f5:49:69:2a:98:a6:a5:8a:24:29:f3:bf:83: 76:f8:f7:ed:c3:b2:f5:7c:2a:54:b8:bc:91:a3:f8:83:b4:12: 8b:9e:01:8e:98:e2:5e:2f:91:cc:04:bb:f8:99:b4:8e:d8:94: af:b9:eb:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMeQcH06wwvx+3Wx4jfLpvv2lH3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2RTAzQkMyRjFEQTRGOTAzMUU3MUM2ODE0RDAxOTBD NDQ5NDZFRDAeFw0yNjA5MjQwNDUxNDhaFw0yNjA5MjUwODE0NDhaMDMxMTAvBgNV BAMTKDE1RjNCREE2ODE5QkM3NDA3QjM1QjAzNTc2M0JBNUU4MEYwMDIxRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPKw4BqIEIZuldsjpGOoI62WZI pNiJVAs3Jf173Dg5GI99f9KbHz7HFb7XWayHfV6unzjqgOFz+nG1YpknqBcTbVyU R6z/vPPbsLaAUBix1O9NWTDvfQQ1rMNeGY5grctSXG83aoEk6UBWy7DEkO1uq0F7 9Ob7zaQkh+0F36XNka44es5cR786MHTfTa6/QmyhCzyz51U8RjvH5snsL71kNyXj LHL/aMqwKJn+xpV6Khr8NDtA6hKTD9AukcToGBY+FKs6yjTOUzNB25GBxNiH5P7z 8sSFjkgELYSlUucQ4l1Y3NzwsQfwcR+ID+dx98KMNlq/7Ly3vs9STKDESwuzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFfO9poGbx0B7NbA1djul6A8AIdEwHwYDVR0j BBgwFoAUJW4DvC8dpPkDHnHGgU0BkMRJRu0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZmZGMyYjctZjMwNS00ZTA3LWFhYzUtNDY5ZTkxMTNiMGI0LzAvMjU2RTAzQkMy RjFEQTRGOTAzMUU3MUM2ODE0RDAxOTBDNDQ5NDZFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTZFMDNCQzJGMURBNEY5MDMxRTcxQzY4MTREMDE5MEM0NDk0 NkVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvMjU2RTAzQkMyRjFEQTRGOTAzMUU3MUM2ODE0RDAx OTBDNDQ5NDZFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9vSvDJajK6mV/lSdZGgwBcmSK3eEvYSLaP HKwWb1k8ZPXv0RzLqLAKY3ETeMGYd2GhzAhy9lICe6mQfxIzDCKPoolkgxKK7raS 8HlB1+g+zFJjlOIZWh/l80v+waWZZDtxqVAihB99wSKcwZKKmjG1+9lYoag5MRCj CPqbn8cIS4qssONKTp8RxeWUEmRSf5bQJPxvFfE/ipFo0iW5GtY+PDhE3bOGwj6u 0rj329sMUfIhv23oep/ZxkqUy3BnB4gvLDJCnj+3t5NI9UlpKpimpYokKfO/g3b4 9+3DsvV8KlS4vJGj+IO0EoueAY6Y4l4vkcwEu/iZtI7YlK+564Y= -----END CERTIFICATE-----Generated at Thu Sep 24 08:32:48 2026 by rpki-client