$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft File: 2CFE6C04191B28EDA13984F5549231D1840AACEC.mft (raw, json) Hash identifier: qTsdpnjY3KUAxC5DezWrQqO7dbCeVlseLHWNAgzZkFA= Subject key identifier: 65:CD:40:2F:74:08:EA:89:A2:B0:36:05:CB:4B:71:D5:F6:42:F6:CB Authority key identifier: 2C:FE:6C:04:19:1B:28:ED:A1:39:84:F5:54:92:31:D1:84:0A:AC:EC Certificate issuer: /CN=2CFE6C04191B28EDA13984F5549231D1840AACEC Certificate serial: 2DD3BEFEFAAE8EC396DEE06A60D2A64925339902 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 23:45:25 +0000 Manifest this update: Wed 23 Sep 2026 23:40:25 +0000 Manifest next update: Fri 25 Sep 2026 00:18:25 +0000 Files and hashes: 1: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: z7Lqa5CkkfTSXbCBFY/k+Fz/ISz+SJw0HySx4HiNPMc=) 2: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: dFGJI1S/FQoqvRu6ehr7n/qth/1SKexx3mS7zWvVonM=) 3: 2CFE6C04191B28EDA13984F5549231D1840AACEC.crl (hash: wiXvANe6n27mBnF5sPqXzA/B9aPIXtDmszyFSmrDL3o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.crl rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d3:be:fe:fa:ae:8e:c3:96:de:e0:6a:60:d2:a6:49:25:33:99:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFE6C04191B28EDA13984F5549231D1840AACEC Validity Not Before: Sep 23 23:40:25 2026 GMT Not After : Sep 25 00:18:25 2026 GMT Subject: CN=65CD402F7408EA89A2B03605CB4B71D5F642F6CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:35:91:f9:75:97:19:90:8f:db:32:86:e1: 53:90:c2:03:c9:a2:51:8f:2d:c2:53:08:cb:4f:87: ef:34:42:69:98:a9:68:28:34:ef:39:4d:00:a9:37: 90:60:3d:e7:e5:40:34:27:d9:49:94:8a:63:99:69: 2a:5f:1b:d2:01:c6:9c:82:9d:f5:30:8d:62:b8:3d: a8:59:cd:93:85:30:88:79:06:5e:b5:65:9b:60:a1: 22:bd:93:ec:0d:db:6c:95:83:d7:20:dd:ee:41:05: 1d:8d:b3:f5:5b:24:07:5f:66:9b:25:81:d2:a7:50: 61:0f:64:92:8b:e2:d4:17:60:5a:27:c3:1d:bb:ed: 07:21:c0:7e:46:2d:a7:a9:e2:0c:2e:6b:63:38:3f: 27:4d:dd:e0:26:4d:fe:95:f8:75:61:d8:4e:68:23: 5a:d4:59:b2:ab:c6:75:1c:b4:d7:84:3c:73:76:65: 91:61:de:ad:a9:18:e8:05:fb:03:a6:13:e4:5a:38: 8e:f1:6a:fc:05:57:e9:bb:76:1a:71:7f:ac:22:8c: 94:25:73:8b:3c:a3:d5:d6:33:19:cd:fc:bb:71:e6: 8d:1e:8f:08:9b:2f:86:20:a5:b8:0c:5b:41:93:86: dd:60:11:bb:1d:0e:8e:77:1c:11:9d:c9:6a:ab:44: 17:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CD:40:2F:74:08:EA:89:A2:B0:36:05:CB:4B:71:D5:F6:42:F6:CB X509v3 Authority Key Identifier: keyid:2C:FE:6C:04:19:1B:28:ED:A1:39:84:F5:54:92:31:D1:84:0A:AC:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d6:63:b6:e2:99:39:88:e2:08:d0:96:cc:3e:cf:d5:d8:ca: 5e:0d:5a:a3:02:1b:56:e6:96:a9:3e:97:ff:c4:d8:1a:0a:fa: 30:b0:7a:eb:e2:f1:61:87:f9:62:95:bb:85:10:4e:c4:fd:2b: 84:65:30:99:e1:b1:bb:e9:c5:c4:d0:df:a0:91:31:83:3d:9b: 3b:87:87:fe:e8:3b:52:9c:be:de:d0:a5:f3:23:61:90:59:90: 38:b2:94:bb:f4:de:14:fd:40:c6:37:bd:c5:ed:ba:58:05:85: c0:ca:42:70:3a:5b:74:b0:f2:d0:ea:6b:cd:bf:52:b1:77:db: 1f:94:82:8d:97:22:05:db:ed:df:2c:30:f3:52:ef:80:f4:a2: 8a:15:8d:91:5a:6b:72:51:21:f4:14:ac:f7:fa:4b:89:4e:b4: 2d:a9:d5:b7:06:5c:bd:09:73:09:81:27:fd:17:c2:b7:f4:f5: 29:24:d7:34:bb:ec:b3:6a:4f:6b:44:4f:f8:4f:9e:12:b5:a4: a9:40:5c:3e:48:84:f6:1c:67:4d:d0:1c:89:29:b2:10:cc:67: bd:76:13:96:56:21:fa:81:c9:97:00:6a:46:4f:92:c6:5c:99: 75:72:88:f3:9e:85:6b:1a:cb:ee:af:9e:49:82:b5:11:5b:1c: af:71:d9:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULdO+/vqujsOW3uBqYNKmSSUzmQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRTZDMDQxOTFCMjhFREExMzk4NEY1NTQ5MjMxRDE4 NDBBQUNFQzAeFw0yNjA5MjMyMzQwMjVaFw0yNjA5MjUwMDE4MjVaMDMxMTAvBgNV BAMTKDY1Q0Q0MDJGNzQwOEVBODlBMkIwMzYwNUNCNEI3MUQ1RjY0MkY2Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnAzWR+XWXGZCP2zKG4VOQwgPJ olGPLcJTCMtPh+80QmmYqWgoNO85TQCpN5BgPeflQDQn2UmUimOZaSpfG9IBxpyC nfUwjWK4PahZzZOFMIh5Bl61ZZtgoSK9k+wN22yVg9cg3e5BBR2Ns/VbJAdfZpsl gdKnUGEPZJKL4tQXYFonwx277QchwH5GLaep4gwua2M4PydN3eAmTf6V+HVh2E5o I1rUWbKrxnUctNeEPHN2ZZFh3q2pGOgF+wOmE+RaOI7xavwFV+m7dhpxf6wijJQl c4s8o9XWMxnN/Ltx5o0ejwibL4YgpbgMW0GTht1gEbsdDo53HBGdyWqrRBfxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZc1AL3QI6omisDYFy0tx1fZC9sswHwYDVR0j BBgwFoAULP5sBBkbKO2hOYT1VJIx0YQKrOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU5MDhiODMtN2Y0NC00NmUwLTg1MzUtNmZiODRiNTlkNThhLzAvMkNGRTZDMDQx OTFCMjhFREExMzk4NEY1NTQ5MjMxRDE4NDBBQUNFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0ZFNkMwNDE5MUIyOEVEQTEzOTg0RjU1NDkyMzFEMTg0MEFB Q0VDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU5MDhiODMtN2Y0NC00NmUwLTg1 MzUtNmZiODRiNTlkNThhLzAvMkNGRTZDMDQxOTFCMjhFREExMzk4NEY1NTQ5MjMx RDE4NDBBQUNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLWY7bimTmI4gjQlsw+z9XYyl4NWqMCG1bm lqk+l//E2BoK+jCweuvi8WGH+WKVu4UQTsT9K4RlMJnhsbvpxcTQ36CRMYM9mzuH h/7oO1Kcvt7QpfMjYZBZkDiylLv03hT9QMY3vcXtulgFhcDKQnA6W3Sw8tDqa82/ UrF32x+Ugo2XIgXb7d8sMPNS74D0oooVjZFaa3JRIfQUrPf6S4lOtC2p1bcGXL0J cwmBJ/0Xwrf09Skk1zS77LNqT2tET/hPnhK1pKlAXD5IhPYcZ03QHIkpshDMZ712 E5ZWIfqByZcAakZPksZcmXVyiPOehWsay+6vnkmCtRFbHK9x2fo= -----END CERTIFICATE-----Generated at Thu Sep 24 12:02:11 2026 by rpki-client