$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft File: 2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft (raw, json) Hash identifier: AO+l8RYfN9Fgtd0QQ5Uj0YnW03E3lnQNWlT2V7MjIGM= Subject key identifier: 01:ED:E0:79:15:76:FE:2A:1F:B4:37:03:63:70:66:19:07:38:ED:8C Authority key identifier: 2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32 Certificate issuer: /CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32 Certificate serial: 1F020E4015B104B0274F87F48689C1F9696FD378 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft Manifest number: C8 Signing time: Mon 28 Sep 2026 14:12:18 +0000 Manifest this update: Mon 28 Sep 2026 14:07:18 +0000 Manifest next update: Tue 29 Sep 2026 14:46:18 +0000 Files and hashes: 1: 2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl (hash: Ku14DYuKJBOgnlIiaDhdhEss4BkX3M3WHN/EpBhOngY=) 2: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: WTrF0cDS2UOT2PvqICS4rHLAPEa2DituaEKy6TilvQo=) 3: 3130332e35322e36302e302f32342d3234203d3e20313339343237.roa (hash: oRYTuCJLLdMWXGYdD1e1WCx/FrIV0BiHCyH2sk8DrtM=) 4: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: gQZiPSYPZragbcbOQFwUKBcBf5Wr0XRio1UQ/GfXKcY=) 5: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: rpaRQ6pLcg3h8lZWS5mZP3KVaWJuOAbOO/JXcmWKPAY=) 6: 3130332e35322e36302e302f32332d3233203d3e20313339343237.roa (hash: wZpRBXgVxARx5THQhkidt3uYEJCBivcYi7zf6PFHOe8=) 7: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: Ks9YnRvxTe5fupbuzzjnQ7H1k8qTkpLLIojCNDLV9tI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:02:0e:40:15:b1:04:b0:27:4f:87:f4:86:89:c1:f9:69:6f:d3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32 Validity Not Before: Sep 28 14:07:18 2026 GMT Not After : Sep 29 14:46:18 2026 GMT Subject: CN=01EDE0791576FE2A1FB43703637066190738ED8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b5:5a:d3:42:70:9d:12:af:65:18:b9:ec:0e: 1f:58:51:1f:f1:ec:eb:55:5b:95:21:19:42:51:e0: 8a:9e:06:fa:d4:81:83:dc:6c:d0:56:3b:81:e3:58: 3a:38:0d:45:0c:2b:c5:1b:96:a8:23:97:1a:45:20: 49:a5:0d:ef:5e:26:3d:6b:06:8c:65:8d:71:77:91: b2:14:08:55:70:e9:75:89:7c:5d:f3:04:25:b3:ad: ba:7f:75:e8:22:7b:09:70:78:0b:30:d8:a8:37:39: 85:e2:1b:0b:52:6b:74:14:cd:13:73:8f:7e:60:7d: 5d:29:0d:55:4e:9e:92:4c:fb:55:71:d2:15:fa:10: 05:11:7a:34:1f:87:2f:32:8f:6f:fe:d1:94:97:f5: 85:42:e0:ba:a8:87:91:d8:b3:f6:73:bf:ad:f4:f7: f6:9e:a2:1b:75:e8:a8:d8:13:e0:92:a9:af:74:d5: 34:53:1d:c5:34:52:fb:f1:fd:67:67:6e:45:62:45: 4c:c2:80:1b:8a:b6:77:2c:bf:63:90:b6:28:f8:e9: 73:56:7e:7a:9f:1d:38:0c:2f:74:c0:5d:f2:16:1c: c7:52:16:80:68:0e:07:3f:c8:03:61:92:87:e3:e0: 6e:15:48:46:fe:44:8b:2f:6e:55:75:0c:5c:17:27: 54:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:ED:E0:79:15:76:FE:2A:1F:B4:37:03:63:70:66:19:07:38:ED:8C X509v3 Authority Key Identifier: keyid:2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ce:ba:e6:ed:09:c8:7a:b8:e2:ba:cb:63:1f:97:34:3b:1e: 5f:8c:32:54:af:2d:d2:57:b2:f2:fe:2c:59:ca:c7:b5:ce:1c: 39:15:0a:34:ef:ea:36:7d:e0:cf:22:ba:c3:78:f9:02:0b:a4: 2a:e5:8a:db:7e:aa:74:f3:85:19:bc:87:ee:0f:e0:37:57:68: eb:98:d9:2b:70:15:65:0c:c4:b5:4f:3f:e4:af:15:e4:9a:7a: f6:c8:62:1a:42:c7:69:64:47:21:88:7d:0c:1c:79:48:59:98: c4:ee:1f:c6:11:4d:6e:4c:19:ed:2a:ae:a7:ba:4c:40:73:a1: 4a:85:20:4d:37:d8:1a:6c:26:cf:b3:67:0b:a6:9d:c2:92:d2: f0:19:c6:fc:74:eb:91:62:55:cd:c0:54:bb:c7:fd:1f:98:da: ad:51:6e:f6:ee:a7:b9:18:22:4c:fb:54:65:80:1e:e5:f1:15: bf:0e:13:87:9c:51:c1:36:23:d4:92:68:ed:8f:74:8f:82:a4: f6:1f:59:e5:5e:96:14:b1:16:05:c3:95:44:6d:61:22:33:3f: e7:17:57:f2:26:83:95:ed:48:bd:6c:57:e2:5e:81:3c:40:24: 08:7e:60:7f:0d:3b:b7:a8:e6:e6:b4:59:28:0d:e4:fd:f1:cd: f9:6a:c6:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHwIOQBWxBLAnT4f0honB+Wlv03gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCRDgxMjk1RUEzRkEzODY3MDgyMDcyRDFCREU0MUNC RkIzRkIzMjAeFw0yNjA5MjgxNDA3MThaFw0yNjA5MjkxNDQ2MThaMDMxMTAvBgNV BAMTKDAxRURFMDc5MTU3NkZFMkExRkI0MzcwMzYzNzA2NjE5MDczOEVEOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWtVrTQnCdEq9lGLnsDh9YUR/x 7OtVW5UhGUJR4IqeBvrUgYPcbNBWO4HjWDo4DUUMK8UblqgjlxpFIEmlDe9eJj1r BoxljXF3kbIUCFVw6XWJfF3zBCWzrbp/degiewlweAsw2Kg3OYXiGwtSa3QUzRNz j35gfV0pDVVOnpJM+1Vx0hX6EAURejQfhy8yj2/+0ZSX9YVC4Lqoh5HYs/Zzv630 9/aeoht16KjYE+CSqa901TRTHcU0Uvvx/WdnbkViRUzCgBuKtncsv2OQtij46XNW fnqfHTgML3TAXfIWHMdSFoBoDgc/yANhkofj4G4VSEb+RIsvblV1DFwXJ1T/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAe3geRV2/ioftDcDY3BmGQc47YwwHwYDVR0j BBgwFoAULL2BKV6j+jhnCCBy0b3kHL+z+zIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDYxYjhjY2MtNmMyMi00MjRlLTk2MTQtOGFiOGFkMjg4NDljLzAvMkNCRDgxMjk1 RUEzRkEzODY3MDgyMDcyRDFCREU0MUNCRkIzRkIzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0JEODEyOTVFQTNGQTM4NjcwODIwNzJEMUJERTQxQ0JGQjNG QjMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDYxYjhjY2MtNmMyMi00MjRlLTk2 MTQtOGFiOGFkMjg4NDljLzAvMkNCRDgxMjk1RUEzRkEzODY3MDgyMDcyRDFCREU0 MUNCRkIzRkIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7OuubtCch6uOK6y2MflzQ7Hl+MMlSvLdJX svL+LFnKx7XOHDkVCjTv6jZ94M8iusN4+QILpCrlitt+qnTzhRm8h+4P4DdXaOuY 2StwFWUMxLVPP+SvFeSaevbIYhpCx2lkRyGIfQwceUhZmMTuH8YRTW5MGe0qrqe6 TEBzoUqFIE032BpsJs+zZwumncKS0vAZxvx065FiVc3AVLvH/R+Y2q1Rbvbup7kY Ikz7VGWAHuXxFb8OE4ecUcE2I9SSaO2PdI+CpPYfWeVelhSxFgXDlURtYSIzP+cX V/Img5XtSL1sV+JegTxAJAh+YH8NO7eo5ua0WSgN5P3xzflqxlU= -----END CERTIFICATE-----Generated at Tue Sep 29 02:35:50 2026 by rpki-client