$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft File: 2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft (raw, json) Hash identifier: QP2vMuRWJG2vLDrE5l+01tlDiAN/+Uzzp7CWAY3ZGoo= Subject key identifier: 74:3A:4A:7F:81:2D:21:68:39:2C:04:6D:DC:49:FF:DA:DF:B6:32:AE Authority key identifier: 2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88 Certificate issuer: /CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88 Certificate serial: 468FEDB84A0B48DBA0FA6EF0B936FE85A9B98493 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 08:15:49 +0000 Manifest this update: Thu 24 Sep 2026 08:10:49 +0000 Manifest next update: Fri 25 Sep 2026 11:33:49 +0000 Files and hashes: 1: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: BwjnFjz5sFQQdxCMf3i5N8Aax7h3Sveq3upFP+p+HDs=) 2: 2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl (hash: T9pNzK1TsA0RmMC5fvNVS6roMDMnLwC1SZLMVzbL/cQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:8f:ed:b8:4a:0b:48:db:a0:fa:6e:f0:b9:36:fe:85:a9:b9:84:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88 Validity Not Before: Sep 24 08:10:49 2026 GMT Not After : Sep 25 11:33:49 2026 GMT Subject: CN=743A4A7F812D2168392C046DDC49FFDADFB632AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9f:86:ac:51:a5:40:66:8d:8b:89:f9:6e:4c: 89:b2:41:de:da:3b:76:63:9e:d1:da:08:20:29:0f: 71:9d:21:70:0d:67:f9:e7:ec:8a:8c:15:f2:ef:56: 93:47:90:04:33:15:3d:4b:92:dc:83:8b:ad:cd:58: 1a:5f:b8:13:43:44:24:37:4e:c4:3c:1c:e1:4a:df: 21:ce:ea:82:c4:cf:ef:4a:1e:be:e0:f0:ab:86:bd: fe:6c:d4:44:fd:fc:ac:c6:97:21:b7:3e:98:f4:8e: 0e:d6:bc:80:9b:7a:92:62:d9:a7:9d:6e:67:95:3e: 38:ba:9f:5d:5f:8e:00:78:98:77:dd:ce:47:8e:7d: be:cb:d8:57:a6:da:ba:12:d9:e1:a4:f2:9c:a1:56: b7:37:68:30:56:9c:64:84:cc:8e:e2:64:fe:f0:7f: d6:9d:24:3e:c1:5d:15:fe:f2:d7:d3:57:95:2c:3f: c3:37:de:94:de:e2:f8:80:bc:29:62:46:3d:2d:f4: b7:1f:c4:da:3c:65:94:ba:65:9e:63:1c:2c:82:36: 48:f0:98:db:14:f4:dd:d7:41:42:32:33:1a:fe:2c: d8:32:00:45:5a:05:c2:76:49:b2:77:3f:ad:f0:13: e8:e6:1c:76:00:f9:82:1a:a6:a0:03:f1:4e:09:44: b4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3A:4A:7F:81:2D:21:68:39:2C:04:6D:DC:49:FF:DA:DF:B6:32:AE X509v3 Authority Key Identifier: keyid:2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:b2:8b:a3:75:30:09:69:8e:42:d8:d1:b1:11:7a:d5:13:bf: a0:65:20:8f:de:87:8b:09:20:89:01:da:93:ff:3c:b6:e3:f1: 6f:dd:fa:08:ce:10:7c:a6:07:3c:21:92:1a:16:56:89:8a:89: 64:f6:60:5d:0b:29:59:f2:a9:c7:dd:3b:ae:53:e0:0c:da:23: be:d6:ce:32:6b:f2:03:ef:9d:90:40:62:4b:a5:a3:c9:a7:6f: c4:2f:d7:0d:bf:33:0d:83:de:3b:7d:cb:5d:d4:df:20:93:7a: 7f:fa:00:5a:b4:63:b1:67:e9:c1:c2:ec:fe:a3:d3:04:9b:63: 35:bf:b9:a3:b6:c6:87:6f:03:6c:67:e4:0a:ec:94:40:81:f6: 5c:0d:83:b9:b6:a0:1c:46:d2:50:b8:31:fc:ed:4a:b1:e2:2f: b9:1c:e7:3c:0d:b6:65:76:9b:6e:07:6b:b9:12:72:ed:71:c5: 81:98:1e:8f:9c:06:23:04:cf:c9:bd:58:5a:09:cb:16:32:71: 4c:bf:74:fe:aa:98:01:73:1f:e3:6b:09:a0:bf:b6:14:37:e3: db:6b:a5:78:f0:a5:22:31:f7:45:36:f5:2a:e1:eb:a9:26:1a: 2e:fa:6a:bd:d3:66:3f:c5:68:98:d2:4c:ff:5f:3f:38:91:68: 78:bc:a6:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURo/tuEoLSNug+m7wuTb+ham5hJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVCOENCRTdBNDc5Mjc3QUMwM0VFODBGMzY1REQ4ODNC RTM4REQ4ODAeFw0yNjA5MjQwODEwNDlaFw0yNjA5MjUxMTMzNDlaMDMxMTAvBgNV BAMTKDc0M0E0QTdGODEyRDIxNjgzOTJDMDQ2RERDNDlGRkRBREZCNjMyQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMn4asUaVAZo2LifluTImyQd7a O3ZjntHaCCApD3GdIXANZ/nn7IqMFfLvVpNHkAQzFT1LktyDi63NWBpfuBNDRCQ3 TsQ8HOFK3yHO6oLEz+9KHr7g8KuGvf5s1ET9/KzGlyG3Ppj0jg7WvICbepJi2aed bmeVPji6n11fjgB4mHfdzkeOfb7L2Fem2roS2eGk8pyhVrc3aDBWnGSEzI7iZP7w f9adJD7BXRX+8tfTV5UsP8M33pTe4viAvCliRj0t9LcfxNo8ZZS6ZZ5jHCyCNkjw mNsU9N3XQUIyMxr+LNgyAEVaBcJ2SbJ3P63wE+jmHHYA+YIapqAD8U4JRLRjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdDpKf4EtIWg5LARt3En/2t+2Mq4wHwYDVR0j BBgwFoAULrjL56R5J3rAPugPNl3Yg7443YgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRiOTJlODktOTJkNS00MDY0LTk1MTEtMDY3ZTM1MzY3OWNlLzAvMkVCOENCRTdB NDc5Mjc3QUMwM0VFODBGMzY1REQ4ODNCRTM4REQ4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRUI4Q0JFN0E0NzkyNzdBQzAzRUU4MEYzNjVERDg4M0JFMzhE RDg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvMkVCOENCRTdBNDc5Mjc3QUMwM0VFODBGMzY1REQ4 ODNCRTM4REQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANayi6N1MAlpjkLY0bERetUTv6BlII/eh4sJ IIkB2pP/PLbj8W/d+gjOEHymBzwhkhoWVomKiWT2YF0LKVnyqcfdO65T4AzaI77W zjJr8gPvnZBAYkulo8mnb8Qv1w2/Mw2D3jt9y13U3yCTen/6AFq0Y7Fn6cHC7P6j 0wSbYzW/uaO2xodvA2xn5ArslECB9lwNg7m2oBxG0lC4MfztSrHiL7kc5zwNtmV2 m24Ha7kScu1xxYGYHo+cBiMEz8m9WFoJyxYycUy/dP6qmAFzH+NrCaC/thQ349tr pXjwpSIx90U29Srh66kmGi76ar3TZj/FaJjSTP9fPziRaHi8pkw= -----END CERTIFICATE-----Generated at Thu Sep 24 17:05:51 2026 by rpki-client