$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft File: 2FE1FA7D4DD3388355BABAD73020013D485C168C.mft (raw, json) Hash identifier: TNiVRofryAYMLGfBXWVbQpCh8gA+ux1L/M1xLtcpEYs= Subject key identifier: C2:47:39:75:F3:86:F2:53:4F:17:C9:84:ED:3A:32:FD:63:3E:94:9B Authority key identifier: 2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C Certificate issuer: /CN=2FE1FA7D4DD3388355BABAD73020013D485C168C Certificate serial: 65E4FCBB1646AC5DDFD7D8CED77B2ABADA7EF85E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 14:13:44 +0000 Manifest this update: Wed 23 Sep 2026 14:08:44 +0000 Manifest next update: Thu 24 Sep 2026 17:30:44 +0000 Files and hashes: 1: 3130332e39352e32322e302f32342d3234203d3e20313530353537.roa (hash: UmfUI05XEmk9hWgPXOd+povgJcvWbtg+6u6rN6Z8bBg=) 2: 3130332e39352e32322e302f32332d3233203d3e20313530353537.roa (hash: aB7QEaSEcJTWbjfIxBku5UcRO6NDRrQsqaho45FCjZI=) 3: 3130332e39352e32332e302f32342d3234203d3e20313530353537.roa (hash: QUvsonqLXdsih84z12pFdTCBAMOMy8pmVg5n4B/zEOQ=) 4: 2FE1FA7D4DD3388355BABAD73020013D485C168C.crl (hash: CfVk2B98AHB4lk/sNVW8jmqeJxmbfA264awlSbCFc2Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.crl rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e4:fc:bb:16:46:ac:5d:df:d7:d8:ce:d7:7b:2a:ba:da:7e:f8:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FE1FA7D4DD3388355BABAD73020013D485C168C Validity Not Before: Sep 23 14:08:44 2026 GMT Not After : Sep 24 17:30:44 2026 GMT Subject: CN=C2473975F386F2534F17C984ED3A32FD633E949B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e7:bc:7c:55:73:98:a1:d3:ba:c0:cf:31:63: bc:30:5b:df:d1:ac:83:a3:82:af:c3:36:8d:b5:98: 3a:cd:f9:c0:9a:8d:b8:5d:65:53:4b:1d:ab:ea:7e: 6e:b1:6c:14:9d:aa:aa:38:54:8b:27:cb:f7:5f:61: 91:eb:77:42:e4:a4:b5:ca:3d:c4:b4:93:af:62:b7: d0:23:e5:5b:5a:47:4c:93:36:05:78:fe:dc:e8:70: 99:db:fb:d5:dd:d9:d4:d4:01:da:b2:9a:48:b3:f5: 71:79:14:f3:5d:50:35:2e:75:d7:7d:76:f8:12:14: 44:f7:a6:38:57:0e:26:7e:c6:d5:0b:7e:75:01:80: 66:b0:bd:36:b7:89:6d:9b:ce:f9:84:0d:a9:f8:97: 27:04:ff:c1:ba:aa:3c:ad:04:23:fd:48:1e:58:6b: c1:c1:26:a6:00:53:c7:1f:a9:72:d1:4c:8a:4a:ba: ff:3f:fb:1e:d6:99:49:60:0e:f6:1d:a6:01:26:71: fc:12:ad:69:f8:1a:6f:52:95:14:f5:54:27:9a:37: 0d:01:24:21:a1:27:3f:55:e1:7f:66:9b:91:5b:0c: af:5c:29:2d:34:5c:7f:1d:50:f0:fd:c1:60:90:b3: f4:95:89:13:41:91:c7:c3:23:16:dd:89:8b:32:96: 73:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:47:39:75:F3:86:F2:53:4F:17:C9:84:ED:3A:32:FD:63:3E:94:9B X509v3 Authority Key Identifier: keyid:2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:34:52:02:9e:d1:c7:b2:10:0e:44:4f:1d:01:6d:4b:49:7c: f0:30:f4:3f:48:b8:d4:cb:c4:03:a9:b3:ac:64:ef:52:50:61: 82:cb:e6:e4:6e:9b:53:8c:c8:2d:73:67:3d:92:b1:b1:cd:14: 69:14:84:f5:7d:65:f4:ee:c0:ca:39:e7:a5:23:b2:8c:15:72: 7d:d9:12:df:87:36:d7:1e:b0:e5:79:4f:ce:15:6f:c5:9a:62: d9:55:04:15:e7:fa:ae:1d:97:e8:e9:8f:73:4f:fb:9e:de:6c: a8:39:05:93:19:b2:59:aa:67:3a:47:47:5e:8a:0b:05:ce:7a: 14:ee:e6:3b:26:91:f1:9d:6b:94:07:63:9c:9e:22:33:ad:32: 80:80:b0:5d:50:e9:f5:6d:c3:76:a1:d0:88:cb:0d:68:79:f8: e9:ba:b7:53:1a:ed:5e:31:6b:ab:e1:2a:6b:f5:7d:cb:da:6a: e7:86:99:71:38:ae:4d:5c:02:03:29:6e:a5:29:06:db:ee:1c: b2:5c:65:6a:d4:15:c3:26:a0:1d:52:2e:0e:b8:36:8e:f0:12: fb:e9:94:07:c6:1e:de:47:5c:21:a2:f2:2e:ad:2d:17:75:18: f5:ed:31:5f:96:07:c7:31:7c:77:07:31:6a:a1:fb:41:8f:b0: 13:2d:bd:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZeT8uxZGrF3f19jO13squtp++F4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZFMUZBN0Q0REQzMzg4MzU1QkFCQUQ3MzAyMDAxM0Q0 ODVDMTY4QzAeFw0yNjA5MjMxNDA4NDRaFw0yNjA5MjQxNzMwNDRaMDMxMTAvBgNV BAMTKEMyNDczOTc1RjM4NkYyNTM0RjE3Qzk4NEVEM0EzMkZENjMzRTk0OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX57x8VXOYodO6wM8xY7wwW9/R rIOjgq/DNo21mDrN+cCajbhdZVNLHavqfm6xbBSdqqo4VIsny/dfYZHrd0LkpLXK PcS0k69it9Aj5VtaR0yTNgV4/tzocJnb+9Xd2dTUAdqymkiz9XF5FPNdUDUuddd9 dvgSFET3pjhXDiZ+xtULfnUBgGawvTa3iW2bzvmEDan4lycE/8G6qjytBCP9SB5Y a8HBJqYAU8cfqXLRTIpKuv8/+x7WmUlgDvYdpgEmcfwSrWn4Gm9SlRT1VCeaNw0B JCGhJz9V4X9mm5FbDK9cKS00XH8dUPD9wWCQs/SViRNBkcfDIxbdiYsylnPlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwkc5dfOG8lNPF8mE7Toy/WM+lJswHwYDVR0j BBgwFoAUL+H6fU3TOINVurrXMCABPUhcFowwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZkNGY4NjktNGRiNi00YjBhLWFhYjYtY2RlNDdiNDQ3ZDc3LzAvMkZFMUZBN0Q0 REQzMzg4MzU1QkFCQUQ3MzAyMDAxM0Q0ODVDMTY4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkUxRkE3RDRERDMzODgzNTVCQUJBRDczMDIwMDEzRDQ4NUMx NjhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZkNGY4NjktNGRiNi00YjBhLWFh YjYtY2RlNDdiNDQ3ZDc3LzAvMkZFMUZBN0Q0REQzMzg4MzU1QkFCQUQ3MzAyMDAx M0Q0ODVDMTY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJI0UgKe0ceyEA5ETx0BbUtJfPAw9D9IuNTL xAOps6xk71JQYYLL5uRum1OMyC1zZz2SsbHNFGkUhPV9ZfTuwMo556UjsowVcn3Z Et+HNtcesOV5T84Vb8WaYtlVBBXn+q4dl+jpj3NP+57ebKg5BZMZslmqZzpHR16K CwXOehTu5jsmkfGda5QHY5yeIjOtMoCAsF1Q6fVtw3ah0IjLDWh5+Om6t1Ma7V4x a6vhKmv1fcvaaueGmXE4rk1cAgMpbqUpBtvuHLJcZWrUFcMmoB1SLg64No7wEvvp lAfGHt5HXCGi8i6tLRd1GPXtMV+WB8cxfHcHMWqh+0GPsBMtvb0= -----END CERTIFICATE-----Generated at Thu Sep 24 04:21:13 2026 by rpki-client