$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft File: 2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft (raw, json) Hash identifier: U4llUpkeOV6hflQOQdqC+6inUMS3hLUkqGkT4NBb4UE= Subject key identifier: 38:EC:F1:FD:BE:28:BA:F1:32:FA:29:47:AD:C8:42:EC:A1:B0:2B:93 Authority key identifier: 2C:A6:27:0F:A0:99:DB:2B:77:ED:B7:EA:A9:30:40:FF:23:6B:21:4B Certificate issuer: /CN=2CA6270FA099DB2B77EDB7EAA93040FF236B214B Certificate serial: 479364783C83E92A8F4DE72840168AA9DD31685C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 00:25:39 +0000 Manifest this update: Fri 25 Sep 2026 00:20:39 +0000 Manifest next update: Sat 26 Sep 2026 01:51:39 +0000 Files and hashes: 1: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (hash: 5yASRqMJGpH3BlgDiF4qbtYdpHoRGPLyhQdyV1pz60w=) 2: 2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl (hash: 1WsV8w6LxvaCx5BjNC/JbGdQZBDRgnXDawT6Yzc2PuY=) 3: 3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (hash: RYdUas2TasB0Egv36O3FoGBWixKmz+f1qKRhr6wdPhI=) 4: 3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (hash: 7n3FY8Iu2mTaPEdpSsiUuLrwQ3K9YP1KBkJ8ERWrHmg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 01:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:93:64:78:3c:83:e9:2a:8f:4d:e7:28:40:16:8a:a9:dd:31:68:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA6270FA099DB2B77EDB7EAA93040FF236B214B Validity Not Before: Sep 25 00:20:39 2026 GMT Not After : Sep 26 01:51:39 2026 GMT Subject: CN=38ECF1FDBE28BAF132FA2947ADC842ECA1B02B93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:68:e1:f0:f6:2a:3e:25:ec:d2:fb:af:4a:ab: 44:96:1f:4e:1c:6a:b4:99:67:59:3f:61:38:34:7f: e5:8f:00:2c:60:92:3a:43:c5:55:87:5b:63:ee:64: 24:07:f9:36:28:4d:00:36:bf:fb:ea:cb:d7:e8:af: 16:47:a9:ad:1c:95:b3:4c:a7:2e:82:44:12:7f:a2: 61:59:7f:07:4c:15:47:db:aa:3a:87:09:d4:2c:5f: ef:ce:2b:70:b5:84:8f:12:fb:35:8a:ba:97:88:5a: dc:29:2b:78:1f:5f:e9:84:3d:5e:b4:f2:4f:b1:d0: 9c:c2:d0:05:12:a6:37:57:66:90:65:6d:eb:9b:91: 97:1a:e6:9b:9f:bb:b3:d1:15:db:63:db:f8:4e:67: fa:c2:47:d7:dc:c9:f1:1f:2a:79:ab:46:bd:db:70: e7:e0:0f:03:5f:68:3e:99:a7:05:61:12:dd:72:8e: 87:b6:4d:1d:83:fa:97:23:b9:1b:1c:79:39:46:f7: bb:06:93:45:48:40:28:71:0b:ed:3f:23:2c:1d:fc: 1d:1a:93:b4:3d:3a:50:77:b2:51:7e:dd:fa:cc:78: a9:f7:7a:b5:74:5e:b0:e5:4e:41:22:32:e9:f4:05: 2c:3e:13:21:51:67:db:4c:28:5b:43:10:7e:f7:9c: f5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:EC:F1:FD:BE:28:BA:F1:32:FA:29:47:AD:C8:42:EC:A1:B0:2B:93 X509v3 Authority Key Identifier: keyid:2C:A6:27:0F:A0:99:DB:2B:77:ED:B7:EA:A9:30:40:FF:23:6B:21:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:92:4a:01:48:56:81:3f:c1:74:a6:b4:9f:f3:84:b6:43:6f: ea:0c:37:30:6e:c6:f6:df:67:15:95:d7:fa:b3:5f:57:21:cd: 1f:de:5f:99:b7:3c:84:aa:d9:13:fa:2a:3c:02:6c:49:9b:38: e8:2e:13:b4:86:c4:d5:d0:c1:ef:3a:fa:35:e0:7b:13:7b:e3: 84:47:71:db:9e:26:dd:ab:85:44:93:14:af:53:3d:f3:71:c9: 7b:fe:14:65:fb:01:d5:90:fb:84:2b:f0:5a:9b:f6:78:cc:9b: b3:7f:6b:4d:f6:87:95:f9:a5:b9:a4:ce:bf:5c:ba:17:df:f7: 10:0c:4e:2a:0f:5d:97:6a:e9:d5:2e:84:55:f5:88:00:01:bd: 15:52:97:f8:73:9d:1a:9f:3e:1f:0a:21:de:d7:72:aa:56:7c: 03:59:46:3a:b3:d8:9e:d9:71:c0:3b:19:99:a2:a0:1d:53:03: 31:1a:ea:2c:59:cb:3f:12:dd:7b:ab:e1:76:a3:dc:90:fd:c4: 4b:4b:1b:24:ac:c7:d3:d9:1a:31:56:d9:cd:17:ce:16:7b:f4: da:ac:91:ba:c3:70:59:7f:61:56:51:d2:24:d2:fa:e2:0d:b2: f8:78:14:2e:65:92:c0:5a:67:84:dc:a7:82:9f:f2:12:b7:4f: 07:6f:cf:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR5NkeDyD6SqPTecoQBaKqd0xaFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNjI3MEZBMDk5REIyQjc3RURCN0VBQTkzMDQwRkYy MzZCMjE0QjAeFw0yNjA5MjUwMDIwMzlaFw0yNjA5MjYwMTUxMzlaMDMxMTAvBgNV BAMTKDM4RUNGMUZEQkUyOEJBRjEzMkZBMjk0N0FEQzg0MkVDQTFCMDJCOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/aOHw9io+JezS+69Kq0SWH04c arSZZ1k/YTg0f+WPACxgkjpDxVWHW2PuZCQH+TYoTQA2v/vqy9forxZHqa0clbNM py6CRBJ/omFZfwdMFUfbqjqHCdQsX+/OK3C1hI8S+zWKupeIWtwpK3gfX+mEPV60 8k+x0JzC0AUSpjdXZpBlbeubkZca5pufu7PRFdtj2/hOZ/rCR9fcyfEfKnmrRr3b cOfgDwNfaD6ZpwVhEt1yjoe2TR2D+pcjuRsceTlG97sGk0VIQChxC+0/Iywd/B0a k7Q9OlB3slF+3frMeKn3erV0XrDlTkEiMun0BSw+EyFRZ9tMKFtDEH73nPXPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOOzx/b4ouvEy+ilHrchC7KGwK5MwHwYDVR0j BBgwFoAULKYnD6CZ2yt37bfqqTBA/yNrIUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY3YTdmMGUtOGQwNy00NWRlLTgyNTItM2JmZmMwNWU1NjQ5LzAvMkNBNjI3MEZB MDk5REIyQjc3RURCN0VBQTkzMDQwRkYyMzZCMjE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0E2MjcwRkEwOTlEQjJCNzdFREI3RUFBOTMwNDBGRjIzNkIy MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTY3YTdmMGUtOGQwNy00NWRlLTgy NTItM2JmZmMwNWU1NjQ5LzAvMkNBNjI3MEZBMDk5REIyQjc3RURCN0VBQTkzMDQw RkYyMzZCMjE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOSSgFIVoE/wXSmtJ/zhLZDb+oMNzBuxvbf ZxWV1/qzX1chzR/eX5m3PISq2RP6KjwCbEmbOOguE7SGxNXQwe86+jXgexN744RH cdueJt2rhUSTFK9TPfNxyXv+FGX7AdWQ+4Qr8Fqb9njMm7N/a032h5X5pbmkzr9c uhff9xAMTioPXZdq6dUuhFX1iAABvRVSl/hznRqfPh8KId7XcqpWfANZRjqz2J7Z ccA7GZmioB1TAzEa6ixZyz8S3Xur4Xaj3JD9xEtLGySsx9PZGjFW2c0XzhZ79Nqs kbrDcFl/YVZR0iTS+uINsvh4FC5lksBaZ4Tcp4Kf8hK3Twdvz2s= -----END CERTIFICATE-----Generated at Fri Sep 25 07:02:15 2026 by rpki-client