$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft File: 2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft (raw, json) Hash identifier: 7yFwCD7HWb6YbnAqYWr7XB3kQLY9MmNyvyJoRaGzc7A= Subject key identifier: D3:A6:00:4C:8F:E8:73:16:62:53:FA:19:67:05:D1:AA:34:EB:81:0A Authority key identifier: 2F:37:45:DB:26:30:B1:D0:4A:3E:69:E4:9A:12:ED:7D:D5:65:CC:82 Certificate issuer: /CN=2F3745DB2630B1D04A3E69E49A12ED7DD565CC82 Certificate serial: 45A055CE240140978626D3A618D34BF99A688B39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 23:09:40 +0000 Manifest this update: Wed 23 Sep 2026 23:04:40 +0000 Manifest next update: Fri 25 Sep 2026 02:45:40 +0000 Files and hashes: 1: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: hXr95hFUQi4QPei7lbvEDGK3/fJ8wC4HwUseAin+nsU=) 2: 2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl (hash: 3QKpgJ11k/vsY0Cv/3J/yQmh/60CJEvN4+remuTucMI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a0:55:ce:24:01:40:97:86:26:d3:a6:18:d3:4b:f9:9a:68:8b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F3745DB2630B1D04A3E69E49A12ED7DD565CC82 Validity Not Before: Sep 23 23:04:40 2026 GMT Not After : Sep 25 02:45:40 2026 GMT Subject: CN=D3A6004C8FE873166253FA196705D1AA34EB810A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6f:65:bc:07:32:af:3c:a0:d4:2f:20:09:c9: f9:3d:65:44:63:46:db:18:55:39:43:b2:05:37:bb: ca:35:72:24:c5:19:72:c1:a3:b9:80:a7:0e:0b:3e: 98:19:0e:5d:de:d7:3e:8b:23:f7:eb:17:d2:76:ed: 98:18:f7:33:aa:82:7c:61:09:d7:42:22:c0:df:1b: 54:57:5d:7d:5d:54:e7:82:e5:fc:a6:ca:c6:eb:db: 8a:a5:cc:d1:9f:df:78:74:cb:8b:ed:d5:7f:b0:8e: 60:b5:bc:33:7e:ea:00:2a:2f:b8:a7:c9:e7:cb:db: db:e5:18:ae:fc:22:8f:a8:44:ce:5e:85:35:86:5c: 1a:b5:28:7c:48:c7:4c:01:38:6d:5c:24:8f:61:3f: 58:73:68:2d:0f:9c:e6:cf:3a:a1:7c:d1:f0:1f:b4: 88:ca:a9:18:55:25:6c:62:ee:dc:06:21:21:bc:83: 62:4f:a6:80:15:12:42:bf:1b:13:8e:d8:7e:cf:70: 11:d3:98:3d:82:74:9d:5e:87:40:4e:50:02:b2:b0: 6c:d8:2c:4b:73:01:08:0b:d7:7e:98:76:5e:c9:fd: ef:fc:80:dd:5b:d6:0a:8a:f6:45:65:cd:cc:65:2d: 5f:a7:ba:ec:16:74:72:88:f3:79:ab:08:82:ac:6e: c8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A6:00:4C:8F:E8:73:16:62:53:FA:19:67:05:D1:AA:34:EB:81:0A X509v3 Authority Key Identifier: keyid:2F:37:45:DB:26:30:B1:D0:4A:3E:69:E4:9A:12:ED:7D:D5:65:CC:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:aa:04:88:74:98:84:76:2f:f2:72:cf:0a:c0:1c:5a:ce:26: d2:7d:86:ee:17:9b:8e:f9:67:a8:ad:5c:1b:9c:0a:2f:05:cc: b1:c7:62:8c:37:3f:e3:d3:3b:65:e2:2d:8f:e3:e2:0e:7b:a8: 62:65:2d:3e:15:b3:ce:a6:26:e8:f7:ce:e6:8c:45:3d:5f:6f: 3c:17:f5:3f:c6:cd:c4:dd:0b:a7:df:5d:d2:90:b2:72:e4:8b: da:76:23:57:31:6b:fd:8c:2e:f0:31:57:ae:e7:b9:c4:98:5c: 5a:01:f7:5f:5c:69:04:ce:eb:df:3d:ba:7a:6c:4a:2c:0b:11: bd:63:88:2e:4e:56:fd:9d:df:b3:f7:a9:48:8d:76:e0:6c:5d: 16:0f:a8:65:81:f5:df:ad:85:79:22:b9:e9:75:2f:13:1e:50: f7:5b:91:e9:aa:ec:6d:66:90:40:57:96:72:49:ac:59:bb:f4: 2a:b4:e9:28:87:3d:55:a5:9d:fd:1d:f0:67:21:3d:6c:c4:4d: 4e:73:54:08:60:97:1f:ac:66:ff:c8:68:fe:5e:d6:c4:1d:14: 38:10:83:83:49:b2:3c:cc:fd:32:43:b1:37:a8:eb:02:85:a0: 6d:fc:ee:be:47:42:48:8a:ec:99:6e:67:a9:28:53:9d:e1:a6: 6b:55:19:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURaBVziQBQJeGJtOmGNNL+ZpoizkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYzNzQ1REIyNjMwQjFEMDRBM0U2OUU0OUExMkVEN0RE NTY1Q0M4MjAeFw0yNjA5MjMyMzA0NDBaFw0yNjA5MjUwMjQ1NDBaMDMxMTAvBgNV BAMTKEQzQTYwMDRDOEZFODczMTY2MjUzRkExOTY3MDVEMUFBMzRFQjgxMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6b2W8BzKvPKDULyAJyfk9ZURj RtsYVTlDsgU3u8o1ciTFGXLBo7mApw4LPpgZDl3e1z6LI/frF9J27ZgY9zOqgnxh CddCIsDfG1RXXX1dVOeC5fymysbr24qlzNGf33h0y4vt1X+wjmC1vDN+6gAqL7in yefL29vlGK78Io+oRM5ehTWGXBq1KHxIx0wBOG1cJI9hP1hzaC0PnObPOqF80fAf tIjKqRhVJWxi7twGISG8g2JPpoAVEkK/GxOO2H7PcBHTmD2CdJ1eh0BOUAKysGzY LEtzAQgL136Ydl7J/e/8gN1b1gqK9kVlzcxlLV+nuuwWdHKI83mrCIKsbsgFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU06YATI/ocxZiU/oZZwXRqjTrgQowHwYDVR0j BBgwFoAULzdF2yYwsdBKPmnkmhLtfdVlzIIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTc4YThiMzktM2FlMy00ZGU3LTkzNjYtMjFmOWVhMDQzMjVhLzAvMkYzNzQ1REIy NjMwQjFEMDRBM0U2OUU0OUExMkVEN0RENTY1Q0M4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRjM3NDVEQjI2MzBCMUQwNEEzRTY5RTQ5QTEyRUQ3REQ1NjVD QzgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTc4YThiMzktM2FlMy00ZGU3LTkz NjYtMjFmOWVhMDQzMjVhLzAvMkYzNzQ1REIyNjMwQjFEMDRBM0U2OUU0OUExMkVE N0RENTY1Q0M4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCqBIh0mIR2L/JyzwrAHFrOJtJ9hu4Xm475 Z6itXBucCi8FzLHHYow3P+PTO2XiLY/j4g57qGJlLT4Vs86mJuj3zuaMRT1fbzwX 9T/GzcTdC6ffXdKQsnLki9p2I1cxa/2MLvAxV67nucSYXFoB919caQTO6989unps SiwLEb1jiC5OVv2d37P3qUiNduBsXRYPqGWB9d+thXkiuel1LxMeUPdbkemq7G1m kEBXlnJJrFm79Cq06SiHPVWlnf0d8GchPWzETU5zVAhglx+sZv/IaP5e1sQdFDgQ g4NJsjzM/TJDsTeo6wKFoG387r5HQkiK7JluZ6koU53hpmtVGcU= -----END CERTIFICATE-----Generated at Thu Sep 24 04:28:10 2026 by rpki-client