$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft File: C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft (raw, json) Hash identifier: eg281MqZifRvZmJ5iHOYyf3en6siKhjth0g8GZ4V7qk= Subject key identifier: 28:99:79:EE:ED:1D:05:1A:5D:88:B2:1D:D1:B8:59:C5:5A:B9:BE:7E Authority key identifier: C2:D6:F5:B6:33:70:10:04:FE:FA:E2:24:34:8B:98:C8:C5:AF:5D:E4 Certificate issuer: /CN=C2D6F5B633701004FEFAE224348B98C8C5AF5DE4 Certificate serial: 57F6DF5BD3FCA3E108FAD06A03AA5C47BFA2F504 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 07:15:00 +0000 Manifest this update: Wed 23 Sep 2026 07:10:00 +0000 Manifest next update: Thu 24 Sep 2026 10:28:00 +0000 Files and hashes: 1: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: Ufj1irifhgIIf9Z+cJ8JRj8meHiqH+Kv6sNyd7Vy/bM=) 2: C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl (hash: vUze/ZF9TlgxdCipCd7e3utIY8LwFARm5YITvXAXcvc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f6:df:5b:d3:fc:a3:e1:08:fa:d0:6a:03:aa:5c:47:bf:a2:f5:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D6F5B633701004FEFAE224348B98C8C5AF5DE4 Validity Not Before: Sep 23 07:10:00 2026 GMT Not After : Sep 24 10:28:00 2026 GMT Subject: CN=289979EEED1D051A5D88B21DD1B859C55AB9BE7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ca:7d:9f:92:7f:74:78:b5:50:ad:d4:09:3a: 83:00:8c:a8:3c:8e:9a:b8:42:f1:97:8f:06:ca:62: 66:85:f0:65:90:91:87:61:ce:87:f2:55:00:8b:67: 27:ab:0c:83:ae:5b:8f:e9:af:6f:fe:37:91:f4:ca: f2:bb:ce:3a:f1:2a:39:3a:63:ca:5f:4e:61:b2:56: 09:a9:d6:5e:22:20:2b:0c:f4:1f:cb:91:c2:63:1a: 52:51:d2:62:95:a8:f5:e6:63:16:a5:44:d0:c5:7b: f5:fa:e4:18:2a:ef:24:83:38:05:3e:ce:44:78:77: af:58:20:13:3d:be:e4:98:6d:45:4b:3d:c2:73:7c: 04:53:d0:89:91:56:ab:bd:94:c2:0d:cf:40:67:d2: 18:68:8e:cd:a5:37:67:e4:cb:07:45:4d:cc:b0:98: 3b:cd:e1:90:7c:0c:17:34:85:80:bb:fd:ed:3f:c4: 0f:a8:c6:5a:3d:f3:a8:24:94:0a:90:f0:b6:d1:74: 2f:0a:5b:1a:e6:d2:8b:7f:74:d7:0c:ba:1f:a5:05: 0c:2f:05:c9:30:96:02:8e:1a:fd:fc:6f:70:67:81: c9:aa:44:dd:8d:12:17:5a:3b:20:d9:30:1c:04:78: ea:77:22:7d:68:85:68:6c:2b:10:19:d1:9f:c6:6b: fb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:99:79:EE:ED:1D:05:1A:5D:88:B2:1D:D1:B8:59:C5:5A:B9:BE:7E X509v3 Authority Key Identifier: keyid:C2:D6:F5:B6:33:70:10:04:FE:FA:E2:24:34:8B:98:C8:C5:AF:5D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:26:85:d9:b5:bd:56:26:a6:68:3d:d1:99:dd:8a:eb:1e:73: 5e:fc:a4:ae:37:18:28:a8:be:69:6a:27:6c:ed:d3:94:50:e8: 2a:95:c5:31:e8:b1:19:0c:05:93:1a:01:b1:ee:85:a5:e7:f1: 19:cc:9b:dd:d0:8c:35:60:37:5c:e8:db:54:9a:21:f4:c9:e2: dc:f3:67:4c:55:47:4a:cc:21:61:f2:b6:e3:c9:89:52:77:18: 6d:7d:81:42:d8:44:52:66:7e:f2:e5:89:60:4b:be:6c:e8:ad: c9:5d:11:7f:70:1b:73:af:12:c6:19:57:aa:35:c0:a0:d8:9a: 99:f8:61:55:4b:ed:a7:9e:41:4c:98:1a:18:cb:96:71:57:8c: ed:1f:db:11:a5:cc:43:4a:25:4f:24:3c:f8:57:c9:e0:4b:b3: a1:44:71:25:91:eb:16:1f:04:89:c2:46:7a:d4:75:de:0b:6c: 27:de:b3:d2:2c:0c:35:c1:a2:02:55:6b:b7:a8:81:8f:68:43: 8c:5e:49:b0:92:cd:67:69:2b:f0:62:4b:0a:c2:a9:78:65:5c: 20:02:fd:db:2f:03:6c:17:a5:57:95:e2:c1:46:38:42:62:20: f6:71:50:07:b8:c7:43:82:99:9d:dc:7f:c0:20:60:77:0b:f7: bc:3a:25:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/bfW9P8o+EI+tBqA6pcR7+i9QQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENkY1QjYzMzcwMTAwNEZFRkFFMjI0MzQ4Qjk4QzhD NUFGNURFNDAeFw0yNjA5MjMwNzEwMDBaFw0yNjA5MjQxMDI4MDBaMDMxMTAvBgNV BAMTKDI4OTk3OUVFRUQxRDA1MUE1RDg4QjIxREQxQjg1OUM1NUFCOUJFN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjyn2fkn90eLVQrdQJOoMAjKg8 jpq4QvGXjwbKYmaF8GWQkYdhzofyVQCLZyerDIOuW4/pr2/+N5H0yvK7zjrxKjk6 Y8pfTmGyVgmp1l4iICsM9B/LkcJjGlJR0mKVqPXmYxalRNDFe/X65Bgq7ySDOAU+ zkR4d69YIBM9vuSYbUVLPcJzfART0ImRVqu9lMINz0Bn0hhojs2lN2fkywdFTcyw mDvN4ZB8DBc0hYC7/e0/xA+oxlo986gklAqQ8LbRdC8KWxrm0ot/dNcMuh+lBQwv BckwlgKOGv38b3BngcmqRN2NEhdaOyDZMBwEeOp3In1ohWhsKxAZ0Z/Ga/sNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKJl57u0dBRpdiLId0bhZxVq5vn4wHwYDVR0j BBgwFoAUwtb1tjNwEAT++uIkNIuYyMWvXeQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA5NzZlMjYtOTUxMy00OGZmLTlmN2YtZWEzZmRjZjNlMmU4LzAvQzJENkY1QjYz MzcwMTAwNEZFRkFFMjI0MzQ4Qjk4QzhDNUFGNURFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkQ2RjVCNjMzNzAxMDA0RkVGQUUyMjQzNDhCOThDOEM1QUY1 REU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA5NzZlMjYtOTUxMy00OGZmLTlm N2YtZWEzZmRjZjNlMmU4LzAvQzJENkY1QjYzMzcwMTAwNEZFRkFFMjI0MzQ4Qjk4 QzhDNUFGNURFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0mhdm1vVYmpmg90Zndiusec178pK43GCio vmlqJ2zt05RQ6CqVxTHosRkMBZMaAbHuhaXn8RnMm93QjDVgN1zo21SaIfTJ4tzz Z0xVR0rMIWHytuPJiVJ3GG19gULYRFJmfvLliWBLvmzorcldEX9wG3OvEsYZV6o1 wKDYmpn4YVVL7aeeQUyYGhjLlnFXjO0f2xGlzENKJU8kPPhXyeBLs6FEcSWR6xYf BInCRnrUdd4LbCfes9IsDDXBogJVa7eogY9oQ4xeSbCSzWdpK/BiSwrCqXhlXCAC /dsvA2wXpVeV4sFGOEJiIPZxUAe4x0OCmZ3cf8AgYHcL97w6Jbs= -----END CERTIFICATE-----Generated at Wed Sep 23 23:09:56 2026 by rpki-client