$ rpki-client -vvvf rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft File: 2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft (raw, json) Hash identifier: JL76QKN9aSK9PuAGBZgbtlZhJvDTHVEjmMm/W+rkZDI= Subject key identifier: F2:ED:52:BD:1B:7C:36:5A:E4:A7:52:C1:BA:C9:7A:45:9C:16:A8:6D Authority key identifier: 2E:1A:4B:EC:A1:A3:FE:AE:F0:C7:92:4E:EE:B4:50:3F:88:5A:87:7C Certificate issuer: /CN=2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C Certificate serial: 549B30527F6D4C83BC5AC2066A1152BF023D2D5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 16:23:27 +0000 Manifest this update: Mon 02 Nov 2026 16:18:27 +0000 Manifest next update: Tue 03 Nov 2026 19:42:27 +0000 Files and hashes: 1: 2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl (hash: iJK9den7eM+rHAeqGrmXgT0mJrjzK7EaiwqWlRC1yoM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9b:30:52:7f:6d:4c:83:bc:5a:c2:06:6a:11:52:bf:02:3d:2d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C Validity Not Before: Nov 2 16:18:27 2026 GMT Not After : Nov 3 19:42:27 2026 GMT Subject: CN=F2ED52BD1B7C365AE4A752C1BAC97A459C16A86D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3c:54:97:31:a2:0a:68:17:03:ad:2c:aa:c8: a2:71:29:3b:0a:ab:99:86:26:3f:37:cd:21:85:91: 85:a0:c0:7a:b9:ee:ec:77:85:6a:00:48:21:65:ee: ce:58:05:7b:36:ba:7e:9b:2b:5d:a2:7c:3e:65:d8: 77:fd:bf:43:c7:08:12:d6:2e:aa:93:96:61:e0:1d: e7:1b:e0:cb:dd:08:d1:f0:29:2d:26:fd:57:e2:1b: de:af:47:8b:d5:ad:90:8e:1d:96:cf:9a:1b:24:84: 5a:c8:51:08:e6:e8:b3:d4:41:bf:86:23:88:e6:35: af:cd:39:dd:49:9d:c8:52:de:c5:87:3f:b1:ee:99: 8b:45:d1:4a:7f:97:83:b4:c0:63:ef:d3:94:ca:63: 6d:dd:d0:9d:7f:f5:e7:9d:ef:c8:54:c9:b0:70:ef: ae:db:90:e3:00:1c:c8:c7:1b:3a:2a:30:3d:e1:ee: eb:30:7e:93:41:31:b8:1d:50:20:b9:ad:df:9b:5b: fa:bf:6a:d1:00:b9:b4:1c:54:ac:45:36:ed:81:4a: 69:c6:de:a4:ca:f6:09:b9:fe:2c:49:5c:65:ba:b8: 03:e1:61:a9:6e:90:fc:2d:3e:ba:ce:d3:a4:13:58: 84:2c:2a:ad:1d:c2:c9:24:47:7f:04:48:cb:06:c6: 7a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:ED:52:BD:1B:7C:36:5A:E4:A7:52:C1:BA:C9:7A:45:9C:16:A8:6D X509v3 Authority Key Identifier: keyid:2E:1A:4B:EC:A1:A3:FE:AE:F0:C7:92:4E:EE:B4:50:3F:88:5A:87:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:9c:1c:6c:28:46:dc:e7:1c:3d:55:f2:00:3a:6d:5a:71:25: 63:49:c1:03:dc:34:52:99:46:0a:20:16:f8:62:cf:92:50:1a: aa:d2:4d:de:8e:c7:45:07:88:76:e4:39:9b:98:70:8a:80:1e: 69:23:ed:60:01:48:cf:86:63:c1:94:d5:3b:2b:e7:20:0c:70: a5:4e:7a:c0:e9:84:31:41:da:fd:dd:cc:d9:96:9d:67:7c:e0: d6:6a:a8:32:50:4c:f1:da:0b:4d:70:ba:b2:98:78:85:cf:3f: 60:e8:05:bd:1a:29:e4:65:2e:e7:ea:3d:03:a8:24:64:18:74: 78:a6:e1:dc:72:de:7d:49:2e:1d:76:f9:3a:aa:75:0e:9c:b4: 19:97:4e:3a:ae:fa:eb:7d:14:9d:4f:ec:af:5a:85:5d:19:cb: a3:5a:43:39:9f:76:b4:b8:0c:08:18:8e:a3:4b:f6:59:5d:b4: 93:80:68:ad:9b:44:ea:91:d5:d9:3f:91:87:cb:fa:c2:e1:85: 51:5b:7f:43:ff:ed:1c:66:93:b8:2d:17:dc:1b:29:9b:2f:08: 88:a3:17:32:0b:8b:b8:78:58:50:d7:77:38:1e:1d:88:80:5f: 8c:6a:d3:51:78:f0:f8:45:00:77:06:c2:f0:97:27:3d:7f:07: 59:01:66:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJswUn9tTIO8WsIGahFSvwI9LVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxQTRCRUNBMUEzRkVBRUYwQzc5MjRFRUVCNDUwM0Y4 ODVBODc3QzAeFw0yNjExMDIxNjE4MjdaFw0yNjExMDMxOTQyMjdaMDMxMTAvBgNV BAMTKEYyRUQ1MkJEMUI3QzM2NUFFNEE3NTJDMUJBQzk3QTQ1OUMxNkE4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQPFSXMaIKaBcDrSyqyKJxKTsK q5mGJj83zSGFkYWgwHq57ux3hWoASCFl7s5YBXs2un6bK12ifD5l2Hf9v0PHCBLW LqqTlmHgHecb4MvdCNHwKS0m/VfiG96vR4vVrZCOHZbPmhskhFrIUQjm6LPUQb+G I4jmNa/NOd1JnchS3sWHP7HumYtF0Up/l4O0wGPv05TKY23d0J1/9eed78hUybBw 767bkOMAHMjHGzoqMD3h7uswfpNBMbgdUCC5rd+bW/q/atEAubQcVKxFNu2BSmnG 3qTK9gm5/ixJXGW6uAPhYalukPwtPrrO06QTWIQsKq0dwskkR38ESMsGxnphAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8u1SvRt8Nlrkp1LBusl6RZwWqG0wHwYDVR0j BBgwFoAULhpL7KGj/q7wx5JO7rRQP4hah3wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDEzNjhhZTMtZGQxMi00YWEzLTg5NDgtNTQ2ZGUwNGM1MWU0LzAvMkUxQTRCRUNB MUEzRkVBRUYwQzc5MjRFRUVCNDUwM0Y4ODVBODc3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yRTFBNEJFQ0ExQTNGRUFFRjBDNzkyNEVFRUI0NTAzRjg4NUE4 NzdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDEzNjhhZTMtZGQxMi00YWEzLTg5 NDgtNTQ2ZGUwNGM1MWU0LzAvMkUxQTRCRUNBMUEzRkVBRUYwQzc5MjRFRUVCNDUw M0Y4ODVBODc3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOcHGwoRtznHD1V8gA6bVpxJWNJwQPcNFKZ RgogFvhiz5JQGqrSTd6Ox0UHiHbkOZuYcIqAHmkj7WABSM+GY8GU1Tsr5yAMcKVO esDphDFB2v3dzNmWnWd84NZqqDJQTPHaC01wurKYeIXPP2DoBb0aKeRlLufqPQOo JGQYdHim4dxy3n1JLh12+TqqdQ6ctBmXTjqu+ut9FJ1P7K9ahV0Zy6NaQzmfdrS4 DAgYjqNL9lldtJOAaK2bROqR1dk/kYfL+sLhhVFbf0P/7Rxmk7gtF9wbKZsvCIij FzILi7h4WFDXdzgeHYiAX4xq01F48PhFAHcGwvCXJz1/B1kBZnY= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:58 2026 by rpki-client