$ rpki-client -vvvf rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft File: 2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft (raw, json) Hash identifier: QqVAZ/Mvf8Jv6sdww9RWHUWe/hweJMZ/a+2bBynUQxs= Subject key identifier: 32:07:F5:BE:11:16:F7:9D:39:62:19:C3:CF:2F:84:1D:00:F6:1C:6A Authority key identifier: 2B:5A:07:8B:9D:8A:31:7D:A7:A2:AD:40:20:90:C9:AE:72:A1:D0:F4 Certificate issuer: /CN=2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4 Certificate serial: 594AFD2F9C7BC976146AF5A88ED5AC44732DAE77 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft Manifest number: F3 Signing time: Sat 31 Oct 2026 17:39:38 +0000 Manifest this update: Sat 31 Oct 2026 17:34:38 +0000 Manifest next update: Sun 01 Nov 2026 21:20:38 +0000 Files and hashes: 1: 3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa (hash: I+MpxcufYeam5pksOgKwBNTewvekIqJYxt3l7XuR42Q=) 2: 3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa (hash: cjqOi69hQ/DuVUUYy0IY+fZE1a6xIzJfgF06BFHgrL0=) 3: 3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa (hash: F/SUGaqSrvN9l0bA+VVFhafqTQPYwg8gVdDw3HwYYEg=) 4: 2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl (hash: vseR0m2F8VDs6VtT9tPvj6EmllEGImwdoPDzihh9xBA=) 5: 3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa (hash: SSJvSdL4NA21o/quBBkRYHXaBZlnNisf6npebpyix0w=) 6: 3130332e3130302e39392e302f32342d3234203d3e20313336383338.roa (hash: YEpJ9MshH91OnFv/znxkxIYveM8j2r6OPnOxKsElZA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 21:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:4a:fd:2f:9c:7b:c9:76:14:6a:f5:a8:8e:d5:ac:44:73:2d:ae:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4 Validity Not Before: Oct 31 17:34:38 2026 GMT Not After : Nov 1 21:20:38 2026 GMT Subject: CN=3207F5BE1116F79D396219C3CF2F841D00F61C6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:50:d5:a3:e7:af:9b:89:d6:e5:40:91:3f:f3: 1f:34:73:2e:24:a1:6e:a0:23:8f:3d:2e:7d:4b:31: cf:09:a1:22:52:30:4c:f8:e2:dd:5f:5c:c8:f1:8b: 8a:c9:bd:00:03:6c:92:dd:ce:a1:2a:ea:dc:d5:02: fe:fe:da:eb:f1:ab:cc:22:a2:03:43:2c:58:9b:91: 42:69:4a:7f:bc:bf:3b:df:93:3e:c8:40:f7:9f:86: 6b:e3:60:3c:46:00:9d:48:80:ba:95:c4:b5:e7:87: 16:7d:e6:84:96:98:2f:32:0e:bc:4b:b0:8f:41:41: e8:c3:d0:d2:34:ba:a2:1e:3f:88:4d:5d:56:e6:8d: 3f:c3:54:9f:dd:cf:e2:55:84:9c:65:f0:e7:dc:54: 6a:c7:5c:7e:93:c8:7d:a3:4e:6f:1d:9a:15:b5:28: 29:d8:41:47:10:e0:27:4f:e2:a1:c7:ef:17:52:ea: 88:6f:81:87:ed:cb:75:47:b6:ac:ac:30:f4:5d:53: a2:58:0a:a1:9b:28:a2:8a:5a:56:eb:3a:8b:48:d7: 12:17:8c:a7:ec:53:15:d2:89:20:28:d2:5c:8b:87: 09:26:30:01:a2:02:04:0e:2a:92:c8:6a:5b:e6:17: 11:52:e4:70:95:1d:b1:b8:22:6b:10:a3:ad:e5:2e: d8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:07:F5:BE:11:16:F7:9D:39:62:19:C3:CF:2F:84:1D:00:F6:1C:6A X509v3 Authority Key Identifier: keyid:2B:5A:07:8B:9D:8A:31:7D:A7:A2:AD:40:20:90:C9:AE:72:A1:D0:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:18:0f:a4:73:4c:80:68:de:f8:f3:02:46:c1:6c:14:b8:f0: f2:42:9d:d2:15:bf:26:c3:de:2b:51:82:14:a2:69:5f:20:c8: c4:d5:44:dd:9a:76:7b:5f:33:ff:33:c8:a0:df:5a:ea:cd:fd: 48:8c:62:f7:56:21:c1:7b:d2:cb:fe:2e:da:50:3e:da:7a:90: e5:8d:a7:42:8e:a8:ad:9f:47:55:be:02:bd:a2:b8:8d:6d:e1: 07:ba:a5:5c:c8:0c:40:51:80:58:c2:97:a7:c7:09:d1:aa:c9: be:20:cc:d6:5e:f8:30:e0:82:a4:15:17:21:43:fd:48:65:0c: 9b:fd:b4:ba:f7:c9:e8:ae:40:d3:7c:dd:34:35:9d:ca:2d:bc: fe:56:b4:61:ff:ec:e5:a6:2e:08:c9:f5:d5:fb:3b:b1:8b:01: 4f:9e:ee:fa:3a:89:6f:a9:af:dc:00:ee:f8:16:98:70:ff:de: 3c:a8:bf:40:e4:f0:79:76:fe:48:11:fc:1a:a1:bf:cb:e2:29: cb:3c:37:21:2e:ee:82:5f:c1:bc:0d:35:5b:81:9a:7c:f5:ef: 92:91:18:15:0a:fd:c7:ee:2a:cf:55:73:38:a3:9a:74:63:74: 99:39:68:3a:bf:84:4f:e4:34:f8:0e:0f:28:d8:91:d9:03:43: 32:45:62:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWUr9L5x7yXYUavWojtWsRHMtrncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI1QTA3OEI5RDhBMzE3REE3QTJBRDQwMjA5MEM5QUU3 MkExRDBGNDAeFw0yNjEwMzExNzM0MzhaFw0yNjExMDEyMTIwMzhaMDMxMTAvBgNV BAMTKDMyMDdGNUJFMTExNkY3OUQzOTYyMTlDM0NGMkY4NDFEMDBGNjFDNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGUNWj56+bidblQJE/8x80cy4k oW6gI489Ln1LMc8JoSJSMEz44t1fXMjxi4rJvQADbJLdzqEq6tzVAv7+2uvxq8wi ogNDLFibkUJpSn+8vzvfkz7IQPefhmvjYDxGAJ1IgLqVxLXnhxZ95oSWmC8yDrxL sI9BQejD0NI0uqIeP4hNXVbmjT/DVJ/dz+JVhJxl8OfcVGrHXH6TyH2jTm8dmhW1 KCnYQUcQ4CdP4qHH7xdS6ohvgYfty3VHtqysMPRdU6JYCqGbKKKKWlbrOotI1xIX jKfsUxXSiSAo0lyLhwkmMAGiAgQOKpLIalvmFxFS5HCVHbG4ImsQo63lLthlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMgf1vhEW9505YhnDzy+EHQD2HGowHwYDVR0j BBgwFoAUK1oHi52KMX2noq1AIJDJrnKh0PQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTNkODA2NDMtZDVlOS00MWFmLTk0ZGYtNmQ5NGZiZjQ2NDg3LzAvMkI1QTA3OEI5 RDhBMzE3REE3QTJBRDQwMjA5MEM5QUU3MkExRDBGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQjVBMDc4QjlEOEEzMTdEQTdBMkFENDAyMDkwQzlBRTcyQTFE MEY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTNkODA2NDMtZDVlOS00MWFmLTk0 ZGYtNmQ5NGZiZjQ2NDg3LzAvMkI1QTA3OEI5RDhBMzE3REE3QTJBRDQwMjA5MEM5 QUU3MkExRDBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8YD6RzTIBo3vjzAkbBbBS48PJCndIVvybD 3itRghSiaV8gyMTVRN2adntfM/8zyKDfWurN/UiMYvdWIcF70sv+LtpQPtp6kOWN p0KOqK2fR1W+Ar2iuI1t4Qe6pVzIDEBRgFjCl6fHCdGqyb4gzNZe+DDggqQVFyFD /UhlDJv9tLr3yeiuQNN83TQ1ncotvP5WtGH/7OWmLgjJ9dX7O7GLAU+e7vo6iW+p r9wA7vgWmHD/3jyov0Dk8Hl2/kgR/Bqhv8viKcs8NyEu7oJfwbwNNVuBmnz175KR GBUK/cfuKs9VczijmnRjdJk5aDq/hE/kNPgODyjYkdkDQzJFYpA= -----END CERTIFICATE-----Generated at Sun Nov 1 12:45:14 2026 by rpki-client