$ rpki-client -vvvf rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft File: 2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft (raw, json) Hash identifier: wUI3Kr2dLWrrO2O+wgHhfIW0Sl9Pdznh6TdvZ8cLbng= Subject key identifier: 2C:9E:C9:20:9E:2D:5E:9C:B5:06:9A:4B:71:2E:EF:6B:F8:36:90:92 Authority key identifier: 2C:F0:62:4C:97:05:2A:18:8B:12:C2:D8:DF:D6:92:56:BE:AE:A0:A3 Certificate issuer: /CN=2CF0624C97052A188B12C2D8DFD69256BEAEA0A3 Certificate serial: 7D88B7EDFEF3C4A8BE5A74915CA00CAF7198C76C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 08:38:00 +0000 Manifest this update: Thu 03 Sep 2026 08:33:00 +0000 Manifest next update: Fri 04 Sep 2026 11:00:00 +0000 Files and hashes: 1: 3131372e3132312e3230332e302f32342d3234203d3e203436303239.roa (hash: khNOf5qfeVAtCDmI+P0qU0wtTsenc+owEXE7IuCFTL4=) 2: 3131372e3132312e3230302e302f32342d3234203d3e203436303239.roa (hash: jjDQyLwOLFkeP+V5865OD4J5ZSFyfyGf7kRLTYcgAUA=) 3: 3131372e3132312e3230342e302f32342d3234203d3e203436303239.roa (hash: 9xyVMpzGgMxzPTr0/YEPxhsOk4K0WU7VoWYP2UAihTY=) 4: 3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa (hash: JklHOE9UnXIvsKlW/PC+ZLgav3mgVpKETno9/XOSONo=) 5: 3131372e3132312e3230322e302f32342d3234203d3e203436303239.roa (hash: G6layxH6VqJ35uHJZhmjgga72kPwjzbEYW/yD2TBIJU=) 6: 3131372e3132312e3230352e302f32342d3234203d3e203436303239.roa (hash: UH+sfXi3uyUzmqtZ5a3kiK88kT3KnsNHU+6St14pVbU=) 7: 3131372e3132312e3230312e302f32342d3234203d3e203436303239.roa (hash: Gt77/DpvHcyfECJ/rzUv8b/LftlAsDwob9ro6Az9CBg=) 8: 2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl (hash: BIHy2LVEDfA5SP+nEbiIlPSNGRRbMhwATT3KKSp9Yjk=) 9: 3131372e3132312e3230372e302f32342d3234203d3e203436303239.roa (hash: 5qjiHCREo3yTZVwviMFSFaOdgsJ0Wu7pJnWioBrnUw8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:88:b7:ed:fe:f3:c4:a8:be:5a:74:91:5c:a0:0c:af:71:98:c7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CF0624C97052A188B12C2D8DFD69256BEAEA0A3 Validity Not Before: Sep 3 08:33:00 2026 GMT Not After : Sep 4 11:00:00 2026 GMT Subject: CN=2C9EC9209E2D5E9CB5069A4B712EEF6BF8369092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8e:6d:ce:ad:cb:ad:a0:cc:b6:5c:4c:5e:b1: 76:eb:5b:70:ec:f1:c7:4a:f2:cd:4a:57:d7:53:44: a8:6d:43:c7:a0:9a:02:bd:53:91:07:04:5e:e9:e4: 7b:d7:8d:bb:94:5c:6b:8c:5c:db:0a:f8:e6:2e:fd: d7:c2:f0:0b:e3:cd:34:6f:38:b5:c5:2a:9d:51:52: 46:2c:c0:ea:ca:52:6e:28:39:82:ac:11:d5:10:1c: 3b:50:ab:e8:e1:33:3d:b8:fa:19:1b:8a:9e:a4:fa: 64:60:ea:91:1a:70:e5:d8:3e:93:32:b1:bf:87:c2: 8d:5b:bb:11:43:5a:a1:8c:4f:13:3b:c5:7a:1f:2d: 69:1e:12:f4:f2:1f:9d:f5:ed:fd:f4:75:08:52:fa: 08:1c:3d:bf:7a:41:2e:7e:f4:33:98:cd:50:43:93: 12:7b:4b:67:8b:6e:a1:a2:ce:ea:8a:31:87:aa:d3: cc:62:fc:db:45:a6:1f:eb:14:c8:40:60:76:e1:67: ff:23:d3:8a:3b:13:e9:8a:a4:73:bd:93:dc:99:9e: 26:db:0e:cd:dd:83:5c:48:1d:82:09:63:dc:1a:d2: bb:6c:b3:09:14:f5:19:f1:4b:56:52:07:63:f9:b5: 2d:12:86:7d:0b:25:84:77:35:c3:66:4f:e0:af:de: 2a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9E:C9:20:9E:2D:5E:9C:B5:06:9A:4B:71:2E:EF:6B:F8:36:90:92 X509v3 Authority Key Identifier: keyid:2C:F0:62:4C:97:05:2A:18:8B:12:C2:D8:DF:D6:92:56:BE:AE:A0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:36:2b:fd:fc:10:09:cd:7d:c2:c8:14:af:5d:3a:0e:a5:bd: 6c:17:3c:20:a9:41:37:ab:fb:6f:e2:de:69:d3:de:7b:27:34: ec:f6:3f:f0:6b:3a:92:c2:b6:6d:2f:f5:ef:ea:62:4b:a1:d9: b6:f1:af:70:7e:e8:02:d0:a6:20:f2:9b:63:96:9b:97:2e:aa: fa:6e:53:4d:b9:e3:76:a8:d3:04:fa:40:1c:c0:66:d9:b3:47: 98:ee:0a:e7:c8:b8:60:a9:e1:19:10:28:b7:aa:13:53:dc:2b: 3e:87:47:de:5f:34:1b:63:5f:0a:c9:92:60:be:3b:4d:6d:f3: 30:21:36:e3:20:24:6e:21:ab:a8:fc:bf:c8:c6:d5:a0:24:8b: f6:fe:b0:7d:2e:cc:5f:a9:23:5b:1d:61:bb:65:77:88:d3:4e: ee:bf:a9:a3:e7:08:8d:4e:36:80:17:69:2f:69:28:7a:7a:19: 25:bb:33:e7:27:45:9f:dc:9d:f6:a6:8a:17:43:23:29:08:1c: ad:90:88:41:d7:d8:d5:1f:d0:6e:05:5f:0f:21:6e:2d:45:5e: 9c:89:04:47:dc:eb:8c:84:45:a3:25:04:90:44:d8:fc:b5:62: 0b:77:24:81:db:e8:d1:46:1b:20:14:91:4f:3d:aa:cd:36:e2: cf:5a:0f:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfYi37f7zxKi+WnSRXKAMr3GYx2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGMDYyNEM5NzA1MkExODhCMTJDMkQ4REZENjkyNTZC RUFFQTBBMzAeFw0yNjA5MDMwODMzMDBaFw0yNjA5MDQxMTAwMDBaMDMxMTAvBgNV BAMTKDJDOUVDOTIwOUUyRDVFOUNCNTA2OUE0QjcxMkVFRjZCRjgzNjkwOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNjm3OrcutoMy2XExesXbrW3Ds 8cdK8s1KV9dTRKhtQ8egmgK9U5EHBF7p5HvXjbuUXGuMXNsK+OYu/dfC8AvjzTRv OLXFKp1RUkYswOrKUm4oOYKsEdUQHDtQq+jhMz24+hkbip6k+mRg6pEacOXYPpMy sb+Hwo1buxFDWqGMTxM7xXofLWkeEvTyH5317f30dQhS+ggcPb96QS5+9DOYzVBD kxJ7S2eLbqGizuqKMYeq08xi/NtFph/rFMhAYHbhZ/8j04o7E+mKpHO9k9yZnibb Ds3dg1xIHYIJY9wa0rtsswkU9RnxS1ZSB2P5tS0Shn0LJYR3NcNmT+Cv3irrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULJ7JIJ4tXpy1BppLcS7va/g2kJIwHwYDVR0j BBgwFoAULPBiTJcFKhiLEsLY39aSVr6uoKMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTUzYjA2N2MtZWNjOS00ZGNhLTk4N2QtYjk1NzY4MTVmODU1LzAvMkNGMDYyNEM5 NzA1MkExODhCMTJDMkQ4REZENjkyNTZCRUFFQTBBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0YwNjI0Qzk3MDUyQTE4OEIxMkMyRDhERkQ2OTI1NkJFQUVB MEEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTUzYjA2N2MtZWNjOS00ZGNhLTk4 N2QtYjk1NzY4MTVmODU1LzAvMkNGMDYyNEM5NzA1MkExODhCMTJDMkQ4REZENjky NTZCRUFFQTBBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI42K/38EAnNfcLIFK9dOg6lvWwXPCCpQTer +2/i3mnT3nsnNOz2P/BrOpLCtm0v9e/qYkuh2bbxr3B+6ALQpiDym2OWm5cuqvpu U02543ao0wT6QBzAZtmzR5juCufIuGCp4RkQKLeqE1PcKz6HR95fNBtjXwrJkmC+ O01t8zAhNuMgJG4hq6j8v8jG1aAki/b+sH0uzF+pI1sdYbtld4jTTu6/qaPnCI1O NoAXaS9pKHp6GSW7M+cnRZ/cnfamihdDIykIHK2QiEHX2NUf0G4FXw8hbi1FXpyJ BEfc64yERaMlBJBE2Py1Ygt3JIHb6NFGGyAUkU89qs024s9aD3c= -----END CERTIFICATE-----Generated at Thu Sep 3 20:06:46 2026 by rpki-client