$ rpki-client -vvvf rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft File: 2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft (raw, json) Hash identifier: s9DtN1QUf4RCStdVSR/QkeJmhWZqzarWn7WgXagMfwQ= Subject key identifier: 9F:C0:D0:FB:07:07:2E:CE:3B:F8:78:5A:F4:2A:44:8B:6E:DC:B6:4C Authority key identifier: 2D:88:AC:79:1B:0C:C1:B7:D9:21:EC:E6:60:CD:E0:CF:2E:E8:ED:72 Certificate issuer: /CN=2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72 Certificate serial: 6F6A44DFDCA4978AE093B60E4C58902B5A426871 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 21:08:50 +0000 Manifest this update: Wed 02 Sep 2026 21:03:50 +0000 Manifest next update: Thu 03 Sep 2026 22:54:50 +0000 Files and hashes: 1: 2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl (hash: N9Pb28X9V1iAm24lEpRP8/xrnLhP0955yITJKglRX+Q=) 2: 3130332e3136322e3234302e302f32332d3234203d3e20313431363731.roa (hash: 4S3CjwY52E8pJFph27PsS9L2iHBVLGusILVU9iKtoiI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:6a:44:df:dc:a4:97:8a:e0:93:b6:0e:4c:58:90:2b:5a:42:68:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72 Validity Not Before: Sep 2 21:03:50 2026 GMT Not After : Sep 3 22:54:50 2026 GMT Subject: CN=9FC0D0FB07072ECE3BF8785AF42A448B6EDCB64C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:a4:09:c3:31:94:f1:3d:83:50:3b:29:66: 26:66:c0:5e:25:e6:c3:f7:05:54:0f:74:00:27:5f: 55:6f:82:3c:06:fc:1b:ed:22:c8:6a:76:d2:98:06: e5:8d:9f:20:2b:25:d0:05:5f:dc:76:0f:2c:b2:4e: 4d:f3:01:9d:85:2e:8b:8e:37:1d:22:a1:fb:86:d1: 25:81:e6:38:ac:ec:12:d8:56:94:a9:c6:70:03:bb: fc:25:f4:bd:d5:72:63:1c:fc:54:c2:b9:c5:95:4e: b2:9b:c7:f5:9e:0d:77:b0:40:5b:95:d3:d4:58:b1: 7c:e5:d3:4c:40:8e:9e:70:71:27:2d:1b:64:66:ff: fd:95:89:eb:bd:31:be:d4:63:d4:5a:52:a4:d6:5f: 9d:19:4a:f3:b0:aa:6e:0d:45:3e:0f:fc:a2:79:e2: 34:c2:a6:bc:fc:8d:d1:2f:f8:37:e0:98:a7:a0:55: 52:2a:4c:e3:5c:5d:41:4c:bd:c8:6a:77:fb:48:23: 37:6b:7a:01:68:bc:c0:8f:14:b8:ae:e8:e8:eb:92: 6b:ed:58:c3:45:5a:8a:7c:67:aa:f3:b4:c2:3c:1e: c1:69:0b:b0:62:95:53:f0:ef:dd:d3:78:a4:f9:c8: 0e:1d:d6:f6:bf:d9:e7:29:c4:28:82:2b:fb:4a:54: 3a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C0:D0:FB:07:07:2E:CE:3B:F8:78:5A:F4:2A:44:8B:6E:DC:B6:4C X509v3 Authority Key Identifier: keyid:2D:88:AC:79:1B:0C:C1:B7:D9:21:EC:E6:60:CD:E0:CF:2E:E8:ED:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:c4:9c:b0:94:fb:0c:32:c3:c4:6b:3b:1a:1e:c2:51:ae:e7: 5d:09:65:78:97:58:81:3e:83:77:8b:ee:6f:06:3d:cc:b2:5e: da:97:70:56:f2:33:ad:6c:b1:20:9c:93:4d:c5:a0:2a:e9:f9: 5a:49:8f:07:16:e9:89:fc:af:97:e4:97:6b:fb:7c:f9:d7:ff: ba:6a:90:4a:7d:d7:98:9b:42:3a:b0:11:88:0a:d3:32:5d:4a: a0:b8:b2:e5:14:e4:5a:9d:bf:e0:5d:b2:1c:ff:a8:36:e1:50: 36:c4:90:a7:39:28:bc:00:3e:59:70:25:c1:c0:b8:62:bd:ba: ba:6d:fb:88:39:bf:03:07:8c:b7:08:fa:2f:dc:29:0c:2c:df: 5f:d7:2e:42:7a:8c:70:bd:af:20:17:91:dc:03:02:ee:bc:60: 5e:4d:25:48:58:63:ec:34:20:5f:e3:77:a3:6b:2b:d8:ae:e5: 9a:60:07:51:eb:35:b9:b0:c2:c1:ba:de:98:17:6c:3d:9a:21: e0:1c:3c:b9:99:2c:ee:dc:61:68:74:d4:ad:e7:df:66:d1:25: 00:5d:91:f7:1a:65:c6:e8:e8:01:42:b9:9a:d9:99:c4:33:39: 9b:7f:a7:12:ca:28:e7:b2:69:08:0d:d0:6a:fb:4a:16:d0:a2: 60:da:75:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb2pE39ykl4rgk7YOTFiQK1pCaHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ4OEFDNzkxQjBDQzFCN0Q5MjFFQ0U2NjBDREUwQ0Yy RUU4RUQ3MjAeFw0yNjA5MDIyMTAzNTBaFw0yNjA5MDMyMjU0NTBaMDMxMTAvBgNV BAMTKDlGQzBEMEZCMDcwNzJFQ0UzQkY4Nzg1QUY0MkE0NDhCNkVEQ0I2NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpS6QJwzGU8T2DUDspZiZmwF4l 5sP3BVQPdAAnX1VvgjwG/BvtIshqdtKYBuWNnyArJdAFX9x2DyyyTk3zAZ2FLouO Nx0iofuG0SWB5jis7BLYVpSpxnADu/wl9L3VcmMc/FTCucWVTrKbx/WeDXewQFuV 09RYsXzl00xAjp5wcSctG2Rm//2Vieu9Mb7UY9RaUqTWX50ZSvOwqm4NRT4P/KJ5 4jTCprz8jdEv+DfgmKegVVIqTONcXUFMvchqd/tIIzdregFovMCPFLiu6Ojrkmvt WMNFWop8Z6rztMI8HsFpC7BilVPw793TeKT5yA4d1va/2ecpxCiCK/tKVDq7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn8DQ+wcHLs47+Hha9CpEi27ctkwwHwYDVR0j BBgwFoAULYiseRsMwbfZIezmYM3gzy7o7XIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjMwMjRkMjQtOWZhYS00YWIwLThmYTQtMGNlNjA4YzZkMGEzLzAvMkQ4OEFDNzkx QjBDQzFCN0Q5MjFFQ0U2NjBDREUwQ0YyRUU4RUQ3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDg4QUM3OTFCMENDMUI3RDkyMUVDRTY2MENERTBDRjJFRThF RDcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjMwMjRkMjQtOWZhYS00YWIwLThm YTQtMGNlNjA4YzZkMGEzLzAvMkQ4OEFDNzkxQjBDQzFCN0Q5MjFFQ0U2NjBDREUw Q0YyRUU4RUQ3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbEnLCU+wwyw8RrOxoewlGu510JZXiXWIE+ g3eL7m8GPcyyXtqXcFbyM61ssSCck03FoCrp+VpJjwcW6Yn8r5fkl2v7fPnX/7pq kEp915ibQjqwEYgK0zJdSqC4suUU5Fqdv+Bdshz/qDbhUDbEkKc5KLwAPllwJcHA uGK9urpt+4g5vwMHjLcI+i/cKQws31/XLkJ6jHC9ryAXkdwDAu68YF5NJUhYY+w0 IF/jd6NrK9iu5ZpgB1HrNbmwwsG63pgXbD2aIeAcPLmZLO7cYWh01K3n32bRJQBd kfcaZcbo6AFCuZrZmcQzOZt/pxLKKOeyaQgN0Gr7ShbQomDaddg= -----END CERTIFICATE-----Generated at Thu Sep 3 09:26:34 2026 by rpki-client