$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft File: C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft (raw, json) Hash identifier: du+3Fp8weAOa/iyXxxWd1140jc0XoO5b59GreRIaZxk= Subject key identifier: 0A:2C:DE:A6:B6:35:2A:79:09:1C:95:8D:2D:07:3D:1A:78:5E:7B:CD Authority key identifier: C2:D3:13:86:7B:0B:49:66:C3:72:AB:0F:92:BE:8E:E8:78:20:EF:88 Certificate issuer: /CN=C2D313867B0B4966C372AB0F92BE8EE87820EF88 Certificate serial: 270F2CF42C963BD1D35DA52646DA3E29453F1E66 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 14:15:40 +0000 Manifest this update: Wed 02 Sep 2026 14:10:40 +0000 Manifest next update: Thu 03 Sep 2026 16:43:40 +0000 Files and hashes: 1: 3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa (hash: Y+vREFE/EG16t2/cwbDbHoF+QrWyIBN3buYGvhuls/U=) 2: C2D313867B0B4966C372AB0F92BE8EE87820EF88.crl (hash: ZSI6L5iUZSSer43+8soaW9YE6RpJRFTlf6fjUh5yWfk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.crl rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 16:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:0f:2c:f4:2c:96:3b:d1:d3:5d:a5:26:46:da:3e:29:45:3f:1e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D313867B0B4966C372AB0F92BE8EE87820EF88 Validity Not Before: Sep 2 14:10:40 2026 GMT Not After : Sep 3 16:43:40 2026 GMT Subject: CN=0A2CDEA6B6352A79091C958D2D073D1A785E7BCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a1:e3:3e:7f:66:64:c8:62:2e:37:40:a7:bb: 2c:f6:10:b9:e4:ce:91:f3:3f:c2:42:8f:f2:62:69: c6:fa:82:8d:c8:9b:3d:65:70:2d:1f:80:01:fe:3e: 3d:3f:06:54:3d:e4:a0:a5:03:c9:f5:d2:dd:22:4d: 01:24:2d:c4:68:2b:59:3d:14:7c:de:5d:6e:59:08: 55:15:70:93:4f:95:c7:59:3a:e4:24:e2:24:1f:52: 54:55:34:75:bb:0d:21:3a:9e:8c:09:f9:62:79:9a: 48:27:3e:9b:40:c0:d8:ca:bc:d2:32:4c:7f:35:3c: dc:bd:63:c2:64:39:d6:61:80:9c:44:3e:ac:ed:08: 59:f1:4c:98:16:7e:8f:36:a2:68:c1:8c:75:38:56: fc:12:7d:5d:c0:6c:de:a4:79:aa:1e:e2:6a:a3:8c: 8a:cf:2c:99:ed:77:45:15:16:3e:fb:8c:ab:8f:7c: 1e:13:13:fd:85:e9:b7:1b:d1:2e:80:85:28:b8:f1: 71:61:39:ab:52:23:cd:c6:d5:02:e0:5c:c5:b8:b9: cd:f3:87:67:53:c1:a7:5d:85:70:21:90:02:65:f0: 4d:10:69:5e:75:f8:17:96:f4:de:60:37:55:4c:83: 3e:81:84:72:b4:3e:92:98:e3:2b:6e:1f:8c:0f:dd: 01:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2C:DE:A6:B6:35:2A:79:09:1C:95:8D:2D:07:3D:1A:78:5E:7B:CD X509v3 Authority Key Identifier: keyid:C2:D3:13:86:7B:0B:49:66:C3:72:AB:0F:92:BE:8E:E8:78:20:EF:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:7a:30:34:fd:15:db:f3:61:25:ac:fb:86:52:05:eb:83:34: 48:c6:12:e1:88:24:a8:45:25:c4:e2:e7:1d:5d:c9:d7:24:55: 16:50:79:ab:3c:84:fb:92:48:9b:24:04:ac:3f:19:f0:16:e7: bc:2b:83:85:2c:cd:52:e0:6a:19:40:49:97:1b:70:92:ee:d4: 2a:a8:f9:ee:64:c3:17:0f:7b:fc:c8:23:17:8a:cd:81:f9:76: 00:e9:27:7e:44:8e:e9:32:02:7f:91:09:64:98:d8:3d:bf:12: 82:47:eb:1a:d4:54:15:0e:ff:51:92:ee:89:fc:be:9a:91:bb: 26:63:b7:f4:1a:78:c2:67:bd:14:69:31:72:21:1a:2c:ce:9f: 6c:c3:9e:47:28:35:d2:6f:9f:ef:fe:9b:29:cb:41:66:b2:93: ab:ad:74:19:33:f5:2e:1a:05:bc:d5:f8:55:3b:cf:fd:e6:91: 6c:01:ad:96:99:52:bf:eb:e6:04:ac:1c:62:aa:eb:89:5b:28: b8:d2:b4:4a:09:95:0c:bb:1f:d7:33:0f:1e:bd:d2:47:18:3a: 49:c6:46:f5:61:9a:69:d4:95:1c:df:29:08:ef:c8:a3:6c:bb: 37:d5:f2:1b:3c:ac:f1:01:ae:b3:72:f2:01:b0:44:76:4c:79: e5:5e:49:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJw8s9CyWO9HTXaUmRto+KUU/HmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJEMzEzODY3QjBCNDk2NkMzNzJBQjBGOTJCRThFRTg3 ODIwRUY4ODAeFw0yNjA5MDIxNDEwNDBaFw0yNjA5MDMxNjQzNDBaMDMxMTAvBgNV BAMTKDBBMkNERUE2QjYzNTJBNzkwOTFDOTU4RDJEMDczRDFBNzg1RTdCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXoeM+f2ZkyGIuN0Cnuyz2ELnk zpHzP8JCj/Jiacb6go3Imz1lcC0fgAH+Pj0/BlQ95KClA8n10t0iTQEkLcRoK1k9 FHzeXW5ZCFUVcJNPlcdZOuQk4iQfUlRVNHW7DSE6nowJ+WJ5mkgnPptAwNjKvNIy TH81PNy9Y8JkOdZhgJxEPqztCFnxTJgWfo82omjBjHU4VvwSfV3AbN6keaoe4mqj jIrPLJntd0UVFj77jKuPfB4TE/2F6bcb0S6AhSi48XFhOatSI83G1QLgXMW4uc3z h2dTwaddhXAhkAJl8E0QaV51+BeW9N5gN1VMgz6BhHK0PpKY4ytuH4wP3QHtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCizeprY1KnkJHJWNLQc9Gnhee80wHwYDVR0j BBgwFoAUwtMThnsLSWbDcqsPkr6O6Hgg74gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMxNzM2OWEtYmNjMS00MmJjLWI4YjItZjk2ZDUwZDM3NDlkLzAvQzJEMzEzODY3 QjBCNDk2NkMzNzJBQjBGOTJCRThFRTg3ODIwRUY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkQzMTM4NjdCMEI0OTY2QzM3MkFCMEY5MkJFOEVFODc4MjBF Rjg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMxNzM2OWEtYmNjMS00MmJjLWI4 YjItZjk2ZDUwZDM3NDlkLzAvQzJEMzEzODY3QjBCNDk2NkMzNzJBQjBGOTJCRThF RTg3ODIwRUY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHB6MDT9FdvzYSWs+4ZSBeuDNEjGEuGIJKhF JcTi5x1dydckVRZQeas8hPuSSJskBKw/GfAW57wrg4UszVLgahlASZcbcJLu1Cqo +e5kwxcPe/zIIxeKzYH5dgDpJ35EjukyAn+RCWSY2D2/EoJH6xrUVBUO/1GS7on8 vpqRuyZjt/QaeMJnvRRpMXIhGizOn2zDnkcoNdJvn+/+mynLQWayk6utdBkz9S4a BbzV+FU7z/3mkWwBrZaZUr/r5gSsHGKq64lbKLjStEoJlQy7H9czDx690kcYOknG RvVhmmnUlRzfKQjvyKNsuzfV8hs8rPEBrrNy8gGwRHZMeeVeSTU= -----END CERTIFICATE-----Generated at Thu Sep 3 09:34:52 2026 by rpki-client