$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft File: 2C1233B548C07507C6EF58E2A03DD8309F820753.mft (raw, json) Hash identifier: LFgYisHpzJK3/1niipY4lbjCQDDWoFAMlJf0AMDqKo8= Subject key identifier: AB:61:6B:B1:D2:F2:AA:7F:3B:42:6D:02:C4:66:C4:31:55:DD:0A:5E Authority key identifier: 2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53 Certificate issuer: /CN=2C1233B548C07507C6EF58E2A03DD8309F820753 Certificate serial: 418D58E687F03B1EE595BD86D7216D78F8BF6B40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 07:21:35 +0000 Manifest this update: Thu 03 Sep 2026 07:16:35 +0000 Manifest next update: Fri 04 Sep 2026 07:51:35 +0000 Files and hashes: 1: 2C1233B548C07507C6EF58E2A03DD8309F820753.crl (hash: Sd4af+nVwdgSvC5rLU0/qFZaRzHdcnSFXcRAVc/Q85Q=) 2: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: /6iiyBTTzA+gJYo5W8sFnueJYX/K6dQcso0XDUc2u/0=) 3: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: bvFzrT6armN3+NSh25eEAeVsS6vGdsFIsCLC0MUnl3s=) 4: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 0GUMhzS+5NIthW1wvl37lL5c5ztTRVnrHP+oCvOX4MA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 07:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8d:58:e6:87:f0:3b:1e:e5:95:bd:86:d7:21:6d:78:f8:bf:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C1233B548C07507C6EF58E2A03DD8309F820753 Validity Not Before: Sep 3 07:16:35 2026 GMT Not After : Sep 4 07:51:35 2026 GMT Subject: CN=AB616BB1D2F2AA7F3B426D02C466C43155DD0A5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ae:59:c8:50:a2:d3:40:7b:a1:bc:af:d2:f8: db:23:c8:62:40:28:8e:fa:44:6a:be:cb:b1:fb:0b: 14:ef:b4:16:f5:c2:6a:44:43:cc:38:c4:eb:60:df: 44:72:04:33:22:ff:78:9c:9c:fd:53:87:74:e5:d4: 15:72:60:87:99:23:e8:1f:64:1a:f2:b2:4f:ae:be: 0b:4d:07:b3:29:34:be:dd:c5:01:b2:89:17:08:00: 63:87:30:c0:0a:ee:c6:d2:1b:a9:98:b6:cb:b4:d5: cc:b4:21:23:c8:54:21:6b:8b:b6:a3:8d:35:9d:1a: cc:39:5c:b5:a0:fb:df:b9:35:75:f9:ac:30:d2:91: ee:e4:ce:1c:9b:cc:99:e4:27:d5:21:71:3c:5a:5e: 4d:35:ad:4e:e6:b8:0c:48:90:3b:92:fa:54:0e:34: f0:46:26:fe:b3:e0:29:c3:38:e5:44:40:6d:5d:ce: 63:1f:e2:c6:d4:e8:e8:6b:8f:58:3a:a4:db:48:3e: d6:08:79:6b:08:be:3c:a3:cf:c1:02:8c:bc:ac:44: 28:0d:cf:fd:ac:48:21:98:79:ee:99:b5:20:06:76: 15:82:2b:49:2a:a7:72:57:19:9c:67:36:40:12:cb: 69:9f:e4:2c:b5:60:fe:eb:c6:20:96:44:3d:21:86: 80:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:61:6B:B1:D2:F2:AA:7F:3B:42:6D:02:C4:66:C4:31:55:DD:0A:5E X509v3 Authority Key Identifier: keyid:2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:84:af:ab:38:e9:03:68:95:83:7d:2f:5b:c9:bf:4e:eb:b2: 0c:bd:15:3a:f7:fa:82:9f:10:34:62:35:61:7a:6d:2d:c6:0f: 8a:32:50:dc:b0:ac:08:45:32:b5:13:50:04:4f:e5:df:bd:42: 1c:f7:8a:7c:4c:42:82:4a:c7:09:74:c3:4f:93:5d:c2:54:51: e6:14:27:ee:d0:f6:df:88:17:92:c9:67:2e:6a:5f:ae:bb:ad: b5:70:f4:8d:82:e4:e7:55:58:67:a0:05:f8:24:fa:b0:d8:6a: 37:7f:4f:a2:12:6c:8e:e8:aa:4d:f7:f7:ce:18:76:ea:16:e8: 96:8e:bf:c9:ff:86:17:8c:a8:78:4a:7d:a1:a3:b4:c1:e0:ff: 84:37:8c:06:40:78:5d:05:af:77:87:f4:58:24:1e:3c:b3:28: 7c:8d:af:c0:29:46:13:9b:91:a7:27:b4:8b:fe:c7:66:be:64: 56:ea:25:6b:41:b3:00:a8:b8:e3:0a:73:b6:b4:1a:d4:b6:9e: 0d:9f:af:13:bb:61:df:ba:b1:41:cf:82:4d:25:3a:9c:10:34: dd:8c:d1:c7:11:80:a4:b1:88:7e:cf:bc:da:c9:e0:40:86:35: 81:65:15:b9:ec:48:97:b9:69:0d:cc:af:22:45:6c:07:0e:c3: a5:ad:40:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQY1Y5ofwOx7llb2G1yFtePi/a0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMxMjMzQjU0OEMwNzUwN0M2RUY1OEUyQTAzREQ4MzA5 RjgyMDc1MzAeFw0yNjA5MDMwNzE2MzVaFw0yNjA5MDQwNzUxMzVaMDMxMTAvBgNV BAMTKEFCNjE2QkIxRDJGMkFBN0YzQjQyNkQwMkM0NjZDNDMxNTVERDBBNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTrlnIUKLTQHuhvK/S+NsjyGJA KI76RGq+y7H7CxTvtBb1wmpEQ8w4xOtg30RyBDMi/3icnP1Th3Tl1BVyYIeZI+gf ZBrysk+uvgtNB7MpNL7dxQGyiRcIAGOHMMAK7sbSG6mYtsu01cy0ISPIVCFri7aj jTWdGsw5XLWg+9+5NXX5rDDSke7kzhybzJnkJ9UhcTxaXk01rU7muAxIkDuS+lQO NPBGJv6z4CnDOOVEQG1dzmMf4sbU6Ohrj1g6pNtIPtYIeWsIvjyjz8ECjLysRCgN z/2sSCGYee6ZtSAGdhWCK0kqp3JXGZxnNkASy2mf5Cy1YP7rxiCWRD0hhoAFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq2FrsdLyqn87Qm0CxGbEMVXdCl4wHwYDVR0j BBgwFoAULBIztUjAdQfG71jioD3YMJ+CB1MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTFlOTQyNDMtODdmMC00MjZmLWE5Y2EtNGMxOWVkYjA2YjQyLzAvMkMxMjMzQjU0 OEMwNzUwN0M2RUY1OEUyQTAzREQ4MzA5RjgyMDc1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQzEyMzNCNTQ4QzA3NTA3QzZFRjU4RTJBMDNERDgzMDlGODIw NzUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5 Y2EtNGMxOWVkYjA2YjQyLzAvMkMxMjMzQjU0OEMwNzUwN0M2RUY1OEUyQTAzREQ4 MzA5RjgyMDc1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOEr6s46QNolYN9L1vJv07rsgy9FTr3+oKf EDRiNWF6bS3GD4oyUNywrAhFMrUTUARP5d+9Qhz3inxMQoJKxwl0w0+TXcJUUeYU J+7Q9t+IF5LJZy5qX667rbVw9I2C5OdVWGegBfgk+rDYajd/T6ISbI7oqk33984Y duoW6JaOv8n/hheMqHhKfaGjtMHg/4Q3jAZAeF0Fr3eH9FgkHjyzKHyNr8ApRhOb kacntIv+x2a+ZFbqJWtBswCouOMKc7a0GtS2ng2frxO7Yd+6sUHPgk0lOpwQNN2M 0ccRgKSxiH7PvNrJ4ECGNYFlFbnsSJe5aQ3MryJFbAcOw6WtQHw= -----END CERTIFICATE-----Generated at Thu Sep 3 12:07:45 2026 by rpki-client