$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft File: 2479BECD79D87972D2E64A75818044EA49B2F7AB.mft (raw, json) Hash identifier: JTcCV3B+U0LYXhIqkr6EUn+jDi/u47CEYoTB3nUIw/g= Subject key identifier: CE:27:DA:39:CF:6C:0E:B6:82:6F:83:C1:3D:9F:99:3A:D8:F2:B1:D9 Authority key identifier: 24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB Certificate issuer: /CN=2479BECD79D87972D2E64A75818044EA49B2F7AB Certificate serial: 3032E37CC9EB5FAEB38ADF0830E0C7215829EE2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 07:16:30 +0000 Manifest this update: Thu 03 Sep 2026 07:11:30 +0000 Manifest next update: Fri 04 Sep 2026 09:41:30 +0000 Files and hashes: 1: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: W/8+xRtFQTktxO0fuk7MAz6L6AHwxOnMCS8RTW7dGss=) 2: 3130332e3131322e3134342e302f32332d3233203d3e20313534343130.roa (hash: EBSYxoW+DLXOqCY+Bl9yoeDsBygUGPhlM9cqjS/xpGk=) 3: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: aop58br7cTbLrX5Ig76Wb88/Xv5ZLtq0WiG+kxtdBWw=) 4: 2479BECD79D87972D2E64A75818044EA49B2F7AB.crl (hash: 3cAuL++a0jXcM+CccL+P8oCgKcfjwNLEgSENWON2xPQ=) 5: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: /gZ4/45D54iPNl3rFwLqcXjfv+fGeCZ/kGOEYCstAaw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 09:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:32:e3:7c:c9:eb:5f:ae:b3:8a:df:08:30:e0:c7:21:58:29:ee:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2479BECD79D87972D2E64A75818044EA49B2F7AB Validity Not Before: Sep 3 07:11:30 2026 GMT Not After : Sep 4 09:41:30 2026 GMT Subject: CN=CE27DA39CF6C0EB6826F83C13D9F993AD8F2B1D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d9:78:cd:98:43:2e:53:d0:67:cc:c3:f3:82: 74:7c:15:4c:25:80:42:8e:6e:8c:0d:ca:d9:bf:38: 46:be:f2:15:aa:b7:d9:28:80:79:aa:34:45:27:2f: 01:a3:27:06:da:92:5c:75:c2:5f:36:01:cd:ca:7c: 9d:f8:c1:33:2b:80:29:0f:94:a3:0f:1c:3f:1a:31: c1:0e:61:8a:13:5c:5d:df:84:db:69:29:cc:5d:41: d0:ce:cb:d1:4a:2e:99:58:01:5f:99:1d:f2:9d:23: 3d:c5:5e:04:5b:65:44:00:e7:1f:b0:82:bf:64:af: 82:2a:51:c3:4e:a1:3e:cd:f5:c1:d5:18:bd:83:a8: d7:ce:a8:ce:b0:01:96:e9:b1:ca:8a:d8:5f:57:4d: c7:db:68:bc:5e:a6:12:e0:96:f8:14:a1:3d:f9:28: 93:29:37:b6:4b:e0:85:2e:77:69:fc:6a:dc:58:fc: 0f:f8:7b:7a:db:5c:db:b3:48:9f:a9:79:f5:b7:e0: d1:50:43:28:45:91:57:1d:43:c8:0d:4a:c7:f5:c2: 17:eb:e1:5d:9d:25:84:53:1e:0f:12:db:59:ec:ea: ac:74:56:ba:c3:c1:8a:16:e2:8f:26:41:d4:d6:1d: 43:44:80:d9:ec:63:2a:4f:27:a9:d1:bf:42:a4:ee: 9a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:27:DA:39:CF:6C:0E:B6:82:6F:83:C1:3D:9F:99:3A:D8:F2:B1:D9 X509v3 Authority Key Identifier: keyid:24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:3c:d6:24:15:7b:76:49:fd:e9:4a:c9:fd:cf:b9:ab:13:7c: 72:00:25:58:3a:a9:a5:b9:6f:38:73:cf:e8:c8:43:bb:e7:23: 89:00:a3:3b:eb:72:ff:07:f2:cb:1f:26:a9:b0:e0:02:81:09: 8d:07:d9:42:a6:3f:91:51:7b:96:bb:f0:91:ed:8b:4d:b9:03: 3d:d7:4c:02:0f:cf:aa:04:64:80:f8:92:f9:1c:aa:0a:2b:40: f5:a8:d3:f0:e6:66:cb:e9:6f:96:69:d8:6d:05:b2:eb:6b:b3: 3a:23:d6:d5:aa:e3:cb:13:e7:dc:d9:50:2a:df:19:50:1a:68: 24:84:aa:71:bb:cd:c2:8d:b7:c0:e8:06:5c:c1:52:f2:3f:21: 41:f7:d1:9a:62:f9:a8:5e:30:08:bd:a1:fc:c7:b5:4e:e9:21: 8d:ba:f4:40:67:90:b4:72:a9:26:c3:a5:81:bb:5f:2f:72:df: 77:1d:59:2e:1b:85:19:b7:dd:3e:8c:19:54:f4:05:bc:f1:79: 35:e2:3c:7e:56:39:d9:78:e8:87:f6:fa:24:32:ec:dc:14:b3: c2:4d:05:51:d5:6c:e2:55:84:a1:26:20:2e:af:85:db:61:85: ff:8c:63:98:2e:e0:18:aa:c5:8a:41:6b:b3:1a:3b:e7:57:10: c6:a7:41:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMDLjfMnrX66zit8IMODHIVgp7i4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3OUJFQ0Q3OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0RUE0 OUIyRjdBQjAeFw0yNjA5MDMwNzExMzBaFw0yNjA5MDQwOTQxMzBaMDMxMTAvBgNV BAMTKENFMjdEQTM5Q0Y2QzBFQjY4MjZGODNDMTNEOUY5OTNBRDhGMkIxRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV2XjNmEMuU9BnzMPzgnR8FUwl gEKObowNytm/OEa+8hWqt9kogHmqNEUnLwGjJwbaklx1wl82Ac3KfJ34wTMrgCkP lKMPHD8aMcEOYYoTXF3fhNtpKcxdQdDOy9FKLplYAV+ZHfKdIz3FXgRbZUQA5x+w gr9kr4IqUcNOoT7N9cHVGL2DqNfOqM6wAZbpscqK2F9XTcfbaLxephLglvgUoT35 KJMpN7ZL4IUud2n8atxY/A/4e3rbXNuzSJ+pefW34NFQQyhFkVcdQ8gNSsf1whfr 4V2dJYRTHg8S21ns6qx0VrrDwYoW4o8mQdTWHUNEgNnsYypPJ6nRv0Kk7prJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzifaOc9sDraCb4PBPZ+ZOtjysdkwHwYDVR0j BBgwFoAUJHm+zXnYeXLS5kp1gYBE6kmy96swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNkMDhlYjMtOTM3ZC00MzA0LTkxNjctNDYzZDdjNThkNWU0LzAvMjQ3OUJFQ0Q3 OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0RUE0OUIyRjdBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDc5QkVDRDc5RDg3OTcyRDJFNjRBNzU4MTgwNDRFQTQ5QjJG N0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGNkMDhlYjMtOTM3ZC00MzA0LTkx NjctNDYzZDdjNThkNWU0LzAvMjQ3OUJFQ0Q3OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0 RUE0OUIyRjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALo81iQVe3ZJ/elKyf3PuasTfHIAJVg6qaW5 bzhzz+jIQ7vnI4kAozvrcv8H8ssfJqmw4AKBCY0H2UKmP5FRe5a78JHti025Az3X TAIPz6oEZID4kvkcqgorQPWo0/DmZsvpb5Zp2G0Fsutrszoj1tWq48sT59zZUCrf GVAaaCSEqnG7zcKNt8DoBlzBUvI/IUH30Zpi+aheMAi9ofzHtU7pIY269EBnkLRy qSbDpYG7Xy9y33cdWS4bhRm33T6MGVT0BbzxeTXiPH5WOdl46If2+iQy7NwUs8JN BVHVbOJVhKEmIC6vhdthhf+MY5gu4BiqxYpBa7MaO+dXEManQeI= -----END CERTIFICATE-----Generated at Fri Sep 4 00:35:22 2026 by rpki-client