$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft File: 2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft (raw, json) Hash identifier: nvYvPupb6ERT67d2USz6ecfOvtoek5HJgFWsV7WMypE= Subject key identifier: 06:0A:C6:CE:77:D0:D1:CD:09:91:31:A8:E6:34:51:FF:54:B0:19:6C Authority key identifier: 2D:81:47:AB:32:AE:34:FE:05:99:30:1C:39:9B:A4:31:CB:D9:6A:E2 Certificate issuer: /CN=2D8147AB32AE34FE0599301C399BA431CBD96AE2 Certificate serial: 30D08F32EB717ED800AF39254D8BD913A3E9D209 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 10:05:21 +0000 Manifest this update: Mon 02 Nov 2026 10:00:21 +0000 Manifest next update: Tue 03 Nov 2026 12:07:21 +0000 Files and hashes: 1: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: RnobRsvxkM1MTdlV59E6oBUzJE/tUaI5t4eU9X2Ihxg=) 2: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: YTcLxO+mbdwk1sv6hkGjyOE34UWEs5shSWT+DleZD5E=) 3: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: OX/hSObmRCzkD1qVckzfWkKuBPC5Pdod9YDgySPz4C8=) 4: 2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl (hash: 1mIbRjOMhbwtM8u+iaUb3mk3UWI5UwDfIh07RKPga9Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d0:8f:32:eb:71:7e:d8:00:af:39:25:4d:8b:d9:13:a3:e9:d2:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D8147AB32AE34FE0599301C399BA431CBD96AE2 Validity Not Before: Nov 2 10:00:21 2026 GMT Not After : Nov 3 12:07:21 2026 GMT Subject: CN=060AC6CE77D0D1CD099131A8E63451FF54B0196C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:91:3d:c4:fd:f1:8e:dd:88:49:fa:b9:0b:d6: fc:a1:0e:66:53:1c:f6:d9:08:c1:23:8e:ef:2b:d1: 89:d6:bc:64:b8:ee:d3:7a:15:a1:b6:b1:bb:45:08: 70:33:38:36:12:70:10:31:e3:e2:06:8f:e1:4a:99: f7:ac:f6:04:58:e6:e3:a0:5e:99:03:28:d2:e0:d2: ec:49:e6:7c:27:af:66:97:db:08:25:ae:73:7d:1c: 8f:a6:07:f4:50:95:8e:6f:00:dc:9a:ef:7d:d8:61: 3b:cb:fa:4e:2d:5f:7b:ff:98:97:a9:57:46:ba:34: 21:eb:be:d3:c2:04:70:0d:ce:5e:05:e5:09:63:93: a3:b5:86:32:1d:65:2f:5b:04:31:86:6c:88:0b:d9: ee:5d:25:ee:ff:6f:5c:de:92:d4:80:1a:f5:9d:2d: 8c:f6:25:c0:13:3c:ce:98:43:17:8e:88:e7:5c:05: 4e:b1:f7:ca:03:cd:2e:6f:ce:59:f3:d8:94:25:e0: 59:20:e1:b5:39:37:7b:c9:00:ca:43:49:ef:54:11: 3c:81:81:0b:ba:a9:fa:d5:6c:b5:64:e2:21:da:bf: db:59:f5:96:a6:6e:93:cb:c8:48:cd:77:59:67:2e: c1:7d:e6:23:fc:ab:aa:24:32:50:4c:f4:9f:a7:e5: da:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0A:C6:CE:77:D0:D1:CD:09:91:31:A8:E6:34:51:FF:54:B0:19:6C X509v3 Authority Key Identifier: keyid:2D:81:47:AB:32:AE:34:FE:05:99:30:1C:39:9B:A4:31:CB:D9:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:e6:59:59:70:05:e1:a3:80:e2:7d:54:53:51:55:c0:f5:81: 0c:61:f3:f6:3e:07:cc:57:46:d8:1e:62:94:a7:92:e9:17:9b: 68:8f:3f:74:52:fc:90:58:89:5a:ab:9f:15:b0:6f:ef:d9:ae: ab:8c:a6:65:aa:d3:7d:60:ec:6d:7a:7c:45:4e:56:78:7d:8d: cf:e6:81:b0:c8:e0:cf:40:79:60:fa:d1:c7:0d:d7:ec:04:c8: 0c:7c:33:fc:6f:33:b4:8d:34:bb:2f:04:5f:9f:86:fd:67:da: 8a:1c:f2:40:25:1b:93:43:9a:d4:d6:c8:a7:37:b5:b0:fd:99: e4:9e:9c:e5:bf:11:08:d3:88:dc:30:5b:ef:c5:44:83:b8:41: 92:f3:16:02:1a:9c:cb:35:2a:3d:07:82:30:a8:d0:6a:43:46: a5:3e:bf:33:70:51:75:4f:3e:b9:31:d2:c8:5b:c6:42:e4:24: cb:66:12:6e:bb:28:24:87:61:26:2b:80:e2:58:1b:d5:f7:2f: a6:6f:0f:f2:58:41:22:b7:e8:c4:1e:aa:a9:c0:bf:7a:2a:a5: e1:4a:46:99:c5:a3:2a:de:93:f3:6d:7f:39:61:55:e5:86:ae: c5:9b:2c:c0:d7:1c:f1:ae:74:fd:30:7b:4d:e3:55:d3:95:54: 5d:3a:7d:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMNCPMutxftgArzklTYvZE6Pp0gkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ4MTQ3QUIzMkFFMzRGRTA1OTkzMDFDMzk5QkE0MzFD QkQ5NkFFMjAeFw0yNjExMDIxMDAwMjFaFw0yNjExMDMxMjA3MjFaMDMxMTAvBgNV BAMTKDA2MEFDNkNFNzdEMEQxQ0QwOTkxMzFBOEU2MzQ1MUZGNTRCMDE5NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCakT3E/fGO3YhJ+rkL1vyhDmZT HPbZCMEjju8r0YnWvGS47tN6FaG2sbtFCHAzODYScBAx4+IGj+FKmfes9gRY5uOg XpkDKNLg0uxJ5nwnr2aX2wglrnN9HI+mB/RQlY5vANya733YYTvL+k4tX3v/mJep V0a6NCHrvtPCBHANzl4F5Qljk6O1hjIdZS9bBDGGbIgL2e5dJe7/b1zektSAGvWd LYz2JcATPM6YQxeOiOdcBU6x98oDzS5vzlnz2JQl4Fkg4bU5N3vJAMpDSe9UETyB gQu6qfrVbLVk4iHav9tZ9ZambpPLyEjNd1lnLsF95iP8q6okMlBM9J+n5dolAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBgrGznfQ0c0JkTGo5jRR/1SwGWwwHwYDVR0j BBgwFoAULYFHqzKuNP4FmTAcOZukMcvZauIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFkYTIzZTktODRiZS00YTU0LWJjYTAtZTlhMGNhZmQxNmZlLzAvMkQ4MTQ3QUIz MkFFMzRGRTA1OTkzMDFDMzk5QkE0MzFDQkQ5NkFFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yRDgxNDdBQjMyQUUzNEZFMDU5OTMwMUMzOTlCQTQzMUNCRDk2 QUUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFkYTIzZTktODRiZS00YTU0LWJj YTAtZTlhMGNhZmQxNmZlLzAvMkQ4MTQ3QUIzMkFFMzRGRTA1OTkzMDFDMzk5QkE0 MzFDQkQ5NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHmWVlwBeGjgOJ9VFNRVcD1gQxh8/Y+B8xX RtgeYpSnkukXm2iPP3RS/JBYiVqrnxWwb+/ZrquMpmWq031g7G16fEVOVnh9jc/m gbDI4M9AeWD60ccN1+wEyAx8M/xvM7SNNLsvBF+fhv1n2ooc8kAlG5NDmtTWyKc3 tbD9meSenOW/EQjTiNwwW+/FRIO4QZLzFgIanMs1Kj0HgjCo0GpDRqU+vzNwUXVP Prkx0shbxkLkJMtmEm67KCSHYSYrgOJYG9X3L6ZvD/JYQSK36MQeqqnAv3oqpeFK RpnFoyrek/NtfzlhVeWGrsWbLMDXHPGudP0we03jVdOVVF06ffQ= -----END CERTIFICATE-----Generated at Mon Nov 2 18:14:59 2026 by rpki-client