$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft File: 2CE9A084598867F6677FDE09C272DA8D05C480FC.mft (raw, json) Hash identifier: L+ovzqvqNIj9fKW+wP7lHqr8N+XYUqi3INE6oMQzm4Y= Subject key identifier: 9D:30:24:F6:1B:43:A7:95:A1:AD:F3:3B:39:FE:88:F2:DF:0F:78:B9 Authority key identifier: 2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC Certificate issuer: /CN=2CE9A084598867F6677FDE09C272DA8D05C480FC Certificate serial: 48775B8B086B124EF3372BC54FC126238086864E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 00:02:54 +0000 Manifest this update: Tue 03 Nov 2026 23:57:54 +0000 Manifest next update: Thu 05 Nov 2026 03:52:54 +0000 Files and hashes: 1: 2CE9A084598867F6677FDE09C272DA8D05C480FC.crl (hash: gbLXKjRXUACIdZkyL5Kz4gX2Q7SIA7eIwU/FYU+IUE4=) 2: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: 7nMz4s5YYhUtNRJIR+ORKIg42vTypWbintD4uEN6yZw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 03:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:77:5b:8b:08:6b:12:4e:f3:37:2b:c5:4f:c1:26:23:80:86:86:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CE9A084598867F6677FDE09C272DA8D05C480FC Validity Not Before: Nov 3 23:57:54 2026 GMT Not After : Nov 5 03:52:54 2026 GMT Subject: CN=9D3024F61B43A795A1ADF33B39FE88F2DF0F78B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:6e:2e:07:e5:45:ce:6d:34:63:c5:09:29: ea:31:26:89:8a:59:ac:44:a7:fd:0e:9e:99:10:ea: 1f:06:5c:12:20:b3:9e:62:7b:fc:f0:2c:08:60:37: 9a:31:54:18:48:4e:5c:d6:88:f8:7f:1e:37:f1:c6: 76:c4:39:b3:ab:7f:f5:ff:66:b4:88:ef:b0:d8:90: 36:5f:5a:15:33:cb:04:96:f7:fb:ba:f7:d6:64:ce: b5:7e:af:8e:5b:02:16:08:55:9b:21:93:85:db:ca: ba:8b:e1:5f:a2:a3:8d:fc:cc:03:ae:24:c2:44:99: 69:3a:43:89:79:9e:0e:f9:9c:87:2b:3a:b0:fb:fa: 63:75:a1:84:f5:c4:b8:0c:d7:67:b0:67:b7:2d:70: 37:18:75:0c:d2:ea:36:e9:c6:08:3d:e3:32:68:39: ba:80:56:02:00:48:94:8c:83:9d:f5:54:3e:17:61: 1e:38:c9:0c:d4:4b:03:49:51:59:db:ea:7f:8d:1b: f1:bc:10:0e:da:9d:f9:25:3f:cc:57:a5:55:14:9b: c6:9d:03:4e:9a:d2:6b:fe:95:02:4b:fe:85:ea:d1: af:08:1c:e3:f5:17:a7:8b:ef:7d:64:e3:e5:30:1b: 70:25:f5:fe:be:07:ed:6c:e9:ea:e1:83:f0:1d:82: ad:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:30:24:F6:1B:43:A7:95:A1:AD:F3:3B:39:FE:88:F2:DF:0F:78:B9 X509v3 Authority Key Identifier: keyid:2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a3:5d:4f:a3:87:69:77:81:b5:29:6d:fa:2d:f8:c5:96:72: c4:d3:f6:02:b4:87:33:97:7d:0d:e6:99:b6:39:a0:e3:c4:3e: 69:9b:85:d5:59:6a:55:e3:7e:ef:6d:4d:32:0d:b2:ae:02:ec: 14:8d:40:2a:e2:23:48:7c:35:5f:45:1d:d9:05:65:26:66:4c: f9:c5:c4:4c:73:e4:fd:4a:88:0b:56:10:01:e3:2e:7f:ad:0e: 16:59:f3:cd:7c:8b:46:43:c4:84:49:54:52:19:06:44:24:f8: 95:8b:63:04:f8:45:ac:ab:bc:37:ed:3f:4b:03:bf:bc:4f:24: f6:39:aa:f6:9b:d2:36:60:da:47:71:bf:c4:9c:24:af:47:69: 33:10:b9:64:d4:64:2c:d0:8d:97:2d:dc:12:3e:de:09:03:27: ab:1a:4b:bc:b2:4e:21:62:e0:24:6a:85:f6:5f:80:48:e0:09: 9a:a7:4c:59:5e:83:94:da:a1:b9:44:ce:c9:42:9f:11:4a:d4: ee:08:56:dc:9d:03:60:61:37:d2:61:ba:00:f6:85:5a:9c:df: 11:ab:c9:b0:14:85:37:40:de:a8:26:35:c6:d9:dd:00:61:64: 3f:be:5a:eb:1c:9e:2e:f0:6d:1e:e0:82:bd:aa:21:0c:42:3b: 6c:b8:4b:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSHdbiwhrEk7zNyvFT8EmI4CGhk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNFOUEwODQ1OTg4NjdGNjY3N0ZERTA5QzI3MkRBOEQw NUM0ODBGQzAeFw0yNjExMDMyMzU3NTRaFw0yNjExMDUwMzUyNTRaMDMxMTAvBgNV BAMTKDlEMzAyNEY2MUI0M0E3OTVBMUFERjMzQjM5RkU4OEYyREYwRjc4QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxkG4uB+VFzm00Y8UJKeoxJomK WaxEp/0OnpkQ6h8GXBIgs55ie/zwLAhgN5oxVBhITlzWiPh/HjfxxnbEObOrf/X/ ZrSI77DYkDZfWhUzywSW9/u699ZkzrV+r45bAhYIVZshk4XbyrqL4V+io438zAOu JMJEmWk6Q4l5ng75nIcrOrD7+mN1oYT1xLgM12ewZ7ctcDcYdQzS6jbpxgg94zJo ObqAVgIASJSMg531VD4XYR44yQzUSwNJUVnb6n+NG/G8EA7anfklP8xXpVUUm8ad A06a0mv+lQJL/oXq0a8IHOP1F6eL731k4+UwG3Al9f6+B+1s6erhg/Adgq0tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnTAk9htDp5WhrfM7Of6I8t8PeLkwHwYDVR0j BBgwFoAULOmghFmIZ/Znf94JwnLajQXEgPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTliODE1MmUtYWE4Ni00ZDhhLTgxZGEtZTcxMDg2YjI5NTZjLzAvMkNFOUEwODQ1 OTg4NjdGNjY3N0ZERTA5QzI3MkRBOEQwNUM0ODBGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yQ0U5QTA4NDU5ODg2N0Y2Njc3RkRFMDlDMjcyREE4RDA1QzQ4 MEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvMkNFOUEwODQ1OTg4NjdGNjY3N0ZERTA5QzI3MkRB OEQwNUM0ODBGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyjXU+jh2l3gbUpbfot+MWWcsTT9gK0hzOX fQ3mmbY5oOPEPmmbhdVZalXjfu9tTTINsq4C7BSNQCriI0h8NV9FHdkFZSZmTPnF xExz5P1KiAtWEAHjLn+tDhZZ8818i0ZDxIRJVFIZBkQk+JWLYwT4RayrvDftP0sD v7xPJPY5qvab0jZg2kdxv8ScJK9HaTMQuWTUZCzQjZct3BI+3gkDJ6saS7yyTiFi 4CRqhfZfgEjgCZqnTFleg5TaoblEzslCnxFK1O4IVtydA2BhN9JhugD2hVqc3xGr ybAUhTdA3qgmNcbZ3QBhZD++Wuscni7wbR7ggr2qIQxCO2y4SxM= -----END CERTIFICATE-----Generated at Wed Nov 4 22:21:52 2026 by rpki-client