$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft File: 2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft (raw, json) Hash identifier: HBAX4OGeqRJd2V+kwu7Bnpvh34/Fq9hJp08tBRXnVyM= Subject key identifier: 0B:21:BC:82:83:F1:FC:79:86:FE:A6:1C:04:96:F1:3B:47:33:C3:D3 Authority key identifier: 2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3 Certificate issuer: /CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3 Certificate serial: 574F087DE3EB26575DDB29BC6A147421E08E5E32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 02:46:20 +0000 Manifest this update: Thu 03 Sep 2026 02:41:20 +0000 Manifest next update: Fri 04 Sep 2026 03:15:20 +0000 Files and hashes: 1: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: uD4zXPlmJIJvDYKeBCRvwCSXSW9r9c2Pd73kp0tq76c=) 2: 2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl (hash: 7p5SNmOEuqoOHgytI4CfLLmzzFn49JEbklLk6pnYIRQ=) 3: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: ba9T7QeA28DMOyzLlfoljNenw5738a58LQmu3hf+TMU=) 4: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: Fc1cIIy7yp6fwFNt9JFBozT8wGm732U+MIRuBDuRJKc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 03:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:4f:08:7d:e3:eb:26:57:5d:db:29:bc:6a:14:74:21:e0:8e:5e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3 Validity Not Before: Sep 3 02:41:20 2026 GMT Not After : Sep 4 03:15:20 2026 GMT Subject: CN=0B21BC8283F1FC7986FEA61C0496F13B4733C3D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:e3:51:58:af:1b:4a:c2:13:aa:9a:b0:2f:85: 33:84:ae:72:ca:a6:40:42:4c:c6:fd:a1:7a:b5:36: f3:c0:52:70:38:7b:4d:61:d1:dd:4c:d7:c7:fc:19: 57:92:0b:22:6c:f3:49:0d:42:a1:a4:09:ca:b9:7c: d7:73:4e:9b:e0:f4:4a:7e:a9:d6:a3:bd:f4:31:21: 52:cd:dc:43:c3:36:59:76:99:1f:51:4a:69:d6:c5: df:3b:6b:dd:8d:f2:25:f1:08:90:b2:84:f8:71:1d: df:9f:22:e4:76:1b:5f:c9:ff:2d:85:a1:80:56:5f: 65:6b:9b:fd:06:d3:1e:ae:38:bf:a2:75:15:fb:e4: bb:cc:ab:b9:9e:84:ee:39:11:a0:47:de:d6:0f:f3: 60:ee:72:a7:50:d4:c9:05:21:57:0a:af:3d:e4:e4: 76:37:8a:f5:6f:91:82:ff:88:b5:f1:9c:f5:01:40: bc:0d:c7:3d:78:1c:3e:6e:20:dd:96:a6:12:f5:ec: d5:85:63:63:5a:5f:e7:1a:cb:b8:9d:bc:10:c7:b0: 82:42:e9:d2:72:b9:28:c0:34:7f:5d:be:bd:ad:6f: 30:e7:d4:83:d8:99:ea:a8:e9:c6:69:6e:d2:8b:ce: e5:27:e0:4c:7b:2c:f7:4c:4e:82:ca:25:89:4b:5a: e7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:21:BC:82:83:F1:FC:79:86:FE:A6:1C:04:96:F1:3B:47:33:C3:D3 X509v3 Authority Key Identifier: keyid:2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:8d:21:ce:8c:ed:b1:8e:bd:fd:4d:6c:43:50:bd:0c:63:74: 31:32:9e:44:a6:fc:39:23:7e:ad:51:3f:f5:d7:67:0b:d2:36: b2:7f:0c:20:59:36:99:a6:e7:96:93:6a:1b:bf:c7:b6:eb:a8: b6:2c:8a:d7:e0:88:db:a8:91:2c:f7:8a:5b:6b:c7:ff:95:57: 15:9b:63:8c:54:12:08:a2:a3:ba:e4:ad:58:41:f1:5f:a0:f0: 27:b9:71:ed:d5:54:e4:cf:28:f5:3b:35:f2:3a:71:7c:c4:0a: f1:94:25:3d:74:9b:8b:4a:42:71:4b:ce:92:29:6d:a7:af:16: 35:01:8c:86:b0:92:95:4f:97:ce:14:61:8a:27:20:b2:18:32: a0:5b:70:d0:c2:0e:17:b4:35:1d:e3:33:b7:6b:5f:20:27:87: 00:ce:31:d8:d1:3f:85:07:02:bc:04:0b:93:b0:1d:f5:6d:af: a2:c5:73:22:e9:b6:fe:fc:88:38:3b:7e:8d:59:8c:70:ac:e4: e4:79:a0:83:75:05:8b:29:41:dd:3b:4f:8c:88:52:d3:1f:ef: 96:fa:fe:fa:29:9d:ec:0d:c7:63:58:6e:cf:5b:49:04:9e:1e: d7:78:e7:05:6c:52:fd:85:d3:6c:11:19:d0:2a:4d:d3:bd:a0: ac:69:84:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV08IfePrJldd2ym8ahR0IeCOXjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZGOUQ1MkFEQzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3NzZE Q0I0MzNCMzAeFw0yNjA5MDMwMjQxMjBaFw0yNjA5MDQwMzE1MjBaMDMxMTAvBgNV BAMTKDBCMjFCQzgyODNGMUZDNzk4NkZFQTYxQzA0OTZGMTNCNDczM0MzRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD141FYrxtKwhOqmrAvhTOErnLK pkBCTMb9oXq1NvPAUnA4e01h0d1M18f8GVeSCyJs80kNQqGkCcq5fNdzTpvg9Ep+ qdajvfQxIVLN3EPDNll2mR9RSmnWxd87a92N8iXxCJCyhPhxHd+fIuR2G1/J/y2F oYBWX2Vrm/0G0x6uOL+idRX75LvMq7mehO45EaBH3tYP82DucqdQ1MkFIVcKrz3k 5HY3ivVvkYL/iLXxnPUBQLwNxz14HD5uIN2WphL17NWFY2NaX+cay7idvBDHsIJC 6dJyuSjANH9dvr2tbzDn1IPYmeqo6cZpbtKLzuUn4Ex7LPdMToLKJYlLWucpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCyG8goPx/HmG/qYcBJbxO0czw9MwHwYDVR0j BBgwFoAUL/nVKtx3f6POUar5RIuHdty0M7MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2MwNzVlZjYtYTI1MS00N2RkLThkZGEtY2FkZmY0OTdhN2U1LzAvMkZGOUQ1MkFE Qzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3NzZEQ0I0MzNCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkY5RDUyQURDNzc3RkEzQ0U1MUFBRjk0NDhCODc3NkRDQjQz M0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMkZGOUQ1MkFEQzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3 NzZEQ0I0MzNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSNIc6M7bGOvf1NbENQvQxjdDEynkSm/Dkj fq1RP/XXZwvSNrJ/DCBZNpmm55aTahu/x7brqLYsitfgiNuokSz3iltrx/+VVxWb Y4xUEgiio7rkrVhB8V+g8Ce5ce3VVOTPKPU7NfI6cXzECvGUJT10m4tKQnFLzpIp baevFjUBjIawkpVPl84UYYonILIYMqBbcNDCDhe0NR3jM7drXyAnhwDOMdjRP4UH ArwEC5OwHfVtr6LFcyLptv78iDg7fo1ZjHCs5OR5oIN1BYspQd07T4yIUtMf75b6 /vopnewNx2NYbs9bSQSeHtd45wVsUv2F02wRGdAqTdO9oKxphLc= -----END CERTIFICATE-----Generated at Thu Sep 3 16:21:40 2026 by rpki-client