$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft File: 2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft (raw, json) Hash identifier: MlxOQ9kreAEhUegsZ/1cquIaWCoJecMN7gOLbw+cDsM= Subject key identifier: D2:6C:F9:08:97:52:B0:70:0F:08:D8:90:37:2D:69:07:04:D3:03:61 Authority key identifier: 2F:37:45:DB:26:30:B1:D0:4A:3E:69:E4:9A:12:ED:7D:D5:65:CC:82 Certificate issuer: /CN=2F3745DB2630B1D04A3E69E49A12ED7DD565CC82 Certificate serial: 7DF8EDDC1B886696CDCC667B6DDB0B74F02FAD6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 00:54:07 +0000 Manifest this update: Thu 03 Sep 2026 00:49:07 +0000 Manifest next update: Fri 04 Sep 2026 01:49:07 +0000 Files and hashes: 1: 2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl (hash: 0qyw6g8Ha7jGpVEGN2XphDcz6CQP0S8SshfBW+ixdi0=) 2: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: hXr95hFUQi4QPei7lbvEDGK3/fJ8wC4HwUseAin+nsU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 01:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f8:ed:dc:1b:88:66:96:cd:cc:66:7b:6d:db:0b:74:f0:2f:ad:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F3745DB2630B1D04A3E69E49A12ED7DD565CC82 Validity Not Before: Sep 3 00:49:07 2026 GMT Not After : Sep 4 01:49:07 2026 GMT Subject: CN=D26CF9089752B0700F08D890372D690704D30361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b3:7e:fd:08:6f:73:cb:ce:79:88:01:89:35: 51:55:97:e9:d9:c0:12:74:37:8b:81:e9:11:2f:0f: b6:75:6b:db:5d:8e:d6:6b:b1:fc:ba:0d:21:b7:99: f4:d7:72:01:4b:6e:7e:80:7b:b3:22:ed:af:e1:95: 84:be:fe:14:43:7d:e8:43:65:f7:56:cf:bf:94:59: 08:ae:cf:51:fe:8c:d2:5c:d9:f1:39:2a:6f:73:43: be:7e:7d:9d:7c:b2:72:00:6c:d7:52:f8:39:cd:70: a6:d1:05:3d:75:b7:c4:a0:89:4e:d7:76:9f:d9:cc: ea:c2:05:76:73:f3:f8:4e:d1:68:9d:cf:5a:0b:a9: 3e:92:9d:f8:6b:37:4a:85:14:7b:48:b2:cd:c5:31: 33:7b:5c:f4:1a:57:c4:c2:8e:fa:ed:88:8e:06:46: 04:26:dc:b0:06:71:ce:7f:bb:7e:54:c8:8a:55:94: cd:db:70:e8:14:74:da:a9:56:93:c1:58:0d:72:29: a1:eb:fd:c4:9b:c8:6f:e1:a8:c0:3e:76:fe:b2:2d: 3e:b9:75:82:e9:ae:fc:a5:7d:17:74:07:69:b1:54: 28:9d:f7:07:07:85:7d:73:48:fc:8f:95:9f:36:9d: d5:9a:a0:2f:8a:3e:0b:cc:c4:2d:c3:e5:e6:0d:9f: 6f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6C:F9:08:97:52:B0:70:0F:08:D8:90:37:2D:69:07:04:D3:03:61 X509v3 Authority Key Identifier: keyid:2F:37:45:DB:26:30:B1:D0:4A:3E:69:E4:9A:12:ED:7D:D5:65:CC:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2e:83:75:ca:93:96:5e:41:27:31:29:1d:cf:06:06:f7:f2: 38:f2:17:40:36:c8:03:43:65:59:c2:b9:32:fd:63:34:c5:a6: 2a:4f:5e:bc:51:37:00:1f:e4:70:89:ad:e2:ba:4d:e7:ff:6c: b7:3f:1c:d1:93:81:2a:39:95:44:e4:75:32:06:85:9b:2d:8c: 75:b2:28:fb:b0:69:da:79:15:c0:0e:8c:ed:fb:e1:70:1e:e2: d6:44:ce:b8:8b:a9:98:9e:07:3c:a1:0a:2a:09:9a:24:76:6d: b6:f4:7a:25:89:60:d4:d8:19:ae:2c:1c:6e:65:33:47:15:d8: d0:1e:01:2e:08:c8:0d:b6:46:bb:3b:c8:24:6a:19:1d:32:cd: 87:3e:42:bc:7a:e6:de:85:58:47:28:f3:3a:a9:bc:8d:09:6b: 97:76:5f:4a:79:77:21:a5:1b:a8:2b:f8:08:61:1e:e9:cf:4b: 18:e2:f3:c7:9b:47:c7:57:32:30:0a:02:f6:bc:8d:f6:87:78: b9:86:64:85:96:90:65:5a:29:10:c0:f9:79:58:af:9b:9d:8f: 14:0f:5b:f8:84:b9:50:65:ca:7b:fe:fe:9d:cc:42:ad:b9:a9: 57:93:98:a6:27:1a:a1:43:74:80:ab:a8:73:22:23:ad:3e:db: 86:71:99:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUffjt3BuIZpbNzGZ7bdsLdPAvrWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYzNzQ1REIyNjMwQjFEMDRBM0U2OUU0OUExMkVEN0RE NTY1Q0M4MjAeFw0yNjA5MDMwMDQ5MDdaFw0yNjA5MDQwMTQ5MDdaMDMxMTAvBgNV BAMTKEQyNkNGOTA4OTc1MkIwNzAwRjA4RDg5MDM3MkQ2OTA3MDREMzAzNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYs379CG9zy855iAGJNVFVl+nZ wBJ0N4uB6REvD7Z1a9tdjtZrsfy6DSG3mfTXcgFLbn6Ae7Mi7a/hlYS+/hRDfehD ZfdWz7+UWQiuz1H+jNJc2fE5Km9zQ75+fZ18snIAbNdS+DnNcKbRBT11t8SgiU7X dp/ZzOrCBXZz8/hO0Widz1oLqT6SnfhrN0qFFHtIss3FMTN7XPQaV8TCjvrtiI4G RgQm3LAGcc5/u35UyIpVlM3bcOgUdNqpVpPBWA1yKaHr/cSbyG/hqMA+dv6yLT65 dYLprvylfRd0B2mxVCid9wcHhX1zSPyPlZ82ndWaoC+KPgvMxC3D5eYNn28LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0mz5CJdSsHAPCNiQNy1pBwTTA2EwHwYDVR0j BBgwFoAULzdF2yYwsdBKPmnkmhLtfdVlzIIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTc4YThiMzktM2FlMy00ZGU3LTkzNjYtMjFmOWVhMDQzMjVhLzAvMkYzNzQ1REIy NjMwQjFEMDRBM0U2OUU0OUExMkVEN0RENTY1Q0M4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRjM3NDVEQjI2MzBCMUQwNEEzRTY5RTQ5QTEyRUQ3REQ1NjVD QzgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTc4YThiMzktM2FlMy00ZGU3LTkz NjYtMjFmOWVhMDQzMjVhLzAvMkYzNzQ1REIyNjMwQjFEMDRBM0U2OUU0OUExMkVE N0RENTY1Q0M4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGwug3XKk5ZeQScxKR3PBgb38jjyF0A2yAND ZVnCuTL9YzTFpipPXrxRNwAf5HCJreK6Tef/bLc/HNGTgSo5lUTkdTIGhZstjHWy KPuwadp5FcAOjO374XAe4tZEzriLqZieBzyhCioJmiR2bbb0eiWJYNTYGa4sHG5l M0cV2NAeAS4IyA22Rrs7yCRqGR0yzYc+Qrx65t6FWEco8zqpvI0Ja5d2X0p5dyGl G6gr+AhhHunPSxji88ebR8dXMjAKAva8jfaHeLmGZIWWkGVaKRDA+XlYr5udjxQP W/iEuVBlynv+/p3MQq25qVeTmKYnGqFDdICrqHMiI60+24ZxmSo= -----END CERTIFICATE-----Generated at Thu Sep 3 12:59:16 2026 by rpki-client