$ rpki-client -vvvf rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft File: 2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft (raw, json) Hash identifier: Gzw0KTZdbBcePIc6L+6YwYLDElqmfpuIhYrf1bxsZBs= Subject key identifier: 1E:94:CC:69:41:2F:50:87:62:83:79:22:EB:5B:E8:94:33:FB:FB:27 Authority key identifier: 2B:5A:07:8B:9D:8A:31:7D:A7:A2:AD:40:20:90:C9:AE:72:A1:D0:F4 Certificate issuer: /CN=2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4 Certificate serial: 0CC924D688DE9045EFAC501AF1C47122A9E97EFC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft Manifest number: B0 Signing time: Fri 11 Sep 2026 20:00:26 +0000 Manifest this update: Fri 11 Sep 2026 19:55:26 +0000 Manifest next update: Sat 12 Sep 2026 20:07:26 +0000 Files and hashes: 1: 3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa (hash: I+MpxcufYeam5pksOgKwBNTewvekIqJYxt3l7XuR42Q=) 2: 3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa (hash: F/SUGaqSrvN9l0bA+VVFhafqTQPYwg8gVdDw3HwYYEg=) 3: 3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa (hash: SSJvSdL4NA21o/quBBkRYHXaBZlnNisf6npebpyix0w=) 4: 3130332e3130302e39392e302f32342d3234203d3e20313336383338.roa (hash: YEpJ9MshH91OnFv/znxkxIYveM8j2r6OPnOxKsElZA4=) 5: 2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl (hash: 1OIsMoCV01Ulv46hJzscUZYKtkrLjVIeKUvWWyBrF1M=) 6: 3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa (hash: cjqOi69hQ/DuVUUYy0IY+fZE1a6xIzJfgF06BFHgrL0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 20:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c9:24:d6:88:de:90:45:ef:ac:50:1a:f1:c4:71:22:a9:e9:7e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4 Validity Not Before: Sep 11 19:55:26 2026 GMT Not After : Sep 12 20:07:26 2026 GMT Subject: CN=1E94CC69412F508762837922EB5BE89433FBFB27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a0:97:a4:a7:5a:3b:99:33:1d:0e:b7:dd:d8: 09:66:b2:fb:86:50:0e:75:63:aa:90:07:f7:43:79: 14:92:85:6b:c5:a8:5b:56:3b:5d:78:78:69:f0:33: 56:af:27:df:d1:35:15:e7:d7:b1:2c:cf:16:16:1f: 71:10:bf:83:89:67:7b:77:62:14:26:87:61:74:90: fc:c8:a3:b5:67:b4:b9:ba:67:53:48:73:88:e5:d9: 94:6a:d1:45:81:c1:86:2b:b0:ae:e1:20:70:8a:32: dc:1c:0d:1b:56:c0:b0:b2:5c:95:cf:75:63:2c:a1: 41:7f:6b:fa:05:bf:bc:df:65:fc:f7:40:80:07:a4: 4e:15:89:86:7f:9c:cf:a5:59:ee:55:3c:d0:d4:ae: 57:23:9d:f3:3d:ce:d6:be:60:c4:06:f8:06:ea:bc: 55:82:ad:f4:a6:71:20:35:70:c2:85:61:2d:fa:bc: b8:f4:90:b7:a1:48:c4:1f:f3:48:3d:86:88:be:d2: 18:8b:f2:1d:0b:24:b3:02:cb:db:1b:8d:41:b5:f7: a9:0c:18:a6:07:1d:93:96:a3:a2:f8:6d:f3:c0:51: 78:68:1b:3c:8d:8b:ed:f7:99:40:5a:fd:de:f3:33: f1:56:06:cf:10:73:fe:d7:4d:98:5c:b7:41:5a:f1: 91:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:94:CC:69:41:2F:50:87:62:83:79:22:EB:5B:E8:94:33:FB:FB:27 X509v3 Authority Key Identifier: keyid:2B:5A:07:8B:9D:8A:31:7D:A7:A2:AD:40:20:90:C9:AE:72:A1:D0:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:df:46:9a:e5:2f:dd:41:4b:18:bd:49:df:7d:dd:95:1f:a2: eb:7b:12:2d:f2:f6:b4:69:90:77:f0:b9:66:72:45:be:cf:90: 95:ca:ae:e9:a5:7d:a3:d2:3c:b0:28:ca:b6:a7:57:a2:18:69: e7:88:c5:5f:7e:d5:03:30:de:e6:26:00:82:18:f7:b2:20:f0: e0:2c:ef:d6:4a:d6:78:bd:1c:4e:f8:06:eb:73:ac:98:60:c6: 6a:69:21:ae:08:76:16:7c:8c:fd:7d:fc:c5:ff:5a:16:82:de: a3:22:86:fd:a7:74:70:6f:85:b3:11:76:97:0c:d5:e9:6a:6f: 03:be:c1:4f:42:21:bc:bf:90:55:9c:37:a2:22:97:2d:99:4d: 7b:e6:98:7f:16:92:a7:a9:5d:04:cd:23:c4:b5:76:e9:1c:10: 60:27:8b:1e:58:ad:f0:3c:0e:8e:7a:35:4e:fd:70:99:84:d7: 4f:b5:87:15:91:ba:05:cc:ec:3d:dc:f6:1a:d0:5d:f6:d4:09: ea:db:f5:b2:d8:9b:20:96:07:5b:7f:c8:5c:12:df:65:68:83: 0e:15:27:d4:28:35:21:eb:9d:51:2d:f7:5b:b8:40:bb:b6:79: 49:0b:60:0b:62:1a:1e:44:10:d2:6d:6b:2e:17:b3:22:58:6e: d7:cb:52:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDMkk1ojekEXvrFAa8cRxIqnpfvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI1QTA3OEI5RDhBMzE3REE3QTJBRDQwMjA5MEM5QUU3 MkExRDBGNDAeFw0yNjA5MTExOTU1MjZaFw0yNjA5MTIyMDA3MjZaMDMxMTAvBgNV BAMTKDFFOTRDQzY5NDEyRjUwODc2MjgzNzkyMkVCNUJFODk0MzNGQkZCMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMoJekp1o7mTMdDrfd2AlmsvuG UA51Y6qQB/dDeRSShWvFqFtWO114eGnwM1avJ9/RNRXn17EszxYWH3EQv4OJZ3t3 YhQmh2F0kPzIo7VntLm6Z1NIc4jl2ZRq0UWBwYYrsK7hIHCKMtwcDRtWwLCyXJXP dWMsoUF/a/oFv7zfZfz3QIAHpE4ViYZ/nM+lWe5VPNDUrlcjnfM9zta+YMQG+Abq vFWCrfSmcSA1cMKFYS36vLj0kLehSMQf80g9hoi+0hiL8h0LJLMCy9sbjUG196kM GKYHHZOWo6L4bfPAUXhoGzyNi+33mUBa/d7zM/FWBs8Qc/7XTZhct0Fa8ZGTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHpTMaUEvUIdig3ki61volDP7+ycwHwYDVR0j BBgwFoAUK1oHi52KMX2noq1AIJDJrnKh0PQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTNkODA2NDMtZDVlOS00MWFmLTk0ZGYtNmQ5NGZiZjQ2NDg3LzAvMkI1QTA3OEI5 RDhBMzE3REE3QTJBRDQwMjA5MEM5QUU3MkExRDBGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQjVBMDc4QjlEOEEzMTdEQTdBMkFENDAyMDkwQzlBRTcyQTFE MEY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTNkODA2NDMtZDVlOS00MWFmLTk0 ZGYtNmQ5NGZiZjQ2NDg3LzAvMkI1QTA3OEI5RDhBMzE3REE3QTJBRDQwMjA5MEM5 QUU3MkExRDBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7fRprlL91BSxi9Sd993ZUfout7Ei3y9rRp kHfwuWZyRb7PkJXKrumlfaPSPLAoyranV6IYaeeIxV9+1QMw3uYmAIIY97Ig8OAs 79ZK1ni9HE74ButzrJhgxmppIa4IdhZ8jP19/MX/WhaC3qMihv2ndHBvhbMRdpcM 1elqbwO+wU9CIby/kFWcN6Iily2ZTXvmmH8WkqepXQTNI8S1dukcEGAnix5YrfA8 Do56NU79cJmE10+1hxWRugXM7D3c9hrQXfbUCerb9bLYmyCWB1t/yFwS32Vogw4V J9QoNSHrnVEt91u4QLu2eUkLYAtiGh5EENJtay4XsyJYbtfLUj8= -----END CERTIFICATE-----Generated at Sat Sep 12 10:21:50 2026 by rpki-client