$ rpki-client -vvvf rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft File: 2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft (raw, json) Hash identifier: 3fY171G7gxRaqLw9OEvWx3PCWnnm90E3FS/MH7F+on0= Subject key identifier: FF:17:68:5F:04:A2:9B:1E:32:02:C9:34:D3:2C:17:2D:D4:79:22:89 Authority key identifier: 2C:F0:62:4C:97:05:2A:18:8B:12:C2:D8:DF:D6:92:56:BE:AE:A0:A3 Certificate issuer: /CN=2CF0624C97052A188B12C2D8DFD69256BEAEA0A3 Certificate serial: 2AC9513B2B24C2C929F581BDF0827A1967645FFC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 10:06:32 +0000 Manifest this update: Sat 24 Oct 2026 10:01:32 +0000 Manifest next update: Sun 25 Oct 2026 11:48:32 +0000 Files and hashes: 1: 3131372e3132312e3230312e302f32342d3234203d3e203436303239.roa (hash: Gt77/DpvHcyfECJ/rzUv8b/LftlAsDwob9ro6Az9CBg=) 2: 2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl (hash: 9gi1ec4aFBG5n+8QR7GDySU8K+2McFb3C7cuiV3j9Wc=) 3: 3131372e3132312e3230322e302f32342d3234203d3e203436303239.roa (hash: G6layxH6VqJ35uHJZhmjgga72kPwjzbEYW/yD2TBIJU=) 4: 3131372e3132312e3230372e302f32342d3234203d3e203436303239.roa (hash: 5qjiHCREo3yTZVwviMFSFaOdgsJ0Wu7pJnWioBrnUw8=) 5: 3131372e3132312e3230352e302f32342d3234203d3e203436303239.roa (hash: UH+sfXi3uyUzmqtZ5a3kiK88kT3KnsNHU+6St14pVbU=) 6: 3131372e3132312e3230342e302f32342d3234203d3e203436303239.roa (hash: 9xyVMpzGgMxzPTr0/YEPxhsOk4K0WU7VoWYP2UAihTY=) 7: 3131372e3132312e3230302e302f32342d3234203d3e203436303239.roa (hash: jjDQyLwOLFkeP+V5865OD4J5ZSFyfyGf7kRLTYcgAUA=) 8: 3131372e3132312e3230332e302f32342d3234203d3e203436303239.roa (hash: khNOf5qfeVAtCDmI+P0qU0wtTsenc+owEXE7IuCFTL4=) 9: 3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa (hash: JklHOE9UnXIvsKlW/PC+ZLgav3mgVpKETno9/XOSONo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c9:51:3b:2b:24:c2:c9:29:f5:81:bd:f0:82:7a:19:67:64:5f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CF0624C97052A188B12C2D8DFD69256BEAEA0A3 Validity Not Before: Oct 24 10:01:32 2026 GMT Not After : Oct 25 11:48:32 2026 GMT Subject: CN=FF17685F04A29B1E3202C934D32C172DD4792289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:66:1f:93:24:60:43:94:87:ce:81:cd:6e:93: a1:07:53:fa:64:49:9a:bc:39:c4:a6:ed:ed:0e:7f: 67:04:31:2d:8e:63:17:15:9d:b1:6e:92:b5:f1:74: aa:0d:45:46:f1:45:e6:25:84:13:62:2e:5a:dd:cf: 6d:93:00:d2:54:ff:ac:26:f0:d1:45:80:da:0b:4d: 65:3d:1e:56:98:c1:e4:64:6c:6e:39:91:d1:bb:b1: 44:cb:19:46:2b:b0:76:09:9e:bb:2e:ea:e1:01:d6: cf:0a:02:22:d2:69:74:71:2d:ca:d5:bf:bd:10:69: 21:6e:30:c9:06:4f:36:16:9a:18:5e:d0:44:80:83: 91:e5:26:7f:a5:a9:83:0d:e3:70:78:90:e4:b2:0f: ed:50:78:f8:52:8c:39:d2:c2:fc:00:6f:cf:35:5d: fc:b0:c1:0a:69:eb:33:10:a5:b9:74:28:80:7a:a3: 26:d6:12:dd:76:08:d6:af:f7:0a:e9:46:9a:2f:f7: cb:f6:e2:2b:0d:67:6e:e8:92:9c:39:06:37:48:c1: ab:db:95:79:a2:83:a1:fc:8c:7f:24:fb:1a:76:4c: 81:31:f7:63:8b:22:5c:9e:95:b8:ae:94:62:0a:4e: 39:4b:ab:0c:6f:41:53:fd:9c:90:0f:aa:4a:4d:9e: 06:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:17:68:5F:04:A2:9B:1E:32:02:C9:34:D3:2C:17:2D:D4:79:22:89 X509v3 Authority Key Identifier: keyid:2C:F0:62:4C:97:05:2A:18:8B:12:C2:D8:DF:D6:92:56:BE:AE:A0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1d:e5:27:27:c3:cd:e0:74:b5:0b:9b:f3:f2:8a:cb:20:b6: 7c:26:e6:0e:7e:5b:c8:b9:45:25:88:75:ce:15:1b:82:f0:63: bb:02:22:d3:da:4e:fb:2c:ec:4c:07:fc:c8:76:b2:23:c7:78: f8:b9:6b:83:f7:87:aa:fb:9e:e8:b1:60:eb:e2:77:ab:08:52: e8:c6:b4:3b:f4:44:0c:a0:67:6e:7f:84:40:b5:90:09:94:71: 5d:7a:94:57:c7:36:bb:c1:e0:fc:df:4d:09:66:79:85:a5:da: 8b:3c:7f:06:69:c7:0e:d9:41:bd:88:82:61:87:91:cd:42:3e: c4:28:bc:40:36:06:6a:17:7f:bf:56:a6:e7:f0:64:a8:b3:42: b8:49:5d:16:2e:6c:33:1b:99:5c:8f:9e:12:60:07:e8:92:e7: 5e:b3:51:64:32:a2:94:a2:99:aa:8e:f7:29:c7:98:fc:3b:60: 03:ba:c3:d8:52:d4:8e:94:b6:4b:91:11:da:78:06:c2:54:11: 2c:5e:9c:75:2d:e4:ee:5a:11:e3:d6:37:5a:e5:d6:d5:af:0a: 5a:09:43:04:c2:bd:6a:88:07:df:d4:22:09:1d:64:a4:d4:0d: 29:8f:a6:4b:6e:42:b2:44:2c:e5:8c:ef:c9:a4:79:7e:a8:d0: d7:27:78:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKslROyskwskp9YG98IJ6GWdkX/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGMDYyNEM5NzA1MkExODhCMTJDMkQ4REZENjkyNTZC RUFFQTBBMzAeFw0yNjEwMjQxMDAxMzJaFw0yNjEwMjUxMTQ4MzJaMDMxMTAvBgNV BAMTKEZGMTc2ODVGMDRBMjlCMUUzMjAyQzkzNEQzMkMxNzJERDQ3OTIyODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZh+TJGBDlIfOgc1uk6EHU/pk SZq8OcSm7e0Of2cEMS2OYxcVnbFukrXxdKoNRUbxReYlhBNiLlrdz22TANJU/6wm 8NFFgNoLTWU9HlaYweRkbG45kdG7sUTLGUYrsHYJnrsu6uEB1s8KAiLSaXRxLcrV v70QaSFuMMkGTzYWmhhe0ESAg5HlJn+lqYMN43B4kOSyD+1QePhSjDnSwvwAb881 XfywwQpp6zMQpbl0KIB6oybWEt12CNav9wrpRpov98v24isNZ27okpw5BjdIwavb lXmig6H8jH8k+xp2TIEx92OLIlyelbiulGIKTjlLqwxvQVP9nJAPqkpNngbpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/xdoXwSimx4yAsk00ywXLdR5IokwHwYDVR0j BBgwFoAULPBiTJcFKhiLEsLY39aSVr6uoKMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTUzYjA2N2MtZWNjOS00ZGNhLTk4N2QtYjk1NzY4MTVmODU1LzAvMkNGMDYyNEM5 NzA1MkExODhCMTJDMkQ4REZENjkyNTZCRUFFQTBBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0YwNjI0Qzk3MDUyQTE4OEIxMkMyRDhERkQ2OTI1NkJFQUVB MEEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTUzYjA2N2MtZWNjOS00ZGNhLTk4 N2QtYjk1NzY4MTVmODU1LzAvMkNGMDYyNEM5NzA1MkExODhCMTJDMkQ4REZENjky NTZCRUFFQTBBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwd5Scnw83gdLULm/Pyissgtnwm5g5+W8i5 RSWIdc4VG4LwY7sCItPaTvss7EwH/Mh2siPHePi5a4P3h6r7nuixYOvid6sIUujG tDv0RAygZ25/hEC1kAmUcV16lFfHNrvB4PzfTQlmeYWl2os8fwZpxw7ZQb2IgmGH kc1CPsQovEA2BmoXf79WpufwZKizQrhJXRYubDMbmVyPnhJgB+iS516zUWQyopSi maqO9ynHmPw7YAO6w9hS1I6UtkuREdp4BsJUESxenHUt5O5aEePWN1rl1tWvCloJ QwTCvWqIB9/UIgkdZKTUDSmPpktuQrJELOWM78mkeX6o0NcneMA= -----END CERTIFICATE-----Generated at Sat Oct 24 14:29:27 2026 by rpki-client