$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft File: 2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft (raw, json) Hash identifier: o7OaghCuOrVZKMAXA/5Sg5k1LJ6Bhhf5kjqKoeYvlSw= Subject key identifier: 65:18:63:4F:9F:7C:63:99:77:AF:86:1B:2B:CC:ED:AE:69:C8:A3:20 Authority key identifier: 2E:5B:4D:91:9A:E6:E0:98:45:4A:21:D8:3B:EE:48:9C:0A:1D:F6:87 Certificate issuer: /CN=2E5B4D919AE6E098454A21D83BEE489C0A1DF687 Certificate serial: 53E920518DF7FF6E2BADE4090B00729F911AE5F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 13:25:43 +0000 Manifest this update: Wed 16 Sep 2026 13:20:43 +0000 Manifest next update: Thu 17 Sep 2026 16:17:43 +0000 Files and hashes: 1: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: w0l4Z0QTqPW7n9jh4ktHZnj4TWLQC1w9BHsCnnP0SC0=) 2: 2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl (hash: qmzRVSF3/hIIlf9N4U/sovK+1ZKJ9kofhI7l84CONic=) 3: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: hXYZBw+zcNWgfpkr4qfi2P6UAXZrhjOtAH+ubipVz38=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 16:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e9:20:51:8d:f7:ff:6e:2b:ad:e4:09:0b:00:72:9f:91:1a:e5:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E5B4D919AE6E098454A21D83BEE489C0A1DF687 Validity Not Before: Sep 16 13:20:43 2026 GMT Not After : Sep 17 16:17:43 2026 GMT Subject: CN=6518634F9F7C639977AF861B2BCCEDAE69C8A320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ea:c7:49:4c:e3:64:dc:63:f0:19:42:bb:6f: 2c:8a:50:9e:aa:a4:52:dd:95:b6:c5:34:22:88:a1: f8:8b:68:f6:2b:cc:65:c2:a3:cf:66:fb:48:7a:63: 65:34:c6:7a:16:81:f1:78:c6:6a:85:c8:1c:0d:2b: e9:32:a9:4d:8e:c8:8f:8a:07:25:c3:95:3d:0a:c1: ea:6d:d5:c5:9c:3e:a9:4a:98:1d:0f:c4:e5:37:ac: 27:c6:af:63:8c:32:a0:eb:14:0f:98:2a:f2:95:4b: 1f:32:b8:39:48:f1:27:9f:e9:02:99:81:22:31:d1: 58:9e:d7:5a:34:9e:4d:4f:c7:65:1f:57:05:f5:d7: 37:14:56:6a:37:42:f7:ac:ec:a3:d7:92:5b:1b:d3: 72:e6:3e:11:2b:b5:ba:c8:80:0c:06:46:a0:c0:8a: fe:c3:50:0e:b5:94:45:67:3c:28:44:fd:88:a4:50: cd:7c:8c:e5:b2:c7:94:92:f3:cd:0c:0f:84:c6:bd: 91:6c:ca:37:4e:cc:25:48:c7:42:5e:4e:0c:ad:40: 64:88:64:b1:a1:71:c2:a4:08:ae:25:03:1e:33:c7: 2b:18:03:51:73:6d:7c:8d:00:7b:5b:dc:b8:8d:09: 32:05:50:d9:e4:52:78:a8:75:01:6e:76:44:15:3a: a6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:18:63:4F:9F:7C:63:99:77:AF:86:1B:2B:CC:ED:AE:69:C8:A3:20 X509v3 Authority Key Identifier: keyid:2E:5B:4D:91:9A:E6:E0:98:45:4A:21:D8:3B:EE:48:9C:0A:1D:F6:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:2f:c1:1f:6e:66:40:d7:17:79:62:2a:bb:30:4c:b2:33:db: 84:24:3a:1d:2d:98:6e:d4:9d:0c:6c:60:3f:18:d0:ab:a5:25: 5b:0c:ba:20:99:af:fe:dc:05:df:4a:4b:2f:11:c2:f4:2b:e9: 79:7e:6b:11:ab:b7:8e:11:cb:30:d7:79:dc:ff:11:7f:9b:fb: 41:95:31:b6:39:66:39:b3:ce:b3:ed:d4:56:fe:82:f8:d3:b7: e1:86:08:40:9f:0b:1f:61:b1:22:9a:4d:06:bc:55:43:73:b3: 29:f8:ac:88:82:96:30:27:e7:49:78:86:0d:36:ac:bc:c9:bd: 8c:3a:37:fe:fe:34:42:54:7f:36:b6:6b:1c:71:00:12:c8:23: 53:40:88:3c:8f:26:ac:09:de:07:e5:e8:f5:7a:64:ca:34:79: c8:96:dc:92:03:90:18:08:de:23:29:52:53:7f:94:8a:33:f3: e1:28:18:9a:bc:8e:84:79:ed:b7:3a:1b:c2:3a:fc:b6:dc:7f: d8:05:b4:98:d3:f7:30:bd:f0:66:5c:ac:59:eb:e1:8f:56:08: f1:a2:4e:a7:25:21:49:fc:18:d2:fa:36:55:75:72:b9:d7:a7: 46:9e:0e:5f:73:f5:6a:a3:7d:54:7f:66:5c:28:94:d7:28:01: 29:cc:a2:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU+kgUY33/24rreQJCwByn5Ea5fMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU1QjREOTE5QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4OUMw QTFERjY4NzAeFw0yNjA5MTYxMzIwNDNaFw0yNjA5MTcxNjE3NDNaMDMxMTAvBgNV BAMTKDY1MTg2MzRGOUY3QzYzOTk3N0FGODYxQjJCQ0NFREFFNjlDOEEzMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv6sdJTONk3GPwGUK7byyKUJ6q pFLdlbbFNCKIofiLaPYrzGXCo89m+0h6Y2U0xnoWgfF4xmqFyBwNK+kyqU2OyI+K ByXDlT0Kwept1cWcPqlKmB0PxOU3rCfGr2OMMqDrFA+YKvKVSx8yuDlI8Sef6QKZ gSIx0Vie11o0nk1Px2UfVwX11zcUVmo3Qves7KPXklsb03LmPhErtbrIgAwGRqDA iv7DUA61lEVnPChE/YikUM18jOWyx5SS880MD4TGvZFsyjdOzCVIx0JeTgytQGSI ZLGhccKkCK4lAx4zxysYA1FzbXyNAHtb3LiNCTIFUNnkUniodQFudkQVOqbRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZRhjT598Y5l3r4YbK8ztrmnIoyAwHwYDVR0j BBgwFoAULltNkZrm4JhFSiHYO+5InAod9ocwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkM2RkNzktODYzNS00ODU3LThhM2MtOTg1OTU0NTE2ZjllLzAvMkU1QjREOTE5 QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4OUMwQTFERjY4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTVCNEQ5MTlBRTZFMDk4NDU0QTIxRDgzQkVFNDg5QzBBMURG Njg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkM2RkNzktODYzNS00ODU3LThh M2MtOTg1OTU0NTE2ZjllLzAvMkU1QjREOTE5QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4 OUMwQTFERjY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYvwR9uZkDXF3liKrswTLIz24QkOh0tmG7U nQxsYD8Y0KulJVsMuiCZr/7cBd9KSy8RwvQr6Xl+axGrt44RyzDXedz/EX+b+0GV MbY5ZjmzzrPt1Fb+gvjTt+GGCECfCx9hsSKaTQa8VUNzsyn4rIiCljAn50l4hg02 rLzJvYw6N/7+NEJUfza2axxxABLII1NAiDyPJqwJ3gfl6PV6ZMo0eciW3JIDkBgI 3iMpUlN/lIoz8+EoGJq8joR57bc6G8I6/Lbcf9gFtJjT9zC98GZcrFnr4Y9WCPGi TqclIUn8GNL6NlV1crnXp0aeDl9z9WqjfVR/ZlwolNcoASnMooQ= -----END CERTIFICATE-----Generated at Thu Sep 17 09:26:54 2026 by rpki-client