$ rpki-client -vvvf rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft File: 2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft (raw, json) Hash identifier: Knklue3WRx1XuxTQJA0j+al1RkGBUXIrFiaO4MNviHA= Subject key identifier: 08:B7:54:48:D4:11:6C:98:83:A3:A0:4A:B1:99:F4:81:63:3B:17:20 Authority key identifier: 2C:7A:30:2B:26:8D:C5:40:59:CE:B8:8F:7A:C2:19:8D:98:52:CB:D3 Certificate issuer: /CN=2C7A302B268DC54059CEB88F7AC2198D9852CBD3 Certificate serial: 79B6FC4D6AC0E69915D5A34C87C1E36E0E62F58C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 04:34:04 +0000 Manifest this update: Thu 17 Sep 2026 04:29:04 +0000 Manifest next update: Fri 18 Sep 2026 04:50:04 +0000 Files and hashes: 1: 2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl (hash: AMpx/LGmLcpiFly+BzA5gAXoesy6N9UqZ0LEZxNg9lU=) 2: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: bJqqtyMrUB6ove5aksmXoGy9PsBIFYzerBlsfdZy7oQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b6:fc:4d:6a:c0:e6:99:15:d5:a3:4c:87:c1:e3:6e:0e:62:f5:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C7A302B268DC54059CEB88F7AC2198D9852CBD3 Validity Not Before: Sep 17 04:29:04 2026 GMT Not After : Sep 18 04:50:04 2026 GMT Subject: CN=08B75448D4116C9883A3A04AB199F481633B1720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a7:67:73:4a:9a:8c:19:f2:d5:a2:c0:54:f4: 80:4c:f1:fb:e9:c7:e7:31:37:7b:86:ab:5b:a3:a3: 7e:17:5d:7d:4b:b2:68:e3:0c:1d:b3:30:7a:e5:61: 0c:4d:ed:42:a1:05:8d:af:33:03:2f:16:68:3d:06: 78:29:05:3a:a9:e2:bb:1a:be:fb:f2:1c:f1:ff:72: ca:4b:89:59:a4:0a:80:31:62:dd:cb:2e:5c:cf:2c: b0:27:71:a9:a2:96:f0:9f:96:9c:d4:dc:f5:39:de: ee:f6:c3:76:72:63:76:c0:95:d3:2c:54:c1:de:12: b1:84:53:27:09:2e:4f:20:64:ae:20:d9:13:8d:c7: 36:f0:5e:08:59:e2:d4:54:74:cb:b9:65:2a:ad:30: ab:10:24:24:d9:4f:b3:94:4e:38:17:8e:74:8a:a8: 62:29:12:af:e1:2f:ec:fb:6a:c2:8b:fe:be:d7:97: 42:06:34:5d:67:b7:f2:f2:60:71:25:cf:b0:38:d7: d1:a1:fd:38:7c:6f:7a:36:74:0b:61:8b:7f:5b:d4: cd:4e:0b:bf:a7:0e:7f:06:c1:a6:b1:25:85:69:d1: ac:bd:dc:15:03:f2:aa:be:93:3c:6b:a0:46:16:83: 02:a6:0c:f6:8e:e7:b2:b6:fc:fa:ed:db:d7:dc:ae: 4b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B7:54:48:D4:11:6C:98:83:A3:A0:4A:B1:99:F4:81:63:3B:17:20 X509v3 Authority Key Identifier: keyid:2C:7A:30:2B:26:8D:C5:40:59:CE:B8:8F:7A:C2:19:8D:98:52:CB:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/2C7A302B268DC54059CEB88F7AC2198D9852CBD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e8:f0:61:21:0f:35:2f:33:4e:72:81:91:26:a6:8b:ff:cd: 2c:cf:7b:db:25:b0:bb:d1:1e:12:0c:37:2f:88:ae:4b:cd:1a: 66:24:6b:77:a4:41:04:09:22:2b:14:95:4f:43:01:55:09:c9: 55:89:57:26:cb:6a:68:e1:b9:9d:7b:73:71:cf:2f:6e:3a:a0: 31:8d:e8:88:03:42:c1:d0:1d:76:fa:12:18:c6:b4:2e:69:da: f8:96:30:9e:a7:d6:fb:5c:5f:41:1f:62:21:c4:0d:a1:f2:15: 0f:5e:6b:76:5e:62:eb:ad:23:4c:e7:7a:59:71:7d:ee:d5:fd: a6:2e:d9:aa:c9:b3:72:ad:6c:8b:07:01:4f:39:86:14:e7:65: f2:28:d1:1e:d1:e1:3b:50:43:32:c9:91:8a:74:cc:8e:bb:b7: b9:cd:a5:93:6a:12:71:90:61:4e:32:89:d9:0a:dc:80:70:3f: 35:28:24:a3:0f:57:00:1c:48:69:7f:ef:14:7b:bf:84:77:73: 77:f5:ad:f4:a7:88:c8:ed:74:8a:38:45:60:1a:83:96:28:a0: 8b:c2:31:55:f6:4d:e1:ef:f9:f4:f0:46:dc:71:d0:8b:0e:d4: c7:0b:ab:0f:3f:f7:0f:19:87:36:b5:35:b2:a7:65:97:90:ea: 84:62:03:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUebb8TWrA5pkV1aNMh8Hjbg5i9YwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM3QTMwMkIyNjhEQzU0MDU5Q0VCODhGN0FDMjE5OEQ5 ODUyQ0JEMzAeFw0yNjA5MTcwNDI5MDRaFw0yNjA5MTgwNDUwMDRaMDMxMTAvBgNV BAMTKDA4Qjc1NDQ4RDQxMTZDOTg4M0EzQTA0QUIxOTlGNDgxNjMzQjE3MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIp2dzSpqMGfLVosBU9IBM8fvp x+cxN3uGq1ujo34XXX1LsmjjDB2zMHrlYQxN7UKhBY2vMwMvFmg9BngpBTqp4rsa vvvyHPH/cspLiVmkCoAxYt3LLlzPLLAncamilvCflpzU3PU53u72w3ZyY3bAldMs VMHeErGEUycJLk8gZK4g2RONxzbwXghZ4tRUdMu5ZSqtMKsQJCTZT7OUTjgXjnSK qGIpEq/hL+z7asKL/r7Xl0IGNF1nt/LyYHElz7A419Gh/Th8b3o2dAthi39b1M1O C7+nDn8GwaaxJYVp0ay93BUD8qq+kzxroEYWgwKmDPaO57K2/Prt29fcrktvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCLdUSNQRbJiDo6BKsZn0gWM7FyAwHwYDVR0j BBgwFoAULHowKyaNxUBZzriPesIZjZhSy9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA1YWY4MjItYmVhOS00OGYzLWFhMTItYjI3MzcxNjJmYzQyLzAvMkM3QTMwMkIy NjhEQzU0MDU5Q0VCODhGN0FDMjE5OEQ5ODUyQ0JEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQzdBMzAyQjI2OERDNTQwNTlDRUI4OEY3QUMyMTk4RDk4NTJD QkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA1YWY4MjItYmVhOS00OGYzLWFh MTItYjI3MzcxNjJmYzQyLzAvMkM3QTMwMkIyNjhEQzU0MDU5Q0VCODhGN0FDMjE5 OEQ5ODUyQ0JEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHo8GEhDzUvM05ygZEmpov/zSzPe9slsLvR HhIMNy+IrkvNGmYka3ekQQQJIisUlU9DAVUJyVWJVybLamjhuZ17c3HPL246oDGN 6IgDQsHQHXb6EhjGtC5p2viWMJ6n1vtcX0EfYiHEDaHyFQ9ea3ZeYuutI0znellx fe7V/aYu2arJs3KtbIsHAU85hhTnZfIo0R7R4TtQQzLJkYp0zI67t7nNpZNqEnGQ YU4yidkK3IBwPzUoJKMPVwAcSGl/7xR7v4R3c3f1rfSniMjtdIo4RWAag5YooIvC MVX2TeHv+fTwRtxx0IsO1McLqw8/9w8Zhza1NbKnZZeQ6oRiA+A= -----END CERTIFICATE-----Generated at Thu Sep 17 10:51:50 2026 by rpki-client