$ rpki-client -vvvf rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft File: 2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft (raw, json) Hash identifier: 61gDse/OUZcYbe9O/yOU2X4qMs+7qZs4tni7/fheb0I= Subject key identifier: CA:B2:AC:27:D2:C3:F9:B8:C6:C6:2C:BA:82:08:ED:E5:CD:C3:15:CE Authority key identifier: 2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14 Certificate issuer: /CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714 Certificate serial: 6D25DFD20424FCBF921183843CBA218F04A00216 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft Manifest number: EC Signing time: Sun 25 Oct 2026 12:06:40 +0000 Manifest this update: Sun 25 Oct 2026 12:01:40 +0000 Manifest next update: Mon 26 Oct 2026 14:38:40 +0000 Files and hashes: 1: 3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (hash: HyudSDnKB8bCiy0S2RrKH+D8dZ2RY7de+E6PViymOWI=) 2: 3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (hash: ib7HPEQ/1sTUx6nXpMyLf2LdpmFve2tZtQrzXQVTi5I=) 3: 3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa (hash: hq7t6IGdrToWC5Y/u0/ln3majWig7C7xPRHwOMHho0s=) 4: 2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl (hash: pbTJxUXQpapPFsQSDiyDmf4wjJUaCXUoqhXRP342cFc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:25:df:d2:04:24:fc:bf:92:11:83:84:3c:ba:21:8f:04:a0:02:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714 Validity Not Before: Oct 25 12:01:40 2026 GMT Not After : Oct 26 14:38:40 2026 GMT Subject: CN=CAB2AC27D2C3F9B8C6C62CBA8208EDE5CDC315CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:7b:a3:72:98:f3:89:c7:27:5b:24:3c:2f:fe: 7d:eb:ff:86:1b:41:34:2e:c7:52:3a:18:39:c3:c0: 57:70:e6:67:bd:ff:c3:23:ae:52:ce:3b:11:0a:be: 23:9f:df:23:51:ee:a2:a3:51:e9:5d:ee:6f:36:2f: 71:ff:7a:81:fe:bb:65:26:2d:8c:b3:45:d4:a6:a1: fd:df:5d:95:9c:44:ea:f4:d6:7a:97:9b:26:0b:ab: 96:8d:05:a9:39:2c:53:2e:dc:72:76:79:9b:ab:49: 1e:86:43:79:75:d0:58:a3:da:e3:5c:13:d4:3c:c9: 4d:bd:37:11:0b:ea:ad:fe:0c:9f:77:80:ee:2b:ec: db:ed:64:98:9d:8a:92:4e:5e:50:ea:d4:72:87:fb: 41:4a:d0:0e:47:41:ef:37:3f:8b:9e:4e:32:bb:90: 02:94:38:5a:ac:10:d2:7c:88:c2:5c:3e:66:d3:e4: de:54:49:9d:eb:fd:07:8a:a0:b4:cf:09:a7:ef:78: 8a:f7:69:66:c8:b2:4b:d9:4b:de:68:4a:fa:75:a6: 3a:a4:3f:25:7a:0c:30:85:c4:00:af:87:5c:45:e8: 1c:72:58:c1:d1:f9:70:92:ca:7a:48:77:c2:49:1a: 2e:3c:85:93:04:b8:fd:d9:41:ee:fc:13:b5:9b:1c: e0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B2:AC:27:D2:C3:F9:B8:C6:C6:2C:BA:82:08:ED:E5:CD:C3:15:CE X509v3 Authority Key Identifier: keyid:2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:13:6d:8d:ed:2a:52:cc:72:2f:0d:7b:44:fa:66:db:65:38: 41:cc:3f:70:e6:e3:3b:30:fd:bd:e6:0a:0f:2d:c0:72:2e:30: d6:00:95:37:5d:ce:59:f4:e2:27:eb:66:12:a7:86:8d:17:73: 93:19:25:8e:96:7d:9c:3f:ad:b5:05:b0:d7:10:3d:f7:56:5d: e6:b3:08:d1:ab:85:5c:78:df:36:a2:30:27:f4:3a:34:8f:f6: 94:91:46:8f:ec:db:84:7c:1c:2d:c2:56:4a:82:43:61:ef:89: 68:9d:75:72:76:52:e0:f7:96:36:1e:46:80:d9:ba:28:2b:1f: 06:82:4a:fb:b7:6f:a0:ff:ab:4a:82:08:be:28:33:e3:05:d3: 1d:53:11:d1:f0:bd:29:16:9c:34:b2:66:76:96:69:b9:69:6a: 17:21:84:6e:66:57:ee:e9:c0:b1:25:a2:31:b9:ca:78:aa:9d: 2f:65:f4:6d:93:8a:5f:5b:60:e1:43:d8:30:4d:85:ea:4c:f8: 86:b5:51:c0:22:c9:05:20:bf:ae:05:7d:77:62:2e:7e:74:a6: 41:16:06:aa:51:32:3a:79:a2:3c:12:33:d8:11:de:02:31:dd: ea:99:c1:07:80:a0:08:2f:57:87:1a:ac:41:14:ec:a4:73:5a: c0:29:ab:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbSXf0gQk/L+SEYOEPLohjwSgAhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRBRkMyNTAzMDUwOUFENzEyNkJCRDkzQUJDQ0I5NUU3 QTE4NjcxNDAeFw0yNjEwMjUxMjAxNDBaFw0yNjEwMjYxNDM4NDBaMDMxMTAvBgNV BAMTKENBQjJBQzI3RDJDM0Y5QjhDNkM2MkNCQTgyMDhFREU1Q0RDMzE1Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1e6NymPOJxydbJDwv/n3r/4Yb QTQux1I6GDnDwFdw5me9/8MjrlLOOxEKviOf3yNR7qKjUeld7m82L3H/eoH+u2Um LYyzRdSmof3fXZWcROr01nqXmyYLq5aNBak5LFMu3HJ2eZurSR6GQ3l10Fij2uNc E9Q8yU29NxEL6q3+DJ93gO4r7NvtZJidipJOXlDq1HKH+0FK0A5HQe83P4ueTjK7 kAKUOFqsENJ8iMJcPmbT5N5USZ3r/QeKoLTPCafveIr3aWbIskvZS95oSvp1pjqk PyV6DDCFxACvh1xF6BxyWMHR+XCSynpId8JJGi48hZMEuP3ZQe78E7WbHOCzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyrKsJ9LD+bjGxiy6ggjt5c3DFc4wHwYDVR0j BBgwFoAULa/CUDBQmtcSa72Tq8y5XnoYZxQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0YmI0YzgtNmZjZi00ZmZmLWJkY2MtZmUxZmNjZWUxMDQ1LzAvMkRBRkMyNTAz MDUwOUFENzEyNkJCRDkzQUJDQ0I5NUU3QTE4NjcxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREFGQzI1MDMwNTA5QUQ3MTI2QkJEOTNBQkNDQjk1RTdBMTg2 NzE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0YmI0YzgtNmZjZi00ZmZmLWJk Y2MtZmUxZmNjZWUxMDQ1LzAvMkRBRkMyNTAzMDUwOUFENzEyNkJCRDkzQUJDQ0I5 NUU3QTE4NjcxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMTbY3tKlLMci8Ne0T6ZttlOEHMP3Dm4zsw /b3mCg8twHIuMNYAlTddzln04ifrZhKnho0Xc5MZJY6WfZw/rbUFsNcQPfdWXeaz CNGrhVx43zaiMCf0OjSP9pSRRo/s24R8HC3CVkqCQ2HviWiddXJ2UuD3ljYeRoDZ uigrHwaCSvu3b6D/q0qCCL4oM+MF0x1TEdHwvSkWnDSyZnaWablpahchhG5mV+7p wLElojG5yniqnS9l9G2Til9bYOFD2DBNhepM+Ia1UcAiyQUgv64FfXdiLn50pkEW BqpRMjp5ojwSM9gR3gIx3eqZwQeAoAgvV4carEEU7KRzWsApq9U= -----END CERTIFICATE-----Generated at Sun Oct 25 18:47:16 2026 by rpki-client