$ rpki-client -vvvf rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft File: 2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft (raw, json) Hash identifier: efnuJZgRWMau23T4p5J+HzxUEdAgM/7k3ezGlKUjxgo= Subject key identifier: 46:3A:DA:E8:E8:CD:38:9E:54:6B:5E:5B:1F:95:A9:8B:C0:13:4D:8E Authority key identifier: 2D:88:AC:79:1B:0C:C1:B7:D9:21:EC:E6:60:CD:E0:CF:2E:E8:ED:72 Certificate issuer: /CN=2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72 Certificate serial: 2FC3468E18116EF8C0C751EBF315828A3A5F8787 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft Manifest number: E9 Signing time: Fri 23 Oct 2026 14:21:52 +0000 Manifest this update: Fri 23 Oct 2026 14:16:52 +0000 Manifest next update: Sat 24 Oct 2026 14:21:52 +0000 Files and hashes: 1: 2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl (hash: QT8YDMBd+UlExn8CG+U63D0DV52Y1QSTA7Gh/qmDZLo=) 2: 3130332e3136322e3234302e302f32332d3234203d3e20313431363731.roa (hash: 4S3CjwY52E8pJFph27PsS9L2iHBVLGusILVU9iKtoiI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 14:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c3:46:8e:18:11:6e:f8:c0:c7:51:eb:f3:15:82:8a:3a:5f:87:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72 Validity Not Before: Oct 23 14:16:52 2026 GMT Not After : Oct 24 14:21:52 2026 GMT Subject: CN=463ADAE8E8CD389E546B5E5B1F95A98BC0134D8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:50:63:53:56:ec:aa:aa:72:89:0e:90:16:e5: 71:8d:73:b3:d2:52:ee:9e:40:9e:7b:cf:4e:53:49: 7c:26:2d:0a:c6:b7:ca:82:04:fa:c6:0b:c6:12:73: ce:f5:26:bc:cb:93:3c:b5:4f:6a:49:7f:a7:d8:da: cb:63:2b:01:b3:cb:66:fd:7c:82:ec:ed:39:2d:8b: 5b:dc:37:14:9c:38:2c:8b:03:48:b2:2c:b3:9a:99: 31:23:b5:b6:9f:c1:db:7f:03:f6:fb:13:6f:21:e8: e7:5d:da:8c:b1:df:70:28:92:e5:3e:2c:b0:27:0b: 3f:6d:68:d5:62:42:92:5a:db:96:33:90:26:97:34: 88:c1:81:d4:e2:e5:aa:68:23:b7:b8:c3:7d:d2:36: 88:10:ef:2d:21:c5:a8:7b:cb:df:d6:c9:f7:fd:b4: 7b:cd:d4:8a:3b:eb:99:1c:fa:5f:02:a1:69:0f:f7: 1e:27:6a:a9:a3:ff:03:51:85:26:ba:1e:f9:29:b2: 04:ad:78:c4:32:e5:d2:8a:93:91:09:32:9a:89:70: 61:a9:60:42:0c:0f:71:e8:cc:d7:71:f5:3e:b8:22: 2a:de:ae:da:87:be:fe:a4:76:b0:75:ae:30:77:43: fc:6f:69:ec:07:67:09:17:6a:36:85:37:c6:1b:39: 73:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3A:DA:E8:E8:CD:38:9E:54:6B:5E:5B:1F:95:A9:8B:C0:13:4D:8E X509v3 Authority Key Identifier: keyid:2D:88:AC:79:1B:0C:C1:B7:D9:21:EC:E6:60:CD:E0:CF:2E:E8:ED:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/2D88AC791B0CC1B7D921ECE660CDE0CF2EE8ED72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:30:29:af:dc:be:92:ca:b1:f9:74:d8:51:53:fd:d1:86:57: 32:dd:c4:c7:bd:7c:43:27:ea:62:37:52:64:b2:25:a1:f1:c0: ab:2a:2e:24:89:71:25:44:1d:97:1c:da:6e:48:3e:2f:c9:b4: 68:72:48:dc:01:ee:45:1e:90:6f:83:35:00:6d:f1:e2:51:5c: c8:fc:49:07:de:b9:38:f1:18:80:27:f4:3a:a6:f3:3b:85:82: 6f:b8:13:1e:19:a7:77:64:22:eb:b6:60:89:d4:8d:31:a9:51: 16:74:1b:12:1b:ee:e0:3e:80:f2:fa:47:20:7f:39:15:08:2d: fc:cd:93:4c:9d:f9:5d:3c:25:23:cb:36:de:6a:e4:0e:ff:fa: 91:c9:8a:52:01:3b:82:cc:b6:2d:04:3b:d6:e5:bc:52:b5:b5: 36:bc:fc:53:f5:a1:32:33:29:3e:18:4d:d8:9c:85:b6:30:5e: 46:44:52:71:8d:58:6e:c3:2e:b4:54:11:06:8c:6d:8e:e2:ee: 16:86:e1:4a:df:7c:7a:fd:0d:91:38:7f:ba:f7:c0:53:ef:e8: 60:70:2e:52:55:a6:2f:90:b1:c0:03:94:98:8d:6d:72:2a:c1: 98:81:d9:7f:fa:d8:9d:c8:29:54:6c:9b:df:98:83:ea:2b:9a: b8:3e:dc:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL8NGjhgRbvjAx1Hr8xWCijpfh4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ4OEFDNzkxQjBDQzFCN0Q5MjFFQ0U2NjBDREUwQ0Yy RUU4RUQ3MjAeFw0yNjEwMjMxNDE2NTJaFw0yNjEwMjQxNDIxNTJaMDMxMTAvBgNV BAMTKDQ2M0FEQUU4RThDRDM4OUU1NDZCNUU1QjFGOTVBOThCQzAxMzREOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxUGNTVuyqqnKJDpAW5XGNc7PS Uu6eQJ57z05TSXwmLQrGt8qCBPrGC8YSc871JrzLkzy1T2pJf6fY2stjKwGzy2b9 fILs7Tkti1vcNxScOCyLA0iyLLOamTEjtbafwdt/A/b7E28h6Odd2oyx33AokuU+ LLAnCz9taNViQpJa25YzkCaXNIjBgdTi5apoI7e4w33SNogQ7y0hxah7y9/Wyff9 tHvN1Io765kc+l8CoWkP9x4naqmj/wNRhSa6HvkpsgSteMQy5dKKk5EJMpqJcGGp YEIMD3HozNdx9T64IirertqHvv6kdrB1rjB3Q/xvaewHZwkXajaFN8YbOXOjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURjra6OjNOJ5Ua15bH5Wpi8ATTY4wHwYDVR0j BBgwFoAULYiseRsMwbfZIezmYM3gzy7o7XIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjMwMjRkMjQtOWZhYS00YWIwLThmYTQtMGNlNjA4YzZkMGEzLzAvMkQ4OEFDNzkx QjBDQzFCN0Q5MjFFQ0U2NjBDREUwQ0YyRUU4RUQ3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDg4QUM3OTFCMENDMUI3RDkyMUVDRTY2MENERTBDRjJFRThF RDcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjMwMjRkMjQtOWZhYS00YWIwLThm YTQtMGNlNjA4YzZkMGEzLzAvMkQ4OEFDNzkxQjBDQzFCN0Q5MjFFQ0U2NjBDREUw Q0YyRUU4RUQ3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQwKa/cvpLKsfl02FFT/dGGVzLdxMe9fEMn 6mI3UmSyJaHxwKsqLiSJcSVEHZcc2m5IPi/JtGhySNwB7kUekG+DNQBt8eJRXMj8 SQfeuTjxGIAn9Dqm8zuFgm+4Ex4Zp3dkIuu2YInUjTGpURZ0GxIb7uA+gPL6RyB/ ORUILfzNk0yd+V08JSPLNt5q5A7/+pHJilIBO4LMti0EO9blvFK1tTa8/FP1oTIz KT4YTdichbYwXkZEUnGNWG7DLrRUEQaMbY7i7haG4UrffHr9DZE4f7r3wFPv6GBw LlJVpi+QscADlJiNbXIqwZiB2X/62J3IKVRsm9+Yg+ormrg+3Fs= -----END CERTIFICATE-----Generated at Sat Oct 24 07:21:07 2026 by rpki-client