$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft File: C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft (raw, json) Hash identifier: lmZWTSAeA8y6BRPgXYLTbqZzGBUhaoRIBBoNEUJpaOc= Subject key identifier: 82:72:11:CB:D3:42:00:94:AB:C3:57:72:54:0E:B4:37:1B:CB:52:4F Authority key identifier: C2:D3:13:86:7B:0B:49:66:C3:72:AB:0F:92:BE:8E:E8:78:20:EF:88 Certificate issuer: /CN=C2D313867B0B4966C372AB0F92BE8EE87820EF88 Certificate serial: 447C651F34D4207FFA9D9505695A3127228AB295 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft Manifest number: EF Signing time: Wed 28 Oct 2026 08:25:40 +0000 Manifest this update: Wed 28 Oct 2026 08:20:40 +0000 Manifest next update: Thu 29 Oct 2026 09:20:40 +0000 Files and hashes: 1: 3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa (hash: Y+vREFE/EG16t2/cwbDbHoF+QrWyIBN3buYGvhuls/U=) 2: C2D313867B0B4966C372AB0F92BE8EE87820EF88.crl (hash: ffnnrmPSVnIzWwXw2A7HaCNJt9y0Jt0W83AH8j4oeio=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.crl rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 07:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:7c:65:1f:34:d4:20:7f:fa:9d:95:05:69:5a:31:27:22:8a:b2:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D313867B0B4966C372AB0F92BE8EE87820EF88 Validity Not Before: Oct 28 08:20:40 2026 GMT Not After : Oct 29 09:20:40 2026 GMT Subject: CN=827211CBD3420094ABC35772540EB4371BCB524F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0e:0c:33:a0:39:7f:48:72:c8:c6:3c:53:4b: 1f:b8:05:2d:51:82:65:4e:53:47:d9:18:5e:f0:10: 39:50:6c:ac:cb:14:28:ce:03:6f:83:de:26:3e:74: 12:58:ee:db:05:32:32:39:15:23:0a:8f:45:f0:96: 3a:80:86:0b:c6:57:e2:0f:d6:41:47:87:40:3b:e5: b7:48:28:ab:bf:57:07:6e:35:29:5b:96:f3:e3:7f: c9:ab:d3:6f:7c:0c:9f:58:4b:e6:32:4b:0e:07:05: 7f:b5:2f:ac:51:fa:95:4e:84:1c:23:3b:56:de:63: 12:af:a9:39:72:42:98:17:13:ca:4d:fd:30:67:08: 1d:f1:ac:de:c9:fe:a3:17:3f:01:fb:fb:b6:9d:f4: 70:d9:54:4a:cc:5c:6e:5d:d7:a4:6a:77:03:82:58: db:00:b1:61:ae:08:91:6c:60:15:f4:dd:45:16:7d: 3e:77:28:ec:b9:a8:3e:33:59:79:4b:02:9d:52:c9: 7b:d6:67:79:c5:d7:22:47:18:ba:8e:29:d3:30:bf: e1:c4:e1:88:b6:ee:28:ff:97:84:64:df:e5:fe:86: 4c:be:90:26:17:56:c9:13:8f:0e:6c:54:bc:e4:16: b4:21:3f:da:33:6f:4b:ec:b6:50:c2:1d:0e:89:b7: 26:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:72:11:CB:D3:42:00:94:AB:C3:57:72:54:0E:B4:37:1B:CB:52:4F X509v3 Authority Key Identifier: keyid:C2:D3:13:86:7B:0B:49:66:C3:72:AB:0F:92:BE:8E:E8:78:20:EF:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d1:eb:46:34:db:29:2f:61:58:41:39:f4:2e:d5:57:e1:20: df:95:da:73:d2:13:b2:84:4c:58:b2:64:de:29:08:c8:5f:34: 01:f6:e8:4c:4d:b3:57:75:de:44:4b:2b:81:2d:ed:ab:6b:31: ac:1d:6f:27:04:78:1b:5a:f9:e9:28:c5:8a:1c:75:5c:d7:24: 08:43:4b:3e:2c:17:ed:c8:de:74:cf:32:e5:1b:5c:63:b9:6b: 0b:85:cc:26:82:5e:73:c8:16:00:06:b4:6d:cc:13:51:c8:7b: 63:b5:d7:05:b8:23:78:13:5d:72:33:98:5b:07:2f:1d:24:a4: f2:e9:ed:00:06:04:f9:84:1d:1c:9a:a3:d2:52:f9:62:e1:5a: 0d:83:f4:19:94:c4:b6:9f:13:a0:9f:9f:9b:44:60:53:e5:ff: d6:3c:32:61:31:98:f5:da:c0:6d:3d:d9:19:c9:82:98:48:ad: 11:53:22:8e:19:f8:51:12:7c:31:8f:02:d9:d5:59:fd:64:d9: 78:e1:15:84:1f:19:7f:84:65:bc:94:66:45:d3:a4:0e:55:b7: 02:59:bc:7f:8d:4e:13:56:a0:51:d0:1e:7d:dc:9d:c0:10:04: 18:14:39:8d:4c:98:57:f6:d0:82:ff:c3:dd:6b:c0:51:9e:19: f7:dc:2a:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURHxlHzTUIH/6nZUFaVoxJyKKspUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJEMzEzODY3QjBCNDk2NkMzNzJBQjBGOTJCRThFRTg3 ODIwRUY4ODAeFw0yNjEwMjgwODIwNDBaFw0yNjEwMjkwOTIwNDBaMDMxMTAvBgNV BAMTKDgyNzIxMUNCRDM0MjAwOTRBQkMzNTc3MjU0MEVCNDM3MUJDQjUyNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBDgwzoDl/SHLIxjxTSx+4BS1R gmVOU0fZGF7wEDlQbKzLFCjOA2+D3iY+dBJY7tsFMjI5FSMKj0XwljqAhgvGV+IP 1kFHh0A75bdIKKu/VwduNSlblvPjf8mr0298DJ9YS+YySw4HBX+1L6xR+pVOhBwj O1beYxKvqTlyQpgXE8pN/TBnCB3xrN7J/qMXPwH7+7ad9HDZVErMXG5d16RqdwOC WNsAsWGuCJFsYBX03UUWfT53KOy5qD4zWXlLAp1SyXvWZ3nF1yJHGLqOKdMwv+HE 4Yi27ij/l4Rk3+X+hky+kCYXVskTjw5sVLzkFrQhP9ozb0vstlDCHQ6JtyZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgnIRy9NCAJSrw1dyVA60NxvLUk8wHwYDVR0j BBgwFoAUwtMThnsLSWbDcqsPkr6O6Hgg74gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMxNzM2OWEtYmNjMS00MmJjLWI4YjItZjk2ZDUwZDM3NDlkLzAvQzJEMzEzODY3 QjBCNDk2NkMzNzJBQjBGOTJCRThFRTg3ODIwRUY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkQzMTM4NjdCMEI0OTY2QzM3MkFCMEY5MkJFOEVFODc4MjBF Rjg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMxNzM2OWEtYmNjMS00MmJjLWI4 YjItZjk2ZDUwZDM3NDlkLzAvQzJEMzEzODY3QjBCNDk2NkMzNzJBQjBGOTJCRThF RTg3ODIwRUY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbR60Y02ykvYVhBOfQu1VfhIN+V2nPSE7KE TFiyZN4pCMhfNAH26ExNs1d13kRLK4Et7atrMawdbycEeBta+ekoxYocdVzXJAhD Sz4sF+3I3nTPMuUbXGO5awuFzCaCXnPIFgAGtG3ME1HIe2O11wW4I3gTXXIzmFsH Lx0kpPLp7QAGBPmEHRyao9JS+WLhWg2D9BmUxLafE6Cfn5tEYFPl/9Y8MmExmPXa wG092RnJgphIrRFTIo4Z+FESfDGPAtnVWf1k2XjhFYQfGX+EZbyUZkXTpA5VtwJZ vH+NThNWoFHQHn3cncAQBBgUOY1MmFf20IL/w91rwFGeGffcKhM= -----END CERTIFICATE-----Generated at Wed Oct 28 12:53:26 2026 by rpki-client