$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft File: 2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft (raw, json) Hash identifier: kqOB3LyRQt7mj3YkJNptaja+SjUJdlXv99y0342yqZg= Subject key identifier: 1D:59:39:B4:79:86:3E:8D:A9:64:40:4A:04:6C:EA:D8:7B:E1:5F:3F Authority key identifier: 2D:4E:F7:6F:F5:F1:DE:08:B9:FB:7C:AE:D4:9A:F7:AD:4C:60:18:35 Certificate issuer: /CN=2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835 Certificate serial: 5A0833B772D4F23CF23D84A0BD9EBEAC0A8EE27A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:17:46 +0000 Manifest this update: Wed 16 Sep 2026 23:12:46 +0000 Manifest next update: Fri 18 Sep 2026 00:34:46 +0000 Files and hashes: 1: 2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl (hash: AZhgyJFTLsjkRkWkZVJ0LTLLK722eeFAJwZ4+MRu21I=) 2: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: +vElMuoXueIlORLkNX9hNN9LTELx3Cm8ZNhxGm0p8LM=) 3: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: Lvw5pO2bg6firYOVJrL24L/mVS2H6b/TJe2TV+FnMQs=) 4: 3130332e31392e35362e302f32322d3232203d3e20313332363337.roa (hash: JZgdRbJu890tbXcbh9Oxv/c/hndsIuQkwCj004yU0ZY=) 5: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: abfZiYldhdnO1xBcxOi/v0tih5cS8BcQKFP2Z8xIlZI=) 6: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (hash: gCsatGRm4KYeS4xTuGnz+oT2rG5lR5XCvd8UnIJR5JU=) 7: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: Qy2f1Th+IuSFin6EsJuwgkXChR1+TY6gnLgDe+ouGOE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:08:33:b7:72:d4:f2:3c:f2:3d:84:a0:bd:9e:be:ac:0a:8e:e2:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835 Validity Not Before: Sep 16 23:12:46 2026 GMT Not After : Sep 18 00:34:46 2026 GMT Subject: CN=1D5939B479863E8DA964404A046CEAD87BE15F3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:aa:e2:7a:66:bb:67:9a:32:b9:84:54:a3:89: 7b:7b:ac:d6:96:64:b8:26:ca:2a:e7:92:92:97:ad: fa:ed:ec:a3:44:6b:5d:aa:9e:b9:67:05:fc:73:60: ef:5b:d7:d9:f6:c2:50:aa:5a:bd:09:93:e2:20:8c: 65:b3:27:64:3c:c2:eb:a6:86:9f:38:28:4c:52:44: 50:84:3d:ad:05:68:0a:2a:1a:91:3f:91:0b:de:8d: a5:5f:78:2e:bb:b9:25:57:a0:43:fa:45:83:90:74: 33:3b:4a:4d:a0:7e:d0:40:1e:fb:bc:ee:9c:1e:85: 28:b5:8e:d0:bc:d6:09:4a:78:83:f1:66:ae:b0:4f: a4:07:f2:c7:3a:eb:e3:d9:86:47:1b:20:05:50:75: f9:af:bb:06:37:8d:db:09:5a:7c:d7:3e:b4:1c:ba: 47:44:04:f7:dc:54:84:bc:71:a2:fb:97:be:fa:34: 31:b3:3c:7e:72:39:d2:dc:45:ba:a9:1d:e0:91:ed: 08:97:6f:16:b2:ac:18:00:30:74:e7:39:4c:e4:b7: 96:a1:80:f4:aa:4f:c4:f1:55:66:ff:b6:65:29:ae: 4b:aa:70:68:6d:3e:be:90:76:5f:08:42:61:6c:04: 42:9c:43:c0:fc:b6:b9:7b:cc:64:f6:cd:53:7b:1d: 2a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:59:39:B4:79:86:3E:8D:A9:64:40:4A:04:6C:EA:D8:7B:E1:5F:3F X509v3 Authority Key Identifier: keyid:2D:4E:F7:6F:F5:F1:DE:08:B9:FB:7C:AE:D4:9A:F7:AD:4C:60:18:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d4:e6:b9:a6:8a:ff:15:6f:58:ad:79:b8:0c:df:c8:71:4c: 7d:81:ea:96:35:a9:21:a8:94:08:f5:f5:d5:a1:f8:b5:c4:49: 38:0b:20:bc:0c:3d:fd:c6:07:71:f0:ac:70:78:dd:40:de:68: 87:57:6f:5b:f2:0e:47:ec:da:29:b4:c6:c4:ea:a5:f8:cb:f5: 88:44:c2:8b:00:13:7f:c7:a8:88:45:47:8e:66:48:3b:40:d1: ed:cf:89:1e:b1:e8:e2:56:ab:95:5e:4b:76:69:3f:cb:3e:51: 53:e2:a3:c4:a7:37:ba:71:fd:7d:47:14:f4:fa:3c:d7:38:e8: 85:7c:b7:6a:a8:35:17:b9:71:3c:ae:e6:b3:c0:c7:dc:28:e6: 08:5a:a3:ae:fd:5a:47:b0:9f:37:37:b8:c1:a7:14:ce:55:f1: e3:dc:81:af:5b:ce:80:44:78:4b:14:88:76:0d:4f:1e:b8:a5: 94:35:b1:58:27:99:a5:1b:f4:57:ac:10:0f:08:98:a9:9d:65: 96:14:48:24:7c:bc:9a:8c:70:91:78:97:38:1d:7d:f1:3b:5a: d8:22:8e:6b:14:28:10:98:29:3e:3d:52:6d:bf:dc:dd:6e:2d: bb:5f:4b:35:dc:79:d5:0e:d2:c0:90:e2:77:f6:5d:3d:98:03: ba:ba:88:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWggzt3LU8jzyPYSgvZ6+rAqO4nowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ0RUY3NkZGNUYxREUwOEI5RkI3Q0FFRDQ5QUY3QUQ0 QzYwMTgzNTAeFw0yNjA5MTYyMzEyNDZaFw0yNjA5MTgwMDM0NDZaMDMxMTAvBgNV BAMTKDFENTkzOUI0Nzk4NjNFOERBOTY0NDA0QTA0NkNFQUQ4N0JFMTVGM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3quJ6ZrtnmjK5hFSjiXt7rNaW ZLgmyirnkpKXrfrt7KNEa12qnrlnBfxzYO9b19n2wlCqWr0Jk+IgjGWzJ2Q8wuum hp84KExSRFCEPa0FaAoqGpE/kQvejaVfeC67uSVXoEP6RYOQdDM7Sk2gftBAHvu8 7pwehSi1jtC81glKeIPxZq6wT6QH8sc66+PZhkcbIAVQdfmvuwY3jdsJWnzXPrQc ukdEBPfcVIS8caL7l776NDGzPH5yOdLcRbqpHeCR7QiXbxayrBgAMHTnOUzkt5ah gPSqT8TxVWb/tmUprkuqcGhtPr6Qdl8IQmFsBEKcQ8D8trl7zGT2zVN7HSpBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHVk5tHmGPo2pZEBKBGzq2HvhXz8wHwYDVR0j BBgwFoAULU73b/Xx3gi5+3yu1Jr3rUxgGDUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQwOTI3ZTYtOGEwYS00ZmE3LTg5NjktOWZiOWQ2OTQzOTdjLzAvMkQ0RUY3NkZG NUYxREUwOEI5RkI3Q0FFRDQ5QUY3QUQ0QzYwMTgzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDRFRjc2RkY1RjFERTA4QjlGQjdDQUVENDlBRjdBRDRDNjAx ODM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQwOTI3ZTYtOGEwYS00ZmE3LTg5 NjktOWZiOWQ2OTQzOTdjLzAvMkQ0RUY3NkZGNUYxREUwOEI5RkI3Q0FFRDQ5QUY3 QUQ0QzYwMTgzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfU5rmmiv8Vb1itebgM38hxTH2B6pY1qSGo lAj19dWh+LXESTgLILwMPf3GB3HwrHB43UDeaIdXb1vyDkfs2im0xsTqpfjL9YhE wosAE3/HqIhFR45mSDtA0e3PiR6x6OJWq5VeS3ZpP8s+UVPio8SnN7px/X1HFPT6 PNc46IV8t2qoNRe5cTyu5rPAx9wo5ghao679Wkewnzc3uMGnFM5V8ePcga9bzoBE eEsUiHYNTx64pZQ1sVgnmaUb9FesEA8ImKmdZZYUSCR8vJqMcJF4lzgdffE7Wtgi jmsUKBCYKT49Um2/3N1uLbtfSzXcedUO0sCQ4nf2XT2YA7q6iLE= -----END CERTIFICATE-----Generated at Thu Sep 17 13:05:44 2026 by rpki-client