$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft File: 2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft (raw, json) Hash identifier: qbGPiTksHr6lRNcIKaHGbLB048rDLf4v9rHwDuYE9vg= Subject key identifier: 46:9F:53:E5:AB:88:25:D4:99:5E:CD:85:F3:4A:3E:74:A9:51:E7:CC Authority key identifier: 27:69:DC:A3:F8:9F:0B:44:81:12:7F:F4:E7:DB:34:D7:95:7B:9B:9A Certificate issuer: /CN=2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A Certificate serial: 1B2F598ED1E36E502FE7B9842B052BC3E89E2E7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 23:53:26 +0000 Manifest this update: Wed 16 Sep 2026 23:48:26 +0000 Manifest next update: Fri 18 Sep 2026 02:57:26 +0000 Files and hashes: 1: 3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa (hash: SxuSRhZVuQ01C/J4fBuk49O3beWTR2sEuK9CbWvLAoU=) 2: 2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.crl (hash: Ej56fyDZ2nk+0IeMtAB26DKBXmyN3IgX6xnv9UfLJTs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.crl rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:2f:59:8e:d1:e3:6e:50:2f:e7:b9:84:2b:05:2b:c3:e8:9e:2e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A Validity Not Before: Sep 16 23:48:26 2026 GMT Not After : Sep 18 02:57:26 2026 GMT Subject: CN=469F53E5AB8825D4995ECD85F34A3E74A951E7CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:eb:f1:bf:bc:ff:29:a3:72:7f:15:20:72:1b: b7:ff:ad:2e:99:d8:71:18:96:49:e7:ff:13:6f:70: e9:a1:9c:fa:59:c6:5a:ae:06:69:d0:01:f9:ab:b8: f7:5d:cc:4b:56:18:d1:13:95:27:98:13:0f:05:fd: cc:d5:5d:78:bc:7f:91:2a:b0:32:c9:43:f8:fb:72: 02:eb:a5:59:da:a4:00:2c:34:99:7b:a6:05:f7:0e: 61:f8:44:a5:5f:71:c7:4e:e3:bd:59:25:b6:a1:2b: 1b:ef:ea:0c:56:4f:91:64:0c:05:44:9b:6a:11:d5: 13:65:50:c7:19:80:2b:d4:3e:9a:ab:e1:97:cf:0f: 11:0d:7d:bb:ca:bf:86:a2:a8:87:86:8a:ec:11:b4: 9a:9f:6a:3c:07:b8:a6:00:7f:ca:80:87:8d:00:e2: 6c:24:f8:87:be:8e:53:ab:43:57:cf:2e:74:0f:bf: 23:c0:99:f1:e1:63:61:58:ce:3e:21:97:5e:d9:53: 67:ed:7f:86:01:7a:ca:f1:31:b1:52:36:12:60:df: ff:f6:a7:3f:e6:2a:b9:10:de:81:e5:ed:12:fa:10: eb:67:ec:c5:a4:be:7e:b3:65:56:42:1f:80:29:34: 42:a3:a6:19:31:cd:0a:70:5d:ed:dd:a2:ce:86:4c: f6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9F:53:E5:AB:88:25:D4:99:5E:CD:85:F3:4A:3E:74:A9:51:E7:CC X509v3 Authority Key Identifier: keyid:27:69:DC:A3:F8:9F:0B:44:81:12:7F:F4:E7:DB:34:D7:95:7B:9B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:dc:00:a8:00:5a:c9:99:bc:35:03:6a:67:f6:a1:c1:bf:73: 5a:9f:cc:b3:09:9f:d8:f0:bd:d3:72:7d:fb:49:ac:c6:74:c4: 86:21:7d:a0:a5:fc:a8:bd:00:2c:1d:fa:78:ca:7c:0a:18:65: 68:1f:ae:fb:9a:a5:a9:7e:03:15:86:5d:e9:e7:60:cd:5c:0f: 4d:f2:ee:54:e4:f4:0b:9c:d4:6d:42:9e:46:2d:5a:53:8b:ca: 01:ce:3a:65:86:1c:b6:0e:84:81:7e:f1:4b:7d:5a:ae:d8:19: d8:cf:6a:43:11:9b:4e:db:e6:31:78:c4:1f:57:16:ba:62:c1: 16:04:99:8a:2a:d2:31:e9:65:94:d6:52:4d:2c:92:c0:8d:f3: c5:87:a1:29:96:d7:01:e0:5e:c1:fc:c6:f8:78:ef:69:42:64: 8c:d9:00:de:13:6c:e0:49:a6:3f:d5:1d:53:dc:94:67:a5:ea: 1d:72:39:e7:e0:79:49:26:7d:0d:26:5c:5a:05:01:78:ad:53: 93:dc:39:c7:61:5d:37:3c:44:e0:44:44:1c:fe:ae:53:ef:f9: 09:41:f8:a1:2e:72:f5:45:d6:4c:95:ac:70:f5:99:bd:e7:ef: 77:83:c9:73:45:a6:fd:b8:47:c8:0f:08:57:65:f6:74:76:2a: a3:a1:11:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGy9ZjtHjblAv57mEKwUrw+ieLn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc2OURDQTNGODlGMEI0NDgxMTI3RkY0RTdEQjM0RDc5 NTdCOUI5QTAeFw0yNjA5MTYyMzQ4MjZaFw0yNjA5MTgwMjU3MjZaMDMxMTAvBgNV BAMTKDQ2OUY1M0U1QUI4ODI1RDQ5OTVFQ0Q4NUYzNEEzRTc0QTk1MUU3Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT6/G/vP8po3J/FSByG7f/rS6Z 2HEYlknn/xNvcOmhnPpZxlquBmnQAfmruPddzEtWGNETlSeYEw8F/czVXXi8f5Eq sDLJQ/j7cgLrpVnapAAsNJl7pgX3DmH4RKVfccdO471ZJbahKxvv6gxWT5FkDAVE m2oR1RNlUMcZgCvUPpqr4ZfPDxENfbvKv4aiqIeGiuwRtJqfajwHuKYAf8qAh40A 4mwk+Ie+jlOrQ1fPLnQPvyPAmfHhY2FYzj4hl17ZU2ftf4YBesrxMbFSNhJg3//2 pz/mKrkQ3oHl7RL6EOtn7MWkvn6zZVZCH4ApNEKjphkxzQpwXe3dos6GTPZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURp9T5auIJdSZXs2F80o+dKlR58wwHwYDVR0j BBgwFoAUJ2nco/ifC0SBEn/059s015V7m5owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmUzYTEzOGUtYTJiMi00NjA0LWFkNTAtM2NhYjc1MGE3NWU3LzAvMjc2OURDQTNG ODlGMEI0NDgxMTI3RkY0RTdEQjM0RDc5NTdCOUI5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNzY5RENBM0Y4OUYwQjQ0ODExMjdGRjRFN0RCMzRENzk1N0I5 QjlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmUzYTEzOGUtYTJiMi00NjA0LWFk NTAtM2NhYjc1MGE3NWU3LzAvMjc2OURDQTNGODlGMEI0NDgxMTI3RkY0RTdEQjM0 RDc5NTdCOUI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHcAKgAWsmZvDUDamf2ocG/c1qfzLMJn9jw vdNyfftJrMZ0xIYhfaCl/Ki9ACwd+njKfAoYZWgfrvuapal+AxWGXennYM1cD03y 7lTk9Auc1G1CnkYtWlOLygHOOmWGHLYOhIF+8Ut9Wq7YGdjPakMRm07b5jF4xB9X FrpiwRYEmYoq0jHpZZTWUk0sksCN88WHoSmW1wHgXsH8xvh472lCZIzZAN4TbOBJ pj/VHVPclGel6h1yOefgeUkmfQ0mXFoFAXitU5PcOcdhXTc8ROBERBz+rlPv+QlB +KEucvVF1kyVrHD1mb3n73eDyXNFpv24R8gPCFdl9nR2KqOhEc8= -----END CERTIFICATE-----Generated at Thu Sep 17 10:05:13 2026 by rpki-client