$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft File: C2F21005CDD8F19E492720297D0BA5C66395653F.mft (raw, json) Hash identifier: qbowmdW6m4BiiDZVRi8CdWBW2z1PquhQ4i5UBMMGIC0= Subject key identifier: F3:FD:3F:19:83:B2:14:16:D9:F3:AA:08:11:92:F2:29:DB:72:66:08 Authority key identifier: C2:F2:10:05:CD:D8:F1:9E:49:27:20:29:7D:0B:A5:C6:63:95:65:3F Certificate issuer: /CN=C2F21005CDD8F19E492720297D0BA5C66395653F Certificate serial: 36D8E2F45ECB33FE60F52A7E38E1BBB3FB9EDF69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 20:19:14 +0000 Manifest this update: Wed 16 Sep 2026 20:14:14 +0000 Manifest next update: Thu 17 Sep 2026 23:35:14 +0000 Files and hashes: 1: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: 4WF38lDugkx4g5GWHdzVk5hRBqpGlU+mntDxAYWnRfU=) 2: C2F21005CDD8F19E492720297D0BA5C66395653F.crl (hash: emt4YtPAZif8oZD+1C0IA47dm1JbwmaBDovSCbXvtiQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.crl rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d8:e2:f4:5e:cb:33:fe:60:f5:2a:7e:38:e1:bb:b3:fb:9e:df:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2F21005CDD8F19E492720297D0BA5C66395653F Validity Not Before: Sep 16 20:14:14 2026 GMT Not After : Sep 17 23:35:14 2026 GMT Subject: CN=F3FD3F1983B21416D9F3AA081192F229DB726608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c9:2b:96:f0:79:8d:89:46:68:c6:cf:ca:bf: 2b:0a:92:1a:c9:4d:f7:a5:7d:69:b6:81:67:86:f3: a1:86:8d:58:ed:5c:a0:22:05:1f:f0:56:ef:f6:bc: 01:98:05:c2:77:60:29:0e:a9:38:f1:35:8f:2b:04: 4f:b1:10:0a:ef:3c:eb:02:d1:a2:fe:5b:43:d4:1f: bb:3a:71:0c:28:75:13:d2:74:90:27:4d:51:c3:e4: 6a:1d:dc:80:d0:04:6f:d3:3d:eb:25:52:69:36:af: 32:02:8a:ed:ea:bc:4d:82:d3:5c:5e:2a:7b:1e:7c: 39:c9:35:8d:6f:6f:ee:07:5b:0c:ee:af:bb:f3:18: e8:5a:f9:28:84:56:59:e2:07:f7:32:1b:b9:ee:7d: 0c:d8:31:96:a5:da:8a:51:9c:6c:33:34:e0:b9:0c: 8f:72:20:e1:0a:b8:97:cf:4e:46:b7:b6:dd:91:96: 21:d4:98:9c:1d:5b:c4:96:6f:e2:81:c5:31:0f:80: f3:53:ac:56:63:8f:d3:48:a9:61:57:0c:57:ae:70: e2:4a:56:fc:6e:92:18:c8:bf:31:cf:37:68:85:2d: 9b:fb:61:4f:07:73:b6:b5:f5:4a:02:c3:f9:5e:ea: 70:2a:4c:59:3b:7a:fe:43:ec:79:ef:0e:10:8a:d3: 7c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FD:3F:19:83:B2:14:16:D9:F3:AA:08:11:92:F2:29:DB:72:66:08 X509v3 Authority Key Identifier: keyid:C2:F2:10:05:CD:D8:F1:9E:49:27:20:29:7D:0B:A5:C6:63:95:65:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:66:7e:84:b8:08:13:1f:8b:11:f6:be:9f:2f:36:10:86:ed: 64:c9:b2:c7:3e:b1:ec:a6:fb:74:8a:dc:eb:bd:25:7f:0f:7e: e0:56:be:b4:03:50:35:d1:7b:9d:da:7e:ac:2b:3b:78:2c:16: bf:ad:90:98:1c:32:c0:5b:54:b5:51:21:98:93:2a:c1:d4:10: 1e:a5:58:cf:7e:8c:c0:be:8b:09:b1:b5:04:a1:b5:1f:bb:41: 2e:57:18:fd:be:fc:55:73:8d:c0:89:d6:87:d8:67:e4:52:a8: dc:75:ce:1f:95:1c:40:a0:40:de:b5:d3:67:db:da:e6:7c:7c: 59:78:0f:15:0a:a6:0c:ba:65:23:bf:b5:8d:8b:0d:8d:74:d2: 4f:76:94:54:17:9c:6d:7e:ba:59:dc:37:8f:73:cf:0f:e0:9c: e7:2c:83:04:a4:0c:d0:03:8d:1e:dd:9c:13:d3:2b:47:2a:1e: 37:a2:85:96:9a:5d:de:af:34:ac:a5:8a:33:ec:6d:53:a9:13: 92:b0:78:60:67:f4:8f:24:3a:f0:77:c0:24:41:2e:01:73:e5: 53:63:d9:37:80:58:ba:8f:f6:08:16:37:e0:4c:64:65:60:6e: e3:89:d9:d9:e2:78:57:7d:32:d4:0e:fb:33:19:3d:64:66:88: 8d:bc:74:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNtji9F7LM/5g9Sp+OOG7s/ue32kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJGMjEwMDVDREQ4RjE5RTQ5MjcyMDI5N0QwQkE1QzY2 Mzk1NjUzRjAeFw0yNjA5MTYyMDE0MTRaFw0yNjA5MTcyMzM1MTRaMDMxMTAvBgNV BAMTKEYzRkQzRjE5ODNCMjE0MTZEOUYzQUEwODExOTJGMjI5REI3MjY2MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ySuW8HmNiUZoxs/KvysKkhrJ TfelfWm2gWeG86GGjVjtXKAiBR/wVu/2vAGYBcJ3YCkOqTjxNY8rBE+xEArvPOsC 0aL+W0PUH7s6cQwodRPSdJAnTVHD5God3IDQBG/TPeslUmk2rzICiu3qvE2C01xe KnsefDnJNY1vb+4HWwzur7vzGOha+SiEVlniB/cyG7nufQzYMZal2opRnGwzNOC5 DI9yIOEKuJfPTka3tt2RliHUmJwdW8SWb+KBxTEPgPNTrFZjj9NIqWFXDFeucOJK VvxukhjIvzHPN2iFLZv7YU8Hc7a19UoCw/le6nAqTFk7ev5D7HnvDhCK03yFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8/0/GYOyFBbZ86oIEZLyKdtyZggwHwYDVR0j BBgwFoAUwvIQBc3Y8Z5JJyApfQulxmOVZT8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZmYmFmNzEtMmQ1Ny00ZTRhLTkxZDAtY2FjOGFiMGFjZWZlLzAvQzJGMjEwMDVD REQ4RjE5RTQ5MjcyMDI5N0QwQkE1QzY2Mzk1NjUzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkYyMTAwNUNERDhGMTlFNDkyNzIwMjk3RDBCQTVDNjYzOTU2 NTNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvQzJGMjEwMDVDREQ4RjE5RTQ5MjcyMDI5N0QwQkE1 QzY2Mzk1NjUzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJmfoS4CBMfixH2vp8vNhCG7WTJssc+seym +3SK3Ou9JX8PfuBWvrQDUDXRe53afqwrO3gsFr+tkJgcMsBbVLVRIZiTKsHUEB6l WM9+jMC+iwmxtQShtR+7QS5XGP2+/FVzjcCJ1ofYZ+RSqNx1zh+VHECgQN6102fb 2uZ8fFl4DxUKpgy6ZSO/tY2LDY100k92lFQXnG1+ulncN49zzw/gnOcsgwSkDNAD jR7dnBPTK0cqHjeihZaaXd6vNKylijPsbVOpE5KweGBn9I8kOvB3wCRBLgFz5VNj 2TeAWLqP9ggWN+BMZGVgbuOJ2dnieFd9MtQO+zMZPWRmiI28dNg= -----END CERTIFICATE-----Generated at Thu Sep 17 09:20:20 2026 by rpki-client