$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft File: 2DFA9ABE82F079690092186CFE591462760D0F8A.mft (raw, json) Hash identifier: Zr9ToDzDtR40z0MCS8q3xlzzmVBgBu7cpWwMmQwsim8= Subject key identifier: F8:B7:5F:59:47:64:9B:BA:CA:B8:37:47:EF:CE:69:73:CC:DD:7B:38 Authority key identifier: 2D:FA:9A:BE:82:F0:79:69:00:92:18:6C:FE:59:14:62:76:0D:0F:8A Certificate issuer: /CN=2DFA9ABE82F079690092186CFE591462760D0F8A Certificate serial: 4FCBC7BA7544E019A491BFD03B3EB7DF9EE480AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 19:42:47 +0000 Manifest this update: Thu 17 Sep 2026 19:37:47 +0000 Manifest next update: Fri 18 Sep 2026 22:29:47 +0000 Files and hashes: 1: 2DFA9ABE82F079690092186CFE591462760D0F8A.crl (hash: b3Jz4TubDbS0ddT3gnx3llHPuLcyucdENkmUErMmDa8=) 2: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: W/hw+IjAyZrPFulBFkYLnFPX3SzGksOOsryB2xI+HDo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.crl rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 22:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:cb:c7:ba:75:44:e0:19:a4:91:bf:d0:3b:3e:b7:df:9e:e4:80:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFA9ABE82F079690092186CFE591462760D0F8A Validity Not Before: Sep 17 19:37:47 2026 GMT Not After : Sep 18 22:29:47 2026 GMT Subject: CN=F8B75F5947649BBACAB83747EFCE6973CCDD7B38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c4:42:44:23:15:04:2f:c6:48:fa:b6:14:d4: f9:a7:4c:31:23:83:23:e0:4b:93:6f:e8:23:f4:d9: ac:f6:e8:7e:ae:af:28:dc:e0:46:7e:b7:06:d7:68: 29:60:3d:64:f1:be:90:8d:c9:cd:f1:1c:26:09:be: a5:2d:e9:85:ce:57:23:c6:75:8c:4e:af:79:75:df: ae:a4:60:3f:13:cf:a3:a9:e6:a9:ad:8b:aa:4a:6e: e2:34:6d:fb:db:26:fa:d2:3a:80:ed:f6:11:d8:58: 93:f0:ba:26:c1:31:85:76:45:46:75:9c:e8:f3:cc: b3:19:35:ed:90:b0:b8:ff:06:fd:1d:b9:be:63:ef: e0:a7:c3:13:0b:63:ca:1c:ef:7b:4b:89:5f:d6:6f: c5:d8:80:5f:f7:16:0d:92:25:9f:02:bf:33:ce:24: 46:1d:15:f1:4a:b7:72:bf:68:85:2e:22:95:c6:e3: 77:bd:85:9e:ec:9f:13:5f:08:13:1e:e2:76:31:ee: e5:21:f0:0a:fe:e3:0b:e8:5f:f5:a0:9f:05:a2:1f: a6:ef:e6:83:84:6b:3c:cb:2e:35:89:08:6f:8d:8e: 0f:c5:bf:83:fb:c1:08:fd:0e:f5:5d:d3:bd:06:dd: b3:b2:d0:ba:4b:30:68:33:3c:f3:bf:4c:9d:a1:46: c8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B7:5F:59:47:64:9B:BA:CA:B8:37:47:EF:CE:69:73:CC:DD:7B:38 X509v3 Authority Key Identifier: keyid:2D:FA:9A:BE:82:F0:79:69:00:92:18:6C:FE:59:14:62:76:0D:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:f2:11:13:aa:a7:cb:b3:33:9b:c9:4d:ce:10:46:54:07:3c: 7a:2d:68:b7:a0:36:c6:03:22:10:31:a9:db:2e:2c:a1:75:f3: b5:d0:69:5f:26:62:e7:ae:8a:35:dd:40:f6:db:fa:ba:67:5c: 6c:2a:5b:5d:70:49:a8:cd:e4:fb:88:6a:12:79:23:53:92:e5: 24:28:e9:29:e8:a1:6a:4f:a5:08:0b:41:38:5d:46:4b:dd:5f: 2a:8a:61:10:ad:93:fa:07:3b:f7:1c:84:6f:2e:f8:82:e9:5f: a6:b5:5b:84:5d:6d:f7:be:8c:9e:d6:0a:0f:94:f8:87:59:ce: e0:f1:6b:11:26:a0:72:00:a5:7d:54:fa:2e:5e:25:66:a2:10: e6:ea:fa:d2:5f:54:fe:83:ac:44:69:07:b9:1d:be:d1:60:8a: d9:96:b2:6c:df:e0:69:87:56:2f:d2:92:78:09:28:a0:6b:68: cb:57:04:70:d3:40:2e:10:1e:8f:ee:39:96:c0:db:da:11:1d: e1:86:80:d1:b4:f4:eb:4c:5d:f2:48:6e:c5:9e:53:13:22:95: fb:47:f5:7e:13:dc:05:71:d2:ec:82:76:0f:5b:50:ea:28:12: 7c:50:2b:0f:1e:70:d6:97:24:e2:81:3f:3c:3e:bc:e5:18:9c: b1:2d:71:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT8vHunVE4Bmkkb/QOz63357kgKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQTlBQkU4MkYwNzk2OTAwOTIxODZDRkU1OTE0NjI3 NjBEMEY4QTAeFw0yNjA5MTcxOTM3NDdaFw0yNjA5MTgyMjI5NDdaMDMxMTAvBgNV BAMTKEY4Qjc1RjU5NDc2NDlCQkFDQUI4Mzc0N0VGQ0U2OTczQ0NERDdCMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHxEJEIxUEL8ZI+rYU1PmnTDEj gyPgS5Nv6CP02az26H6uryjc4EZ+twbXaClgPWTxvpCNyc3xHCYJvqUt6YXOVyPG dYxOr3l1366kYD8Tz6Op5qmti6pKbuI0bfvbJvrSOoDt9hHYWJPwuibBMYV2RUZ1 nOjzzLMZNe2QsLj/Bv0dub5j7+CnwxMLY8oc73tLiV/Wb8XYgF/3Fg2SJZ8CvzPO JEYdFfFKt3K/aIUuIpXG43e9hZ7snxNfCBMe4nYx7uUh8Ar+4wvoX/WgnwWiH6bv 5oOEazzLLjWJCG+Njg/Fv4P7wQj9DvVd070G3bOy0LpLMGgzPPO/TJ2hRshpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+LdfWUdkm7rKuDdH785pc8zdezgwHwYDVR0j BBgwFoAULfqavoLweWkAkhhs/lkUYnYND4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGNjYzJhZjQtYTYyZC00NzA4LWI2ODgtMTg5MjU5NGJhOTg5LzAvMkRGQTlBQkU4 MkYwNzk2OTAwOTIxODZDRkU1OTE0NjI3NjBEMEY4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREZBOUFCRTgyRjA3OTY5MDA5MjE4NkNGRTU5MTQ2Mjc2MEQw RjhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvMkRGQTlBQkU4MkYwNzk2OTAwOTIxODZDRkU1OTE0 NjI3NjBEMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPyEROqp8uzM5vJTc4QRlQHPHotaLegNsYD IhAxqdsuLKF187XQaV8mYueuijXdQPbb+rpnXGwqW11wSajN5PuIahJ5I1OS5SQo 6SnooWpPpQgLQThdRkvdXyqKYRCtk/oHO/cchG8u+ILpX6a1W4Rdbfe+jJ7WCg+U +IdZzuDxaxEmoHIApX1U+i5eJWaiEObq+tJfVP6DrERpB7kdvtFgitmWsmzf4GmH Vi/SkngJKKBraMtXBHDTQC4QHo/uOZbA29oRHeGGgNG09OtMXfJIbsWeUxMilftH 9X4T3AVx0uyCdg9bUOooEnxQKw8ecNaXJOKBPzw+vOUYnLEtcfc= -----END CERTIFICATE-----Generated at Fri Sep 18 15:10:29 2026 by rpki-client