$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft File: 2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft (raw, json) Hash identifier: RRan4fHmspvhGh+RlFi1K2iGpSb5l1Eh4fiOVtvC6Hg= Subject key identifier: BA:FA:76:CC:58:2C:3C:0E:36:C8:4E:BD:5F:3C:FB:1E:22:AB:35:E5 Authority key identifier: 20:30:21:9A:C2:D8:BD:E5:40:B3:A0:6B:3E:22:0C:C6:2B:6B:37:4E Certificate issuer: /CN=2030219AC2D8BDE540B3A06B3E220CC62B6B374E Certificate serial: 54DF97414E7FBCEE9C9DEFEFB3A54C7022AA93FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft Manifest number: BA Signing time: Thu 17 Sep 2026 12:18:53 +0000 Manifest this update: Thu 17 Sep 2026 12:13:53 +0000 Manifest next update: Fri 18 Sep 2026 16:04:53 +0000 Files and hashes: 1: 2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl (hash: Z6/4aYhlJ7J7Guh5BQ2Qw8Z6euUgH481n3AZi/jBg8Y=) 2: 323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa (hash: D52uwwzpgaxCjAFI9GaZMm7APMN7ImtqrU9yyVklPWk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:df:97:41:4e:7f:bc:ee:9c:9d:ef:ef:b3:a5:4c:70:22:aa:93:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2030219AC2D8BDE540B3A06B3E220CC62B6B374E Validity Not Before: Sep 17 12:13:53 2026 GMT Not After : Sep 18 16:04:53 2026 GMT Subject: CN=BAFA76CC582C3C0E36C84EBD5F3CFB1E22AB35E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:bb:cb:7c:87:1b:a1:2c:9a:8a:ae:c1:a1:a9: 76:99:db:f2:5f:f1:ef:1d:ce:90:42:db:84:be:e8: cc:48:37:27:f1:91:8d:36:ef:d3:69:df:8f:dc:af: 06:15:f7:80:b9:db:53:a3:ee:8d:57:4c:76:e2:22: 5c:e8:10:8b:b7:c6:1b:3c:90:89:29:e8:2e:97:83: 78:35:ad:eb:3d:e2:1c:6d:ed:f8:0a:81:3c:5d:84: 05:d8:b6:da:dd:90:6c:26:0d:e6:25:04:5f:fe:76: 77:e9:d6:99:43:d2:14:b7:aa:ca:41:df:2b:99:8f: 04:3c:6a:d8:08:e2:fe:c7:49:16:4a:55:fc:5e:21: 60:c1:da:a8:61:4d:a4:f2:ac:b5:11:d2:a1:13:38: 99:7a:21:0f:4e:ec:cb:72:01:f8:25:56:79:1c:ed: db:88:ec:69:30:15:08:db:d0:16:12:9a:1e:9f:97: 1e:10:1b:e7:b4:2a:35:42:a3:a8:58:9f:e7:fc:39: 3d:68:de:f7:67:9b:cb:51:6d:96:3f:41:52:24:56: bf:67:00:ab:87:ba:00:b7:87:c7:f8:5c:21:f4:2d: e7:ce:80:3d:b8:f9:07:c6:9c:ec:9a:fb:01:07:86: 8a:16:f9:a9:29:30:e2:5a:d7:8f:8d:d4:9e:45:97: 48:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FA:76:CC:58:2C:3C:0E:36:C8:4E:BD:5F:3C:FB:1E:22:AB:35:E5 X509v3 Authority Key Identifier: keyid:20:30:21:9A:C2:D8:BD:E5:40:B3:A0:6B:3E:22:0C:C6:2B:6B:37:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:52:aa:f3:f7:4e:bc:d1:e4:b2:27:ab:47:49:82:28:a9:0f: c9:f1:b5:09:7e:5f:50:8a:22:5e:f2:98:d6:24:39:7b:97:52: 13:d3:78:dd:5b:06:9d:03:fa:62:f3:27:1d:bc:48:76:5a:a3: 96:6a:2a:ff:fa:39:95:a7:1f:d9:07:76:20:2b:da:c5:1c:7e: 21:8b:e0:ab:b5:38:9f:6f:42:5a:67:6e:06:c2:eb:2b:a1:86: 45:33:c0:6c:fd:78:12:38:46:21:75:ba:a7:e5:ac:a3:f0:31: 4c:51:e0:ad:79:a0:cd:4e:1a:f4:44:91:23:e4:e2:ac:38:78: a3:5c:e5:62:34:a1:36:ac:be:89:4a:41:d9:19:c8:96:36:1a: 2e:65:d5:f1:52:c3:36:72:65:db:14:b0:81:66:75:e3:91:74: d7:c5:a2:6c:96:fd:7c:17:98:b2:a4:ba:cc:67:1d:3c:31:86: a0:5c:56:92:a5:23:e6:34:63:fe:be:e7:4f:67:e2:3a:b3:f8: 34:87:30:a7:41:d8:28:54:95:55:aa:c5:85:2d:c3:ac:1e:f2: 83:6a:17:bb:c1:00:77:8b:79:13:1d:bb:d3:03:4a:09:3a:8e: 1b:76:c4:89:7f:28:17:6f:3a:ad:20:b8:b3:fb:79:47:0b:a2: 7f:ad:cb:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVN+XQU5/vO6cne/vs6VMcCKqk/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAzMDIxOUFDMkQ4QkRFNTQwQjNBMDZCM0UyMjBDQzYy QjZCMzc0RTAeFw0yNjA5MTcxMjEzNTNaFw0yNjA5MTgxNjA0NTNaMDMxMTAvBgNV BAMTKEJBRkE3NkNDNTgyQzNDMEUzNkM4NEVCRDVGM0NGQjFFMjJBQjM1RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpu8t8hxuhLJqKrsGhqXaZ2/Jf 8e8dzpBC24S+6MxINyfxkY0279Np34/crwYV94C521Oj7o1XTHbiIlzoEIu3xhs8 kIkp6C6Xg3g1res94hxt7fgKgTxdhAXYttrdkGwmDeYlBF/+dnfp1plD0hS3qspB 3yuZjwQ8atgI4v7HSRZKVfxeIWDB2qhhTaTyrLUR0qETOJl6IQ9O7MtyAfglVnkc 7duI7GkwFQjb0BYSmh6flx4QG+e0KjVCo6hYn+f8OT1o3vdnm8tRbZY/QVIkVr9n AKuHugC3h8f4XCH0LefOgD24+QfGnOya+wEHhooW+akpMOJa14+N1J5Fl0hNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuvp2zFgsPA42yE69Xzz7HiKrNeUwHwYDVR0j BBgwFoAUIDAhmsLYveVAs6BrPiIMxitrN04wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyMzRjNGEtYThmZi00MDM2LTg0MjAtZGE4MTYyMTExODA2LzEvMjAzMDIxOUFD MkQ4QkRFNTQwQjNBMDZCM0UyMjBDQzYyQjZCMzc0RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDMwMjE5QUMyRDhCREU1NDBCM0EwNkIzRTIyMENDNjJCNkIz NzRFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzEvMjAzMDIxOUFDMkQ4QkRFNTQwQjNBMDZCM0UyMjBD QzYyQjZCMzc0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBSqvP3TrzR5LInq0dJgiipD8nxtQl+X1CK Il7ymNYkOXuXUhPTeN1bBp0D+mLzJx28SHZao5ZqKv/6OZWnH9kHdiAr2sUcfiGL 4Ku1OJ9vQlpnbgbC6yuhhkUzwGz9eBI4RiF1uqflrKPwMUxR4K15oM1OGvREkSPk 4qw4eKNc5WI0oTasvolKQdkZyJY2Gi5l1fFSwzZyZdsUsIFmdeORdNfFomyW/XwX mLKkusxnHTwxhqBcVpKlI+Y0Y/6+509n4jqz+DSHMKdB2ChUlVWqxYUtw6we8oNq F7vBAHeLeRMdu9MDSgk6jht2xIl/KBdvOq0guLP7eUcLon+ty9Y= -----END CERTIFICATE-----Generated at Thu Sep 17 15:40:12 2026 by rpki-client