$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft File: 2C1233B548C07507C6EF58E2A03DD8309F820753.mft (raw, json) Hash identifier: I3burd0kGDqryPekbAKt4I4IHzLDzc0BlNM0Ru6xqso= Subject key identifier: 1C:11:D6:50:80:6D:B5:14:BE:1C:A3:28:FF:B7:40:D5:A0:DE:B4:CA Authority key identifier: 2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53 Certificate issuer: /CN=2C1233B548C07507C6EF58E2A03DD8309F820753 Certificate serial: 78AE104C0C6AF6D8737591B897A56C77646CA629 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft Manifest number: EC Signing time: Sun 25 Oct 2026 17:13:04 +0000 Manifest this update: Sun 25 Oct 2026 17:08:04 +0000 Manifest next update: Mon 26 Oct 2026 20:55:04 +0000 Files and hashes: 1: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: bvFzrT6armN3+NSh25eEAeVsS6vGdsFIsCLC0MUnl3s=) 2: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 0GUMhzS+5NIthW1wvl37lL5c5ztTRVnrHP+oCvOX4MA=) 3: 2C1233B548C07507C6EF58E2A03DD8309F820753.crl (hash: 9dylqwe9WQBZYZt+selI1rAY2k/hxiv7h5VBuHpTPMQ=) 4: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: /6iiyBTTzA+gJYo5W8sFnueJYX/K6dQcso0XDUc2u/0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ae:10:4c:0c:6a:f6:d8:73:75:91:b8:97:a5:6c:77:64:6c:a6:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C1233B548C07507C6EF58E2A03DD8309F820753 Validity Not Before: Oct 25 17:08:04 2026 GMT Not After : Oct 26 20:55:04 2026 GMT Subject: CN=1C11D650806DB514BE1CA328FFB740D5A0DEB4CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c0:09:6b:f9:b3:33:e4:32:29:a7:c3:f4:2d: f5:99:95:7d:01:2d:22:ac:37:ed:5f:79:77:b8:75: 80:20:7b:bf:fc:2c:59:e6:82:5f:4a:09:d9:d0:c6: cd:46:99:1e:5f:91:7e:32:a3:9a:ce:e5:e3:9c:e4: c4:cc:44:bf:51:87:ba:c8:54:db:c3:c2:f5:7a:5c: 24:e6:05:98:7a:da:49:8e:7c:c6:70:c8:49:87:d6: ea:dc:1a:1e:95:32:81:44:03:79:f6:93:5f:d8:c1: 57:ee:08:bf:c5:ad:b5:b4:22:a2:90:9b:0d:3a:3c: 6b:30:32:e6:5b:ad:38:37:80:58:88:9a:27:6b:fd: 02:ff:a7:17:86:40:db:27:29:26:b6:4c:a7:f9:34: 1b:c9:5e:6a:24:28:64:b6:7b:ea:02:e0:8a:ca:21: f3:72:f0:36:63:cb:4c:6d:04:40:60:2e:10:79:5e: 4f:21:c3:67:0c:f5:5a:93:3d:94:7d:7c:c2:17:e8: 75:81:62:c3:90:6c:68:56:af:8e:23:03:ca:69:8d: a6:50:41:0f:47:46:df:84:c2:2b:5e:07:fd:16:a8: d2:56:32:e1:08:6f:f2:fb:46:8a:83:33:e2:2f:8e: 13:bf:d0:89:d6:e6:85:b0:22:98:1b:0a:87:e1:50: 1d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:11:D6:50:80:6D:B5:14:BE:1C:A3:28:FF:B7:40:D5:A0:DE:B4:CA X509v3 Authority Key Identifier: keyid:2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:9d:67:b2:05:2b:ea:e2:dc:17:33:05:10:e7:2b:c0:36:08: 30:86:4e:72:25:f2:78:2d:25:b3:b6:2c:7d:af:81:ff:62:f5: b8:25:38:49:40:11:5f:d6:bc:3a:dd:ed:e9:ab:a5:de:3f:43: cd:45:66:6e:9d:64:07:c1:08:0c:c3:39:1e:c0:c0:34:cb:3c: ef:cf:56:34:3a:1e:e2:3a:39:2c:f0:c7:f2:ca:38:5d:1c:df: cc:60:31:6d:bd:f0:19:65:bb:b7:ce:0c:e4:2d:6c:7a:8e:99: fe:1d:11:d2:77:88:bf:97:5e:cb:8b:8b:38:2b:f8:b3:7d:87: ea:87:81:56:c6:a4:c5:90:45:a4:10:95:ef:5b:1f:60:ce:af: db:2b:07:74:9a:5f:25:5d:ed:56:9f:53:95:bc:ab:09:46:fc: 88:b4:b8:52:89:5a:54:7b:f2:2b:3c:d2:e2:36:85:e8:23:2b: d2:27:47:ba:a9:61:39:6d:be:c1:f9:0f:ae:a0:10:bb:c9:da: 88:c4:b4:f8:1a:4a:32:65:73:7b:0c:bc:36:ff:a3:93:72:5e: 08:6f:98:72:87:24:86:f4:af:0f:51:55:ce:76:70:b1:32:f0: d0:5a:01:82:bc:e8:ef:80:df:1c:5b:2b:e5:57:ae:21:c6:cd: c9:21:a6:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeK4QTAxq9thzdZG4l6Vsd2RspikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMxMjMzQjU0OEMwNzUwN0M2RUY1OEUyQTAzREQ4MzA5 RjgyMDc1MzAeFw0yNjEwMjUxNzA4MDRaFw0yNjEwMjYyMDU1MDRaMDMxMTAvBgNV BAMTKDFDMTFENjUwODA2REI1MTRCRTFDQTMyOEZGQjc0MEQ1QTBERUI0Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgwAlr+bMz5DIpp8P0LfWZlX0B LSKsN+1feXe4dYAge7/8LFnmgl9KCdnQxs1GmR5fkX4yo5rO5eOc5MTMRL9Rh7rI VNvDwvV6XCTmBZh62kmOfMZwyEmH1urcGh6VMoFEA3n2k1/YwVfuCL/FrbW0IqKQ mw06PGswMuZbrTg3gFiImidr/QL/pxeGQNsnKSa2TKf5NBvJXmokKGS2e+oC4IrK IfNy8DZjy0xtBEBgLhB5Xk8hw2cM9VqTPZR9fMIX6HWBYsOQbGhWr44jA8ppjaZQ QQ9HRt+EwiteB/0WqNJWMuEIb/L7RoqDM+IvjhO/0InW5oWwIpgbCofhUB1XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHBHWUIBttRS+HKMo/7dA1aDetMowHwYDVR0j BBgwFoAULBIztUjAdQfG71jioD3YMJ+CB1MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTFlOTQyNDMtODdmMC00MjZmLWE5Y2EtNGMxOWVkYjA2YjQyLzAvMkMxMjMzQjU0 OEMwNzUwN0M2RUY1OEUyQTAzREQ4MzA5RjgyMDc1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQzEyMzNCNTQ4QzA3NTA3QzZFRjU4RTJBMDNERDgzMDlGODIw NzUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5 Y2EtNGMxOWVkYjA2YjQyLzAvMkMxMjMzQjU0OEMwNzUwN0M2RUY1OEUyQTAzREQ4 MzA5RjgyMDc1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2dZ7IFK+ri3BczBRDnK8A2CDCGTnIl8ngt JbO2LH2vgf9i9bglOElAEV/WvDrd7emrpd4/Q81FZm6dZAfBCAzDOR7AwDTLPO/P VjQ6HuI6OSzwx/LKOF0c38xgMW298Bllu7fODOQtbHqOmf4dEdJ3iL+XXsuLizgr +LN9h+qHgVbGpMWQRaQQle9bH2DOr9srB3SaXyVd7VafU5W8qwlG/Ii0uFKJWlR7 8is80uI2hegjK9InR7qpYTltvsH5D66gELvJ2ojEtPgaSjJlc3sMvDb/o5NyXghv mHKHJIb0rw9RVc52cLEy8NBaAYK86O+A3xxbK+VXriHGzckhpsA= -----END CERTIFICATE-----Generated at Mon Oct 26 00:38:42 2026 by rpki-client