$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft File: 2DFC13D85715AA04782C2A3D86F83844385F896D.mft (raw, json) Hash identifier: wyvBsJlaY7K9XC/GGvLrjmxrGd1ec+TYjB7wQAbKF7s= Subject key identifier: E6:41:0D:B2:4C:C6:94:63:6D:EC:F0:A2:85:25:1B:91:98:01:EC:21 Authority key identifier: 2D:FC:13:D8:57:15:AA:04:78:2C:2A:3D:86:F8:38:44:38:5F:89:6D Certificate issuer: /CN=2DFC13D85715AA04782C2A3D86F83844385F896D Certificate serial: 4446FCB66A57EFE6DDB0AD3C652B13DB0FDA0477 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 01:04:59 +0000 Manifest this update: Thu 17 Sep 2026 00:59:59 +0000 Manifest next update: Fri 18 Sep 2026 02:57:59 +0000 Files and hashes: 1: 2DFC13D85715AA04782C2A3D86F83844385F896D.crl (hash: Xel6GIvVNt5yF2OqU32lAoy7K4DsRWx9gdjRYbYrKUo=) 2: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: 2yToa31P3viNdlJSz6LX8aSdNJBJoeEJaRZoiY3wK8c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.crl rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:46:fc:b6:6a:57:ef:e6:dd:b0:ad:3c:65:2b:13:db:0f:da:04:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFC13D85715AA04782C2A3D86F83844385F896D Validity Not Before: Sep 17 00:59:59 2026 GMT Not After : Sep 18 02:57:59 2026 GMT Subject: CN=E6410DB24CC694636DECF0A285251B919801EC21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e9:ae:5c:37:d4:e5:3f:63:e6:a8:74:f9:1b: 52:fb:7d:7c:35:db:47:8d:64:47:b1:09:e2:5f:b0: 7c:12:97:8b:84:cc:f2:55:af:82:78:15:b5:e4:2b: 84:81:33:74:87:78:80:dc:d7:40:ee:03:72:78:a3: f0:85:ac:e9:68:1e:32:73:63:02:79:65:db:25:63: 6a:8b:d7:ac:c8:de:94:04:47:be:be:e8:8b:d8:ac: eb:64:2c:09:9d:64:72:26:94:33:4d:3b:cb:2b:82: d2:d4:c1:dd:e7:84:8a:d9:67:2a:fb:50:b2:99:38: b6:a5:5e:61:4a:ca:2d:5d:e9:f3:47:c9:d2:a8:66: 17:8b:e7:32:2d:ad:bd:5c:51:86:bc:91:85:75:ca: 4f:ff:28:84:a9:1d:92:7b:bc:f2:cc:8f:d4:48:e8: cf:3e:d9:2a:13:d3:df:8a:9d:13:53:41:60:45:d1: c9:91:f1:8c:9e:a5:58:70:a3:08:ba:f1:cf:8b:12: b2:b3:68:d7:46:95:cc:08:e8:78:14:83:f0:db:fb: b4:bb:85:ac:76:2c:72:15:a3:0c:fb:08:5c:c2:04: 9b:2e:1a:02:9c:90:05:48:9f:c2:19:aa:0e:43:ff: 6c:75:ea:a8:f9:78:13:d5:48:d1:60:44:98:97:b6: 58:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:41:0D:B2:4C:C6:94:63:6D:EC:F0:A2:85:25:1B:91:98:01:EC:21 X509v3 Authority Key Identifier: keyid:2D:FC:13:D8:57:15:AA:04:78:2C:2A:3D:86:F8:38:44:38:5F:89:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:55:7f:50:aa:ae:37:d5:41:43:5b:cf:22:da:87:96:4a:9f: 0b:97:fe:52:b8:16:a8:14:fa:ab:dd:9c:59:a7:1f:12:f7:6f: ce:bb:36:cf:bf:9f:47:54:49:a7:d7:f3:4d:6f:17:7d:5a:08: 12:d3:4e:7d:79:bb:4a:5b:ba:08:68:e0:04:fd:83:25:ec:cf: 98:94:87:fa:74:f1:06:2d:26:d4:03:77:9b:25:e2:b9:b4:fd: 6d:b0:86:69:cf:2f:5a:f2:26:01:47:50:79:eb:67:cc:98:94: 91:57:4e:c6:bb:24:9b:8c:53:bc:e9:85:74:fb:4c:2a:c8:8a: 13:28:0f:6a:7c:a3:e3:3f:af:dc:11:79:dc:fa:2b:ef:be:0c: 6c:aa:7c:1d:d5:98:fb:38:85:4d:fa:15:57:43:1c:73:24:4c: 7c:27:3e:7d:98:5a:be:ff:f8:00:73:94:7c:5a:f0:d3:8b:6d: e4:15:46:35:2e:a5:7c:7e:d1:47:5e:d6:e4:aa:82:87:e9:64: bb:79:ac:c8:9e:59:fb:97:9b:26:79:dc:6b:be:b0:9f:dd:b1: 68:aa:d0:b6:9d:2f:8a:a1:f8:1e:29:48:8d:40:30:79:74:dd: 8b:a1:d5:03:d4:0d:82:3c:b8:3f:db:cc:de:fd:89:db:e2:d1: 53:3d:bf:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUREb8tmpX7+bdsK08ZSsT2w/aBHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQzEzRDg1NzE1QUEwNDc4MkMyQTNEODZGODM4NDQz ODVGODk2RDAeFw0yNjA5MTcwMDU5NTlaFw0yNjA5MTgwMjU3NTlaMDMxMTAvBgNV BAMTKEU2NDEwREIyNENDNjk0NjM2REVDRjBBMjg1MjUxQjkxOTgwMUVDMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt6a5cN9TlP2PmqHT5G1L7fXw1 20eNZEexCeJfsHwSl4uEzPJVr4J4FbXkK4SBM3SHeIDc10DuA3J4o/CFrOloHjJz YwJ5ZdslY2qL16zI3pQER76+6IvYrOtkLAmdZHImlDNNO8srgtLUwd3nhIrZZyr7 ULKZOLalXmFKyi1d6fNHydKoZheL5zItrb1cUYa8kYV1yk//KISpHZJ7vPLMj9RI 6M8+2SoT09+KnRNTQWBF0cmR8YyepVhwowi68c+LErKzaNdGlcwI6HgUg/Db+7S7 hax2LHIVowz7CFzCBJsuGgKckAVIn8IZqg5D/2x16qj5eBPVSNFgRJiXtljhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5kENskzGlGNt7PCihSUbkZgB7CEwHwYDVR0j BBgwFoAULfwT2FcVqgR4LCo9hvg4RDhfiW0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTliMDdhOWUtNjJkZi00ODA4LTlkMmEtYTZlNjg4NGJjYmJiLzAvMkRGQzEzRDg1 NzE1QUEwNDc4MkMyQTNEODZGODM4NDQzODVGODk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yREZDMTNEODU3MTVBQTA0NzgyQzJBM0Q4NkY4Mzg0NDM4NUY4 OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvMkRGQzEzRDg1NzE1QUEwNDc4MkMyQTNEODZGODM4 NDQzODVGODk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBVf1CqrjfVQUNbzyLah5ZKnwuX/lK4FqgU +qvdnFmnHxL3b867Ns+/n0dUSafX801vF31aCBLTTn15u0pbugho4AT9gyXsz5iU h/p08QYtJtQDd5sl4rm0/W2whmnPL1ryJgFHUHnrZ8yYlJFXTsa7JJuMU7zphXT7 TCrIihMoD2p8o+M/r9wRedz6K+++DGyqfB3VmPs4hU36FVdDHHMkTHwnPn2YWr7/ +ABzlHxa8NOLbeQVRjUupXx+0Ude1uSqgofpZLt5rMieWfuXmyZ53Gu+sJ/dsWiq 0LadL4qh+B4pSI1AMHl03Yuh1QPUDYI8uD/bzN79idvi0VM9vwY= -----END CERTIFICATE-----Generated at Thu Sep 17 14:21:33 2026 by rpki-client