$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft File: 2BF94227A09D96F51AE8819B28CA3696003CBC60.mft (raw, json) Hash identifier: bT+LMt9MQ5+8W8cv1XknGc058d/Lpyqn6R6z9kThQAs= Subject key identifier: 77:0A:F8:F7:52:E8:EB:7D:1E:F6:4F:32:10:72:C7:FA:7A:E2:97:1C Authority key identifier: 2B:F9:42:27:A0:9D:96:F5:1A:E8:81:9B:28:CA:36:96:00:3C:BC:60 Certificate issuer: /CN=2BF94227A09D96F51AE8819B28CA3696003CBC60 Certificate serial: 570BF0E6427134FDC63520AF7D2CFBE4E8A7AFB4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 04:49:24 +0000 Manifest this update: Thu 17 Sep 2026 04:44:24 +0000 Manifest next update: Fri 18 Sep 2026 06:14:24 +0000 Files and hashes: 1: 2BF94227A09D96F51AE8819B28CA3696003CBC60.crl (hash: oKmzOKGYQT/6yYAoU4WBUDa8gz40VozamH0/MKyZJ8Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.crl rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:0b:f0:e6:42:71:34:fd:c6:35:20:af:7d:2c:fb:e4:e8:a7:af:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BF94227A09D96F51AE8819B28CA3696003CBC60 Validity Not Before: Sep 17 04:44:24 2026 GMT Not After : Sep 18 06:14:24 2026 GMT Subject: CN=770AF8F752E8EB7D1EF64F321072C7FA7AE2971C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:93:03:3e:aa:66:e9:72:44:94:e9:6a:b9:4b: 87:f8:79:cc:45:70:a4:25:1e:49:72:5b:cd:de:68: 94:eb:6f:ce:f7:93:c6:7e:d9:ec:32:7c:56:06:b6: cb:11:92:cb:ef:80:88:37:70:27:58:3d:b8:5e:90: 38:5e:1e:a8:87:56:71:c2:11:89:66:31:28:f3:51: fd:c3:2a:22:c6:b7:09:34:77:d3:c9:f9:56:80:01: 29:d0:41:05:66:12:a2:60:dc:dd:23:ce:6d:67:0a: 91:83:1b:01:a6:99:7f:60:fd:de:7a:71:68:15:7d: 6d:f0:99:e3:28:1b:a7:c3:9c:f3:03:53:37:6c:28: ab:ac:d1:1a:07:6e:37:6b:71:23:1d:86:2c:87:21: 5d:e1:03:07:de:d7:90:02:de:2a:fb:f1:19:b7:c0: 17:36:03:6d:65:60:7e:8c:d6:2d:34:c7:7e:20:c2: 6c:d3:62:f8:a2:a9:78:de:92:0e:7c:9f:ec:21:b6: 1a:a4:51:df:8d:d2:ab:d2:a1:55:74:13:4f:8e:a9: 18:49:e4:08:a8:72:7d:0a:a2:fc:73:7c:83:06:36: c4:1d:ba:3e:f2:ce:8a:85:35:4e:30:10:1d:7c:c5: 6f:2c:2f:36:5c:af:2d:8a:01:ea:16:d5:ff:c6:86: 8d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0A:F8:F7:52:E8:EB:7D:1E:F6:4F:32:10:72:C7:FA:7A:E2:97:1C X509v3 Authority Key Identifier: keyid:2B:F9:42:27:A0:9D:96:F5:1A:E8:81:9B:28:CA:36:96:00:3C:BC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BF94227A09D96F51AE8819B28CA3696003CBC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/2BF94227A09D96F51AE8819B28CA3696003CBC60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:83:85:85:14:13:90:47:95:8e:05:56:55:73:a2:92:0a:6d: 6d:09:52:ff:3b:87:f2:10:6f:77:72:5f:15:c5:dd:5e:d1:e0: 97:2f:49:c0:65:3e:89:96:38:e7:70:d8:b2:ef:cf:71:bc:45: 33:06:df:6c:56:85:a6:75:58:4c:76:9b:5e:09:fc:21:2a:65: f4:fa:3d:1e:59:41:1e:5e:04:b8:37:55:89:64:2f:9b:e6:8b: 46:16:a7:c3:bf:f0:67:99:0e:9f:c5:c3:16:36:b6:59:6f:84: 36:8d:60:12:cd:c7:50:aa:5f:a3:bd:bf:8f:46:b0:8e:99:78: 1d:a2:3e:63:2a:0e:3d:b7:f8:87:31:aa:78:c6:ca:05:49:fb: 93:94:6d:7d:fa:07:d0:80:af:31:f9:97:28:76:03:e5:a7:45: 3f:01:18:5d:bc:35:ca:7d:50:f9:84:1b:1a:34:27:92:16:5b: 6b:b7:76:5a:29:51:32:b2:10:08:8d:1e:6a:f9:02:c5:90:84: db:06:d2:7d:5e:5f:d5:a1:7c:07:12:d4:94:87:f9:61:8f:96: 7a:99:05:40:e2:11:aa:9f:0d:b4:89:44:78:46:66:2f:8a:ba: 0c:1e:5e:03:ba:e8:1a:89:08:87:34:79:c3:61:52:b9:0f:0b: 68:3d:6f:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVwvw5kJxNP3GNSCvfSz75Oinr7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJGOTQyMjdBMDlEOTZGNTFBRTg4MTlCMjhDQTM2OTYw MDNDQkM2MDAeFw0yNjA5MTcwNDQ0MjRaFw0yNjA5MTgwNjE0MjRaMDMxMTAvBgNV BAMTKDc3MEFGOEY3NTJFOEVCN0QxRUY2NEYzMjEwNzJDN0ZBN0FFMjk3MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnkwM+qmbpckSU6Wq5S4f4ecxF cKQlHklyW83eaJTrb873k8Z+2ewyfFYGtssRksvvgIg3cCdYPbhekDheHqiHVnHC EYlmMSjzUf3DKiLGtwk0d9PJ+VaAASnQQQVmEqJg3N0jzm1nCpGDGwGmmX9g/d56 cWgVfW3wmeMoG6fDnPMDUzdsKKus0RoHbjdrcSMdhiyHIV3hAwfe15AC3ir78Rm3 wBc2A21lYH6M1i00x34gwmzTYviiqXjekg58n+whthqkUd+N0qvSoVV0E0+OqRhJ 5Aiocn0KovxzfIMGNsQduj7yzoqFNU4wEB18xW8sLzZcry2KAeoW1f/Gho2PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdwr491Lo630e9k8yEHLH+nrilxwwHwYDVR0j BBgwFoAUK/lCJ6CdlvUa6IGbKMo2lgA8vGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmFkZmNiNDQtYWU3YS00NDIzLWFlN2QtMDg2NDhiZjFkZWIxLzAvMkJGOTQyMjdB MDlEOTZGNTFBRTg4MTlCMjhDQTM2OTYwMDNDQkM2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQkY5NDIyN0EwOUQ5NkY1MUFFODgxOUIyOENBMzY5NjAwM0NC QzYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmFkZmNiNDQtYWU3YS00NDIzLWFl N2QtMDg2NDhiZjFkZWIxLzAvMkJGOTQyMjdBMDlEOTZGNTFBRTg4MTlCMjhDQTM2 OTYwMDNDQkM2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaDhYUUE5BHlY4FVlVzopIKbW0JUv87h/IQ b3dyXxXF3V7R4JcvScBlPomWOOdw2LLvz3G8RTMG32xWhaZ1WEx2m14J/CEqZfT6 PR5ZQR5eBLg3VYlkL5vmi0YWp8O/8GeZDp/FwxY2tllvhDaNYBLNx1CqX6O9v49G sI6ZeB2iPmMqDj23+IcxqnjGygVJ+5OUbX36B9CArzH5lyh2A+WnRT8BGF28Ncp9 UPmEGxo0J5IWW2u3dlopUTKyEAiNHmr5AsWQhNsG0n1eX9WhfAcS1JSH+WGPlnqZ BUDiEaqfDbSJRHhGZi+KugweXgO66BqJCIc0ecNhUrkPC2g9b0A= -----END CERTIFICATE-----Generated at Thu Sep 17 14:43:45 2026 by rpki-client