$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft File: 2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft (raw, json) Hash identifier: TEFHgkc5OYHzLacfzSY2zxUvKhcxGL59SGkeEDxqgCg= Subject key identifier: 7D:A2:C5:9A:CE:47:BF:A9:DE:20:F6:48:E8:D6:2C:B8:47:D8:02:2F Authority key identifier: 2D:FC:5C:3D:38:82:FE:6E:7F:9A:9E:FE:2F:6B:96:55:5F:F5:2D:D7 Certificate issuer: /CN=2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7 Certificate serial: 5DAFDFEFD98144713065A4E12F10D95D5CB29D57 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 18:57:37 +0000 Manifest this update: Wed 16 Sep 2026 18:52:37 +0000 Manifest next update: Thu 17 Sep 2026 20:39:37 +0000 Files and hashes: 1: 2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl (hash: zscH71GyRqBN7LI8zO6RFMq9koo7zt+ROKgOzdODBbs=) 2: 3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (hash: KyTDN/npdCxMnf6sB8d1UiCU7Ow9yE5T+dZIKGap4fI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:af:df:ef:d9:81:44:71:30:65:a4:e1:2f:10:d9:5d:5c:b2:9d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7 Validity Not Before: Sep 16 18:52:37 2026 GMT Not After : Sep 17 20:39:37 2026 GMT Subject: CN=7DA2C59ACE47BFA9DE20F648E8D62CB847D8022F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:10:04:ad:05:87:85:ad:3f:c7:b5:4b:83:fc: af:11:5a:4d:e3:4e:2c:ce:d6:2c:29:d3:48:3d:42: d2:65:19:9f:82:4d:e9:91:e7:64:49:bc:a8:ae:8d: 51:86:f1:38:4f:c7:38:5b:88:f1:96:4a:5e:ed:fc: 91:38:1c:e5:1f:46:d3:bd:4f:7b:5c:6b:ae:ee:4b: e8:6c:58:f5:ca:26:70:97:00:ff:2e:d9:07:1a:52: c6:c6:7f:6c:a9:49:a8:3e:a3:6c:c9:2a:a2:96:2b: 22:ab:24:56:68:44:8f:eb:f5:74:a4:ac:02:95:8d: 4f:29:89:84:7b:d2:61:4c:7f:46:d9:2c:b8:95:dd: 79:3b:e1:8b:3a:45:d6:01:32:8e:ca:b3:40:15:1a: 20:89:8e:02:8b:f9:d6:08:0c:0d:72:3e:e2:d5:30: 85:ad:15:4e:ea:93:a5:04:8d:74:3b:b4:37:2e:7e: d9:9d:eb:fb:04:88:e3:50:e9:f4:91:f8:d8:4a:cf: 16:0e:14:19:32:be:1f:6b:71:e7:47:40:3e:ec:9d: 2c:02:35:41:60:3c:c7:74:fb:f7:ed:6a:d7:d1:0d: 85:64:34:8f:8f:05:64:8a:48:d8:65:74:df:21:bb: 57:08:73:f9:1b:32:b5:dc:b6:2b:f9:f1:27:70:95: f2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A2:C5:9A:CE:47:BF:A9:DE:20:F6:48:E8:D6:2C:B8:47:D8:02:2F X509v3 Authority Key Identifier: keyid:2D:FC:5C:3D:38:82:FE:6E:7F:9A:9E:FE:2F:6B:96:55:5F:F5:2D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/2DFC5C3D3882FE6E7F9A9EFE2F6B96555FF52DD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:4a:e6:9e:0d:c0:1c:a1:74:6f:82:a9:68:a0:04:37:72:b0: 8d:95:4d:8d:28:20:11:49:17:23:dd:ae:b1:ad:66:9a:76:a9: 32:5a:c1:4e:af:7d:b1:76:77:a9:06:63:a2:5e:c2:20:52:ad: d7:ab:5d:a3:ff:f9:99:34:bc:bb:d0:da:03:c3:b7:81:bd:f5: 26:f1:70:72:f0:0c:c4:6f:ee:b2:18:5c:d2:44:fe:1c:ef:3e: 31:47:03:ae:7f:b2:f0:8d:5e:c0:07:44:d8:01:07:1c:91:99: 9d:53:8b:fa:c5:7f:30:2a:64:c9:bd:a9:d7:ab:83:01:da:0c: 66:ce:47:4e:48:d2:48:f0:85:33:61:46:9e:9f:12:3a:ec:42: 68:3b:f8:93:b9:66:4d:0a:55:40:d2:d4:08:0d:58:99:95:09: 77:67:ea:5d:8f:64:59:e9:37:e7:62:16:98:7f:cf:54:7b:67: 87:f1:7a:7b:4a:84:e0:53:da:6e:91:ed:f2:f1:87:ea:7e:1d: 67:e6:d0:fe:45:f9:5e:cb:aa:27:f3:26:40:65:49:b1:88:f1: 7b:e1:4d:0f:f0:0a:7b:66:ba:bb:e5:b4:99:25:3c:74:2f:db: 67:56:57:69:15:28:eb:b0:d5:c9:0f:45:48:99:5a:52:6f:e6: da:4e:b7:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXa/f79mBRHEwZaThLxDZXVyynVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQzVDM0QzODgyRkU2RTdGOUE5RUZFMkY2Qjk2NTU1 RkY1MkRENzAeFw0yNjA5MTYxODUyMzdaFw0yNjA5MTcyMDM5MzdaMDMxMTAvBgNV BAMTKDdEQTJDNTlBQ0U0N0JGQTlERTIwRjY0OEU4RDYyQ0I4NDdEODAyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCEAStBYeFrT/HtUuD/K8RWk3j TizO1iwp00g9QtJlGZ+CTemR52RJvKiujVGG8ThPxzhbiPGWSl7t/JE4HOUfRtO9 T3tca67uS+hsWPXKJnCXAP8u2QcaUsbGf2ypSag+o2zJKqKWKyKrJFZoRI/r9XSk rAKVjU8piYR70mFMf0bZLLiV3Xk74Ys6RdYBMo7Ks0AVGiCJjgKL+dYIDA1yPuLV MIWtFU7qk6UEjXQ7tDcuftmd6/sEiONQ6fSR+NhKzxYOFBkyvh9rcedHQD7snSwC NUFgPMd0+/ftatfRDYVkNI+PBWSKSNhldN8hu1cIc/kbMrXctiv58SdwlfJpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfaLFms5Hv6neIPZI6NYsuEfYAi8wHwYDVR0j BBgwFoAULfxcPTiC/m5/mp7+L2uWVV/1LdcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVmMDAxM2ItNTlhNi00NzMzLTg5ZjgtMjhmYTNkODg1NzlmLzAvMkRGQzVDM0Qz ODgyRkU2RTdGOUE5RUZFMkY2Qjk2NTU1RkY1MkRENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREZDNUMzRDM4ODJGRTZFN0Y5QTlFRkUyRjZCOTY1NTVGRjUy REQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmVmMDAxM2ItNTlhNi00NzMzLTg5 ZjgtMjhmYTNkODg1NzlmLzAvMkRGQzVDM0QzODgyRkU2RTdGOUE5RUZFMkY2Qjk2 NTU1RkY1MkRENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZK5p4NwByhdG+CqWigBDdysI2VTY0oIBFJ FyPdrrGtZpp2qTJawU6vfbF2d6kGY6JewiBSrderXaP/+Zk0vLvQ2gPDt4G99Sbx cHLwDMRv7rIYXNJE/hzvPjFHA65/svCNXsAHRNgBBxyRmZ1Ti/rFfzAqZMm9qder gwHaDGbOR05I0kjwhTNhRp6fEjrsQmg7+JO5Zk0KVUDS1AgNWJmVCXdn6l2PZFnp N+diFph/z1R7Z4fxentKhOBT2m6R7fLxh+p+HWfm0P5F+V7LqifzJkBlSbGI8Xvh TQ/wCntmurvltJklPHQv22dWV2kVKOuw1ckPRUiZWlJv5tpOt4Q= -----END CERTIFICATE-----Generated at Thu Sep 17 10:45:25 2026 by rpki-client