$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft File: 2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft (raw, json) Hash identifier: T69h7tw/r1vjkZFu3J8VxckZ7qDHOTwK5dz+pMJGM8g= Subject key identifier: E1:5E:03:C9:D0:1C:BE:55:1A:5A:A6:4C:9E:53:73:E9:81:CD:19:1C Authority key identifier: 2D:81:47:AB:32:AE:34:FE:05:99:30:1C:39:9B:A4:31:CB:D9:6A:E2 Certificate issuer: /CN=2D8147AB32AE34FE0599301C399BA431CBD96AE2 Certificate serial: 14AA3BF53169EC2B88E6A16ACFB603EA2CEB9561 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 16:03:57 +0000 Manifest this update: Wed 16 Sep 2026 15:58:57 +0000 Manifest next update: Thu 17 Sep 2026 16:46:57 +0000 Files and hashes: 1: 2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl (hash: +SJYTU5iNSGoJJKlS9OzNhSMN9CIH8yvxQxHoPSDDhY=) 2: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: RnobRsvxkM1MTdlV59E6oBUzJE/tUaI5t4eU9X2Ihxg=) 3: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: YTcLxO+mbdwk1sv6hkGjyOE34UWEs5shSWT+DleZD5E=) 4: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: OX/hSObmRCzkD1qVckzfWkKuBPC5Pdod9YDgySPz4C8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 16:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:aa:3b:f5:31:69:ec:2b:88:e6:a1:6a:cf:b6:03:ea:2c:eb:95:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D8147AB32AE34FE0599301C399BA431CBD96AE2 Validity Not Before: Sep 16 15:58:57 2026 GMT Not After : Sep 17 16:46:57 2026 GMT Subject: CN=E15E03C9D01CBE551A5AA64C9E5373E981CD191C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b6:af:d6:f6:a9:74:0f:aa:a7:54:5f:0e:07: 90:ce:3f:fa:2a:35:11:e9:ee:37:6f:e3:94:bd:a3: bc:ca:ec:f3:d3:95:0b:df:34:8d:2c:1a:7e:54:c0: a9:35:ec:ae:44:1e:92:08:57:e2:a2:91:a2:ff:2e: 8a:90:85:13:db:bc:9c:5b:02:f5:eb:00:90:35:c8: 64:57:1f:32:cb:5d:42:89:ac:dd:21:6e:08:76:76: b7:28:14:e6:4a:64:96:39:f4:97:41:32:cd:98:ed: 4b:34:04:75:85:df:cc:90:5d:06:11:5f:ce:43:37: b1:97:f0:81:11:d4:71:71:d9:ea:99:bf:e3:c8:55: 92:1d:7b:7e:82:37:7d:a3:1a:9a:6d:00:e3:21:57: a1:5c:56:86:5a:90:38:fb:7d:7a:fe:e1:6a:d3:94: 08:fd:0c:e2:be:fa:f6:88:7c:c1:59:31:a1:2d:1d: 3a:d2:a1:d9:13:10:8d:98:2b:39:0a:14:c3:66:65: eb:cb:3c:f6:d7:cf:a5:4a:61:1c:98:1a:5b:ff:b2: 03:f5:49:0d:54:77:af:25:42:94:ce:6b:51:05:bb: 35:a5:7c:58:2e:1d:ad:b5:6d:3c:58:bf:92:af:f8: 71:3f:8a:75:e9:79:3c:2e:16:ba:8c:3f:2a:7e:d9: 50:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:5E:03:C9:D0:1C:BE:55:1A:5A:A6:4C:9E:53:73:E9:81:CD:19:1C X509v3 Authority Key Identifier: keyid:2D:81:47:AB:32:AE:34:FE:05:99:30:1C:39:9B:A4:31:CB:D9:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:bc:9f:9c:8a:e4:90:4b:47:be:ba:6d:58:de:54:dd:81:04: 3e:ed:60:57:ca:5e:63:95:b3:ff:83:dc:f4:bf:2b:01:d1:57: 66:e4:99:b2:8c:75:f6:94:14:35:74:71:e0:ab:6f:05:ee:be: d2:64:dd:3d:d0:22:dc:bb:ec:e6:f1:ed:17:cc:d3:e2:68:0c: 26:6f:fa:5d:09:88:19:77:a5:e3:11:01:6f:84:8b:76:8f:68: 2e:11:c8:06:43:7b:d3:3f:bf:78:ed:e0:4d:72:b3:e6:59:b3: d2:3b:09:86:6f:08:ff:f5:7d:e7:e0:87:34:e3:5d:eb:17:25: ce:d2:db:3f:d7:de:7c:01:80:31:7f:bc:31:01:27:8a:50:3c: e8:fd:66:b4:ba:31:56:10:30:c3:2e:00:70:37:3c:a6:eb:28: 7e:e3:2a:99:94:5b:2b:2b:5a:75:7e:2f:64:7b:52:94:2a:93: e0:19:99:17:d7:cf:5b:e1:45:71:84:f3:e9:ee:df:08:8f:34: 71:63:87:4c:f1:46:92:1d:38:fd:4c:4e:dd:7f:e8:68:11:34: 1f:5e:75:65:83:08:16:4e:97:09:03:b2:09:88:6a:b4:1f:4c: b5:f4:88:8a:6c:93:78:c6:27:3c:2c:e5:0d:58:19:98:25:ba: d5:2a:c7:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFKo79TFp7CuI5qFqz7YD6izrlWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ4MTQ3QUIzMkFFMzRGRTA1OTkzMDFDMzk5QkE0MzFD QkQ5NkFFMjAeFw0yNjA5MTYxNTU4NTdaFw0yNjA5MTcxNjQ2NTdaMDMxMTAvBgNV BAMTKEUxNUUwM0M5RDAxQ0JFNTUxQTVBQTY0QzlFNTM3M0U5ODFDRDE5MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxtq/W9ql0D6qnVF8OB5DOP/oq NRHp7jdv45S9o7zK7PPTlQvfNI0sGn5UwKk17K5EHpIIV+KikaL/LoqQhRPbvJxb AvXrAJA1yGRXHzLLXUKJrN0hbgh2drcoFOZKZJY59JdBMs2Y7Us0BHWF38yQXQYR X85DN7GX8IER1HFx2eqZv+PIVZIde36CN32jGpptAOMhV6FcVoZakDj7fXr+4WrT lAj9DOK++vaIfMFZMaEtHTrSodkTEI2YKzkKFMNmZevLPPbXz6VKYRyYGlv/sgP1 SQ1Ud68lQpTOa1EFuzWlfFguHa21bTxYv5Kv+HE/inXpeTwuFrqMPyp+2VD1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4V4DydAcvlUaWqZMnlNz6YHNGRwwHwYDVR0j BBgwFoAULYFHqzKuNP4FmTAcOZukMcvZauIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFkYTIzZTktODRiZS00YTU0LWJjYTAtZTlhMGNhZmQxNmZlLzAvMkQ4MTQ3QUIz MkFFMzRGRTA1OTkzMDFDMzk5QkE0MzFDQkQ5NkFFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yRDgxNDdBQjMyQUUzNEZFMDU5OTMwMUMzOTlCQTQzMUNCRDk2 QUUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFkYTIzZTktODRiZS00YTU0LWJj YTAtZTlhMGNhZmQxNmZlLzAvMkQ4MTQ3QUIzMkFFMzRGRTA1OTkzMDFDMzk5QkE0 MzFDQkQ5NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJu8n5yK5JBLR766bVjeVN2BBD7tYFfKXmOV s/+D3PS/KwHRV2bkmbKMdfaUFDV0ceCrbwXuvtJk3T3QIty77Obx7RfM0+JoDCZv +l0JiBl3peMRAW+Ei3aPaC4RyAZDe9M/v3jt4E1ys+ZZs9I7CYZvCP/1fefghzTj XesXJc7S2z/X3nwBgDF/vDEBJ4pQPOj9ZrS6MVYQMMMuAHA3PKbrKH7jKpmUWysr WnV+L2R7UpQqk+AZmRfXz1vhRXGE8+nu3wiPNHFjh0zxRpIdOP1MTt1/6GgRNB9e dWWDCBZOlwkDsgmIarQfTLX0iIpsk3jGJzws5Q1YGZglutUqx20= -----END CERTIFICATE-----Generated at Thu Sep 17 10:43:24 2026 by rpki-client