$ rpki-client -vvvf rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft File: 2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft (raw, json) Hash identifier: ecYC1IRP3p8Mh4Q0usCZqL3AfGvmrbHb8neX6dWsZMk= Subject key identifier: 86:AD:43:05:00:1A:D0:4A:36:C7:36:B3:4E:9B:DC:D8:83:A1:52:79 Authority key identifier: 2D:30:C3:00:58:7F:6D:81:BE:9B:55:44:3E:A8:EE:94:22:9F:CF:34 Certificate issuer: /CN=2D30C300587F6D81BE9B55443EA8EE94229FCF34 Certificate serial: 64141D4DC92AB4558AF13C055673513B959F0798 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 19:23:10 +0000 Manifest this update: Wed 16 Sep 2026 19:18:10 +0000 Manifest next update: Thu 17 Sep 2026 20:42:10 +0000 Files and hashes: 1: 2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl (hash: zNpzfKQb4uj3RzOrWEDIDtIOBBTMBxYZLvO2S1iz78I=) 2: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: tFodUbzYC2MyevsY+1U3r+nqHy3x7yy2dunKYq9vZuc=) 3: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: /HZ9PgBcY1v+LICUOzB+p9dmjd1y9vMbbZwrBhVjk44=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:14:1d:4d:c9:2a:b4:55:8a:f1:3c:05:56:73:51:3b:95:9f:07:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D30C300587F6D81BE9B55443EA8EE94229FCF34 Validity Not Before: Sep 16 19:18:10 2026 GMT Not After : Sep 17 20:42:10 2026 GMT Subject: CN=86AD4305001AD04A36C736B34E9BDCD883A15279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:44:56:40:46:9e:ca:24:b9:31:6a:6a:cc:1d: 06:14:ba:e1:80:09:8a:ef:b0:d8:e1:ee:3a:0f:78: 54:26:b2:23:c9:c9:c6:3f:b2:6d:8d:f1:cb:fb:3e: 63:f5:e7:6b:83:3b:a9:da:81:98:50:3d:ee:eb:99: 0b:76:08:f8:bf:33:31:09:d1:45:b4:c8:1e:ed:49: b6:e7:0d:8a:29:b0:ab:bc:af:bb:41:fc:63:8a:a0: 6c:8e:0a:77:27:56:31:4b:77:ce:53:06:73:d9:0e: 39:a7:e9:1b:76:ec:bf:ff:f6:28:c0:a0:c6:12:b3: 58:47:f2:a8:ea:9c:0a:cf:dc:c7:75:44:cb:7f:94: 36:78:ac:da:63:ac:f9:6a:4a:88:60:ec:98:c3:4e: ae:85:65:c3:21:fd:98:c6:c2:14:a6:6c:2b:fb:18: a0:7c:d5:dc:7b:1f:e1:78:cf:f1:b4:45:ea:ae:0c: 3a:97:a2:f9:8c:df:cd:9d:b2:e8:81:ea:64:be:5a: d7:80:c9:b3:3c:0a:2f:84:bb:4e:bd:0c:31:b6:1e: 4a:7e:25:4d:f1:ab:57:c0:5a:16:71:f2:c1:fe:1a: d7:d2:5f:65:79:33:b4:4b:7e:4a:c1:1d:fa:14:00: cc:c1:35:ef:fb:9a:9b:7f:3b:f2:69:4f:d6:21:34: e4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AD:43:05:00:1A:D0:4A:36:C7:36:B3:4E:9B:DC:D8:83:A1:52:79 X509v3 Authority Key Identifier: keyid:2D:30:C3:00:58:7F:6D:81:BE:9B:55:44:3E:A8:EE:94:22:9F:CF:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:5d:f2:b5:41:51:60:71:aa:f1:5d:15:89:b9:a8:f7:78:89: 7f:d5:5b:e1:20:46:6c:95:74:ee:d9:b5:f2:22:90:45:53:31: 98:a7:4a:ad:d5:e8:0d:5c:f0:3a:58:ef:b0:d1:da:80:ef:07: fb:3a:3f:5c:28:ce:ba:06:c8:05:cb:0d:31:ea:65:d5:56:17: df:be:54:3e:18:db:db:ed:b4:75:00:a8:36:16:ff:32:cf:07: af:b6:5c:33:f6:d4:1c:8d:b1:32:90:43:c1:d9:23:3c:ca:81: 90:90:4a:99:df:54:a8:95:f1:8d:e5:87:d2:8c:82:ac:75:f4: e5:f1:1d:bc:d0:d6:6a:99:86:d9:33:a5:95:f1:d9:0c:d2:ea: c1:ae:02:27:fc:f7:f8:b7:f6:96:ad:25:0b:39:7a:69:3d:0f: db:35:86:5e:cd:ea:f4:75:10:bd:b1:bf:41:ef:6f:b5:58:32: 91:84:c7:32:c6:49:fb:df:4d:8a:91:e5:a0:33:07:e1:0e:24: 2a:33:ba:06:41:ac:ff:c9:64:02:fa:ea:c1:96:72:8e:2b:06: 82:49:3e:24:e2:c4:9f:88:0f:42:22:95:5c:82:72:21:e7:74: a0:f9:9d:28:9c:e6:5c:1e:94:f4:24:4e:57:71:96:f6:42:eb: 47:39:18:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZBQdTckqtFWK8TwFVnNRO5WfB5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQzMEMzMDA1ODdGNkQ4MUJFOUI1NTQ0M0VBOEVFOTQy MjlGQ0YzNDAeFw0yNjA5MTYxOTE4MTBaFw0yNjA5MTcyMDQyMTBaMDMxMTAvBgNV BAMTKDg2QUQ0MzA1MDAxQUQwNEEzNkM3MzZCMzRFOUJEQ0Q4ODNBMTUyNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGRFZARp7KJLkxamrMHQYUuuGA CYrvsNjh7joPeFQmsiPJycY/sm2N8cv7PmP152uDO6nagZhQPe7rmQt2CPi/MzEJ 0UW0yB7tSbbnDYopsKu8r7tB/GOKoGyOCncnVjFLd85TBnPZDjmn6Rt27L//9ijA oMYSs1hH8qjqnArP3Md1RMt/lDZ4rNpjrPlqSohg7JjDTq6FZcMh/ZjGwhSmbCv7 GKB81dx7H+F4z/G0RequDDqXovmM382dsuiB6mS+WteAybM8Ci+Eu069DDG2Hkp+ JU3xq1fAWhZx8sH+GtfSX2V5M7RLfkrBHfoUAMzBNe/7mpt/O/JpT9YhNOTpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhq1DBQAa0Eo2xzazTpvc2IOhUnkwHwYDVR0j BBgwFoAULTDDAFh/bYG+m1VEPqjulCKfzzQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTRkY2VmNjUtNWRlMy00MTI5LWFjMjctNzcwNmQ3MjY2MDAxLzAvMkQzMEMzMDA1 ODdGNkQ4MUJFOUI1NTQ0M0VBOEVFOTQyMjlGQ0YzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDMwQzMwMDU4N0Y2RDgxQkU5QjU1NDQzRUE4RUU5NDIyOUZD RjM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMkQzMEMzMDA1ODdGNkQ4MUJFOUI1NTQ0M0VBOEVF OTQyMjlGQ0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFd8rVBUWBxqvFdFYm5qPd4iX/VW+EgRmyV dO7ZtfIikEVTMZinSq3V6A1c8DpY77DR2oDvB/s6P1wozroGyAXLDTHqZdVWF9++ VD4Y29vttHUAqDYW/zLPB6+2XDP21ByNsTKQQ8HZIzzKgZCQSpnfVKiV8Y3lh9KM gqx19OXxHbzQ1mqZhtkzpZXx2QzS6sGuAif89/i39patJQs5emk9D9s1hl7N6vR1 EL2xv0Hvb7VYMpGExzLGSfvfTYqR5aAzB+EOJCozugZBrP/JZAL66sGWco4rBoJJ PiTixJ+ID0IilVyCciHndKD5nSic5lwelPQkTldxlvZC60c5GJQ= -----END CERTIFICATE-----Generated at Thu Sep 17 09:28:22 2026 by rpki-client