$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft File: 2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft (raw, json) Hash identifier: wZ0CORxicnuChEl9Z3gMyVz4rjcOtPSsVwuan1KlxA8= Subject key identifier: 1C:D9:6D:AB:62:5B:64:AD:73:DD:96:DA:0D:42:89:15:2F:E0:D9:BF Authority key identifier: 26:95:C5:87:0A:02:5E:F2:E5:D5:7A:EA:E0:60:19:14:A8:CB:88:70 Certificate issuer: /CN=2695C5870A025EF2E5D57AEAE0601914A8CB8870 Certificate serial: 51027D55E588B1C8C9FB7EFE48D90E9F50776684 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:58:36 +0000 Manifest this update: Wed 16 Sep 2026 23:53:36 +0000 Manifest next update: Fri 18 Sep 2026 02:35:36 +0000 Files and hashes: 1: 2695C5870A025EF2E5D57AEAE0601914A8CB8870.crl (hash: mlc5/vZ0RLYIPvwhdOexfAnOS+MEuIUStv5NOks3BSI=) 2: 3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa (hash: 2FI3DRw6poz7+/6DZetNhGhzUS2lCGKW4XFdtiSijVE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.crl rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:02:7d:55:e5:88:b1:c8:c9:fb:7e:fe:48:d9:0e:9f:50:77:66:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2695C5870A025EF2E5D57AEAE0601914A8CB8870 Validity Not Before: Sep 16 23:53:36 2026 GMT Not After : Sep 18 02:35:36 2026 GMT Subject: CN=1CD96DAB625B64AD73DD96DA0D4289152FE0D9BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2b:27:4c:1c:af:7b:4a:62:54:ae:ea:92:49: bd:ca:11:f5:f8:20:0c:25:fc:57:ff:a1:52:84:40: 6e:a6:ad:2c:64:fa:5e:6c:78:ab:69:d5:84:f4:c4: 2f:40:64:4d:ca:85:81:72:bb:c7:2a:78:9f:db:6b: ee:ad:05:02:93:e5:00:8f:84:52:fe:a1:c8:7f:be: da:64:82:87:7f:ac:10:5a:10:8b:1a:27:66:17:7e: 95:42:47:f8:92:6d:6e:44:49:47:f4:b9:5d:39:75: 9e:22:36:44:39:7b:31:44:a2:7e:bb:8b:79:fe:bd: 95:03:de:c4:99:de:52:da:a7:0d:4f:25:04:42:08: a6:47:6e:09:41:5c:02:cc:f1:2f:e0:06:e0:02:b6: b5:a5:4b:13:68:95:a6:3e:c2:77:b4:fb:b7:bb:10: e2:ce:c9:bf:98:72:94:8e:bc:dc:f9:2c:19:3a:9f: 7d:ac:35:6f:f3:75:27:5c:6c:b7:13:20:1a:05:52: 34:0a:47:68:e7:0b:80:75:62:1a:58:42:3b:d1:0b: 4d:69:6b:bc:04:20:c4:5d:05:96:c1:ac:eb:da:4b: 25:4a:71:b2:b4:ff:f1:40:13:db:f5:14:5d:7d:51: 03:c7:3a:ef:11:b9:e2:a9:e8:e1:74:9a:ac:3c:01: 69:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D9:6D:AB:62:5B:64:AD:73:DD:96:DA:0D:42:89:15:2F:E0:D9:BF X509v3 Authority Key Identifier: keyid:26:95:C5:87:0A:02:5E:F2:E5:D5:7A:EA:E0:60:19:14:A8:CB:88:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:fc:0b:86:8a:2e:bf:18:ad:9c:67:d3:58:89:e1:b8:07:cf: 74:33:b3:7d:7c:a8:81:c9:96:f7:27:e6:f7:b3:8e:af:b4:e5: d7:8f:8b:d9:e0:93:25:dd:68:a8:ae:61:79:60:ec:da:a6:9b: 13:4f:55:01:0e:fd:9a:a3:96:fe:40:14:54:9a:cd:3a:45:d2: 1b:b1:e8:c8:ad:8e:87:3c:23:f4:8a:31:35:8f:26:48:a9:09: 24:9c:fa:ce:fa:43:bd:55:a2:24:d0:82:38:4c:4a:fd:5c:c6: 03:93:73:c4:67:9b:d9:bb:3a:a3:5d:45:0e:ea:a3:82:82:3d: 72:1a:47:57:6d:12:29:43:b3:b0:f7:fb:d4:03:89:fe:9c:5e: f8:30:c4:c3:ca:7a:df:eb:ff:b8:06:9d:71:63:1d:83:32:32: 21:f5:ce:2f:8c:f0:3d:5f:6a:e7:ab:92:cc:dc:b9:f9:cd:7f: a1:bf:6c:d9:93:01:01:c4:15:2f:2e:2f:7c:c0:e3:81:c0:57: f0:bb:02:fe:2e:51:24:53:e7:fd:9a:f2:3b:64:e5:9c:8c:a1: f8:97:18:e2:70:a3:41:ab:98:d6:a9:49:4b:21:47:eb:a7:a9: 4a:e2:65:26:26:12:e5:c5:e6:d6:12:a5:bf:41:fb:1f:86:03: d6:8d:48:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUQJ9VeWIscjJ+37+SNkOn1B3ZoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY5NUM1ODcwQTAyNUVGMkU1RDU3QUVBRTA2MDE5MTRB OENCODg3MDAeFw0yNjA5MTYyMzUzMzZaFw0yNjA5MTgwMjM1MzZaMDMxMTAvBgNV BAMTKDFDRDk2REFCNjI1QjY0QUQ3M0REOTZEQTBENDI4OTE1MkZFMEQ5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTKydMHK97SmJUruqSSb3KEfX4 IAwl/Ff/oVKEQG6mrSxk+l5seKtp1YT0xC9AZE3KhYFyu8cqeJ/ba+6tBQKT5QCP hFL+och/vtpkgod/rBBaEIsaJ2YXfpVCR/iSbW5ESUf0uV05dZ4iNkQ5ezFEon67 i3n+vZUD3sSZ3lLapw1PJQRCCKZHbglBXALM8S/gBuACtrWlSxNolaY+wne0+7e7 EOLOyb+YcpSOvNz5LBk6n32sNW/zdSdcbLcTIBoFUjQKR2jnC4B1YhpYQjvRC01p a7wEIMRdBZbBrOvaSyVKcbK0//FAE9v1FF19UQPHOu8RueKp6OF0mqw8AWnJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHNltq2JbZK1z3ZbaDUKJFS/g2b8wHwYDVR0j BBgwFoAUJpXFhwoCXvLl1Xrq4GAZFKjLiHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZkNTcyMDEtN2UyZi00OWJiLTk0MWQtOWZjYWJlODYyM2Y1LzAvMjY5NUM1ODcw QTAyNUVGMkU1RDU3QUVBRTA2MDE5MTRBOENCODg3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNjk1QzU4NzBBMDI1RUYyRTVENTdBRUFFMDYwMTkxNEE4Q0I4 ODcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZkNTcyMDEtN2UyZi00OWJiLTk0 MWQtOWZjYWJlODYyM2Y1LzAvMjY5NUM1ODcwQTAyNUVGMkU1RDU3QUVBRTA2MDE5 MTRBOENCODg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGz8C4aKLr8YrZxn01iJ4bgHz3Qzs318qIHJ lvcn5vezjq+05dePi9ngkyXdaKiuYXlg7NqmmxNPVQEO/Zqjlv5AFFSazTpF0hux 6Mitjoc8I/SKMTWPJkipCSSc+s76Q71VoiTQgjhMSv1cxgOTc8Rnm9m7OqNdRQ7q o4KCPXIaR1dtEilDs7D3+9QDif6cXvgwxMPKet/r/7gGnXFjHYMyMiH1zi+M8D1f auerkszcufnNf6G/bNmTAQHEFS8uL3zA44HAV/C7Av4uUSRT5/2a8jtk5ZyMofiX GOJwo0GrmNapSUshR+unqUriZSYmEuXF5tYSpb9B+x+GA9aNSPs= -----END CERTIFICATE-----Generated at Thu Sep 17 09:23:22 2026 by rpki-client