$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft File: 2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft (raw, json) Hash identifier: LGVdfjyMLvxtjko4gYU6OD1cmXjqyCxJa4016V0rzZ8= Subject key identifier: A2:CE:2E:80:8A:14:CC:A6:27:9E:CD:46:41:E3:5D:26:01:0F:B6:72 Authority key identifier: 2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3 Certificate issuer: /CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3 Certificate serial: 230031C4D06BA35020585637FC19F8E1844A4A89 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 10:11:40 +0000 Manifest this update: Sat 24 Oct 2026 10:06:40 +0000 Manifest next update: Sun 25 Oct 2026 10:24:40 +0000 Files and hashes: 1: 2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl (hash: dn09DHtpRjmAPI8Vh7SWAgt9ZgPHS0Om74GaXhI54eQ=) 2: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: ba9T7QeA28DMOyzLlfoljNenw5738a58LQmu3hf+TMU=) 3: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: uD4zXPlmJIJvDYKeBCRvwCSXSW9r9c2Pd73kp0tq76c=) 4: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: Fc1cIIy7yp6fwFNt9JFBozT8wGm732U+MIRuBDuRJKc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:00:31:c4:d0:6b:a3:50:20:58:56:37:fc:19:f8:e1:84:4a:4a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3 Validity Not Before: Oct 24 10:06:40 2026 GMT Not After : Oct 25 10:24:40 2026 GMT Subject: CN=A2CE2E808A14CCA6279ECD4641E35D26010FB672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0e:a6:5c:d9:8c:1f:40:fc:95:be:1d:e4:63: 09:47:06:43:7e:3c:16:49:1a:e8:ea:c9:4a:cf:ff: 5f:0d:4d:4a:f4:8f:08:ea:09:1e:dd:8c:87:1f:a4: ef:5d:cf:f6:28:dd:0d:6e:70:14:74:2f:38:5b:bd: e9:d8:0a:79:b3:e5:8c:9b:d4:f1:47:3c:17:12:89: de:24:57:3b:9b:d4:17:1f:29:2d:bf:ac:f2:4f:85: 23:34:36:65:20:f4:39:ec:c4:66:76:8e:0b:b5:90: fd:bf:c3:2e:4c:82:ae:75:1b:51:15:05:a2:e7:7f: 0b:35:db:2f:23:2a:90:24:c9:7e:dc:e6:b7:b4:55: 18:8c:6a:0f:53:f9:1e:a8:b0:d7:5e:f1:d6:2d:47: 11:3f:c7:c0:37:a0:d5:a6:43:df:46:4f:6c:c1:31: 23:2c:ce:bf:05:e6:ef:07:37:3d:d4:57:93:ca:0d: 2f:83:53:92:9c:e8:9b:d7:99:93:e6:a2:be:e8:19: 32:e5:1f:f0:49:62:f9:ca:f0:6a:46:7a:7d:a5:61: 81:9d:f1:70:09:42:c8:8b:a8:be:a9:0c:c0:52:84: 27:22:72:5c:20:6d:6a:21:1d:36:a6:ad:9b:26:51: a2:f9:1a:b8:32:f5:ae:c4:d5:69:d0:25:73:95:ff: cf:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CE:2E:80:8A:14:CC:A6:27:9E:CD:46:41:E3:5D:26:01:0F:B6:72 X509v3 Authority Key Identifier: keyid:2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:cc:38:e5:3a:cf:b6:81:e7:4e:ef:cf:3d:fb:57:8c:e6:87: b2:32:d8:97:15:ff:c7:b7:da:52:02:48:78:d7:c1:08:99:94: 3d:a5:e5:db:cd:16:94:b4:b0:77:d9:b8:3d:ec:a3:f5:4e:b7: a3:09:5d:cf:58:9e:e0:f5:5a:5e:3c:60:d2:ba:82:de:31:c9: 5e:57:65:69:3a:0d:65:48:af:fc:3d:e2:b4:ef:a6:99:02:65: f7:89:87:dd:96:20:e7:47:6c:81:32:df:ff:21:29:c2:d2:d8: c7:04:38:3a:77:90:56:c8:e1:16:b5:56:78:97:8d:31:66:29: f9:af:d7:10:68:13:a9:db:23:53:67:bb:47:ac:86:0c:c2:ae: 20:34:ca:23:22:07:65:35:45:9e:d7:d7:d1:c5:94:db:ba:94: bc:68:df:42:5b:bb:bf:b3:88:07:39:85:cd:97:5f:34:83:cc: 5b:68:57:ee:08:fd:69:69:f4:c7:4c:24:8c:5e:bd:07:0c:f1: eb:b5:91:19:ba:2f:ff:5b:fe:8d:30:70:78:bc:b4:50:1f:73: 15:1a:73:9d:7c:6f:69:6e:c9:c4:cf:b6:46:a6:69:34:8c:b0: b1:4e:c6:70:55:ac:45:5f:22:c5:07:9c:ea:51:da:0f:4a:ab: c6:1e:e9:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIwAxxNBro1AgWFY3/Bn44YRKSokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZGOUQ1MkFEQzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3NzZE Q0I0MzNCMzAeFw0yNjEwMjQxMDA2NDBaFw0yNjEwMjUxMDI0NDBaMDMxMTAvBgNV BAMTKEEyQ0UyRTgwOEExNENDQTYyNzlFQ0Q0NjQxRTM1RDI2MDEwRkI2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9DqZc2YwfQPyVvh3kYwlHBkN+ PBZJGujqyUrP/18NTUr0jwjqCR7djIcfpO9dz/Yo3Q1ucBR0LzhbvenYCnmz5Yyb 1PFHPBcSid4kVzub1BcfKS2/rPJPhSM0NmUg9DnsxGZ2jgu1kP2/wy5Mgq51G1EV BaLnfws12y8jKpAkyX7c5re0VRiMag9T+R6osNde8dYtRxE/x8A3oNWmQ99GT2zB MSMszr8F5u8HNz3UV5PKDS+DU5Kc6JvXmZPmor7oGTLlH/BJYvnK8GpGen2lYYGd 8XAJQsiLqL6pDMBShCciclwgbWohHTamrZsmUaL5Grgy9a7E1WnQJXOV/88HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUos4ugIoUzKYnns1GQeNdJgEPtnIwHwYDVR0j BBgwFoAUL/nVKtx3f6POUar5RIuHdty0M7MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2MwNzVlZjYtYTI1MS00N2RkLThkZGEtY2FkZmY0OTdhN2U1LzAvMkZGOUQ1MkFE Qzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3NzZEQ0I0MzNCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkY5RDUyQURDNzc3RkEzQ0U1MUFBRjk0NDhCODc3NkRDQjQz M0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMkZGOUQ1MkFEQzc3N0ZBM0NFNTFBQUY5NDQ4Qjg3 NzZEQ0I0MzNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/MOOU6z7aB507vzz37V4zmh7Iy2JcV/8e3 2lICSHjXwQiZlD2l5dvNFpS0sHfZuD3so/VOt6MJXc9YnuD1Wl48YNK6gt4xyV5X ZWk6DWVIr/w94rTvppkCZfeJh92WIOdHbIEy3/8hKcLS2McEODp3kFbI4Ra1VniX jTFmKfmv1xBoE6nbI1Nnu0eshgzCriA0yiMiB2U1RZ7X19HFlNu6lLxo30Jbu7+z iAc5hc2XXzSDzFtoV+4I/Wlp9MdMJIxevQcM8eu1kRm6L/9b/o0wcHi8tFAfcxUa c518b2luycTPtkamaTSMsLFOxnBVrEVfIsUHnOpR2g9Kq8Ye6UI= -----END CERTIFICATE-----Generated at Sat Oct 24 13:33:50 2026 by rpki-client