$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft File: 2CFE6C04191B28EDA13984F5549231D1840AACEC.mft (raw, json) Hash identifier: U+eodP5ASlao9oBBFAqpBHClyuUtWTOMrknbSB/Cfis= Subject key identifier: BD:70:EB:8E:A3:54:90:44:0C:F5:03:7B:D1:57:35:B2:D5:8B:69:39 Authority key identifier: 2C:FE:6C:04:19:1B:28:ED:A1:39:84:F5:54:92:31:D1:84:0A:AC:EC Certificate issuer: /CN=2CFE6C04191B28EDA13984F5549231D1840AACEC Certificate serial: 731CFC0475C6BEB4F0948CF6A8385003F5ADBBB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 09:25:19 +0000 Manifest this update: Thu 17 Sep 2026 09:20:19 +0000 Manifest next update: Fri 18 Sep 2026 10:41:19 +0000 Files and hashes: 1: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: z7Lqa5CkkfTSXbCBFY/k+Fz/ISz+SJw0HySx4HiNPMc=) 2: 2CFE6C04191B28EDA13984F5549231D1840AACEC.crl (hash: YH54NLBwRtbww56X7+YB8j8ayoqwDhkoTFh7Xsk4MlU=) 3: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: dFGJI1S/FQoqvRu6ehr7n/qth/1SKexx3mS7zWvVonM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.crl rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:1c:fc:04:75:c6:be:b4:f0:94:8c:f6:a8:38:50:03:f5:ad:bb:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFE6C04191B28EDA13984F5549231D1840AACEC Validity Not Before: Sep 17 09:20:19 2026 GMT Not After : Sep 18 10:41:19 2026 GMT Subject: CN=BD70EB8EA35490440CF5037BD15735B2D58B6939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f2:1e:b0:1d:b4:ea:3a:2f:c0:61:02:67:d6: 24:51:27:99:8f:35:ca:58:12:d4:9b:57:15:b7:32: 0b:66:94:92:53:7b:5e:d5:e3:79:04:d5:ee:2b:43: 0a:8b:70:75:4b:4d:ff:4f:c6:1f:90:ad:2d:88:8a: 52:98:50:47:dc:70:ba:83:a3:63:f6:fe:e0:8d:e6: 67:62:7d:71:23:6c:35:53:e3:33:c6:6c:d7:4c:67: 2a:96:89:19:cb:ac:dd:6d:f8:8e:23:d2:86:71:be: 9c:b6:f8:42:01:c5:89:f0:08:8c:5f:88:2c:e9:2c: d2:39:dc:7f:e7:27:9a:d9:59:06:3f:6b:0a:5b:71: 73:8e:8c:db:70:eb:31:6a:32:36:68:af:9e:94:c6: c9:8c:f2:00:5c:0d:fd:83:ad:29:26:06:fe:08:d9: 5b:0e:9f:00:78:1f:e0:d9:f2:bf:95:ec:13:27:dd: 39:7d:19:60:6c:89:cb:b0:83:1e:52:c8:7f:d7:c6: 92:20:86:84:b7:0d:43:5a:e7:87:a0:17:1f:b1:de: d8:80:c4:9f:90:91:d7:cf:21:00:19:41:72:c7:26: 65:82:aa:0b:76:a2:64:87:e0:d4:21:c3:c4:3b:e5: 69:a3:88:45:5f:25:ad:d7:47:d5:71:a4:cd:fc:f3: 49:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:70:EB:8E:A3:54:90:44:0C:F5:03:7B:D1:57:35:B2:D5:8B:69:39 X509v3 Authority Key Identifier: keyid:2C:FE:6C:04:19:1B:28:ED:A1:39:84:F5:54:92:31:D1:84:0A:AC:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:3f:f9:d4:d6:04:e6:9d:a4:1b:5a:07:ea:df:2d:4b:07:39: 11:78:03:7a:be:69:ba:86:47:46:9d:28:f1:bb:7c:74:e2:bf: ac:59:e9:bc:51:03:68:40:aa:37:f1:90:86:c2:04:27:b5:30: 98:26:8f:d5:ed:0d:f7:c6:7c:3d:e9:79:19:e4:99:21:5f:6b: 05:93:3a:0d:c8:a2:a8:08:04:e3:29:a8:8f:85:b9:0b:3e:82: c9:2f:66:4a:9c:5e:77:f9:7a:b7:99:39:87:7b:a4:b6:e2:e3: b0:54:59:f9:32:3b:dd:4b:66:29:f1:93:29:af:7d:67:4e:4a: 76:9e:09:f9:a3:be:be:37:c5:c3:c6:8e:e1:3f:f2:2e:cc:70: bc:83:c5:7a:d1:55:d5:f5:ec:7c:a2:f0:a8:73:03:4f:3e:5d: 73:af:53:77:b5:2e:f6:98:c5:2b:92:1a:35:4e:48:7c:21:11: b4:be:9b:ad:0f:bd:21:28:13:29:15:17:95:d2:7d:0f:f3:29: e1:6b:24:f1:83:86:31:56:69:79:68:8f:0a:0e:5d:65:b6:98: 2d:a5:9e:f4:45:3d:a0:93:8b:19:f1:b7:0b:53:ff:3f:53:55: c7:2b:44:4e:9d:f2:16:da:63:5f:8a:01:b8:fc:1f:7d:2c:d5: e3:28:10:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcxz8BHXGvrTwlIz2qDhQA/Wtu7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRTZDMDQxOTFCMjhFREExMzk4NEY1NTQ5MjMxRDE4 NDBBQUNFQzAeFw0yNjA5MTcwOTIwMTlaFw0yNjA5MTgxMDQxMTlaMDMxMTAvBgNV BAMTKEJENzBFQjhFQTM1NDkwNDQwQ0Y1MDM3QkQxNTczNUIyRDU4QjY5MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX8h6wHbTqOi/AYQJn1iRRJ5mP NcpYEtSbVxW3MgtmlJJTe17V43kE1e4rQwqLcHVLTf9Pxh+QrS2IilKYUEfccLqD o2P2/uCN5mdifXEjbDVT4zPGbNdMZyqWiRnLrN1t+I4j0oZxvpy2+EIBxYnwCIxf iCzpLNI53H/nJ5rZWQY/awpbcXOOjNtw6zFqMjZor56UxsmM8gBcDf2DrSkmBv4I 2VsOnwB4H+DZ8r+V7BMn3Tl9GWBsicuwgx5SyH/XxpIghoS3DUNa54egFx+x3tiA xJ+QkdfPIQAZQXLHJmWCqgt2omSH4NQhw8Q75WmjiEVfJa3XR9VxpM3880mDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvXDrjqNUkEQM9QN70Vc1stWLaTkwHwYDVR0j BBgwFoAULP5sBBkbKO2hOYT1VJIx0YQKrOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU5MDhiODMtN2Y0NC00NmUwLTg1MzUtNmZiODRiNTlkNThhLzAvMkNGRTZDMDQx OTFCMjhFREExMzk4NEY1NTQ5MjMxRDE4NDBBQUNFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0ZFNkMwNDE5MUIyOEVEQTEzOTg0RjU1NDkyMzFEMTg0MEFB Q0VDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU5MDhiODMtN2Y0NC00NmUwLTg1 MzUtNmZiODRiNTlkNThhLzAvMkNGRTZDMDQxOTFCMjhFREExMzk4NEY1NTQ5MjMx RDE4NDBBQUNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGI/+dTWBOadpBtaB+rfLUsHORF4A3q+abqG R0adKPG7fHTiv6xZ6bxRA2hAqjfxkIbCBCe1MJgmj9XtDffGfD3peRnkmSFfawWT Og3IoqgIBOMpqI+FuQs+gskvZkqcXnf5ereZOYd7pLbi47BUWfkyO91LZinxkymv fWdOSnaeCfmjvr43xcPGjuE/8i7McLyDxXrRVdX17Hyi8KhzA08+XXOvU3e1LvaY xSuSGjVOSHwhEbS+m60PvSEoEykVF5XSfQ/zKeFrJPGDhjFWaXlojwoOXWW2mC2l nvRFPaCTixnxtwtT/z9TVccrRE6d8hbaY1+KAbj8H30s1eMoEMo= -----END CERTIFICATE-----Generated at Thu Sep 17 14:23:28 2026 by rpki-client