$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft File: 2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft (raw, json) Hash identifier: 65i0C/+2bkCz811NrJt/HlbkVRDH+ZnV6ehDSo94Bmg= Subject key identifier: A0:CA:C1:1A:9B:13:AD:20:6A:96:CB:92:2F:E7:49:5A:38:15:BE:23 Authority key identifier: 2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32 Certificate issuer: /CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32 Certificate serial: 268EBE6EAF7B2923C7145110F963A9E67FDF9758 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 14:21:27 +0000 Manifest this update: Thu 17 Sep 2026 14:16:27 +0000 Manifest next update: Fri 18 Sep 2026 16:23:27 +0000 Files and hashes: 1: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: rpaRQ6pLcg3h8lZWS5mZP3KVaWJuOAbOO/JXcmWKPAY=) 2: 3130332e35322e36302e302f32342d3234203d3e20313339343237.roa (hash: oRYTuCJLLdMWXGYdD1e1WCx/FrIV0BiHCyH2sk8DrtM=) 3: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: gQZiPSYPZragbcbOQFwUKBcBf5Wr0XRio1UQ/GfXKcY=) 4: 3130332e35322e36302e302f32332d3233203d3e20313339343237.roa (hash: wZpRBXgVxARx5THQhkidt3uYEJCBivcYi7zf6PFHOe8=) 5: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: Ks9YnRvxTe5fupbuzzjnQ7H1k8qTkpLLIojCNDLV9tI=) 6: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: WTrF0cDS2UOT2PvqICS4rHLAPEa2DituaEKy6TilvQo=) 7: 2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl (hash: E8GSlDg6mAO+9qNwkzlLZUEoQN4WWZM+yreOXSonKKU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:8e:be:6e:af:7b:29:23:c7:14:51:10:f9:63:a9:e6:7f:df:97:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32 Validity Not Before: Sep 17 14:16:27 2026 GMT Not After : Sep 18 16:23:27 2026 GMT Subject: CN=A0CAC11A9B13AD206A96CB922FE7495A3815BE23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9b:d0:cf:a3:d5:3a:6d:b7:21:b4:a8:46:17: 2a:d4:bf:22:1d:f6:76:6d:d7:08:a9:0a:1d:9b:49: b0:95:3c:1a:32:59:85:65:91:d1:65:bd:d8:63:c5: 5a:0f:ab:e9:f8:82:a0:7f:34:0a:cd:1b:f7:48:04: b4:a2:06:a0:0a:fa:24:44:9f:49:42:f4:7d:b7:21: cf:16:92:be:78:d5:12:bb:b7:21:e8:c5:66:38:d0: 58:ad:db:89:75:fb:2b:62:e4:64:d7:82:eb:db:cd: b1:b8:c8:52:5e:d7:f1:ab:8d:70:cd:90:d8:39:f0: e2:4a:d0:30:d3:ea:0b:6f:34:31:cf:ed:95:1c:23: ca:af:a7:2e:ed:7d:99:77:aa:60:d2:a8:44:a6:34: 18:83:9f:3e:51:19:1e:92:79:a3:8c:1a:0f:6b:82: 74:ca:f8:b2:3a:7c:e1:61:fc:47:35:fd:43:9e:6f: f7:4f:f0:93:19:ee:e8:60:ba:ec:b4:98:74:68:f0: 72:da:9d:28:d6:e2:00:3e:23:90:04:e3:83:fa:f0: c4:d6:04:86:b6:96:40:8b:9f:7c:0a:49:ae:54:4c: 20:64:53:5f:3f:d1:ba:e5:f2:29:a4:87:87:89:f9: 6a:fb:61:4c:81:01:a6:14:49:65:41:3a:9e:fc:6e: f7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CA:C1:1A:9B:13:AD:20:6A:96:CB:92:2F:E7:49:5A:38:15:BE:23 X509v3 Authority Key Identifier: keyid:2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0e:26:d0:7c:1d:f2:79:b2:3e:95:f8:c9:d1:8b:1a:47:9c: 1f:1c:5d:5e:d8:53:08:09:d9:1b:09:04:2d:56:7e:eb:e7:31: 6e:a6:c8:6e:f5:ed:86:29:ab:d9:cb:93:f4:6d:11:61:38:00: 15:0d:05:36:36:8a:99:c8:22:42:d4:8c:13:36:86:d5:a1:e5: 6e:17:40:4d:17:ec:68:89:1f:a8:18:0d:37:9e:42:d6:3f:93: ee:a9:d2:9a:7b:b0:b0:65:6d:4a:5c:90:f2:06:98:be:27:5a: 80:b9:22:c4:0a:e0:81:91:8a:2d:7d:89:a7:fd:fa:85:a2:14: d5:b0:56:28:8a:4e:f2:b7:94:b3:7e:3d:3b:24:fc:a2:b9:e2: ff:24:d6:a0:99:ed:01:2d:f3:89:b8:d4:0b:d1:9e:ac:d8:3f: 48:56:11:b9:45:98:7e:9c:2e:5b:c0:52:6f:f0:47:ef:a8:d4: 90:e0:25:60:16:92:90:34:c9:7e:71:d1:25:e5:1f:31:7b:6a: 6e:87:2f:51:a7:29:8a:af:c3:0a:80:41:3c:94:e5:7c:8e:c7: dd:83:0e:8f:36:78:39:5d:2f:a1:c9:9b:e9:b1:d0:32:ba:82: 55:4a:50:76:85:b0:ce:3b:56:79:24:94:9c:41:04:93:e2:b8: 49:c5:a7:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJo6+bq97KSPHFFEQ+WOp5n/fl1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCRDgxMjk1RUEzRkEzODY3MDgyMDcyRDFCREU0MUNC RkIzRkIzMjAeFw0yNjA5MTcxNDE2MjdaFw0yNjA5MTgxNjIzMjdaMDMxMTAvBgNV BAMTKEEwQ0FDMTFBOUIxM0FEMjA2QTk2Q0I5MjJGRTc0OTVBMzgxNUJFMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNm9DPo9U6bbchtKhGFyrUvyId 9nZt1wipCh2bSbCVPBoyWYVlkdFlvdhjxVoPq+n4gqB/NArNG/dIBLSiBqAK+iRE n0lC9H23Ic8Wkr541RK7tyHoxWY40Fit24l1+yti5GTXguvbzbG4yFJe1/GrjXDN kNg58OJK0DDT6gtvNDHP7ZUcI8qvpy7tfZl3qmDSqESmNBiDnz5RGR6SeaOMGg9r gnTK+LI6fOFh/Ec1/UOeb/dP8JMZ7uhguuy0mHRo8HLanSjW4gA+I5AE44P68MTW BIa2lkCLn3wKSa5UTCBkU18/0brl8imkh4eJ+Wr7YUyBAaYUSWVBOp78bveBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoMrBGpsTrSBqlsuSL+dJWjgVviMwHwYDVR0j BBgwFoAULL2BKV6j+jhnCCBy0b3kHL+z+zIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDYxYjhjY2MtNmMyMi00MjRlLTk2MTQtOGFiOGFkMjg4NDljLzAvMkNCRDgxMjk1 RUEzRkEzODY3MDgyMDcyRDFCREU0MUNCRkIzRkIzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0JEODEyOTVFQTNGQTM4NjcwODIwNzJEMUJERTQxQ0JGQjNG QjMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDYxYjhjY2MtNmMyMi00MjRlLTk2 MTQtOGFiOGFkMjg4NDljLzAvMkNCRDgxMjk1RUEzRkEzODY3MDgyMDcyRDFCREU0 MUNCRkIzRkIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0OJtB8HfJ5sj6V+MnRixpHnB8cXV7YUwgJ 2RsJBC1WfuvnMW6myG717YYpq9nLk/RtEWE4ABUNBTY2ipnIIkLUjBM2htWh5W4X QE0X7GiJH6gYDTeeQtY/k+6p0pp7sLBlbUpckPIGmL4nWoC5IsQK4IGRii19iaf9 +oWiFNWwViiKTvK3lLN+PTsk/KK54v8k1qCZ7QEt84m41AvRnqzYP0hWEblFmH6c LlvAUm/wR++o1JDgJWAWkpA0yX5x0SXlHzF7am6HL1GnKYqvwwqAQTyU5XyOx92D Do82eDldL6HJm+mx0DK6glVKUHaFsM47VnkklJxBBJPiuEnFpyU= -----END CERTIFICATE-----Generated at Thu Sep 17 21:33:38 2026 by rpki-client