$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft File: 2FE1FA7D4DD3388355BABAD73020013D485C168C.mft (raw, json) Hash identifier: qy+ZvEaYi+k4p1H0hj9XFCusRFm18K04TefEw+ho+oY= Subject key identifier: EB:71:34:6A:A7:7B:0A:22:B6:67:6D:62:FB:39:1C:E9:21:16:48:B7 Authority key identifier: 2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C Certificate issuer: /CN=2FE1FA7D4DD3388355BABAD73020013D485C168C Certificate serial: 083EB7BBB99ACDAA2D8E48FC9969965F517C1EB9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 20:19:12 +0000 Manifest this update: Wed 16 Sep 2026 20:14:12 +0000 Manifest next update: Thu 17 Sep 2026 20:50:12 +0000 Files and hashes: 1: 3130332e39352e32332e302f32342d3234203d3e20313530353537.roa (hash: QUvsonqLXdsih84z12pFdTCBAMOMy8pmVg5n4B/zEOQ=) 2: 2FE1FA7D4DD3388355BABAD73020013D485C168C.crl (hash: 13XrNrvNAVTXOu1EB/jihTvU+n0tyy9RLDjPArioECA=) 3: 3130332e39352e32322e302f32342d3234203d3e20313530353537.roa (hash: UmfUI05XEmk9hWgPXOd+povgJcvWbtg+6u6rN6Z8bBg=) 4: 3130332e39352e32322e302f32332d3233203d3e20313530353537.roa (hash: aB7QEaSEcJTWbjfIxBku5UcRO6NDRrQsqaho45FCjZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.crl rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:3e:b7:bb:b9:9a:cd:aa:2d:8e:48:fc:99:69:96:5f:51:7c:1e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FE1FA7D4DD3388355BABAD73020013D485C168C Validity Not Before: Sep 16 20:14:12 2026 GMT Not After : Sep 17 20:50:12 2026 GMT Subject: CN=EB71346AA77B0A22B6676D62FB391CE9211648B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:cd:6a:79:4d:e5:1f:bd:ae:58:4a:ec:34: 8a:20:0d:3f:8d:8c:75:c3:f5:82:1e:a3:d1:40:3b: 8c:79:80:5b:5d:e8:65:20:10:0b:12:8e:2d:8d:e8: 22:d5:bb:33:e8:ae:30:50:b4:fd:c5:5b:01:c7:53: 20:dc:bb:04:4c:40:0a:57:c3:5a:58:03:da:71:7b: 90:3d:69:15:d8:8b:12:0e:ac:36:64:d0:a7:da:c2: f8:a1:45:05:36:19:97:35:cb:16:f2:66:d3:73:a8: 2b:e9:a0:17:b0:48:98:39:f1:60:f0:e5:b8:76:b7: 72:3d:1d:97:0c:34:20:94:19:a6:ce:62:a1:dd:76: 2a:7c:20:94:3b:af:2d:19:a6:ad:c9:97:7a:e4:de: 8f:0d:9d:42:8a:28:f4:bc:7e:40:4b:27:97:cc:9a: 72:2b:58:ca:91:14:a9:58:63:49:c3:5f:79:0c:d6: a2:1f:de:91:a1:2c:36:f8:97:9e:4d:05:7c:20:5b: 90:c0:4d:06:99:8a:e1:21:3c:5d:ca:e8:fc:8f:49: 46:40:8d:50:4a:c1:0d:80:85:07:fc:b9:65:7a:23: e1:6e:41:9d:70:5e:82:4a:8f:23:8a:53:24:ee:3b: d0:35:37:4f:75:65:78:1b:9e:26:a5:42:ea:47:af: a2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:71:34:6A:A7:7B:0A:22:B6:67:6D:62:FB:39:1C:E9:21:16:48:B7 X509v3 Authority Key Identifier: keyid:2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:c2:89:57:44:9b:32:53:bf:2a:21:91:13:9c:c6:d1:a5:2f: 96:cc:8f:c4:d1:6b:ea:90:f2:e0:a8:6e:ee:1c:c2:bb:6b:48: ad:1f:6b:6b:05:ef:f0:61:d7:f0:df:fe:20:49:c9:50:66:ac: a4:6b:ac:3c:a4:28:94:33:76:ae:24:85:5d:45:29:a6:57:d1: 17:cc:62:58:70:36:dd:fe:ca:e3:15:03:1a:04:b1:f3:d3:09: fe:aa:e0:57:74:35:95:37:b5:44:58:a1:e2:25:42:f7:17:55: 76:0a:2d:93:c5:c5:30:3e:c4:df:01:b5:b5:a9:fb:c1:d5:9c: c4:9f:3e:c1:e8:46:af:9c:14:5a:3e:38:16:6e:e8:10:0c:73: af:97:78:48:18:43:78:c1:c3:98:4e:2c:c4:53:0a:0e:0e:e1: f5:f4:1e:b4:78:bb:d4:52:0d:19:5c:5a:ec:4f:65:37:38:e2: e0:b0:19:8f:a9:27:1c:5a:cf:06:64:04:fa:d8:23:d9:d5:f4: d8:8e:2e:d6:52:69:44:21:fd:94:3c:e1:e6:ad:37:69:b4:87: 29:52:a0:fa:20:62:d6:5c:48:f7:2a:a0:ac:04:4c:53:b0:43: cb:74:ef:eb:e6:31:96:02:83:57:90:92:eb:aa:2c:0d:e1:93: 02:5d:aa:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCD63u7mazaotjkj8mWmWX1F8HrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZFMUZBN0Q0REQzMzg4MzU1QkFCQUQ3MzAyMDAxM0Q0 ODVDMTY4QzAeFw0yNjA5MTYyMDE0MTJaFw0yNjA5MTcyMDUwMTJaMDMxMTAvBgNV BAMTKEVCNzEzNDZBQTc3QjBBMjJCNjY3NkQ2MkZCMzkxQ0U5MjExNjQ4QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBMc1qeU3lH72uWErsNIogDT+N jHXD9YIeo9FAO4x5gFtd6GUgEAsSji2N6CLVuzPorjBQtP3FWwHHUyDcuwRMQApX w1pYA9pxe5A9aRXYixIOrDZk0KfawvihRQU2GZc1yxbyZtNzqCvpoBewSJg58WDw 5bh2t3I9HZcMNCCUGabOYqHddip8IJQ7ry0Zpq3Jl3rk3o8NnUKKKPS8fkBLJ5fM mnIrWMqRFKlYY0nDX3kM1qIf3pGhLDb4l55NBXwgW5DATQaZiuEhPF3K6PyPSUZA jVBKwQ2AhQf8uWV6I+FuQZ1wXoJKjyOKUyTuO9A1N091ZXgbnialQupHr6KVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU63E0aqd7CiK2Z21i+zkc6SEWSLcwHwYDVR0j BBgwFoAUL+H6fU3TOINVurrXMCABPUhcFowwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZkNGY4NjktNGRiNi00YjBhLWFhYjYtY2RlNDdiNDQ3ZDc3LzAvMkZFMUZBN0Q0 REQzMzg4MzU1QkFCQUQ3MzAyMDAxM0Q0ODVDMTY4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkUxRkE3RDRERDMzODgzNTVCQUJBRDczMDIwMDEzRDQ4NUMx NjhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZkNGY4NjktNGRiNi00YjBhLWFh YjYtY2RlNDdiNDQ3ZDc3LzAvMkZFMUZBN0Q0REQzMzg4MzU1QkFCQUQ3MzAyMDAx M0Q0ODVDMTY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDCiVdEmzJTvyohkROcxtGlL5bMj8TRa+qQ 8uCobu4cwrtrSK0fa2sF7/Bh1/Df/iBJyVBmrKRrrDykKJQzdq4khV1FKaZX0RfM YlhwNt3+yuMVAxoEsfPTCf6q4Fd0NZU3tURYoeIlQvcXVXYKLZPFxTA+xN8BtbWp +8HVnMSfPsHoRq+cFFo+OBZu6BAMc6+XeEgYQ3jBw5hOLMRTCg4O4fX0HrR4u9RS DRlcWuxPZTc44uCwGY+pJxxazwZkBPrYI9nV9NiOLtZSaUQh/ZQ84eatN2m0hylS oPogYtZcSPcqoKwETFOwQ8t07+vmMZYCg1eQkuuqLA3hkwJdqhU= -----END CERTIFICATE-----Generated at Thu Sep 17 10:02:48 2026 by rpki-client