$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft File: 2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft (raw, json) Hash identifier: zg2UeUW+S1/1GrSOWWPt3Tg3S/dKjGXn2JngXPnfTfY= Subject key identifier: 0D:D9:56:B3:93:8C:22:F0:2D:FA:84:B5:04:0E:FD:E1:B6:4E:36:6D Authority key identifier: 2C:A6:27:0F:A0:99:DB:2B:77:ED:B7:EA:A9:30:40:FF:23:6B:21:4B Certificate issuer: /CN=2CA6270FA099DB2B77EDB7EAA93040FF236B214B Certificate serial: 41670187D3A3BADFE66E5468A66FA02341AD7BD4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 05:50:44 +0000 Manifest this update: Thu 17 Sep 2026 05:45:44 +0000 Manifest next update: Fri 18 Sep 2026 06:54:44 +0000 Files and hashes: 1: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (hash: 5yASRqMJGpH3BlgDiF4qbtYdpHoRGPLyhQdyV1pz60w=) 2: 3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (hash: 7n3FY8Iu2mTaPEdpSsiUuLrwQ3K9YP1KBkJ8ERWrHmg=) 3: 2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl (hash: XtKkVGOAKrGzUb4frJQ53Fb96yZOxDFTObKPBMYfIm4=) 4: 3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (hash: RYdUas2TasB0Egv36O3FoGBWixKmz+f1qKRhr6wdPhI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:67:01:87:d3:a3:ba:df:e6:6e:54:68:a6:6f:a0:23:41:ad:7b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA6270FA099DB2B77EDB7EAA93040FF236B214B Validity Not Before: Sep 17 05:45:44 2026 GMT Not After : Sep 18 06:54:44 2026 GMT Subject: CN=0DD956B3938C22F02DFA84B5040EFDE1B64E366D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b1:98:40:bb:0f:51:ac:26:47:6d:f7:8f:33: 9f:2c:c8:32:f5:30:da:b7:a3:1b:bf:86:1f:cb:57: 02:08:53:fd:b2:73:56:d2:4a:d6:97:2a:8a:fa:e1: e9:cb:2e:1e:4b:02:c5:02:08:65:db:d4:19:44:68: 7d:47:26:61:93:8a:ff:33:93:5f:21:e3:89:fb:b5: c8:1b:d5:3d:e3:9e:19:c2:1f:82:10:21:88:d5:63: 0a:1c:fb:03:3b:0c:fa:f6:7a:ac:8c:2f:43:1a:ef: 26:cf:79:65:53:ee:e1:7a:99:69:c9:73:55:e2:b6: f2:89:6d:ae:44:bc:03:4c:5b:cf:06:2e:61:5b:44: b3:25:42:40:c7:31:9c:63:f6:2e:63:10:42:f7:d4: c4:95:89:42:14:dd:bc:b3:90:54:85:42:2c:3f:cd: d5:06:16:47:7e:03:15:7c:5a:50:6a:85:e1:42:db: a3:14:db:dd:45:b6:ae:02:20:7c:a1:c8:8c:44:27: 3a:66:27:c8:91:e7:e1:59:ff:4d:d3:ee:34:53:ee: 3d:c2:86:66:2b:af:77:03:94:98:bf:ee:e8:ae:8a: 63:10:1c:ca:af:fd:bd:94:dc:d7:3e:93:7f:24:dd: b7:41:2d:8e:cf:e5:15:c6:f5:6f:8e:2a:a4:fd:94: 08:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D9:56:B3:93:8C:22:F0:2D:FA:84:B5:04:0E:FD:E1:B6:4E:36:6D X509v3 Authority Key Identifier: keyid:2C:A6:27:0F:A0:99:DB:2B:77:ED:B7:EA:A9:30:40:FF:23:6B:21:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:5d:94:47:12:f7:de:09:7c:09:3f:85:5b:3d:4d:b8:66:7e: 7c:e2:c0:53:7c:cc:a3:46:dd:a5:95:44:26:81:7a:16:43:57: 62:ca:66:66:4a:4b:ef:3d:78:fb:c6:00:12:0e:5b:75:bf:10: 01:55:45:5c:6a:f1:f4:e4:9e:93:b6:fd:44:73:c6:a5:cb:65: f2:7b:fb:2d:7b:6b:58:d6:4b:cb:eb:be:49:48:62:c3:37:9b: 0a:98:b2:75:59:d7:fe:2e:99:1e:c1:9e:ed:9c:07:83:ac:41: da:ee:ca:5f:41:a6:e4:91:f2:f0:45:bf:84:e3:aa:da:48:b2: 6a:d9:00:23:17:27:e7:27:14:81:12:22:16:cf:cf:e2:18:5a: 04:ae:38:dc:69:9d:ba:eb:9e:e9:19:37:6f:c3:3c:eb:5b:ce: 12:55:e6:63:f5:37:cd:24:66:80:4f:b8:1f:29:63:c3:62:f0: d1:9f:dd:1f:82:57:40:fc:56:84:a1:77:c1:d6:bc:3d:64:50: 29:67:60:d7:94:a3:b7:b2:ad:36:cf:fc:ac:3d:05:75:c0:74: 42:a9:66:91:f9:cb:88:e7:84:82:4c:77:3b:4e:ba:3f:81:4e: d5:88:2b:89:ea:52:60:e3:9c:13:ee:5e:83:9c:56:b5:dd:73: eb:86:d8:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQWcBh9Ojut/mblRopm+gI0Gte9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNjI3MEZBMDk5REIyQjc3RURCN0VBQTkzMDQwRkYy MzZCMjE0QjAeFw0yNjA5MTcwNTQ1NDRaFw0yNjA5MTgwNjU0NDRaMDMxMTAvBgNV BAMTKDBERDk1NkIzOTM4QzIyRjAyREZBODRCNTA0MEVGREUxQjY0RTM2NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDosZhAuw9RrCZHbfePM58syDL1 MNq3oxu/hh/LVwIIU/2yc1bSStaXKor64enLLh5LAsUCCGXb1BlEaH1HJmGTiv8z k18h44n7tcgb1T3jnhnCH4IQIYjVYwoc+wM7DPr2eqyML0Ma7ybPeWVT7uF6mWnJ c1XitvKJba5EvANMW88GLmFbRLMlQkDHMZxj9i5jEEL31MSViUIU3byzkFSFQiw/ zdUGFkd+AxV8WlBqheFC26MU291Ftq4CIHyhyIxEJzpmJ8iR5+FZ/03T7jRT7j3C hmYrr3cDlJi/7uiuimMQHMqv/b2U3Nc+k38k3bdBLY7P5RXG9W+OKqT9lAiHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDdlWs5OMIvAt+oS1BA794bZONm0wHwYDVR0j BBgwFoAULKYnD6CZ2yt37bfqqTBA/yNrIUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY3YTdmMGUtOGQwNy00NWRlLTgyNTItM2JmZmMwNWU1NjQ5LzAvMkNBNjI3MEZB MDk5REIyQjc3RURCN0VBQTkzMDQwRkYyMzZCMjE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0E2MjcwRkEwOTlEQjJCNzdFREI3RUFBOTMwNDBGRjIzNkIy MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTY3YTdmMGUtOGQwNy00NWRlLTgy NTItM2JmZmMwNWU1NjQ5LzAvMkNBNjI3MEZBMDk5REIyQjc3RURCN0VBQTkzMDQw RkYyMzZCMjE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABldlEcS994JfAk/hVs9TbhmfnziwFN8zKNG 3aWVRCaBehZDV2LKZmZKS+89ePvGABIOW3W/EAFVRVxq8fTknpO2/URzxqXLZfJ7 +y17a1jWS8vrvklIYsM3mwqYsnVZ1/4umR7Bnu2cB4OsQdruyl9BpuSR8vBFv4Tj qtpIsmrZACMXJ+cnFIESIhbPz+IYWgSuONxpnbrrnukZN2/DPOtbzhJV5mP1N80k ZoBPuB8pY8Ni8NGf3R+CV0D8VoShd8HWvD1kUClnYNeUo7eyrTbP/Kw9BXXAdEKp ZpH5y4jnhIJMdztOuj+BTtWIK4nqUmDjnBPuXoOcVrXdc+uG2OI= -----END CERTIFICATE-----Generated at Thu Sep 17 10:45:57 2026 by rpki-client