$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft File: 2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft (raw, json) Hash identifier: jQf0TIcsdqQCxwJMPzQtFC0N4KSEbHqcMGZzh9FzqqI= Subject key identifier: 4A:A7:38:C2:5D:E7:1A:1C:E0:62:CA:B7:CD:02:6E:B8:3F:F9:5C:A7 Authority key identifier: 2F:37:45:DB:26:30:B1:D0:4A:3E:69:E4:9A:12:ED:7D:D5:65:CC:82 Certificate issuer: /CN=2F3745DB2630B1D04A3E69E49A12ED7DD565CC82 Certificate serial: 4344B442893A7800EC47DB66E35CBEAFA52F2580 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft Manifest number: EA Signing time: Sat 24 Oct 2026 21:46:13 +0000 Manifest this update: Sat 24 Oct 2026 21:41:13 +0000 Manifest next update: Mon 26 Oct 2026 00:13:13 +0000 Files and hashes: 1: 2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl (hash: vxbl4L+FmKAhK5M5jn58Epx4nlHvxxG/Cz4PiGXASuQ=) 2: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: hXr95hFUQi4QPei7lbvEDGK3/fJ8wC4HwUseAin+nsU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 00:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:44:b4:42:89:3a:78:00:ec:47:db:66:e3:5c:be:af:a5:2f:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F3745DB2630B1D04A3E69E49A12ED7DD565CC82 Validity Not Before: Oct 24 21:41:13 2026 GMT Not After : Oct 26 00:13:13 2026 GMT Subject: CN=4AA738C25DE71A1CE062CAB7CD026EB83FF95CA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:01:3a:8c:8e:67:fb:52:16:95:5b:58:2d:75: b8:86:9a:45:5d:32:14:b8:7a:04:92:2d:f8:ed:ad: fe:3a:25:87:d6:8a:6a:93:25:d6:39:65:00:13:f6: 45:83:5b:e2:8a:70:59:97:0d:82:e9:f2:e7:16:83: 21:6e:03:f5:15:17:cf:c4:ee:1d:3c:80:6c:a1:ba: 23:ce:f7:a8:51:c8:7a:7e:09:57:56:58:35:62:49: c7:f3:d6:77:ad:f8:81:11:4b:15:ed:c7:a8:85:68: ed:3f:27:bd:93:9f:8e:9f:ae:2e:df:ad:5b:98:ad: 3c:b1:07:9a:a4:d7:7f:d1:03:e5:cf:2d:0e:9b:71: e6:f9:fc:7b:cf:5f:dd:c2:22:b7:8e:e8:bd:de:16: c3:b8:1a:59:67:b9:a6:3f:c0:50:16:1b:9d:40:d4: 89:f4:91:68:2f:e2:25:5f:95:10:5a:7c:7b:2b:e8: e0:b2:81:dc:39:9c:fe:4f:4c:d7:ad:92:67:72:a8: ef:04:7f:65:c1:0e:9f:34:af:f3:d6:f1:d5:09:91: 96:36:7d:eb:10:e6:1e:88:6c:7d:6e:12:2a:37:aa: 30:cc:63:0f:3c:ea:35:5e:b0:60:22:46:b4:61:46: 9e:9a:9a:34:fd:14:cf:00:9c:1d:ac:cf:9e:2b:7b: 40:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A7:38:C2:5D:E7:1A:1C:E0:62:CA:B7:CD:02:6E:B8:3F:F9:5C:A7 X509v3 Authority Key Identifier: keyid:2F:37:45:DB:26:30:B1:D0:4A:3E:69:E4:9A:12:ED:7D:D5:65:CC:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:dd:8f:75:26:7f:4e:96:57:98:98:f5:ac:a9:b2:4b:53:3e: 1f:1b:4b:3f:97:d0:5d:48:f9:b1:8f:f7:4f:3c:35:23:01:62: af:cb:0a:db:41:8a:e8:77:fd:ad:59:33:05:73:a4:4e:a1:6c: 97:f8:d5:dd:c3:c1:69:12:6c:84:31:3c:01:c5:49:08:f1:14: 00:7e:cc:b8:df:ee:e0:0b:0c:8c:2c:4a:34:e0:ee:b5:c5:4b: fa:8d:62:2f:4e:b7:40:d5:e1:b6:67:e4:78:13:97:11:92:63: cc:2b:60:36:c3:32:bd:05:25:22:cf:14:20:ff:c5:a2:87:f2: c0:27:51:62:44:45:aa:53:fa:cd:56:f4:75:ac:2c:c4:73:6c: e1:93:47:a7:1c:34:c0:f3:79:f3:66:4d:03:83:e8:ff:be:4b: e9:9a:d0:42:b5:a6:1b:31:b0:9f:cc:74:5e:76:21:81:5d:3b: d8:20:6b:86:3a:6b:55:c5:cc:9c:c3:fa:28:a0:4d:52:45:a6: 4e:39:29:14:5f:67:89:6d:6e:c8:d2:c7:a9:16:ba:08:5c:38: 8f:0b:c1:ee:7e:c9:5b:b4:e9:0f:c3:20:f2:cf:82:98:df:8c: 5d:2a:20:98:5f:fd:d2:20:1d:fc:63:cc:37:ed:d5:ca:6e:08: b7:6d:a4:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0S0Qok6eADsR9tm41y+r6UvJYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYzNzQ1REIyNjMwQjFEMDRBM0U2OUU0OUExMkVEN0RE NTY1Q0M4MjAeFw0yNjEwMjQyMTQxMTNaFw0yNjEwMjYwMDEzMTNaMDMxMTAvBgNV BAMTKDRBQTczOEMyNURFNzFBMUNFMDYyQ0FCN0NEMDI2RUI4M0ZGOTVDQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLATqMjmf7UhaVW1gtdbiGmkVd MhS4egSSLfjtrf46JYfWimqTJdY5ZQAT9kWDW+KKcFmXDYLp8ucWgyFuA/UVF8/E 7h08gGyhuiPO96hRyHp+CVdWWDViScfz1net+IERSxXtx6iFaO0/J72Tn46fri7f rVuYrTyxB5qk13/RA+XPLQ6bceb5/HvPX93CIreO6L3eFsO4GllnuaY/wFAWG51A 1In0kWgv4iVflRBafHsr6OCygdw5nP5PTNetkmdyqO8Ef2XBDp80r/PW8dUJkZY2 fesQ5h6IbH1uEio3qjDMYw886jVesGAiRrRhRp6amjT9FM8AnB2sz54re0BTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSqc4wl3nGhzgYsq3zQJuuD/5XKcwHwYDVR0j BBgwFoAULzdF2yYwsdBKPmnkmhLtfdVlzIIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTc4YThiMzktM2FlMy00ZGU3LTkzNjYtMjFmOWVhMDQzMjVhLzAvMkYzNzQ1REIy NjMwQjFEMDRBM0U2OUU0OUExMkVEN0RENTY1Q0M4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRjM3NDVEQjI2MzBCMUQwNEEzRTY5RTQ5QTEyRUQ3REQ1NjVD QzgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTc4YThiMzktM2FlMy00ZGU3LTkz NjYtMjFmOWVhMDQzMjVhLzAvMkYzNzQ1REIyNjMwQjFEMDRBM0U2OUU0OUExMkVE N0RENTY1Q0M4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELdj3Umf06WV5iY9aypsktTPh8bSz+X0F1I +bGP9088NSMBYq/LCttBiuh3/a1ZMwVzpE6hbJf41d3DwWkSbIQxPAHFSQjxFAB+ zLjf7uALDIwsSjTg7rXFS/qNYi9Ot0DV4bZn5HgTlxGSY8wrYDbDMr0FJSLPFCD/ xaKH8sAnUWJERapT+s1W9HWsLMRzbOGTR6ccNMDzefNmTQOD6P++S+ma0EK1phsx sJ/MdF52IYFdO9gga4Y6a1XFzJzD+iigTVJFpk45KRRfZ4ltbsjSx6kWughcOI8L we5+yVu06Q/DIPLPgpjfjF0qIJhf/dIgHfxjzDft1cpuCLdtpDA= -----END CERTIFICATE-----Generated at Sun Oct 25 14:29:50 2026 by rpki-client