$ rpki-client -vvvf rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft File: 2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft (raw, json) Hash identifier: KdDIGiK1oQTYGS8BUn4fv+NejvYvJn/k9HSYKGJHysU= Subject key identifier: CC:F5:CE:AB:B4:EA:19:A6:81:9C:AC:D2:57:68:0C:2B:B5:97:AB:8D Authority key identifier: 2A:3B:71:13:CD:87:30:2B:2B:15:C0:36:DA:BB:55:A1:C6:1A:4B:C7 Certificate issuer: /CN=2A3B7113CD87302B2B15C036DABB55A1C61A4BC7 Certificate serial: 34DFC801172B6E16ECF74F493FB7095EBF20D49C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft Manifest number: C5 Signing time: Fri 25 Sep 2026 04:30:55 +0000 Manifest this update: Fri 25 Sep 2026 04:25:55 +0000 Manifest next update: Sat 26 Sep 2026 07:49:55 +0000 Files and hashes: 1: 3130332e31362e3131392e302f32342d3234203d3e20313530323234.roa (hash: I2YIeew2oZSIPdct3GSYzDNuqJxTOhVzByMVv86tq2I=) 2: 3130332e31362e3131382e302f32332d3233203d3e20313530323234.roa (hash: cHWRS9jvMLPJtfkGwJTsPEjSAtpAq4obnCko3LPwDM4=) 3: 2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl (hash: yvwHLooBf9NwsNpzFtWHY+OW4/xqds0tqJNyPoyceZU=) 4: 3130332e31362e3131382e302f32342d3234203d3e20313530323234.roa (hash: DmsqvgbVPNfcNdfJtucN0xsEHJ0/UNUr4pV2Ej4ylVY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 07:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:df:c8:01:17:2b:6e:16:ec:f7:4f:49:3f:b7:09:5e:bf:20:d4:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A3B7113CD87302B2B15C036DABB55A1C61A4BC7 Validity Not Before: Sep 25 04:25:55 2026 GMT Not After : Sep 26 07:49:55 2026 GMT Subject: CN=CCF5CEABB4EA19A6819CACD257680C2BB597AB8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:f9:c3:1d:6e:48:42:a7:dd:fb:82:c5:b2: 0b:85:4a:66:52:ea:b7:fd:ba:96:d8:3e:e2:1a:d6: ef:bb:51:23:4b:02:96:b5:43:aa:3d:a1:fc:72:c8: ee:5c:6c:d2:79:72:3b:51:2a:ba:6d:ed:10:4b:92: 4f:ec:e9:d0:04:ca:e4:66:e2:be:b0:59:70:56:52: 13:d5:0d:81:89:b8:b6:e1:e8:58:bc:38:8f:69:89: 7e:f4:63:d4:87:10:d9:f3:23:dd:4e:a0:9c:ca:67: a2:6c:7c:fc:7c:e1:1c:64:54:4e:08:46:61:1b:9c: 8c:aa:27:84:73:5e:07:a1:88:b9:40:a7:d5:59:43: 42:85:d6:13:df:ba:a6:21:e7:d2:80:3a:6e:63:95: 0a:f9:0a:65:8d:75:6f:dc:cc:61:64:24:61:63:64: 5b:ef:40:6d:3a:2f:b8:8b:3b:b4:82:2a:82:53:91: ee:fb:e9:3f:01:9d:99:2a:15:b0:7f:44:6a:34:7f: 05:cd:07:15:0e:49:60:57:bc:61:9c:3c:f2:75:31: 14:70:4d:15:02:72:3f:5e:f1:55:40:f1:d8:d7:8e: ea:f4:fb:62:96:39:e6:3f:ac:6c:64:d2:0a:97:a9: ec:70:35:29:80:2f:f7:b0:7b:93:00:ef:a6:d3:c5: f7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F5:CE:AB:B4:EA:19:A6:81:9C:AC:D2:57:68:0C:2B:B5:97:AB:8D X509v3 Authority Key Identifier: keyid:2A:3B:71:13:CD:87:30:2B:2B:15:C0:36:DA:BB:55:A1:C6:1A:4B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:8c:b8:d5:77:2e:e9:17:0c:e7:b2:0e:4c:54:73:b6:c6:31: dd:17:b4:c5:56:b9:b7:fc:63:a4:ea:11:93:a8:25:80:83:02: 3e:1e:00:df:fd:43:29:27:06:aa:ff:b1:16:eb:b2:ed:2f:dc: 08:e9:f4:1c:e1:7e:03:0a:5d:2c:4b:3a:98:63:b0:c7:52:9a: ac:10:c7:8e:ec:50:d8:86:32:23:7c:9d:a2:9d:8a:89:84:3d: f1:8c:a0:98:33:ef:f0:fb:d7:35:a0:41:c2:e6:95:68:e1:c9: 28:95:47:58:5b:d3:62:14:fd:f8:08:a5:8c:53:2a:e1:49:fd: 7c:10:a8:9c:0b:a5:6e:1b:de:9a:59:39:65:a7:8c:8f:90:cb: 76:26:7c:11:d2:6a:b7:35:ce:0e:c5:6d:01:d2:0b:07:ca:2a: ac:3f:1d:ad:e6:3f:80:f0:40:98:8f:d8:e5:20:d2:a6:03:9d: a6:7a:00:08:a6:b8:36:ff:9d:24:1f:83:45:60:cb:6f:d1:1c: f9:8f:d9:39:fb:1c:10:4f:af:15:3e:96:aa:5a:f0:a1:ca:3d: 92:00:54:2f:5a:af:e3:1f:5f:25:66:9c:73:f7:70:43:70:e5: 00:c5:b8:f2:41:3b:43:a2:ae:e5:2a:9a:1e:7d:84:17:98:21: 10:0b:8f:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNN/IARcrbhbs909JP7cJXr8g1JwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzQjcxMTNDRDg3MzAyQjJCMTVDMDM2REFCQjU1QTFD NjFBNEJDNzAeFw0yNjA5MjUwNDI1NTVaFw0yNjA5MjYwNzQ5NTVaMDMxMTAvBgNV BAMTKENDRjVDRUFCQjRFQTE5QTY4MTlDQUNEMjU3NjgwQzJCQjU5N0FCOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz3/nDHW5IQqfd+4LFsguFSmZS 6rf9upbYPuIa1u+7USNLApa1Q6o9ofxyyO5cbNJ5cjtRKrpt7RBLkk/s6dAEyuRm 4r6wWXBWUhPVDYGJuLbh6Fi8OI9piX70Y9SHENnzI91OoJzKZ6JsfPx84RxkVE4I RmEbnIyqJ4RzXgehiLlAp9VZQ0KF1hPfuqYh59KAOm5jlQr5CmWNdW/czGFkJGFj ZFvvQG06L7iLO7SCKoJTke776T8BnZkqFbB/RGo0fwXNBxUOSWBXvGGcPPJ1MRRw TRUCcj9e8VVA8djXjur0+2KWOeY/rGxk0gqXqexwNSmAL/ewe5MA76bTxfffAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzPXOq7TqGaaBnKzSV2gMK7WXq40wHwYDVR0j BBgwFoAUKjtxE82HMCsrFcA22rtVocYaS8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTk4Nzk3NDQtYjgxOC00NmRjLThkOWYtOWMzNTc5M2Y0Y2JiLzAvMkEzQjcxMTND RDg3MzAyQjJCMTVDMDM2REFCQjU1QTFDNjFBNEJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTNCNzExM0NEODczMDJCMkIxNUMwMzZEQUJCNTVBMUM2MUE0 QkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTk4Nzk3NDQtYjgxOC00NmRjLThk OWYtOWMzNTc5M2Y0Y2JiLzAvMkEzQjcxMTNDRDg3MzAyQjJCMTVDMDM2REFCQjU1 QTFDNjFBNEJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmMuNV3LukXDOeyDkxUc7bGMd0XtMVWubf8 Y6TqEZOoJYCDAj4eAN/9QyknBqr/sRbrsu0v3Ajp9BzhfgMKXSxLOphjsMdSmqwQ x47sUNiGMiN8naKdiomEPfGMoJgz7/D71zWgQcLmlWjhySiVR1hb02IU/fgIpYxT KuFJ/XwQqJwLpW4b3ppZOWWnjI+Qy3YmfBHSarc1zg7FbQHSCwfKKqw/Ha3mP4Dw QJiP2OUg0qYDnaZ6AAimuDb/nSQfg0Vgy2/RHPmP2Tn7HBBPrxU+lqpa8KHKPZIA VC9ar+MfXyVmnHP3cENw5QDFuPJBO0OiruUqmh59hBeYIRALj44= -----END CERTIFICATE-----Generated at Fri Sep 25 14:22:54 2026 by rpki-client