$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft File: 2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft (raw, json) Hash identifier: UASr1LqLUq/9OE3sbi2UzfMKwl2ETncgpTZeXJATeq8= Subject key identifier: A6:E0:9E:E6:CD:77:1B:8B:DB:CA:34:90:50:75:9D:DB:9D:CF:6A:7A Authority key identifier: 2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5 Certificate issuer: /CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5 Certificate serial: 3F5A4C2557646A3537D7AAA20963314273D3F0CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 02:47:39 +0000 Manifest this update: Sun 15 Nov 2026 02:42:39 +0000 Manifest next update: Mon 16 Nov 2026 05:23:39 +0000 Files and hashes: 1: 2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl (hash: wIL1/+eyS6VZfdkHzIZ4+MFreJOh+D829AfeWAZtJ4w=) 2: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: 8wKUF9NYC7pRZOxvlEf5LxZ2nZECYvwr1BSS5u1G+4Y=) 3: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: K2AeuLRVAE8BPE4wuWW8WhZGZyYvk9GHwxpL0SCIDfk=) 4: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: 8N1ryLqGS1Ck4AODHf8NX/rVMxyMRb5QCwGLiIIXGg8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 05:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5a:4c:25:57:64:6a:35:37:d7:aa:a2:09:63:31:42:73:d3:f0:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5 Validity Not Before: Nov 15 02:42:39 2026 GMT Not After : Nov 16 05:23:39 2026 GMT Subject: CN=A6E09EE6CD771B8BDBCA349050759DDB9DCF6A7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:5f:78:c1:b9:b7:ca:91:08:36:ed:00:2a: 7e:c5:d4:e6:99:fc:e5:56:f4:6f:3d:9a:65:30:04: d5:ac:68:b0:14:9d:bd:9d:a3:3d:c9:c4:49:f3:fb: 52:eb:c6:a1:3e:bb:d5:cf:28:d4:1d:e6:29:7d:de: 1e:ab:f9:b9:9a:ea:4e:cf:31:7c:d6:ae:32:95:ad: 95:fd:48:17:4f:a1:55:b8:82:77:79:9a:ba:08:9c: 0e:93:75:1b:fd:63:3f:94:21:4d:62:85:0d:3f:38: 7b:d0:03:ab:4f:b7:58:cf:52:26:39:88:0a:b3:b2: 28:07:cb:c2:9e:b7:e0:9d:fb:26:a3:7a:fa:91:cd: 33:1f:75:38:49:e7:5a:0e:07:fb:1c:31:05:3e:10: c9:09:1d:41:a0:25:ff:30:a7:d9:d9:ac:f4:04:9d: f8:e2:a6:62:bb:b8:f6:97:13:48:f5:8f:f3:e5:c6: 3b:8f:42:85:70:2c:73:8e:cd:48:eb:3d:31:92:b6: b6:49:53:bc:35:df:55:a4:f4:83:0d:b1:bb:29:88: cb:61:dd:ce:c1:d7:3d:60:5b:5f:87:0f:8f:ca:d5: c5:13:d6:08:d8:02:ef:d0:2a:56:b5:f1:d6:ee:bc: c6:f4:d1:56:df:ef:4f:30:0a:d0:42:f3:36:10:19: c8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E0:9E:E6:CD:77:1B:8B:DB:CA:34:90:50:75:9D:DB:9D:CF:6A:7A X509v3 Authority Key Identifier: keyid:2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:1d:4c:f6:2f:e8:a3:d6:9b:3c:8e:86:c6:0d:af:f2:bb:d6: 65:d9:73:d3:f5:07:08:61:cc:81:aa:ab:0f:4f:85:85:f1:32: d9:85:d0:b0:a2:a5:f6:9b:e9:79:3b:b6:85:d7:9d:2b:c0:2f: 51:82:71:25:2e:95:29:bd:8b:c4:35:d2:03:72:29:b4:20:5c: 37:9c:1d:c8:08:78:72:76:cf:1c:62:15:f6:f7:33:ec:ed:5a: f7:db:25:bc:01:54:68:8d:1b:e0:8f:54:84:d4:41:79:d0:2d: 4e:b5:4c:6f:c8:99:1b:96:71:70:42:16:9b:11:7c:28:19:7f: 26:e9:6f:ea:4a:f2:a1:41:8c:6b:71:a5:ba:19:cb:3b:4c:7d: 7d:22:2b:71:46:14:33:9c:0a:c5:3d:ba:24:cf:8c:3e:30:29: 3a:38:26:2e:5f:ed:5a:b3:70:05:05:0a:49:1c:9d:94:f1:50: a7:fb:20:32:99:a7:e0:e3:d7:6e:1e:84:03:da:e6:3a:fe:14: 12:c2:e9:94:b6:70:cc:86:0d:a8:c2:12:85:4b:6b:1c:e4:fc: 6d:18:af:ff:1d:01:4f:f9:75:8d:d8:d9:19:c8:ea:4e:ba:93: 0e:d0:e1:13:8d:79:e8:60:14:50:f5:5f:cb:32:37:cd:07:b9: 66:38:16:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP1pMJVdkajU316qiCWMxQnPT8MswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFFMTQzM0JCODJGMjc3MTZERjUyNkRBRENDQzRDMkIz NzU4OUNBNTAeFw0yNjExMTUwMjQyMzlaFw0yNjExMTYwNTIzMzlaMDMxMTAvBgNV BAMTKEE2RTA5RUU2Q0Q3NzFCOEJEQkNBMzQ5MDUwNzU5RERCOURDRjZBN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6l94wbm3ypEINu0AKn7F1OaZ /OVW9G89mmUwBNWsaLAUnb2doz3JxEnz+1LrxqE+u9XPKNQd5il93h6r+bma6k7P MXzWrjKVrZX9SBdPoVW4gnd5mroInA6TdRv9Yz+UIU1ihQ0/OHvQA6tPt1jPUiY5 iAqzsigHy8Ket+Cd+yajevqRzTMfdThJ51oOB/scMQU+EMkJHUGgJf8wp9nZrPQE nfjipmK7uPaXE0j1j/PlxjuPQoVwLHOOzUjrPTGStrZJU7w131Wk9IMNsbspiMth 3c7B1z1gW1+HD4/K1cUT1gjYAu/QKla18dbuvMb00Vbf708wCtBC8zYQGchnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpuCe5s13G4vbyjSQUHWd253PanowHwYDVR0j BBgwFoAUKuFDO7gvJ3Ft9Sba3MxMKzdYnKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQwMTFhMWMtYTBhZC00ZDkzLTg2YWYtM2YwYWFkZDk2ODRmLzAvMkFFMTQzM0JC ODJGMjc3MTZERjUyNkRBRENDQzRDMkIzNzU4OUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yQUUxNDMzQkI4MkYyNzcxNkRGNTI2REFEQ0NDNEMyQjM3NTg5 Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvMkFFMTQzM0JCODJGMjc3MTZERjUyNkRBRENDQzRD MkIzNzU4OUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANQdTPYv6KPWmzyOhsYNr/K71mXZc9P1Bwhh zIGqqw9PhYXxMtmF0LCipfab6Xk7toXXnSvAL1GCcSUulSm9i8Q10gNyKbQgXDec HcgIeHJ2zxxiFfb3M+ztWvfbJbwBVGiNG+CPVITUQXnQLU61TG/ImRuWcXBCFpsR fCgZfybpb+pK8qFBjGtxpboZyztMfX0iK3FGFDOcCsU9uiTPjD4wKTo4Ji5f7Vqz cAUFCkkcnZTxUKf7IDKZp+Dj124ehAPa5jr+FBLC6ZS2cMyGDajCEoVLaxzk/G0Y r/8dAU/5dY3Y2RnI6k66kw7Q4RONeehgFFD1X8syN80HuWY4Fss= -----END CERTIFICATE-----Generated at Sun Nov 15 14:04:13 2026 by rpki-client