$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft File: 2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft (raw, json) Hash identifier: 9gt/G7PVQY5XCMhaN7C4xvczdUYOfJuLQCAg7YGadB8= Subject key identifier: ED:9F:02:04:56:96:42:1B:D9:B0:FD:9B:AE:1D:93:1D:06:1E:9F:F9 Authority key identifier: 2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5 Certificate issuer: /CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5 Certificate serial: 2277DFC84DEBF5FCACD97A4A094FB33F17CCCBFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 20:26:17 +0000 Manifest this update: Wed 23 Sep 2026 20:21:17 +0000 Manifest next update: Thu 24 Sep 2026 23:25:17 +0000 Files and hashes: 1: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: 8N1ryLqGS1Ck4AODHf8NX/rVMxyMRb5QCwGLiIIXGg8=) 2: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: K2AeuLRVAE8BPE4wuWW8WhZGZyYvk9GHwxpL0SCIDfk=) 3: 2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl (hash: SxBrMVP/pCUV2kZZpk0RaYg+0RqK0+hWdAXwA27slME=) 4: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: 8wKUF9NYC7pRZOxvlEf5LxZ2nZECYvwr1BSS5u1G+4Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:77:df:c8:4d:eb:f5:fc:ac:d9:7a:4a:09:4f:b3:3f:17:cc:cb:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5 Validity Not Before: Sep 23 20:21:17 2026 GMT Not After : Sep 24 23:25:17 2026 GMT Subject: CN=ED9F02045696421BD9B0FD9BAE1D931D061E9FF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:82:48:3c:53:3b:95:84:4f:07:91:d7:58:65: 16:64:f2:b0:d5:14:4a:5c:7f:20:d1:ca:0d:c2:7a: fe:ad:ed:d9:dd:74:68:8e:df:dd:fb:91:a0:70:61: da:62:ae:c3:26:6d:cd:c4:ab:02:4d:f8:45:14:8c: 38:e1:ad:0d:5f:ed:63:7b:b6:21:2d:9a:36:64:34: 8e:9f:97:b7:6b:6b:40:bf:3d:d8:ea:84:e1:f8:d4: 1e:c8:60:48:12:1a:83:12:54:9e:86:9f:46:54:27: 9f:d1:3c:63:15:1c:d8:7d:4b:92:fa:af:f3:8d:8a: 45:a0:90:31:a6:86:c0:c6:71:e2:31:6a:cb:0f:80: c8:f1:85:db:77:8b:c2:88:4d:62:84:d2:53:90:15: 59:3f:cc:77:d0:a2:9b:b3:93:b8:fd:8b:29:ba:d8: fd:28:c3:4e:d5:6f:87:ef:5d:83:9e:09:29:bd:73: 6b:ec:40:6d:b8:d4:ee:4f:79:02:7b:9a:03:ba:73: db:50:d2:eb:cd:a4:f9:8e:d3:0b:81:3e:e4:3f:3d: 5e:83:6f:2d:05:d5:81:1e:cf:f9:50:e0:3a:95:25: df:09:87:57:d6:be:d3:b5:1c:26:48:a8:f5:aa:57: 7a:c5:da:63:d3:3b:63:62:f8:71:b1:8b:67:05:c1: de:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9F:02:04:56:96:42:1B:D9:B0:FD:9B:AE:1D:93:1D:06:1E:9F:F9 X509v3 Authority Key Identifier: keyid:2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:bd:1a:70:f4:32:e0:ff:84:66:f6:7b:46:9e:ee:30:2b:33: eb:e3:64:f0:5b:0e:68:d8:44:41:3d:3d:83:24:11:9a:83:35: c2:a2:13:a3:88:50:9b:27:57:51:0e:74:b2:ea:d6:3c:6e:c0: a2:bb:d9:52:ec:e8:37:a3:d1:78:3b:fb:9a:fb:61:ff:77:91: c3:10:ba:b3:32:53:0b:73:24:85:19:c6:ef:d3:cf:20:14:a2: 89:5e:e4:15:ce:95:f1:3a:d3:cd:0e:3a:62:62:e3:c2:56:5b: b0:6b:8a:e3:dd:31:7c:1a:7c:d5:c3:60:ce:1b:00:a8:c6:bb: 66:1b:01:45:f1:16:48:f4:75:43:2d:32:b9:1f:bb:41:34:0a: 53:85:58:43:f2:d4:82:f0:5e:b1:dd:e5:0c:74:41:9f:d8:5e: fd:b2:03:f0:07:02:87:c1:27:31:5f:db:1f:9f:16:a5:08:f1: 57:52:bb:e4:3e:59:0a:f6:8f:7f:2c:40:7a:1e:d1:fe:77:8b: 2e:7b:fc:b3:4d:59:ee:0e:ae:45:58:4a:80:fe:18:a1:f8:ad: 27:30:ee:f1:bc:9a:9b:f5:e1:78:08:2a:ca:ee:8b:6e:7c:cc: 68:88:9c:f4:68:a3:4f:de:f9:2a:14:c4:e5:38:ff:57:c0:44: 35:a7:45:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUInffyE3r9fys2XpKCU+zPxfMy/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFFMTQzM0JCODJGMjc3MTZERjUyNkRBRENDQzRDMkIz NzU4OUNBNTAeFw0yNjA5MjMyMDIxMTdaFw0yNjA5MjQyMzI1MTdaMDMxMTAvBgNV BAMTKEVEOUYwMjA0NTY5NjQyMUJEOUIwRkQ5QkFFMUQ5MzFEMDYxRTlGRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWgkg8UzuVhE8HkddYZRZk8rDV FEpcfyDRyg3Cev6t7dnddGiO3937kaBwYdpirsMmbc3EqwJN+EUUjDjhrQ1f7WN7 tiEtmjZkNI6fl7dra0C/PdjqhOH41B7IYEgSGoMSVJ6Gn0ZUJ5/RPGMVHNh9S5L6 r/ONikWgkDGmhsDGceIxassPgMjxhdt3i8KITWKE0lOQFVk/zHfQopuzk7j9iym6 2P0ow07Vb4fvXYOeCSm9c2vsQG241O5PeQJ7mgO6c9tQ0uvNpPmO0wuBPuQ/PV6D by0F1YEez/lQ4DqVJd8Jh1fWvtO1HCZIqPWqV3rF2mPTO2Ni+HGxi2cFwd63AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Z8CBFaWQhvZsP2brh2THQYen/kwHwYDVR0j BBgwFoAUKuFDO7gvJ3Ft9Sba3MxMKzdYnKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQwMTFhMWMtYTBhZC00ZDkzLTg2YWYtM2YwYWFkZDk2ODRmLzAvMkFFMTQzM0JC ODJGMjc3MTZERjUyNkRBRENDQzRDMkIzNzU4OUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yQUUxNDMzQkI4MkYyNzcxNkRGNTI2REFEQ0NDNEMyQjM3NTg5 Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvMkFFMTQzM0JCODJGMjc3MTZERjUyNkRBRENDQzRD MkIzNzU4OUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIu9GnD0MuD/hGb2e0ae7jArM+vjZPBbDmjY REE9PYMkEZqDNcKiE6OIUJsnV1EOdLLq1jxuwKK72VLs6Dej0Xg7+5r7Yf93kcMQ urMyUwtzJIUZxu/TzyAUoole5BXOlfE6080OOmJi48JWW7BriuPdMXwafNXDYM4b AKjGu2YbAUXxFkj0dUMtMrkfu0E0ClOFWEPy1ILwXrHd5Qx0QZ/YXv2yA/AHAofB JzFf2x+fFqUI8VdSu+Q+WQr2j38sQHoe0f53iy57/LNNWe4OrkVYSoD+GKH4rScw 7vG8mpv14XgIKsrui258zGiInPRoo0/e+SoUxOU4/1fARDWnReY= -----END CERTIFICATE-----Generated at Thu Sep 24 00:23:18 2026 by rpki-client