$ rpki-client -vvvf rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft File: 2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft (raw, json) Hash identifier: j1AZ8N7vvJQ/K1WSulWIZKNtExyoqmL8hq1q5PvS/gs= Subject key identifier: BB:02:56:3E:50:35:94:1A:A2:73:7B:2D:48:46:B3:EA:2B:7C:04:0A Authority key identifier: 2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63 Certificate issuer: /CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463 Certificate serial: 25D1C97BA7ECE1E979EF933E641E7F113C3792E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 01:07:09 +0000 Manifest this update: Thu 24 Sep 2026 01:02:09 +0000 Manifest next update: Fri 25 Sep 2026 04:50:09 +0000 Files and hashes: 1: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: iJm4NhgPbIn9ZoK9MCrx0LzGYq+XRWtI9oNHEB41bTw=) 2: 2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl (hash: UtprdXdTXQ4Q05UXApb5N50oA4jvjd6BGpbGxE0U84U=) 3: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: 6lFtnPCNARkQq8uMVyUcH9X2yfQ7BRCjGYYqyfiHjKo=) 4: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: i83P/tWxpN7+zDb3L4rKQFgIev7DrUCxoADIDDyJE9U=) 5: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: 6oOlCIxGneY8XQmzJaSA+rXwKrW4Xz1wcUf44XfKjgk=) 6: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: JbxVAMh0l8cOOEqUdkvkAwk1Vty1kRSyKXbV2pl/yFg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d1:c9:7b:a7:ec:e1:e9:79:ef:93:3e:64:1e:7f:11:3c:37:92:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463 Validity Not Before: Sep 24 01:02:09 2026 GMT Not After : Sep 25 04:50:09 2026 GMT Subject: CN=BB02563E5035941AA2737B2D4846B3EA2B7C040A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:df:38:11:5d:79:d9:eb:16:ed:80:0b:19:ca: c5:75:ab:12:aa:91:11:c0:0b:3f:af:0f:09:8a:fc: 8d:5d:9b:30:bd:a0:f5:c6:03:a0:8f:ef:44:b1:1f: 2e:83:3d:3f:ec:78:73:33:f7:9d:c4:0d:ad:f4:0d: ac:a2:40:1a:80:68:13:01:b8:b2:fe:21:21:f4:f7: f9:c0:ee:8c:b9:28:49:6f:54:44:38:a4:65:b1:01: 3e:3e:f8:72:50:98:1b:20:93:17:93:77:53:87:de: fb:2f:8f:1f:aa:e9:cb:85:37:3d:c8:53:de:a6:d9: 50:fd:38:bb:62:e6:a9:05:5a:d5:bf:73:af:f7:a4: 3c:6b:40:5b:d4:e5:67:d0:cc:f6:9e:13:16:8e:a0: 1c:51:2f:52:7a:73:b7:df:87:0a:40:44:53:9e:e0: 01:4b:50:14:bc:55:c7:39:16:4d:94:88:4a:8d:52: 01:d1:ed:15:0f:bb:c4:41:9b:d7:24:2f:a7:c6:8d: 5b:f6:23:b7:fa:13:66:36:51:69:27:53:54:8c:8e: 20:d3:2b:3c:34:6f:6c:cd:de:f5:ae:e2:0b:c6:00: 09:87:8f:9a:ba:a0:4d:f2:58:f8:7a:77:71:d2:5a: f2:25:34:f9:15:f2:af:85:01:c9:e7:9a:29:f3:7d: 05:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:02:56:3E:50:35:94:1A:A2:73:7B:2D:48:46:B3:EA:2B:7C:04:0A X509v3 Authority Key Identifier: keyid:2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:5a:bb:06:ff:11:28:fe:56:ae:87:97:d6:80:dc:17:ff:42: f0:1c:42:7c:4f:85:5e:3b:16:f5:ca:39:7e:ff:20:d4:69:59: 05:bb:c8:14:34:8c:bd:e7:2f:ee:40:a6:7b:66:51:b4:7d:05: 3d:18:d0:97:c8:48:2c:a7:71:62:b8:f7:da:01:b7:a2:b7:b4: 14:96:b3:17:01:80:dc:96:f0:e1:1f:66:66:9f:5d:ce:12:4a: 49:b5:bb:b4:ed:83:31:67:e8:5f:cf:77:98:62:53:93:45:0c: fb:65:4d:ea:f1:3a:ce:e3:46:c7:85:0a:bf:91:c0:38:77:2a: 44:02:12:73:9d:87:47:cb:a9:0d:6e:66:f9:eb:e8:2b:8b:dd: 7a:c8:8d:f5:e2:aa:47:fc:39:7c:26:0d:0f:5d:75:f8:95:3d: 9e:79:67:1d:90:72:e3:fa:d2:d2:a3:37:29:cd:3f:93:db:f8: e3:17:91:ac:b8:c2:5d:ae:d7:2a:86:f1:c9:f5:22:8c:4f:a2: f9:1c:15:05:9d:83:20:c0:83:7f:8b:7c:3a:0c:6b:53:4c:80: 6c:0a:ce:3a:c7:88:32:65:d0:2e:7c:ee:57:13:e7:f6:f7:ee: ba:66:fa:bc:b5:12:c9:85:2d:88:86:ef:a9:38:3a:9b:74:6c: b9:a0:dd:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJdHJe6fs4el575M+ZB5/ETw3kuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzMTM3RUVGNzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3 MkUyQzQ2MzAeFw0yNjA5MjQwMTAyMDlaFw0yNjA5MjUwNDUwMDlaMDMxMTAvBgNV BAMTKEJCMDI1NjNFNTAzNTk0MUFBMjczN0IyRDQ4NDZCM0VBMkI3QzA0MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf3zgRXXnZ6xbtgAsZysV1qxKq kRHACz+vDwmK/I1dmzC9oPXGA6CP70SxHy6DPT/seHMz953EDa30DayiQBqAaBMB uLL+ISH09/nA7oy5KElvVEQ4pGWxAT4++HJQmBsgkxeTd1OH3vsvjx+q6cuFNz3I U96m2VD9OLti5qkFWtW/c6/3pDxrQFvU5WfQzPaeExaOoBxRL1J6c7ffhwpARFOe 4AFLUBS8Vcc5Fk2UiEqNUgHR7RUPu8RBm9ckL6fGjVv2I7f6E2Y2UWknU1SMjiDT Kzw0b2zN3vWu4gvGAAmHj5q6oE3yWPh6d3HSWvIlNPkV8q+FAcnnminzfQWRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuwJWPlA1lBqic3stSEaz6it8BAowHwYDVR0j BBgwFoAUKjE37vd/GvFvehLdbTaUTHLixGMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI4ZWVjNWItNTMyNC00NDIyLWEzMmYtOWIxZGNlZDM3NTlmLzAvMkEzMTM3RUVG NzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3MkUyQzQ2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTMxMzdFRUY3N0YxQUYxNkY3QTEyREQ2RDM2OTQ0QzcyRTJD NDYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMkEzMTM3RUVGNzdGMUFGMTZGN0ExMkRENkQzNjk0 NEM3MkUyQzQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpauwb/ESj+Vq6Hl9aA3Bf/QvAcQnxPhV47 FvXKOX7/INRpWQW7yBQ0jL3nL+5ApntmUbR9BT0Y0JfISCyncWK499oBt6K3tBSW sxcBgNyW8OEfZmafXc4SSkm1u7TtgzFn6F/Pd5hiU5NFDPtlTerxOs7jRseFCr+R wDh3KkQCEnOdh0fLqQ1uZvnr6CuL3XrIjfXiqkf8OXwmDQ9ddfiVPZ55Zx2QcuP6 0tKjNynNP5Pb+OMXkay4wl2u1yqG8cn1IoxPovkcFQWdgyDAg3+LfDoMa1NMgGwK zjrHiDJl0C587lcT5/b37rpm+ry1EsmFLYiG76k4Opt0bLmg3VQ= -----END CERTIFICATE-----Generated at Thu Sep 24 13:59:08 2026 by rpki-client