$ rpki-client -vvvf rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft File: 2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft (raw, json) Hash identifier: Q4g5Td3ktPAsJffJQ0DVqbRX47Olw7c1WhIYkmhwqQI= Subject key identifier: 2E:19:93:D9:74:99:CB:78:8D:A2:FA:45:C3:6B:D2:F6:F8:D8:FC:EF Authority key identifier: 2A:0F:66:41:16:FB:E2:E0:71:7E:83:DF:D4:F2:B6:ED:EB:09:E1:7E Certificate issuer: /CN=2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E Certificate serial: 2A01AC7E8410538E3695530BC90C2CBA248FD69B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 06:38:56 +0000 Manifest this update: Fri 25 Sep 2026 06:33:56 +0000 Manifest next update: Sat 26 Sep 2026 08:17:56 +0000 Files and hashes: 1: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (hash: MDqOFg62hmCAUHW4Muj3krYCTsgPpqhMHNl5EdSS1rQ=) 2: 3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (hash: /Da4Pm0aCGjoevGiiRcx0Xt7whtWvoaG8WYvVgD2NtQ=) 3: 3130332e36372e39302e302f32342d3234203d3e20313532303035.roa (hash: D74+LFtaiM6p1bNo+g/DP+Bfx1wgVTvyGuc6jRnjUKM=) 4: 2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl (hash: gbwzBhBcWUPN3ZnRedTWnxznF94W+R81329Kpf/N4Ns=) 5: 323030313a6466333a316363303a3a2f34382d3438203d3e20313532303035.roa (hash: 6lgQliV3qWJWSqE96iH08yO2bxxIknhiUKxtAeSrcOo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 05:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:01:ac:7e:84:10:53:8e:36:95:53:0b:c9:0c:2c:ba:24:8f:d6:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E Validity Not Before: Sep 25 06:33:56 2026 GMT Not After : Sep 26 08:17:56 2026 GMT Subject: CN=2E1993D97499CB788DA2FA45C36BD2F6F8D8FCEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8d:d1:c0:7a:a9:63:a9:b3:33:25:44:f5:6a: e9:db:c5:5a:e3:16:59:9d:77:54:4f:9d:5a:ae:73: 71:60:a0:b3:46:7b:fb:88:04:bb:03:27:c2:7b:ea: 44:c4:fd:cb:16:1f:ee:be:13:f0:80:f8:2e:23:84: fe:1f:14:70:ff:c8:93:cf:a5:af:70:93:f0:32:9b: 63:93:9e:ba:23:14:f7:0c:26:a6:7a:75:6a:d3:22: e0:15:ec:59:2c:a3:aa:52:30:9b:97:b3:76:cc:af: 38:ad:b9:25:86:71:28:29:fd:e8:88:99:59:51:7f: f7:53:e3:bc:a0:4e:cb:8e:f6:a4:91:81:3f:17:dd: 51:c0:fe:0c:0b:54:5d:bd:31:b1:09:83:c9:e3:d6: 67:7e:07:94:01:16:83:38:8b:3f:ce:98:a6:b4:57: 9c:af:38:5b:12:ea:40:d0:9a:4d:de:35:7b:ee:dc: 7b:a7:91:8c:fc:c6:76:06:1b:a9:e1:57:f5:97:74: 56:3f:82:19:b1:92:08:cb:27:6a:31:3c:f6:63:ab: b2:66:23:b7:88:8c:ce:70:b5:0d:fb:ee:0e:21:7a: 16:41:0b:7c:2c:cc:3b:47:7e:70:4f:fb:ca:7b:78: c4:89:2d:b5:d7:a9:e4:51:4b:60:b7:06:c5:e8:75: e3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:19:93:D9:74:99:CB:78:8D:A2:FA:45:C3:6B:D2:F6:F8:D8:FC:EF X509v3 Authority Key Identifier: keyid:2A:0F:66:41:16:FB:E2:E0:71:7E:83:DF:D4:F2:B6:ED:EB:09:E1:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:66:7f:be:ed:13:9b:85:4c:ec:b9:47:c1:2a:d1:fc:56:a5: 99:d2:86:21:07:82:24:7a:af:66:b0:b1:48:a5:fb:4f:d8:73: ae:df:4b:80:14:99:8e:aa:dd:a8:b7:b6:47:b6:a8:3e:e2:82: 9d:58:51:2d:01:9a:ee:65:6a:4a:dd:de:89:63:31:6c:80:18: f2:97:fb:42:c8:43:7f:a7:72:ac:3d:43:cc:17:1b:05:fa:86: 66:c5:0a:31:47:e2:ba:31:21:db:9c:3b:64:87:1d:b5:6b:45: 0a:d2:f1:99:c5:69:9f:b6:e2:07:6b:54:52:7e:5c:41:46:2f: dd:ff:17:b5:52:3f:84:1f:5c:85:6f:0d:aa:e5:ed:33:59:55: 2f:7e:4c:c3:66:1b:98:b3:26:12:8a:6c:f3:05:f1:be:5f:8c: 9f:25:16:32:9a:3c:47:2e:1f:50:6f:aa:87:4d:f4:18:8a:92: 9c:2b:5e:c6:12:63:d6:c4:9d:8b:fc:50:72:0a:6b:c6:2a:f9: 94:bc:c7:75:2d:d9:17:88:bd:c5:9f:d0:72:51:24:d2:3f:eb: 6c:36:7c:fb:ae:2e:76:66:e1:fd:3b:5f:5e:c8:26:89:92:d4: 52:2c:b6:c9:de:99:7a:71:81:23:f2:6c:4f:1a:07:64:1d:8e: e6:6f:ed:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgGsfoQQU442lVMLyQwsuiSP1pswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwRjY2NDExNkZCRTJFMDcxN0U4M0RGRDRGMkI2RURF QjA5RTE3RTAeFw0yNjA5MjUwNjMzNTZaFw0yNjA5MjYwODE3NTZaMDMxMTAvBgNV BAMTKDJFMTk5M0Q5NzQ5OUNCNzg4REEyRkE0NUMzNkJEMkY2RjhEOEZDRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZjdHAeqljqbMzJUT1aunbxVrj Flmdd1RPnVquc3FgoLNGe/uIBLsDJ8J76kTE/csWH+6+E/CA+C4jhP4fFHD/yJPP pa9wk/Aym2OTnrojFPcMJqZ6dWrTIuAV7Fkso6pSMJuXs3bMrzituSWGcSgp/eiI mVlRf/dT47ygTsuO9qSRgT8X3VHA/gwLVF29MbEJg8nj1md+B5QBFoM4iz/OmKa0 V5yvOFsS6kDQmk3eNXvu3HunkYz8xnYGG6nhV/WXdFY/ghmxkgjLJ2oxPPZjq7Jm I7eIjM5wtQ377g4hehZBC3wszDtHfnBP+8p7eMSJLbXXqeRRS2C3BsXodePDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULhmT2XSZy3iNovpFw2vS9vjY/O8wHwYDVR0j BBgwFoAUKg9mQRb74uBxfoPf1PK27esJ4X4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg0ODg1MTktOGYwNC00NGY1LTgzMTItOGQ5ZDM2MTZkMGQ5LzAvMkEwRjY2NDEx NkZCRTJFMDcxN0U4M0RGRDRGMkI2RURFQjA5RTE3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTBGNjY0MTE2RkJFMkUwNzE3RTgzREZENEYyQjZFREVCMDlF MTdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg0ODg1MTktOGYwNC00NGY1LTgz MTItOGQ5ZDM2MTZkMGQ5LzAvMkEwRjY2NDExNkZCRTJFMDcxN0U4M0RGRDRGMkI2 RURFQjA5RTE3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVmf77tE5uFTOy5R8Eq0fxWpZnShiEHgiR6 r2awsUil+0/Yc67fS4AUmY6q3ai3tke2qD7igp1YUS0Bmu5lakrd3oljMWyAGPKX +0LIQ3+ncqw9Q8wXGwX6hmbFCjFH4roxIducO2SHHbVrRQrS8ZnFaZ+24gdrVFJ+ XEFGL93/F7VSP4QfXIVvDarl7TNZVS9+TMNmG5izJhKKbPMF8b5fjJ8lFjKaPEcu H1BvqodN9BiKkpwrXsYSY9bEnYv8UHIKa8Yq+ZS8x3Ut2ReIvcWf0HJRJNI/62w2 fPuuLnZm4f07X17IJomS1FIstsnemXpxgSPybE8aB2QdjuZv7f8= -----END CERTIFICATE-----Generated at Fri Sep 25 08:52:26 2026 by rpki-client