$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft File: 2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft (raw, json) Hash identifier: MkKzboil2BqK/roLvRf5fLbTXzX4bORkyiGJoXquXEQ= Subject key identifier: 8C:91:FF:DA:53:D8:D0:C8:19:32:E1:FE:AB:CE:2C:A5:DE:4A:55:FF Authority key identifier: 2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74 Certificate issuer: /CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274 Certificate serial: 770C8E1F16BACD2B812D2C27FFE5A537BA92D546 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 16:57:00 +0000 Manifest this update: Wed 23 Sep 2026 16:52:00 +0000 Manifest next update: Thu 24 Sep 2026 17:14:00 +0000 Files and hashes: 1: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: V2s2v2zyv88cwsslpUJdds/b+6l6rcgW5NHb7V5SYWY=) 2: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: iezQTzMxWp3Coix5fz9eGS/c/h2ulbbwObi3kCUHkW4=) 3: 2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl (hash: CzH4pQBKT8wBDNmsRrDZebHyoJkvjgczFLqhqtMCLoM=) 4: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: 1IjnkMC3ga8KbKp+1i4junuLJGtmG26jgGjukZ4rmxk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:0c:8e:1f:16:ba:cd:2b:81:2d:2c:27:ff:e5:a5:37:ba:92:d5:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274 Validity Not Before: Sep 23 16:52:00 2026 GMT Not After : Sep 24 17:14:00 2026 GMT Subject: CN=8C91FFDA53D8D0C81932E1FEABCE2CA5DE4A55FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:78:bd:77:00:a1:4d:5e:ec:23:3c:32:67:d9: 77:dd:65:47:a1:1b:33:e1:93:8b:02:1c:c4:4e:ea: 5f:6e:8a:17:61:cc:57:df:25:1b:00:24:8f:a9:3c: ec:a8:da:e0:4e:06:c6:ca:0d:2e:76:22:bc:35:e9: bc:3d:c4:7d:ac:23:2f:2e:0d:b5:06:9e:83:bb:ad: 4a:51:21:fc:7b:47:0f:cf:10:ba:62:33:f5:c7:fa: 2e:2a:19:8f:44:13:cc:24:41:fb:0d:1f:92:36:82: e3:f2:5e:de:00:79:e9:17:5c:48:36:3d:2c:5d:2f: 07:df:13:7e:76:e4:0e:ee:58:c8:28:86:d8:b8:10: 82:9a:65:36:64:d4:51:74:13:d7:49:df:d0:72:a6: a1:3a:73:42:07:33:6d:ac:d5:cf:fb:43:1e:88:ac: 54:77:06:8d:b1:7b:b1:20:10:a2:f3:2b:90:27:d4: 61:9a:93:44:bb:a2:27:1e:e4:a5:37:90:f5:b6:16: eb:67:73:e4:e7:18:b4:44:8d:be:a7:2b:23:d9:04: 4d:03:21:72:4a:b1:f3:93:78:68:32:01:61:c0:d7: 84:61:cc:a8:e2:e7:6d:bb:54:52:58:ff:98:f8:81: 85:75:41:90:43:5b:a9:ad:aa:a6:45:d6:18:7a:2d: 1d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:91:FF:DA:53:D8:D0:C8:19:32:E1:FE:AB:CE:2C:A5:DE:4A:55:FF X509v3 Authority Key Identifier: keyid:2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:f4:fe:d8:eb:35:0a:60:79:a8:0c:4c:7e:51:1c:9d:9f:09: 93:eb:7b:3d:7d:d2:cd:1f:44:2e:d1:a7:e8:85:b2:3b:95:51: a1:3f:c2:50:21:0f:e8:9d:22:32:9f:ce:11:67:6c:e6:84:5e: 09:c5:74:c3:0a:c8:ed:47:3d:0c:5c:ab:7a:89:c1:c5:16:80: f0:5a:d1:e6:4b:3e:f7:e1:90:ed:ee:44:dd:80:e1:be:0f:eb: 74:24:87:0a:ca:dc:80:94:fa:88:bc:b0:05:0e:dd:7b:4b:3f: 05:3e:71:96:fe:a6:89:cf:2e:88:80:85:33:8e:d2:97:e1:f6: 0b:8d:c8:66:96:f0:e7:2f:8c:90:5a:54:c3:50:7e:d4:ab:53: cb:e5:f0:ce:9a:17:93:fe:51:f8:e4:aa:bc:ea:df:f4:cb:ca: b0:1d:bd:ad:f6:cd:92:09:0a:57:40:3e:34:c1:4f:4a:5c:bd: f6:0c:82:ab:9b:a7:4a:bf:3a:61:8e:ca:1f:52:61:0c:b1:27: 32:b4:fa:4c:8d:be:12:cb:86:15:14:bf:ec:2a:9b:9e:ca:10: 24:be:6d:e8:45:d4:cd:a6:e6:9d:b9:30:0d:fe:19:f3:c9:f1: 99:90:74:30:67:51:e4:96:73:4c:f7:6a:eb:d4:cd:ed:13:82: d5:4b:4c:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdwyOHxa6zSuBLSwn/+WlN7qS1UYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2RjE2RTgwQkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0QjBE N0Q5QzI3NDAeFw0yNjA5MjMxNjUyMDBaFw0yNjA5MjQxNzE0MDBaMDMxMTAvBgNV BAMTKDhDOTFGRkRBNTNEOEQwQzgxOTMyRTFGRUFCQ0UyQ0E1REU0QTU1RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHeL13AKFNXuwjPDJn2XfdZUeh GzPhk4sCHMRO6l9uihdhzFffJRsAJI+pPOyo2uBOBsbKDS52Irw16bw9xH2sIy8u DbUGnoO7rUpRIfx7Rw/PELpiM/XH+i4qGY9EE8wkQfsNH5I2guPyXt4AeekXXEg2 PSxdLwffE3525A7uWMgohti4EIKaZTZk1FF0E9dJ39BypqE6c0IHM22s1c/7Qx6I rFR3Bo2xe7EgEKLzK5An1GGak0S7oice5KU3kPW2Futnc+TnGLREjb6nKyPZBE0D IXJKsfOTeGgyAWHA14RhzKji5227VFJY/5j4gYV1QZBDW6mtqqZF1hh6LR05AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjJH/2lPY0MgZMuH+q84spd5KVf8wHwYDVR0j BBgwFoAUKm8W6Av9x7TWeXcm+4/UsNfZwnQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E0NjM2MGQtNjYyYi00ZjdkLWJiMTctZDg2MDgyMTUyNDcxLzAvMkE2RjE2RTgw QkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0QjBEN0Q5QzI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTZGMTZFODBCRkRDN0I0RDY3OTc3MjZGQjhGRDRCMEQ3RDlD Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvMkE2RjE2RTgwQkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0 QjBEN0Q5QzI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALn0/tjrNQpgeagMTH5RHJ2fCZPrez190s0f RC7Rp+iFsjuVUaE/wlAhD+idIjKfzhFnbOaEXgnFdMMKyO1HPQxcq3qJwcUWgPBa 0eZLPvfhkO3uRN2A4b4P63QkhwrK3ICU+oi8sAUO3XtLPwU+cZb+ponPLoiAhTOO 0pfh9guNyGaW8OcvjJBaVMNQftSrU8vl8M6aF5P+Ufjkqrzq3/TLyrAdva32zZIJ CldAPjTBT0pcvfYMgqubp0q/OmGOyh9SYQyxJzK0+kyNvhLLhhUUv+wqm57KECS+ behF1M2m5p25MA3+GfPJ8ZmQdDBnUeSWc0z3auvUze0TgtVLTK0= -----END CERTIFICATE-----Generated at Thu Sep 24 02:25:02 2026 by rpki-client