$ rpki-client -vvvf rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft File: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft (raw, json) Hash identifier: CP/T0z1qwlAEAtMuBV6cFYgQlDr/31/UwA8orBtiKKw= Subject key identifier: D3:06:DA:26:7B:36:51:33:C5:BB:CC:36:91:E8:66:F4:26:88:5D:0D Authority key identifier: A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 Certificate issuer: /CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Certificate serial: 4BE89305CE8DE70027DCDEEE76382FDA0C112491 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 17:05:57 +0000 Manifest this update: Sat 14 Nov 2026 17:00:57 +0000 Manifest next update: Sun 15 Nov 2026 17:40:57 +0000 Files and hashes: 1: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: C70wRs8+D3qa05IzuPgxi0Gg8OUanZPuCF0j6nRzOxs=) 2: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl (hash: /4kkf3R7AGZUVefGhQc603Gt39zL9r2NvtuWluULebM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 17:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e8:93:05:ce:8d:e7:00:27:dc:de:ee:76:38:2f:da:0c:11:24:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Validity Not Before: Nov 14 17:00:57 2026 GMT Not After : Nov 15 17:40:57 2026 GMT Subject: CN=D306DA267B365133C5BBCC3691E866F426885D0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:89:2a:7f:ba:4c:c9:e9:70:3d:3e:c3:68:b0: 23:d2:8b:2e:0a:df:1f:ba:41:9c:40:38:15:67:1a: e9:d6:bc:2d:b6:b0:01:fc:50:70:de:7a:91:d0:94: 82:2e:cc:ff:13:68:e2:c2:0e:4e:e1:b2:59:11:de: 3e:23:44:42:69:66:36:8b:2c:0a:dc:6e:6d:64:04: e6:83:ae:26:cb:40:1e:bd:a8:11:a4:bd:c0:60:63: f3:7e:5f:5e:43:83:51:fe:52:b9:98:08:ae:bb:08: 23:51:66:08:12:69:10:47:da:6c:1e:46:0b:93:79: 97:00:51:fc:a2:94:0c:a9:7c:da:3b:61:45:cd:92: 1c:8e:f3:b7:f7:e5:06:38:de:eb:92:b2:83:6e:4f: f3:14:62:18:24:62:72:89:70:a2:36:10:a8:46:b7: bb:5e:f0:e6:e2:02:98:4f:9d:4d:9c:7c:11:4a:75: 63:00:96:1c:51:63:64:74:45:5a:44:58:ff:17:68: 12:f4:50:b9:f2:07:f7:38:14:4e:a9:eb:23:90:d9: d3:fa:7e:78:67:72:b1:aa:b4:41:da:4c:43:cd:07: 28:f6:e0:3d:42:0d:58:83:d7:bc:8f:56:ce:8b:8d: 21:0d:19:83:41:df:6b:77:76:ec:51:ed:75:02:a2: a8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:06:DA:26:7B:36:51:33:C5:BB:CC:36:91:E8:66:F4:26:88:5D:0D X509v3 Authority Key Identifier: keyid:A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ec:17:a7:1d:90:08:57:bb:81:4d:b6:16:47:82:6a:7f:0b: 27:ac:bd:fa:ea:9d:c2:7a:99:36:d2:4f:2a:34:fa:80:50:ff: 5b:a1:c2:99:8c:6c:3c:7f:e1:0e:56:19:8f:3f:b8:85:89:24: ad:ca:16:7d:d8:d2:1e:34:a9:d2:0f:9b:6a:09:c7:36:49:bb: 86:49:58:f5:e6:6a:bd:53:bf:61:da:ad:cf:6b:39:13:94:f4: d4:4c:c9:05:b3:bd:25:c7:51:ea:f2:be:32:8d:95:4f:47:75: 82:db:ef:05:52:d6:05:f2:01:d4:0c:f0:27:0a:c9:b9:ca:66: a9:9a:6d:2b:14:42:a2:f9:ba:01:80:4b:44:23:66:fe:02:57: 0d:66:56:4d:58:cc:cf:52:02:fd:2d:97:71:a1:87:f1:90:b3: 9e:f2:36:e4:2a:5a:30:27:05:12:03:8b:22:c6:d1:52:92:c0: 47:00:64:17:fb:c9:85:7d:0d:7e:f9:e9:58:50:c4:f1:47:b7: ad:00:36:0a:2f:99:04:53:36:b8:73:6c:6c:58:c7:3c:e1:a6: 28:24:a0:70:e5:be:64:49:c3:30:c3:3e:29:e4:f3:86:d9:0f: ac:30:9b:9f:f0:15:56:ea:a3:40:ed:98:7a:52:ab:1e:b6:b0: 2a:cb:62:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS+iTBc6N5wAn3N7udjgv2gwRJJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3 NzcyRUU4NjAeFw0yNjExMTQxNzAwNTdaFw0yNjExMTUxNzQwNTdaMDMxMTAvBgNV BAMTKEQzMDZEQTI2N0IzNjUxMzNDNUJCQ0MzNjkxRTg2NkY0MjY4ODVEMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjiSp/ukzJ6XA9PsNosCPSiy4K 3x+6QZxAOBVnGunWvC22sAH8UHDeepHQlIIuzP8TaOLCDk7hslkR3j4jREJpZjaL LArcbm1kBOaDribLQB69qBGkvcBgY/N+X15Dg1H+UrmYCK67CCNRZggSaRBH2mwe RguTeZcAUfyilAypfNo7YUXNkhyO87f35QY43uuSsoNuT/MUYhgkYnKJcKI2EKhG t7te8ObiAphPnU2cfBFKdWMAlhxRY2R0RVpEWP8XaBL0ULnyB/c4FE6p6yOQ2dP6 fnhncrGqtEHaTEPNByj24D1CDViD17yPVs6LjSENGYNB32t3duxR7XUCoqh7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0wbaJns2UTPFu8w2kehm9CaIXQ0wHwYDVR0j BBgwFoAUosq8LlK/fmX8UB8HrEg0rHdy7oYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJkYWI0NmEtMDg1ZS00NDMyLTk4MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1 MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3NzcyRUU4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkNBQkMyRTUyQkY3RTY1RkM1MDFGMDdBQzQ4MzRBQzc3NzJF RTg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0 QUM3NzcyRUU4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPsF6cdkAhXu4FNthZHgmp/CyesvfrqncJ6 mTbSTyo0+oBQ/1uhwpmMbDx/4Q5WGY8/uIWJJK3KFn3Y0h40qdIPm2oJxzZJu4ZJ WPXmar1Tv2Harc9rOROU9NRMyQWzvSXHUeryvjKNlU9HdYLb7wVS1gXyAdQM8CcK ybnKZqmabSsUQqL5ugGAS0QjZv4CVw1mVk1YzM9SAv0tl3Ghh/GQs57yNuQqWjAn BRIDiyLG0VKSwEcAZBf7yYV9DX756VhQxPFHt60ANgovmQRTNrhzbGxYxzzhpigk oHDlvmRJwzDDPink84bZD6wwm5/wFVbqo0DtmHpSqx62sCrLYlI= -----END CERTIFICATE-----Generated at Sun Nov 15 06:38:30 2026 by rpki-client