$ rpki-client -vvf rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft File: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft (raw, json) Hash identifier: wTxemHlcMxnlav8Zdy+ZyTFTk+Ys4VJaFE0LK93CLZM= Subject key identifier: CA:74:8B:64:06:DA:E5:FA:EC:90:49:2B:E7:6A:C4:D1:4C:C1:9E:E3 Authority key identifier: A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 Certificate issuer: /CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Certificate serial: 68C3FB64B8FEBA707E25D0111C3944A2CC23FD6B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 16:04:32 +0000 Manifest this update: Thu 23 Jul 2026 15:59:32 +0000 Manifest next update: Fri 24 Jul 2026 17:48:32 +0000 Files and hashes: 1: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl (hash: gxJl6pQPeVAS1N/XHrB8L4sA6TljgbDXpFGWy/qIGus=) 2: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: C70wRs8+D3qa05IzuPgxi0Gg8OUanZPuCF0j6nRzOxs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c3:fb:64:b8:fe:ba:70:7e:25:d0:11:1c:39:44:a2:cc:23:fd:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Validity Not Before: Jul 23 15:59:32 2026 GMT Not After : Jul 24 17:48:32 2026 GMT Subject: CN=CA748B6406DAE5FAEC90492BE76AC4D14CC19EE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:a4:5e:06:89:e9:50:17:b4:40:d1:9b:c2: e4:23:c1:72:ac:07:ad:90:4e:13:b5:2a:6b:36:cd: 50:c7:9e:5f:6e:37:d3:28:4e:b4:1e:ae:1c:93:2e: 12:22:d1:bf:eb:f7:d4:af:b8:8b:10:3e:ec:5d:49: 42:a3:04:48:17:92:b9:e6:4f:4f:22:ce:ab:3f:89: 4b:dc:72:e2:e7:b7:14:74:c6:d6:9d:5d:53:33:26: a0:ae:6f:3a:c4:55:54:9e:63:cc:19:93:58:fe:cf: 4a:de:67:df:38:9c:1f:5f:ed:10:10:52:e5:63:e4: 45:82:c7:07:58:64:23:ea:0a:bc:9e:7b:d3:ef:e8: 7f:6b:a7:42:8c:b6:e0:9e:bb:1f:fa:db:8e:c9:1a: e5:21:5b:3f:7f:bf:b1:c3:71:07:91:05:ff:4f:41: a4:b0:a6:0d:c7:80:59:8b:66:77:5f:38:e6:ec:9d: 73:1a:e7:9b:9d:c3:70:d5:1e:f8:56:d7:4c:4d:4e: 84:2e:35:ee:ee:ba:4a:ba:19:a4:fb:4a:3d:ca:a5: 8e:46:a7:35:72:e5:0d:d5:f7:34:2b:be:17:1b:97: b0:dc:54:10:8e:df:89:e4:3e:a7:9a:bd:a1:f5:88: 5c:51:3e:c5:ff:23:b7:44:83:23:ef:36:45:ef:6a: f3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:74:8B:64:06:DA:E5:FA:EC:90:49:2B:E7:6A:C4:D1:4C:C1:9E:E3 X509v3 Authority Key Identifier: keyid:A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:ec:63:02:84:d5:81:09:7c:8c:ac:82:27:6d:c4:2c:bb:21: 8f:c6:1b:59:92:3b:32:c4:e0:6f:8b:80:9d:9c:84:d3:32:eb: e2:8f:16:62:1d:2a:f6:f3:6b:75:20:c9:b1:79:f6:dc:87:5e: 4c:70:6b:76:ea:76:b9:cd:35:ca:f3:ed:4d:c7:d2:b8:70:44: fa:5f:20:cf:3e:67:6d:40:41:a3:19:5d:ef:d7:68:72:5a:0d: c2:31:4f:3c:a4:a8:c4:a8:21:c9:41:b1:1d:70:9f:e1:cb:e1: 90:ac:a1:ba:3b:95:1f:8c:e2:db:77:3f:a8:c6:86:7f:13:44: 9d:50:e1:32:06:b5:5c:ad:e3:45:68:a6:4f:20:ef:a0:13:0d: c3:95:22:f0:2c:04:ef:4d:72:8b:ac:90:5f:47:31:dd:9d:58: 16:19:37:52:a3:08:47:31:4f:40:ef:9b:b3:7a:b0:48:df:a5: e3:7b:a8:5f:46:e7:01:29:4a:42:3b:cf:fc:3d:a4:76:c7:c2: ac:42:f3:03:81:87:e6:31:ac:5d:8a:2a:5e:f4:aa:2a:3d:79: e5:80:0e:8a:a1:36:fe:82:c2:f8:ac:9e:d3:14:4c:f4:fc:35: 29:6b:c7:f0:6f:c8:6a:98:4e:31:c3:b4:9f:a5:47:44:35:66: 84:a5:ac:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaMP7ZLj+unB+JdARHDlEoswj/WswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3 NzcyRUU4NjAeFw0yNjA3MjMxNTU5MzJaFw0yNjA3MjQxNzQ4MzJaMDMxMTAvBgNV BAMTKENBNzQ4QjY0MDZEQUU1RkFFQzkwNDkyQkU3NkFDNEQxNENDMTlFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPz6ReBonpUBe0QNGbwuQjwXKs B62QThO1Kms2zVDHnl9uN9MoTrQerhyTLhIi0b/r99SvuIsQPuxdSUKjBEgXkrnm T08izqs/iUvccuLntxR0xtadXVMzJqCubzrEVVSeY8wZk1j+z0reZ984nB9f7RAQ UuVj5EWCxwdYZCPqCryee9Pv6H9rp0KMtuCeux/6247JGuUhWz9/v7HDcQeRBf9P QaSwpg3HgFmLZndfOObsnXMa55udw3DVHvhW10xNToQuNe7uukq6GaT7Sj3KpY5G pzVy5Q3V9zQrvhcbl7DcVBCO34nkPqeavaH1iFxRPsX/I7dEgyPvNkXvavMNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUynSLZAba5frskEkr52rE0UzBnuMwHwYDVR0j BBgwFoAUosq8LlK/fmX8UB8HrEg0rHdy7oYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJkYWI0NmEtMDg1ZS00NDMyLTk4MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1 MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3NzcyRUU4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkNBQkMyRTUyQkY3RTY1RkM1MDFGMDdBQzQ4MzRBQzc3NzJF RTg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0 QUM3NzcyRUU4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALLsYwKE1YEJfIysgidtxCy7IY/GG1mSOzLE 4G+LgJ2chNMy6+KPFmIdKvbza3UgybF59tyHXkxwa3bqdrnNNcrz7U3H0rhwRPpf IM8+Z21AQaMZXe/XaHJaDcIxTzykqMSoIclBsR1wn+HL4ZCsobo7lR+M4tt3P6jG hn8TRJ1Q4TIGtVyt40Vopk8g76ATDcOVIvAsBO9NcouskF9HMd2dWBYZN1KjCEcx T0Dvm7N6sEjfpeN7qF9G5wEpSkI7z/w9pHbHwqxC8wOBh+YxrF2KKl70qio9eeWA DoqhNv6CwvisntMUTPT8NSlrx/BvyGqYTjHDtJ+lR0Q1ZoSlrNM= -----END CERTIFICATE-----Generated at Fri Jul 24 07:40:28 2026 by rpki-client