$ rpki-client -vvf rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft File: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft (raw, json) Hash identifier: Y8Sny3Bq51xYZh30l2xUYqyl4DM9/raCpPYjJI0cppE= Subject key identifier: F8:AA:77:0E:11:AD:C8:6F:07:91:4B:3A:71:21:EB:B5:A9:86:75:40 Authority key identifier: A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 Certificate issuer: /CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Certificate serial: 168AC2BA14F5C823214DAB5101BA3C80589DA055 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:08:30 +0000 Manifest this update: Tue 12 May 2026 21:03:30 +0000 Manifest next update: Thu 14 May 2026 00:38:30 +0000 Files and hashes: 1: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: C70wRs8+D3qa05IzuPgxi0Gg8OUanZPuCF0j6nRzOxs=) 2: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl (hash: D6ZPbnEY7Kgtc1TDRbIMMrklfe36tZ2f5cedHIbPUcw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:8a:c2:ba:14:f5:c8:23:21:4d:ab:51:01:ba:3c:80:58:9d:a0:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Validity Not Before: May 12 21:03:30 2026 GMT Not After : May 14 00:38:30 2026 GMT Subject: CN=F8AA770E11ADC86F07914B3A7121EBB5A9867540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9d:02:65:a9:50:a6:67:9c:7f:15:98:7e:03: e4:10:58:c7:cf:e7:26:75:ac:9a:c8:50:33:59:55: 50:a6:ad:e4:9f:db:be:63:c5:3b:32:e0:48:47:51: f5:d7:3a:c9:eb:3b:cc:bd:34:05:21:b7:b0:6c:18: 8a:4d:12:59:ae:a4:85:e1:4b:e2:9c:24:00:a5:cd: 87:1e:14:70:cd:dd:5c:ef:04:1a:e1:9f:5f:0b:27: 2c:35:ea:41:3d:8c:42:2e:59:b1:bb:3b:74:71:35: f8:02:74:a3:d7:fc:46:c3:ea:b0:8c:ae:9c:ac:b1: 53:e3:4d:55:fd:b6:e7:87:78:52:99:de:94:f5:7d: 5e:53:86:a5:d8:6d:ac:89:34:c4:3a:a0:1a:18:93: 12:a6:40:e6:14:e8:0b:03:59:35:8a:36:53:b1:e6: 33:c6:ad:f4:4e:d8:53:b5:e9:fe:8a:a7:8e:5a:71: 89:c7:c6:d4:34:46:56:1f:8b:8a:1a:b8:c3:82:b0: d1:37:da:f5:ac:20:37:ee:45:30:39:78:e0:a1:e4: 49:58:66:a0:7b:c2:e8:7c:a4:7c:5f:0d:be:f5:a8: a6:91:3a:96:21:f6:97:db:54:c3:0a:f3:2c:a0:df: a2:2b:0e:b7:c1:9e:fe:84:e0:f6:e4:9b:a4:00:7c: 31:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AA:77:0E:11:AD:C8:6F:07:91:4B:3A:71:21:EB:B5:A9:86:75:40 X509v3 Authority Key Identifier: keyid:A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1c:6a:47:b3:c0:c8:b6:e2:a2:d8:42:2e:77:9f:6f:b7:70: f9:4b:9d:af:97:5c:1d:90:5c:bd:1b:17:c2:91:51:9f:c0:da: 0d:d2:2a:dd:cb:c7:fc:39:e9:99:28:19:9d:1c:b8:9d:e8:85: 11:38:f9:63:f4:43:bb:43:3c:88:f3:4e:5f:99:95:51:af:dd: 68:2d:b7:7f:a7:fa:c8:a5:33:3d:bb:1e:9a:f7:12:ba:dc:2f: 09:88:7b:f0:64:68:9c:f6:59:b3:96:0c:e2:f7:e2:d2:45:a5: a9:ee:f8:49:95:ef:76:18:10:df:61:1f:84:9f:7c:7d:0a:de: c6:8d:7c:be:68:4f:ba:2b:85:48:6b:0e:06:96:fd:89:7b:70: 41:d5:5a:a4:4c:67:8b:9b:ad:58:51:2c:f9:f4:61:35:4d:d5: ce:5a:3c:c1:7e:5d:df:c2:0e:67:1e:2d:81:b5:da:65:f5:98: 30:36:47:b3:69:b8:94:79:13:fd:a3:bf:04:8b:84:f1:0e:86: fb:3f:2b:fc:61:85:7f:43:56:1e:6c:87:bf:6e:87:35:65:26: 31:15:7e:51:88:2f:7a:f4:0b:16:d7:a1:f2:73:96:d5:eb:84: aa:59:0a:6a:00:87:69:6a:ab:dd:44:17:0e:14:e1:4d:68:d1: 26:e1:3f:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUForCuhT1yCMhTatRAbo8gFidoFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3 NzcyRUU4NjAeFw0yNjA1MTIyMTAzMzBaFw0yNjA1MTQwMDM4MzBaMDMxMTAvBgNV BAMTKEY4QUE3NzBFMTFBREM4NkYwNzkxNEIzQTcxMjFFQkI1QTk4Njc1NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOnQJlqVCmZ5x/FZh+A+QQWMfP 5yZ1rJrIUDNZVVCmreSf275jxTsy4EhHUfXXOsnrO8y9NAUht7BsGIpNElmupIXh S+KcJAClzYceFHDN3VzvBBrhn18LJyw16kE9jEIuWbG7O3RxNfgCdKPX/EbD6rCM rpyssVPjTVX9tueHeFKZ3pT1fV5ThqXYbayJNMQ6oBoYkxKmQOYU6AsDWTWKNlOx 5jPGrfRO2FO16f6Kp45acYnHxtQ0RlYfi4oauMOCsNE32vWsIDfuRTA5eOCh5ElY ZqB7wuh8pHxfDb71qKaROpYh9pfbVMMK8yyg36IrDrfBnv6E4Pbkm6QAfDFfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Kp3DhGtyG8HkUs6cSHrtamGdUAwHwYDVR0j BBgwFoAUosq8LlK/fmX8UB8HrEg0rHdy7oYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJkYWI0NmEtMDg1ZS00NDMyLTk4MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1 MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3NzcyRUU4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkNBQkMyRTUyQkY3RTY1RkM1MDFGMDdBQzQ4MzRBQzc3NzJF RTg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0 QUM3NzcyRUU4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEscakezwMi24qLYQi53n2+3cPlLna+XXB2Q XL0bF8KRUZ/A2g3SKt3Lx/w56ZkoGZ0cuJ3ohRE4+WP0Q7tDPIjzTl+ZlVGv3Wgt t3+n+silMz27Hpr3ErrcLwmIe/BkaJz2WbOWDOL34tJFpanu+EmV73YYEN9hH4Sf fH0K3saNfL5oT7orhUhrDgaW/Yl7cEHVWqRMZ4ubrVhRLPn0YTVN1c5aPMF+Xd/C DmceLYG12mX1mDA2R7NpuJR5E/2jvwSLhPEOhvs/K/xhhX9DVh5sh79uhzVlJjEV flGIL3r0CxbXofJzltXrhKpZCmoAh2lqq91EFw4U4U1o0SbhPxU= -----END CERTIFICATE-----Generated at Wed May 13 00:13:40 2026 by rpki-client