$ rpki-client -vvvf rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft File: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft (raw, json) Hash identifier: uBIiKezgvawn6Y42GY5+MC5PyAKpiePPdQ0FEAPh5yg= Subject key identifier: D4:93:AF:9F:E6:91:AD:7D:36:51:C9:72:9E:FF:50:43:B1:B6:E4:1E Authority key identifier: A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 Certificate issuer: /CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Certificate serial: 1B4CA8508B156258FD262D37FC4935B116FDF799 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 12:00:56 +0000 Manifest this update: Wed 23 Sep 2026 11:55:56 +0000 Manifest next update: Thu 24 Sep 2026 13:24:56 +0000 Files and hashes: 1: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: C70wRs8+D3qa05IzuPgxi0Gg8OUanZPuCF0j6nRzOxs=) 2: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl (hash: sj5w2ujxU4HSJonvVNKe80R6PgrdTihy6Dt7gtFVwqc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:24:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:4c:a8:50:8b:15:62:58:fd:26:2d:37:fc:49:35:b1:16:fd:f7:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Validity Not Before: Sep 23 11:55:56 2026 GMT Not After : Sep 24 13:24:56 2026 GMT Subject: CN=D493AF9FE691AD7D3651C9729EFF5043B1B6E41E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8d:e3:79:15:ef:76:2f:18:28:18:3e:ea:26: cd:d8:db:87:df:ad:f1:95:44:f1:c9:8d:d5:f7:e1: 41:35:71:e8:90:86:0a:64:f9:47:7f:3a:58:3d:bf: e4:28:b5:a7:3a:af:1f:ad:c2:99:37:20:2a:19:19: 49:4d:16:ee:a0:07:1a:d5:0f:02:85:54:d0:f0:0b: e4:a8:2e:ba:c8:e0:b4:e5:17:39:b7:42:23:22:3d: dc:63:e2:28:9b:0a:a7:5c:fd:6f:c2:7a:40:de:f4: f4:b8:a7:83:af:27:7c:4f:ef:8a:7d:e4:d2:05:2f: 4b:5a:9d:f6:ad:66:52:b2:58:27:42:cb:55:e1:07: 4c:ca:cc:1e:6e:57:06:2e:34:0c:6a:de:23:cf:65: b8:9a:e3:85:dd:6d:42:66:04:7e:94:d2:c3:56:7f: ec:0c:94:bc:87:07:fe:4b:25:d3:f4:81:12:42:2e: 3f:60:42:f6:14:58:43:87:26:7f:00:9f:a0:6f:17: 12:01:26:72:6d:24:04:a0:d6:ef:ff:06:45:44:42: f9:b2:86:b8:25:33:7f:24:c2:a8:14:6a:24:79:b6: 6c:af:c8:42:9a:65:61:40:ff:63:ed:f0:90:bc:d2: f9:6c:3a:80:70:a9:a4:1f:65:fc:18:79:ba:4d:6f: 12:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:93:AF:9F:E6:91:AD:7D:36:51:C9:72:9E:FF:50:43:B1:B6:E4:1E X509v3 Authority Key Identifier: keyid:A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:96:b9:64:89:b0:ba:8e:7f:fb:ae:62:a4:ac:17:b8:b6:75: aa:97:bd:ad:05:4d:0c:53:88:1e:1b:8e:6e:14:2b:cb:2d:89: ee:39:c7:3f:a2:c9:64:ec:f9:f4:dc:c8:c5:45:d9:88:3d:83: a3:87:69:a4:42:ae:be:08:9a:4e:80:e4:ff:80:b4:40:4a:6c: 23:7a:9b:47:d3:f9:ed:9a:c9:95:f6:7d:ab:b3:88:d3:d4:43: 24:29:fc:c1:fa:8d:fe:ea:2a:ab:5d:22:c5:54:d5:7c:f6:39: 51:ca:c8:c2:21:24:03:b6:c0:b2:d3:43:ff:fa:87:f8:d0:40: 51:64:20:fc:ea:57:a8:c5:01:8e:3d:13:d8:f1:49:f4:63:56: 0b:43:5b:bf:3c:b4:ec:d9:5b:57:c1:6b:fc:cc:ff:92:58:28: 8b:98:af:38:7f:f6:0f:52:a0:62:48:a6:0d:12:d6:f4:ff:b1: 73:95:00:6e:f4:59:c8:09:b8:dd:1c:37:3f:bc:3b:fe:35:98: 2a:ac:da:b2:a3:21:ea:e0:1b:5d:7a:04:43:ad:bf:ac:8e:5f: 0e:88:a3:a6:fe:52:96:a1:d1:37:21:e5:19:27:d8:03:fa:ad: 7c:a0:8a:8d:7d:75:08:5e:d6:e2:45:0f:3d:bd:03:94:d4:70: 54:d6:5f:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG0yoUIsVYlj9Ji03/Ek1sRb995kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3 NzcyRUU4NjAeFw0yNjA5MjMxMTU1NTZaFw0yNjA5MjQxMzI0NTZaMDMxMTAvBgNV BAMTKEQ0OTNBRjlGRTY5MUFEN0QzNjUxQzk3MjlFRkY1MDQzQjFCNkU0MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfjeN5Fe92LxgoGD7qJs3Y24ff rfGVRPHJjdX34UE1ceiQhgpk+Ud/Olg9v+Qotac6rx+twpk3ICoZGUlNFu6gBxrV DwKFVNDwC+SoLrrI4LTlFzm3QiMiPdxj4iibCqdc/W/CekDe9PS4p4OvJ3xP74p9 5NIFL0tanfatZlKyWCdCy1XhB0zKzB5uVwYuNAxq3iPPZbia44XdbUJmBH6U0sNW f+wMlLyHB/5LJdP0gRJCLj9gQvYUWEOHJn8An6BvFxIBJnJtJASg1u//BkVEQvmy hrglM38kwqgUaiR5tmyvyEKaZWFA/2Pt8JC80vlsOoBwqaQfZfwYebpNbxKDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1JOvn+aRrX02Uclynv9QQ7G25B4wHwYDVR0j BBgwFoAUosq8LlK/fmX8UB8HrEg0rHdy7oYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJkYWI0NmEtMDg1ZS00NDMyLTk4MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1 MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3NzcyRUU4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkNBQkMyRTUyQkY3RTY1RkM1MDFGMDdBQzQ4MzRBQzc3NzJF RTg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0 QUM3NzcyRUU4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSWuWSJsLqOf/uuYqSsF7i2daqXva0FTQxT iB4bjm4UK8stie45xz+iyWTs+fTcyMVF2Yg9g6OHaaRCrr4Imk6A5P+AtEBKbCN6 m0fT+e2ayZX2fauziNPUQyQp/MH6jf7qKqtdIsVU1Xz2OVHKyMIhJAO2wLLTQ//6 h/jQQFFkIPzqV6jFAY49E9jxSfRjVgtDW788tOzZW1fBa/zM/5JYKIuYrzh/9g9S oGJIpg0S1vT/sXOVAG70WcgJuN0cNz+8O/41mCqs2rKjIergG116BEOtv6yOXw6I o6b+Upah0Tch5Rkn2AP6rXygio19dQhe1uJFDz29A5TUcFTWXxI= -----END CERTIFICATE-----Generated at Wed Sep 23 19:46:37 2026 by rpki-client