$ rpki-client -vvvf rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft File: A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft (raw, json) Hash identifier: VOkChFgfoCPXxXi/RoSIlIbkgL8UH+PhfsPAyBUcOC4= Subject key identifier: E9:FE:CB:D3:02:C2:8E:E9:AA:76:D0:4D:78:47:E8:E3:22:20:04:CB Authority key identifier: A2:CA:26:36:D9:0E:CE:E0:30:80:29:4F:58:D8:AB:8A:1B:34:99:96 Certificate issuer: /CN=A2CA2636D90ECEE03080294F58D8AB8A1B349996 Certificate serial: 55BDB8C889D0C564ACDFDFF0E7166A416B9A0D09 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 23:39:51 +0000 Manifest this update: Thu 24 Sep 2026 23:34:51 +0000 Manifest next update: Fri 25 Sep 2026 23:47:51 +0000 Files and hashes: 1: 3135372e32302e3233362e302f32342d3234203d3e203538333639.roa (hash: BrEAiFV+dHptCn088oRLw0yFHBOD29YxvGJgz6+xTEs=) 2: A2CA2636D90ECEE03080294F58D8AB8A1B349996.crl (hash: ljCcolKMjpf+V31ID5Qaui1ZLbAj93eKNM6ew3tUj6I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.crl rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:bd:b8:c8:89:d0:c5:64:ac:df:df:f0:e7:16:6a:41:6b:9a:0d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2CA2636D90ECEE03080294F58D8AB8A1B349996 Validity Not Before: Sep 24 23:34:51 2026 GMT Not After : Sep 25 23:47:51 2026 GMT Subject: CN=E9FECBD302C28EE9AA76D04D7847E8E3222004CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f1:35:5c:08:37:24:e8:54:4f:9a:82:b8:bf: 89:dd:3f:53:1f:02:dc:29:c2:07:de:ff:b1:c3:ae: 66:7a:95:34:c0:1f:98:1c:61:19:5b:3c:bd:ae:65: da:b0:b5:0f:16:2b:85:bf:33:a0:e2:86:5c:ef:1b: f2:7f:37:8a:c7:c5:42:9a:48:42:c5:c0:c0:b9:bb: 38:3d:16:43:00:8f:c8:64:e7:f2:a5:69:ee:d3:03: 5b:92:93:1d:11:d1:23:91:82:9b:77:0a:d1:da:b7: 85:05:ea:3f:6a:38:5f:35:8e:3f:ec:0e:e8:93:f5: 8f:b2:ed:73:2d:b4:26:b0:37:01:d3:d7:24:cb:50: b8:fd:1a:ed:db:56:31:df:4f:99:eb:b8:10:ed:44: aa:6a:b2:09:c2:77:e9:a1:76:08:82:3d:a9:d9:92: 8f:05:36:f7:bf:72:c8:b5:15:03:01:c2:6a:0a:70: 37:09:c3:5d:4a:b6:3a:7b:34:2c:2f:76:23:07:bb: a9:04:d0:81:f9:94:ae:d0:0d:aa:44:f5:26:c6:03: e3:b9:b4:6c:2b:62:eb:7b:5d:23:a6:fc:09:a0:e2: d1:37:49:52:8f:87:80:b0:5e:8c:d2:12:f0:9d:6e: 37:1c:05:b0:b7:9c:ee:63:68:01:d6:d3:f9:8e:89: f9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FE:CB:D3:02:C2:8E:E9:AA:76:D0:4D:78:47:E8:E3:22:20:04:CB X509v3 Authority Key Identifier: keyid:A2:CA:26:36:D9:0E:CE:E0:30:80:29:4F:58:D8:AB:8A:1B:34:99:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:15:2d:98:e1:34:b3:b5:74:cd:5b:13:6d:52:fb:65:63:12: 62:48:74:d0:11:2c:3d:85:62:e1:4a:b8:b9:2d:36:95:54:1b: d6:ff:d5:c5:17:7c:7d:d1:6a:64:0c:fc:d9:28:a8:01:e1:77: 3e:ac:1a:50:4b:d7:0f:50:cd:88:ab:e3:5c:3d:21:59:06:7b: fd:cc:f0:b0:fc:0d:7d:54:f0:53:32:72:63:2f:02:23:52:3c: c4:3c:39:99:e8:11:91:45:21:59:16:02:0c:ae:5d:28:29:74: 63:a0:f9:c8:ac:74:71:4e:f4:d0:a0:d0:60:02:d2:33:1f:1b: 0e:57:44:c1:a0:49:85:a0:ad:93:44:07:3c:17:60:33:ee:25: 3d:b3:1a:0f:25:e6:07:48:a3:8c:e3:6e:97:98:a4:a1:10:37: 7c:6d:42:a7:39:3b:13:f7:84:b8:cc:0a:2f:ae:02:ef:dd:fe: f8:2d:63:ac:76:2d:66:a9:4f:2b:38:c9:c2:4f:78:7e:99:98: f9:79:63:ea:75:9e:7f:e7:6c:50:e6:79:8d:ca:97:b7:66:18: a1:e8:dd:ce:33:9e:56:6e:bc:be:69:26:21:51:a9:e5:8f:2c: 17:9b:ea:56:a7:50:ba:fb:9b:78:db:62:c0:0b:4f:e6:e4:1f: a1:e0:23:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVb24yInQxWSs39/w5xZqQWuaDQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJDQTI2MzZEOTBFQ0VFMDMwODAyOTRGNThEOEFCOEEx QjM0OTk5NjAeFw0yNjA5MjQyMzM0NTFaFw0yNjA5MjUyMzQ3NTFaMDMxMTAvBgNV BAMTKEU5RkVDQkQzMDJDMjhFRTlBQTc2RDA0RDc4NDdFOEUzMjIyMDA0Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR8TVcCDck6FRPmoK4v4ndP1Mf Atwpwgfe/7HDrmZ6lTTAH5gcYRlbPL2uZdqwtQ8WK4W/M6DihlzvG/J/N4rHxUKa SELFwMC5uzg9FkMAj8hk5/Klae7TA1uSkx0R0SORgpt3CtHat4UF6j9qOF81jj/s DuiT9Y+y7XMttCawNwHT1yTLULj9Gu3bVjHfT5nruBDtRKpqsgnCd+mhdgiCPanZ ko8FNve/csi1FQMBwmoKcDcJw11Ktjp7NCwvdiMHu6kE0IH5lK7QDapE9SbGA+O5 tGwrYut7XSOm/Amg4tE3SVKPh4CwXozSEvCdbjccBbC3nO5jaAHW0/mOifkzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6f7L0wLCjumqdtBNeEfo4yIgBMswHwYDVR0j BBgwFoAUosomNtkOzuAwgClPWNirihs0mZYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWNhY2NmMjYtODM1NC00OWM4LTk5OGEtMGE0NGE2NGViOTA5LzAvQTJDQTI2MzZE OTBFQ0VFMDMwODAyOTRGNThEOEFCOEExQjM0OTk5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkNBMjYzNkQ5MEVDRUUwMzA4MDI5NEY1OEQ4QUI4QTFCMzQ5 OTk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWNhY2NmMjYtODM1NC00OWM4LTk5 OGEtMGE0NGE2NGViOTA5LzAvQTJDQTI2MzZEOTBFQ0VFMDMwODAyOTRGNThEOEFC OEExQjM0OTk5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIVLZjhNLO1dM1bE21S+2VjEmJIdNARLD2F YuFKuLktNpVUG9b/1cUXfH3RamQM/NkoqAHhdz6sGlBL1w9QzYir41w9IVkGe/3M 8LD8DX1U8FMycmMvAiNSPMQ8OZnoEZFFIVkWAgyuXSgpdGOg+cisdHFO9NCg0GAC 0jMfGw5XRMGgSYWgrZNEBzwXYDPuJT2zGg8l5gdIo4zjbpeYpKEQN3xtQqc5OxP3 hLjMCi+uAu/d/vgtY6x2LWapTys4ycJPeH6ZmPl5Y+p1nn/nbFDmeY3Kl7dmGKHo 3c4znlZuvL5pJiFRqeWPLBeb6lanULr7m3jbYsALT+bkH6HgI+Y= -----END CERTIFICATE-----Generated at Fri Sep 25 01:37:35 2026 by rpki-client