$ rpki-client -vvf rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft File: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft (raw, json) Hash identifier: qjhY+KmfWgoiVqtVKu5HwKLPmmycauX2gmucu72Gd8Q= Subject key identifier: 05:B7:7F:FB:76:2A:21:1B:8E:5D:8A:39:62:84:69:36:CE:B5:6E:D2 Authority key identifier: A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 Certificate issuer: /CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Certificate serial: 6FF46D13A78CA29129E67E6708A45BC4A8464A2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft Manifest number: 0E Signing time: Tue 12 May 2026 00:37:09 +0000 Manifest this update: Tue 12 May 2026 00:32:09 +0000 Manifest next update: Wed 13 May 2026 04:05:09 +0000 Files and hashes: 1: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: Sl5RIQ6TEp2vaieF8W/DsRGoACBj5tfJiV0/4Hnxdeo=) 2: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl (hash: AQ4e1Rvh3x1KtGi1yVsigCOWwOk3yQXD/Kq0jF+EZi0=) 3: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: Ms5lVpCR+d3KiqA+8+cluXhFQb/KgXQqPnflZyEWwJA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 04:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f4:6d:13:a7:8c:a2:91:29:e6:7e:67:08:a4:5b:c4:a8:46:4a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Validity Not Before: May 12 00:32:09 2026 GMT Not After : May 13 04:05:09 2026 GMT Subject: CN=05B77FFB762A211B8E5D8A3962846936CEB56ED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:02:43:c8:ed:a0:41:83:88:e8:66:ac:4e:91: 12:f2:21:a3:10:58:23:f7:44:c6:1e:51:44:11:7c: 02:2c:55:ec:05:7e:4b:5a:f8:db:1a:89:8e:e7:b3: 30:56:ff:5f:23:52:78:cc:67:a7:a5:8e:49:0d:49: 8f:18:b9:a5:c2:bc:01:ba:19:16:6d:2d:ac:5e:15: dd:41:49:2b:65:3b:73:93:98:2e:c1:84:a9:87:26: 1f:4d:18:89:69:7d:38:d7:8c:9d:bd:a7:95:d9:45: 79:63:54:20:81:12:7e:a3:87:7c:5c:22:f7:06:a4: 55:50:5a:9c:b6:49:bd:b8:3e:ba:2e:c9:41:aa:44: b9:6a:ef:d5:6c:49:ac:95:58:44:dd:42:f5:ca:a4: 17:48:5b:1e:24:44:e9:2c:09:c8:7c:47:98:22:a7: 01:4b:6a:f2:0c:41:69:9c:f6:b3:b1:22:c8:57:9c: ca:25:74:0e:a5:c4:cb:6b:12:e9:a1:c3:87:d3:9b: ac:82:d6:37:14:8b:bf:bc:17:6a:44:ba:5c:15:ba: 75:b7:21:81:44:ab:5c:b7:45:71:18:b9:a0:17:5c: 14:f1:11:b8:22:99:d7:ec:13:07:a1:3c:33:97:a2: 8e:d6:8f:75:20:01:ac:a3:e4:f4:74:26:65:8e:13: 74:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B7:7F:FB:76:2A:21:1B:8E:5D:8A:39:62:84:69:36:CE:B5:6E:D2 X509v3 Authority Key Identifier: keyid:A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:68:b1:ab:15:f3:52:e3:8d:2f:62:4f:e9:d0:82:85:44:fb: f5:0b:bd:6c:df:d0:1c:88:b8:d5:58:b0:42:a8:be:17:26:3f: 37:62:2e:44:78:0c:bc:21:37:ea:58:e5:61:3d:c0:5d:98:29: 41:c8:be:3d:ca:f5:8b:e3:9b:1c:aa:53:78:91:4d:f7:8c:e0: 40:27:c1:d1:bf:72:da:5d:8d:ee:99:46:09:4c:15:8c:41:3b: fb:e2:00:84:89:85:3b:65:1e:c8:27:72:28:d9:8f:45:4a:bb: 63:fb:2d:5b:13:d2:ed:39:92:28:87:56:31:5a:6a:ee:3b:0c: c5:23:10:72:49:a0:e9:99:c4:44:08:e8:a0:25:f8:c4:87:4e: 9d:59:2e:21:d7:5f:5c:33:33:a3:1b:11:93:e6:0a:ac:ef:ff: a5:47:01:6c:97:c7:4b:44:00:fc:22:f5:38:2a:cd:15:6c:c0: a4:58:a6:70:53:bc:f9:24:4f:1c:b0:1b:2c:b6:5e:35:fd:30: 36:59:55:c5:ac:96:3a:a6:7b:1e:41:47:bd:c6:81:b2:74:e4: de:31:8e:27:53:25:8d:af:b0:d3:c1:94:e3:4c:75:c6:9b:d0: ce:41:be:6d:de:fb:4f:ac:90:8a:7e:1d:4e:d8:87:2a:9b:86: 79:5f:00:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb/RtE6eMopEp5n5nCKRbxKhGSi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFF OTBGQ0IwMzAeFw0yNjA1MTIwMDMyMDlaFw0yNjA1MTMwNDA1MDlaMDMxMTAvBgNV BAMTKDA1Qjc3RkZCNzYyQTIxMUI4RTVEOEEzOTYyODQ2OTM2Q0VCNTZFRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgAkPI7aBBg4joZqxOkRLyIaMQ WCP3RMYeUUQRfAIsVewFfkta+NsaiY7nszBW/18jUnjMZ6eljkkNSY8YuaXCvAG6 GRZtLaxeFd1BSStlO3OTmC7BhKmHJh9NGIlpfTjXjJ29p5XZRXljVCCBEn6jh3xc IvcGpFVQWpy2Sb24ProuyUGqRLlq79VsSayVWETdQvXKpBdIWx4kROksCch8R5gi pwFLavIMQWmc9rOxIshXnMoldA6lxMtrEumhw4fTm6yC1jcUi7+8F2pEulwVunW3 IYFEq1y3RXEYuaAXXBTxEbgimdfsEwehPDOXoo7Wj3UgAayj5PR0JmWOE3SLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBbd/+3YqIRuOXYo5YoRpNs61btIwHwYDVR0j BBgwFoAUoum7qBCWLHwwP3QFKtqPiukPywMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmI2OWQ2NjctMTdhNC00ZmRkLTljNTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgx MDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFFOTBGQ0IwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkU5QkJBODEwOTYyQzdDMzAzRjc0MDUyQURBOEY4QUU5MEZD QjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThG OEFFOTBGQ0IwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANosasV81LjjS9iT+nQgoVE+/ULvWzf0ByI uNVYsEKovhcmPzdiLkR4DLwhN+pY5WE9wF2YKUHIvj3K9YvjmxyqU3iRTfeM4EAn wdG/ctpdje6ZRglMFYxBO/viAISJhTtlHsgncijZj0VKu2P7LVsT0u05kiiHVjFa au47DMUjEHJJoOmZxEQI6KAl+MSHTp1ZLiHXX1wzM6MbEZPmCqzv/6VHAWyXx0tE APwi9TgqzRVswKRYpnBTvPkkTxywGyy2XjX9MDZZVcWsljqmex5BR73GgbJ05N4x jidTJY2vsNPBlONMdcab0M5Bvm3e+0+skIp+HU7YhyqbhnlfAPg= -----END CERTIFICATE-----Generated at Tue May 12 22:20:04 2026 by rpki-client