$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft File: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft (raw, json) Hash identifier: uSsJcnI44yPORdcmnu1gkEw+63AOHVBK2nB8vK7iJlM= Subject key identifier: 2F:32:13:B2:6C:D5:D4:28:CA:F7:63:E7:69:D4:50:2B:80:FC:E2:B4 Authority key identifier: A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 Certificate issuer: /CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Certificate serial: 2CCD451A7386FF71BBCF12D69C93037907BD3879 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 16:30:09 +0000 Manifest this update: Sat 14 Nov 2026 16:25:09 +0000 Manifest next update: Sun 15 Nov 2026 17:38:09 +0000 Files and hashes: 1: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: Ms5lVpCR+d3KiqA+8+cluXhFQb/KgXQqPnflZyEWwJA=) 2: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: Sl5RIQ6TEp2vaieF8W/DsRGoACBj5tfJiV0/4Hnxdeo=) 3: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl (hash: J18qvp44DCpD+wmYHDK6/N7fiS6+fTTXXXSMCvks/Pk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 17:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:cd:45:1a:73:86:ff:71:bb:cf:12:d6:9c:93:03:79:07:bd:38:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Validity Not Before: Nov 14 16:25:09 2026 GMT Not After : Nov 15 17:38:09 2026 GMT Subject: CN=2F3213B26CD5D428CAF763E769D4502B80FCE2B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:10:e1:7f:e5:24:30:e7:a3:bf:35:ef:14:64: dd:d3:f6:cc:66:51:d0:e7:97:a7:65:2d:a6:93:9b: f5:90:c6:48:f9:30:75:51:53:a7:54:be:0b:bd:e6: 2a:f2:cb:5b:b1:eb:d6:96:47:79:77:64:73:0d:f2: 8d:ac:63:e8:16:21:0c:65:a4:a8:dd:c4:86:ea:44: 1a:36:7b:7f:da:57:f9:87:fe:3e:65:75:c0:30:cb: f3:14:b1:51:6d:c0:b9:af:6e:ec:53:98:51:42:26: 92:f8:70:b5:7c:90:81:fe:db:36:74:88:3e:13:e4: 0b:77:30:59:b6:7c:e5:3b:89:7a:9b:e1:3e:e6:dc: 81:d8:f7:1e:2b:2e:e6:a3:4d:64:a2:e2:92:2a:16: 77:6d:ba:70:61:ce:4d:89:21:43:87:f2:4b:df:31: f0:12:db:25:c8:02:31:96:f5:4f:10:32:92:53:90: e8:55:04:5c:fc:9b:98:10:45:e8:6a:87:2a:5e:54: 5b:75:16:ad:bc:97:9c:b2:a7:42:db:75:31:ad:4a: 7d:6e:fe:a2:df:4a:1b:b1:e8:25:81:65:d4:ef:01: 78:89:51:6c:08:06:4f:52:5b:bb:d9:3c:bd:06:0d: 82:f0:b7:53:47:49:07:54:30:9f:9c:55:9f:ed:c0: a0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:32:13:B2:6C:D5:D4:28:CA:F7:63:E7:69:D4:50:2B:80:FC:E2:B4 X509v3 Authority Key Identifier: keyid:A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:b8:24:b1:b7:9e:73:d3:a5:3e:8b:cd:9c:bf:6e:40:04:0a: 68:13:32:b4:41:e3:0f:2f:0f:49:f6:32:cb:1e:0e:f4:3e:35: 80:4f:d3:14:98:df:89:82:68:e5:12:85:97:36:84:c8:a5:81: 0f:06:cd:66:3d:83:a3:e9:9c:e5:60:aa:0f:d4:67:56:7b:fb: 83:d7:69:37:0b:75:5a:af:80:08:91:cd:52:8c:fe:0f:2c:eb: e3:48:20:d8:35:49:57:96:aa:45:64:b2:1d:d9:6e:4b:4e:1d: 0b:e1:7f:15:c5:41:d0:bd:a7:25:da:6d:f2:07:00:f2:7d:28: b4:6e:8d:65:16:49:a4:16:ba:b8:b3:71:65:e5:06:9f:b1:5b: b3:ba:42:ee:16:ae:75:d3:76:63:ce:b8:4b:de:3c:50:a8:ad: ee:ec:74:7e:21:7a:1e:72:f6:5b:b9:d5:42:d8:94:16:88:ba: 4c:5f:3c:f9:8e:f7:82:7c:c2:bf:24:c9:29:d9:09:71:e7:41: b1:e2:42:0f:cb:43:c2:14:fe:79:10:eb:24:ce:00:3a:eb:d0: a6:d5:57:dc:ac:6a:db:f4:e0:8e:0c:41:2e:a9:45:e5:08:e2: 81:85:46:11:fc:be:3c:dc:49:65:41:d1:1f:3f:93:fe:96:b2: 81:bc:22:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULM1FGnOG/3G7zxLWnJMDeQe9OHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFF OTBGQ0IwMzAeFw0yNjExMTQxNjI1MDlaFw0yNjExMTUxNzM4MDlaMDMxMTAvBgNV BAMTKDJGMzIxM0IyNkNENUQ0MjhDQUY3NjNFNzY5RDQ1MDJCODBGQ0UyQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfEOF/5SQw56O/Ne8UZN3T9sxm UdDnl6dlLaaTm/WQxkj5MHVRU6dUvgu95iryy1ux69aWR3l3ZHMN8o2sY+gWIQxl pKjdxIbqRBo2e3/aV/mH/j5ldcAwy/MUsVFtwLmvbuxTmFFCJpL4cLV8kIH+2zZ0 iD4T5At3MFm2fOU7iXqb4T7m3IHY9x4rLuajTWSi4pIqFndtunBhzk2JIUOH8kvf MfAS2yXIAjGW9U8QMpJTkOhVBFz8m5gQRehqhypeVFt1Fq28l5yyp0LbdTGtSn1u /qLfShux6CWBZdTvAXiJUWwIBk9SW7vZPL0GDYLwt1NHSQdUMJ+cVZ/twKDPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULzITsmzV1CjK92PnadRQK4D84rQwHwYDVR0j BBgwFoAUoum7qBCWLHwwP3QFKtqPiukPywMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmI2OWQ2NjctMTdhNC00ZmRkLTljNTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgx MDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFFOTBGQ0IwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkU5QkJBODEwOTYyQzdDMzAzRjc0MDUyQURBOEY4QUU5MEZD QjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThG OEFFOTBGQ0IwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHW4JLG3nnPTpT6LzZy/bkAECmgTMrRB4w8v D0n2MsseDvQ+NYBP0xSY34mCaOUShZc2hMilgQ8GzWY9g6PpnOVgqg/UZ1Z7+4PX aTcLdVqvgAiRzVKM/g8s6+NIINg1SVeWqkVksh3ZbktOHQvhfxXFQdC9pyXabfIH APJ9KLRujWUWSaQWurizcWXlBp+xW7O6Qu4WrnXTdmPOuEvePFCore7sdH4heh5y 9lu51ULYlBaIukxfPPmO94J8wr8kySnZCXHnQbHiQg/LQ8IU/nkQ6yTOADrr0KbV V9ysatv04I4MQS6pReUI4oGFRhH8vjzcSWVB0R8/k/6WsoG8Ius= -----END CERTIFICATE-----Generated at Sun Nov 15 00:55:11 2026 by rpki-client