$ rpki-client -vvf rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft File: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft (raw, json) Hash identifier: 5RBlacGzXLM46GA+JiBSezaHeZ3ASeB+jQ+BAr6PbGo= Subject key identifier: 3D:92:6F:BC:74:EB:EA:06:48:E9:10:8B:CA:73:08:D7:C5:E5:A2:5D Authority key identifier: A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 Certificate issuer: /CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Certificate serial: 399AD852776BCB77D25901F9D395DF998FF3725C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 14:32:46 +0000 Manifest this update: Thu 23 Jul 2026 14:27:46 +0000 Manifest next update: Fri 24 Jul 2026 18:16:46 +0000 Files and hashes: 1: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: Ms5lVpCR+d3KiqA+8+cluXhFQb/KgXQqPnflZyEWwJA=) 2: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: Sl5RIQ6TEp2vaieF8W/DsRGoACBj5tfJiV0/4Hnxdeo=) 3: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl (hash: R5EYTGA+P8AEqdY5UjOqRg03cQsMEMcWfEDTwG35H6M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:9a:d8:52:77:6b:cb:77:d2:59:01:f9:d3:95:df:99:8f:f3:72:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Validity Not Before: Jul 23 14:27:46 2026 GMT Not After : Jul 24 18:16:46 2026 GMT Subject: CN=3D926FBC74EBEA0648E9108BCA7308D7C5E5A25D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8d:85:b3:c9:4c:6f:c4:fc:cf:96:a5:5e:42: e4:72:d3:d0:cf:4b:db:e8:11:b5:6d:f6:eb:9a:b1: f2:6d:22:01:1c:68:f7:da:db:ce:3c:9c:5c:f6:7c: 72:2b:a2:a6:e4:39:7c:ce:c8:da:3b:46:62:91:7c: bc:d1:00:b8:3d:46:cf:e1:45:ca:f3:6d:fb:e3:9e: 2e:1b:0d:1d:fc:97:90:84:16:cc:e4:b7:b9:ec:7d: 27:92:26:54:25:1f:8d:7b:10:11:e5:fc:29:c2:f7: 3a:00:4f:7f:20:b1:e1:cc:c2:9e:1c:5b:45:3c:58: 89:82:9d:08:d9:b9:5c:3a:ef:4c:8e:fc:c5:ba:d6: 35:5d:26:99:5a:00:04:17:88:94:89:6c:5e:43:36: cc:e3:59:b6:a9:18:79:70:26:b2:66:1e:b4:d5:03: f1:79:93:e1:65:4a:e4:25:ad:99:05:5b:a8:47:30: b5:3f:8c:e3:28:b8:90:19:e3:95:b5:02:9a:17:5a: db:2e:ef:4f:82:31:d4:5a:df:e0:95:04:c0:7b:99: 9d:d9:c8:25:85:3e:36:c5:40:e9:01:81:b7:9f:18: 6b:b9:fa:8b:5b:02:b9:37:d8:df:00:fc:5f:b1:32: 28:cf:23:9c:a5:e8:16:e6:fe:6f:87:70:d1:b6:13: 7f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:92:6F:BC:74:EB:EA:06:48:E9:10:8B:CA:73:08:D7:C5:E5:A2:5D X509v3 Authority Key Identifier: keyid:A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:df:07:42:33:fb:4a:ed:08:26:bc:05:b3:b2:60:03:25:12: 40:44:33:1c:64:92:66:f3:d8:b0:bb:7f:78:e3:0f:aa:8b:9c: 9d:86:6a:99:af:20:38:2d:1a:28:0b:c5:a3:a3:99:6e:d4:ae: 8a:8a:84:59:49:a5:2f:6e:62:f9:29:93:5d:d9:34:9b:75:05: d7:ee:0b:ca:a8:51:66:b6:04:3c:83:97:0e:b7:34:1a:6e:41: 9d:ef:4b:10:26:6e:d0:72:e7:0e:37:84:e8:cc:58:f6:90:be: 0c:e1:81:f9:df:7e:8e:80:db:fd:85:f9:0a:4b:85:af:d3:2b: 5d:1d:dc:83:31:54:34:78:57:d7:ab:c1:71:11:fb:e7:3e:bf: 5f:db:d3:6d:20:ef:4b:a8:c0:f3:fc:81:e5:21:10:ed:b6:db: 1d:2c:5e:2a:a8:8c:0c:8e:80:42:f7:4e:77:be:2b:bc:68:0f: 37:86:23:a7:dd:d1:36:03:56:a7:da:2b:79:e0:19:09:b4:7f: 10:a1:52:bc:1f:ed:41:4a:f2:50:92:db:2d:95:ed:73:c7:4d: b1:87:33:59:77:41:63:29:ad:96:af:de:44:2f:fe:80:00:2c: 14:be:a2:46:84:64:c5:d2:61:11:9f:dc:fb:de:f9:ca:96:1b: a3:c6:49:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOZrYUndry3fSWQH505XfmY/zclwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFF OTBGQ0IwMzAeFw0yNjA3MjMxNDI3NDZaFw0yNjA3MjQxODE2NDZaMDMxMTAvBgNV BAMTKDNEOTI2RkJDNzRFQkVBMDY0OEU5MTA4QkNBNzMwOEQ3QzVFNUEyNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWjYWzyUxvxPzPlqVeQuRy09DP S9voEbVt9uuasfJtIgEcaPfa2848nFz2fHIroqbkOXzOyNo7RmKRfLzRALg9Rs/h Rcrzbfvjni4bDR38l5CEFszkt7nsfSeSJlQlH417EBHl/CnC9zoAT38gseHMwp4c W0U8WImCnQjZuVw670yO/MW61jVdJplaAAQXiJSJbF5DNszjWbapGHlwJrJmHrTV A/F5k+FlSuQlrZkFW6hHMLU/jOMouJAZ45W1ApoXWtsu70+CMdRa3+CVBMB7mZ3Z yCWFPjbFQOkBgbefGGu5+otbArk32N8A/F+xMijPI5yl6Bbm/m+HcNG2E3/xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPZJvvHTr6gZI6RCLynMI18Xlol0wHwYDVR0j BBgwFoAUoum7qBCWLHwwP3QFKtqPiukPywMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmI2OWQ2NjctMTdhNC00ZmRkLTljNTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgx MDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFFOTBGQ0IwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkU5QkJBODEwOTYyQzdDMzAzRjc0MDUyQURBOEY4QUU5MEZD QjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThG OEFFOTBGQ0IwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7fB0Iz+0rtCCa8BbOyYAMlEkBEMxxkkmbz 2LC7f3jjD6qLnJ2GapmvIDgtGigLxaOjmW7UroqKhFlJpS9uYvkpk13ZNJt1Bdfu C8qoUWa2BDyDlw63NBpuQZ3vSxAmbtBy5w43hOjMWPaQvgzhgfnffo6A2/2F+QpL ha/TK10d3IMxVDR4V9erwXER++c+v1/b020g70uowPP8geUhEO222x0sXiqojAyO gEL3Tne+K7xoDzeGI6fd0TYDVqfaK3ngGQm0fxChUrwf7UFK8lCS2y2V7XPHTbGH M1l3QWMprZav3kQv/oAALBS+okaEZMXSYRGf3Pve+cqWG6PGSRk= -----END CERTIFICATE-----Generated at Fri Jul 24 06:22:52 2026 by rpki-client