$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft File: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft (raw, json) Hash identifier: oV9yvSUPnz8wnH64exEq8Arohct3jx7Cg02bzaMYIHU= Subject key identifier: 6B:12:1F:A3:DD:A6:0F:B3:35:ED:5F:B1:89:A8:1A:95:59:C3:42:E2 Authority key identifier: A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 Certificate issuer: /CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Certificate serial: 51D00DFE74F098AAA2B6BE34D8719F15F7BCCCB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 20:31:23 +0000 Manifest this update: Wed 23 Sep 2026 20:26:23 +0000 Manifest next update: Thu 24 Sep 2026 22:46:23 +0000 Files and hashes: 1: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: Ms5lVpCR+d3KiqA+8+cluXhFQb/KgXQqPnflZyEWwJA=) 2: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: Sl5RIQ6TEp2vaieF8W/DsRGoACBj5tfJiV0/4Hnxdeo=) 3: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl (hash: Q99s5R6Y5a4axIFDOz8icLqeQtNzRlmOJs0pteJQlMY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d0:0d:fe:74:f0:98:aa:a2:b6:be:34:d8:71:9f:15:f7:bc:cc:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Validity Not Before: Sep 23 20:26:23 2026 GMT Not After : Sep 24 22:46:23 2026 GMT Subject: CN=6B121FA3DDA60FB335ED5FB189A81A9559C342E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:98:c8:c7:69:3a:6c:36:33:59:50:84:dc:c7: 20:ba:1e:03:50:e1:05:00:2e:9f:45:50:f4:6e:7e: 06:d5:34:16:b2:5c:9c:0e:32:3a:81:8a:54:63:2e: 96:31:3f:1c:1f:bc:0a:8e:e8:aa:65:ce:86:60:bf: 6d:51:5e:3a:ba:a7:9b:1e:1c:72:ae:3f:20:db:11: 6e:a7:67:14:01:5d:4c:ad:f0:e4:10:3f:91:85:30: 09:dd:03:e9:dd:b2:2b:99:0a:74:23:f2:38:03:ff: c5:24:70:b5:8f:e3:ac:3e:1e:2d:7f:fc:98:1d:eb: 26:f5:af:d5:94:98:6c:79:27:12:f5:b3:46:27:05: dc:2b:e5:31:52:54:a8:58:7e:0c:2c:1d:2e:ed:93: c8:12:85:ff:98:71:bd:bc:68:66:68:13:55:7c:99: a4:c1:0a:8c:41:b1:fd:88:f7:75:40:84:79:ae:85: 3a:43:1a:08:10:c2:88:d6:c8:ab:e2:0b:a5:f2:55: 4d:81:1d:be:ac:e6:ed:7d:2c:bc:84:45:87:81:b6: e3:0d:6c:90:93:ae:c2:45:99:ed:83:5f:4b:d0:a4: cb:0b:cd:c3:d2:44:8d:e3:ea:dc:a6:53:fc:b2:e9: 0c:f1:77:15:84:0d:f1:e9:93:0f:4b:95:69:db:f4: 2b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:12:1F:A3:DD:A6:0F:B3:35:ED:5F:B1:89:A8:1A:95:59:C3:42:E2 X509v3 Authority Key Identifier: keyid:A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:2f:fb:4e:46:ea:fd:86:9d:44:39:0d:32:7c:c1:f3:33:54: 3c:e3:7e:20:4e:f0:66:e9:a2:6a:9d:81:eb:e6:76:8f:b8:8b: a6:09:18:91:ca:08:80:05:ed:24:8c:24:8e:63:44:d4:88:9c: 73:35:d5:30:51:8e:24:a0:c1:d9:77:c4:a9:1f:9b:17:e7:6e: 5b:aa:85:a5:63:4c:b3:d0:f1:ef:04:41:4f:fa:90:ed:91:51: 12:48:56:e7:40:00:6b:e0:c9:ab:a7:1c:d6:7c:95:f4:cf:ff: a7:ba:f9:ee:c0:83:42:f3:0a:88:6f:ee:e8:2a:f6:b5:e1:9c: aa:92:ce:36:11:57:64:14:ba:ad:ca:87:f4:42:59:75:5c:e8: 57:4e:7b:b7:b5:54:bb:a6:aa:02:13:fd:d2:5d:f0:d3:ab:aa: 88:19:91:6e:c5:d4:10:8f:75:8b:37:82:20:ed:38:97:78:44: c0:1f:e6:f6:3a:e1:4d:3c:b4:b0:b9:d7:a7:b2:a2:f1:13:50: 14:5d:82:5f:f4:2d:97:50:4e:60:22:b1:06:11:c4:81:5b:f1: 67:40:af:2e:68:2f:fe:40:79:ae:1d:d5:af:8c:ba:70:55:a8: 53:72:86:e4:23:87:0d:9d:b2:b4:05:cd:53:63:ae:47:24:de: 51:f0:37:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUdAN/nTwmKqitr402HGfFfe8zLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFF OTBGQ0IwMzAeFw0yNjA5MjMyMDI2MjNaFw0yNjA5MjQyMjQ2MjNaMDMxMTAvBgNV BAMTKDZCMTIxRkEzRERBNjBGQjMzNUVENUZCMTg5QTgxQTk1NTlDMzQyRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCemMjHaTpsNjNZUITcxyC6HgNQ 4QUALp9FUPRufgbVNBayXJwOMjqBilRjLpYxPxwfvAqO6KplzoZgv21RXjq6p5se HHKuPyDbEW6nZxQBXUyt8OQQP5GFMAndA+ndsiuZCnQj8jgD/8UkcLWP46w+Hi1/ /Jgd6yb1r9WUmGx5JxL1s0YnBdwr5TFSVKhYfgwsHS7tk8gShf+Ycb28aGZoE1V8 maTBCoxBsf2I93VAhHmuhTpDGggQwojWyKviC6XyVU2BHb6s5u19LLyERYeBtuMN bJCTrsJFme2DX0vQpMsLzcPSRI3j6tymU/yy6QzxdxWEDfHpkw9LlWnb9CvfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaxIfo92mD7M17V+xiagalVnDQuIwHwYDVR0j BBgwFoAUoum7qBCWLHwwP3QFKtqPiukPywMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmI2OWQ2NjctMTdhNC00ZmRkLTljNTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgx MDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFFOTBGQ0IwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkU5QkJBODEwOTYyQzdDMzAzRjc0MDUyQURBOEY4QUU5MEZD QjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThG OEFFOTBGQ0IwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcv+05G6v2GnUQ5DTJ8wfMzVDzjfiBO8Gbp omqdgevmdo+4i6YJGJHKCIAF7SSMJI5jRNSInHM11TBRjiSgwdl3xKkfmxfnbluq haVjTLPQ8e8EQU/6kO2RURJIVudAAGvgyaunHNZ8lfTP/6e6+e7Ag0LzCohv7ugq 9rXhnKqSzjYRV2QUuq3Kh/RCWXVc6FdOe7e1VLumqgIT/dJd8NOrqogZkW7F1BCP dYs3giDtOJd4RMAf5vY64U08tLC516eyovETUBRdgl/0LZdQTmAisQYRxIFb8WdA ry5oL/5Aea4d1a+MunBVqFNyhuQjhw2dsrQFzVNjrkck3lHwN7U= -----END CERTIFICATE-----Generated at Thu Sep 24 17:05:55 2026 by rpki-client