$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft File: 2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft (raw, json) Hash identifier: scul/aw82X3NUhx0DZhnBmByJcrme4OF8KPmiyX5waM= Subject key identifier: 3C:E6:05:95:E3:65:72:82:51:3A:DF:EF:B6:3D:22:46:D2:A0:74:3A Authority key identifier: 2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA Certificate issuer: /CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA Certificate serial: 139B7363A7477E5531C433D2E25AD6F68EBB3324 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 09:07:23 +0000 Manifest this update: Wed 23 Sep 2026 09:02:23 +0000 Manifest next update: Thu 24 Sep 2026 09:49:23 +0000 Files and hashes: 1: 2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl (hash: QCv7iAWxwgiVCdP7HRJNyyNjdwmh2mh24xzqwj6iEDM=) 2: 3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa (hash: Jv5U5LGovEDFBhrf2yN8LsratIXrB4UcO/MW+FaftYc=) 3: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: eNG7+LqFPcA2X6MnUSyw57FaBVmmkZ9qB88jQfVFgQw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 09:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:9b:73:63:a7:47:7e:55:31:c4:33:d2:e2:5a:d6:f6:8e:bb:33:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA Validity Not Before: Sep 23 09:02:23 2026 GMT Not After : Sep 24 09:49:23 2026 GMT Subject: CN=3CE60595E3657282513ADFEFB63D2246D2A0743A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a3:8f:18:51:e0:eb:75:4a:39:6e:cd:90:e7: 43:ef:27:bb:4e:eb:dc:81:ad:92:99:97:ca:92:32: f1:0e:f1:6a:35:b0:c3:c8:5b:0d:33:8a:8e:04:c2: fb:a5:44:96:c0:ac:8c:e3:99:e3:0c:b4:c9:90:71: b2:56:d8:60:1f:69:a9:63:84:cf:bc:e6:13:f5:ac: 36:c9:e0:81:6c:d0:6d:ef:4b:f2:d5:bc:fc:6f:e8: f5:50:bc:f9:07:44:06:bb:90:51:82:0e:f8:23:a3: a3:2e:52:fa:9a:f5:73:8b:ed:13:1d:d9:99:2f:c4: 07:5f:c5:ec:cb:d1:69:c3:30:7b:0e:95:c0:67:f4: 44:c3:96:e2:99:5b:f0:f1:64:b0:72:9b:4b:db:b1: 4e:4a:e3:d0:d8:44:4d:51:65:c2:ad:3a:21:38:ac: 11:1a:8f:0a:cd:11:44:b2:35:f8:0b:69:8a:7e:fb: 4e:be:15:3a:d8:b1:33:f3:87:13:9c:76:86:b2:8b: 93:f6:c8:db:ee:2e:a8:5a:f6:42:de:17:5e:7b:e8: ea:7c:40:a1:b5:f2:60:a2:67:cf:d4:0c:ee:eb:1b: 73:0e:a1:60:e2:62:da:d2:44:4b:9b:52:8b:55:a4: b6:68:1d:e8:2e:db:a3:0b:ad:c4:93:66:12:a2:ec: a9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E6:05:95:E3:65:72:82:51:3A:DF:EF:B6:3D:22:46:D2:A0:74:3A X509v3 Authority Key Identifier: keyid:2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:d8:dc:4e:82:34:47:0a:f1:be:36:7f:bc:0b:eb:86:36:67: 81:42:56:93:81:75:ee:8e:63:f8:a9:c8:32:6d:d5:70:d5:8d: ef:8a:44:49:a9:f4:7d:ea:31:04:90:04:72:6f:e4:52:1e:b8: 61:b5:19:7f:3f:89:bb:69:28:c1:1d:48:e6:23:bc:37:ad:0d: 55:0d:66:c8:12:b1:73:09:8e:e5:7a:8e:e3:03:a5:09:b3:45: 9e:2c:3a:7d:1d:2b:a9:da:0e:a7:de:cb:6f:e0:8d:ed:8f:6e: bf:82:df:78:fc:af:ec:18:9c:11:f8:d6:82:b5:fb:37:03:d7: 6f:33:9d:82:b7:29:3d:88:60:93:8e:1c:46:fe:87:e0:d2:b7: 5f:1a:ea:22:df:f8:8f:3d:8e:2b:17:08:59:c8:0f:a9:98:9c: 16:a3:d9:90:f1:14:85:de:8e:0f:e7:18:81:70:01:c0:5d:22: 40:03:e9:b5:17:67:c5:bb:62:04:c1:a8:99:af:ce:1b:c7:37: 46:4d:a4:19:b3:99:cc:53:13:d2:c9:bd:3b:0f:9b:15:6d:77: 54:43:77:15:53:67:ee:e5:93:93:9d:59:4b:c0:61:e6:b4:27: 47:b0:f5:eb:17:2e:08:53:fa:b7:ac:ce:78:b5:7e:e4:5c:77: f1:7c:0a:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE5tzY6dHflUxxDPS4lrW9o67MyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE3RkI4MDE2REEwMDBBOUQxMEM5ODA5QzQ0RURFMkU5 RkRBQjZGQTAeFw0yNjA5MjMwOTAyMjNaFw0yNjA5MjQwOTQ5MjNaMDMxMTAvBgNV BAMTKDNDRTYwNTk1RTM2NTcyODI1MTNBREZFRkI2M0QyMjQ2RDJBMDc0M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvo48YUeDrdUo5bs2Q50PvJ7tO 69yBrZKZl8qSMvEO8Wo1sMPIWw0zio4EwvulRJbArIzjmeMMtMmQcbJW2GAfaalj hM+85hP1rDbJ4IFs0G3vS/LVvPxv6PVQvPkHRAa7kFGCDvgjo6MuUvqa9XOL7RMd 2ZkvxAdfxezL0WnDMHsOlcBn9ETDluKZW/DxZLBym0vbsU5K49DYRE1RZcKtOiE4 rBEajwrNEUSyNfgLaYp++06+FTrYsTPzhxOcdoayi5P2yNvuLqha9kLeF1576Op8 QKG18mCiZ8/UDO7rG3MOoWDiYtrSREubUotVpLZoHegu26MLrcSTZhKi7KlBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPOYFleNlcoJROt/vtj0iRtKgdDowHwYDVR0j BBgwFoAUKn+4AW2gAKnRDJgJxE7eLp/atvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NhMmUwZGItZTI5My00MWM1LTg1ODMtMzgwMTU3NTg0MjFjLzAvMkE3RkI4MDE2 REEwMDBBOUQxMEM5ODA5QzQ0RURFMkU5RkRBQjZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTdGQjgwMTZEQTAwMEE5RDEwQzk4MDlDNDRFREUyRTlGREFC NkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvMkE3RkI4MDE2REEwMDBBOUQxMEM5ODA5QzQ0RURF MkU5RkRBQjZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbY3E6CNEcK8b42f7wL64Y2Z4FCVpOBde6O Y/ipyDJt1XDVje+KREmp9H3qMQSQBHJv5FIeuGG1GX8/ibtpKMEdSOYjvDetDVUN ZsgSsXMJjuV6juMDpQmzRZ4sOn0dK6naDqfey2/gje2Pbr+C33j8r+wYnBH41oK1 +zcD128znYK3KT2IYJOOHEb+h+DSt18a6iLf+I89jisXCFnID6mYnBaj2ZDxFIXe jg/nGIFwAcBdIkAD6bUXZ8W7YgTBqJmvzhvHN0ZNpBmzmcxTE9LJvTsPmxVtd1RD dxVTZ+7lk5OdWUvAYea0J0ew9esXLghT+reszni1fuRcd/F8Ci0= -----END CERTIFICATE-----Generated at Wed Sep 23 21:48:18 2026 by rpki-client