$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft File: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft (raw, json) Hash identifier: KA7MUAIlmbBJJTunXHdUaE7m8XwI9gBV6wmm9s51i5c= Subject key identifier: 7A:85:29:B1:B2:9F:72:DB:F2:7C:C2:33:42:3A:26:8E:2F:5D:02:17 Authority key identifier: 2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 Certificate issuer: /CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Certificate serial: 5CB80028CE331434039E5844086AD1D7602C500A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 04:46:19 +0000 Manifest this update: Fri 25 Sep 2026 04:41:19 +0000 Manifest next update: Sat 26 Sep 2026 08:35:19 +0000 Files and hashes: 1: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl (hash: G32Xty/WCzdP3iNofEhpVr9z5TNxYR5PG9D641ewJMI=) 2: 3130332e3133312e3130372e302f32342d3234203d3e20313338313139.roa (hash: cKDgVoSVAFZfl4hgrIHwI1J4tBbCiwmqXmahxpGLx8I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 08:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b8:00:28:ce:33:14:34:03:9e:58:44:08:6a:d1:d7:60:2c:50:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Validity Not Before: Sep 25 04:41:19 2026 GMT Not After : Sep 26 08:35:19 2026 GMT Subject: CN=7A8529B1B29F72DBF27CC233423A268E2F5D0217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4f:84:ed:58:ba:7d:7d:c3:11:c1:4f:68:dd: 25:94:47:a0:9e:e6:57:61:d9:55:ba:ee:96:f1:71: 65:95:9f:e8:f9:a5:31:80:bf:bf:29:52:62:fa:cc: 04:7d:8b:9e:8f:0e:63:80:29:0a:de:70:06:f5:53: f2:d0:ea:8c:cd:7f:8c:34:b0:1f:a7:1e:74:c8:16: 80:52:9e:5b:80:fa:8d:7c:ff:5d:82:36:63:1c:ea: df:d3:79:79:05:41:9c:c0:ef:92:14:a8:1d:86:b0: cf:2c:10:6d:c6:74:d2:f9:80:e0:dc:71:e1:02:c2: 77:25:48:50:04:1d:85:dd:08:1f:e3:17:37:4b:28: c6:cd:ce:92:a6:65:79:37:fd:df:74:53:b1:a6:2e: ab:d9:a7:01:80:bd:39:df:72:99:5b:bb:9f:7e:e3: 06:7b:a8:fd:2b:a1:98:3d:9b:be:0c:03:57:3d:b4: 5b:40:89:f8:26:7e:e8:96:6f:5c:ff:09:f9:f2:7e: 38:89:c8:75:5f:de:c1:be:b4:1c:0d:f0:a2:fa:58: 07:0d:12:51:47:97:71:d3:31:14:eb:dd:b3:bb:c5: ef:f6:0f:ee:65:0c:c2:d1:9d:6f:95:6f:97:df:78: 93:5a:67:77:7e:e8:97:49:f0:b4:59:92:03:0d:6b: 2b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:85:29:B1:B2:9F:72:DB:F2:7C:C2:33:42:3A:26:8E:2F:5D:02:17 X509v3 Authority Key Identifier: keyid:2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:fe:62:1d:96:c2:66:7f:29:0e:b3:55:f8:84:d7:5f:9f:55: 47:0e:ec:1e:44:75:3c:45:1d:f2:a9:c4:22:b5:51:d9:f4:c8: 36:1b:ba:63:b2:82:57:64:9e:b0:00:31:e5:74:ce:f1:2c:08: a6:d8:0b:27:f7:ac:e6:5e:85:3e:41:aa:94:cc:a7:43:d6:73: f9:aa:2a:92:c3:fc:b6:89:7e:be:ed:d0:c3:8d:04:35:aa:b9: 32:f8:47:32:f1:ef:e5:c8:a1:8d:6d:0b:50:05:5b:97:5e:f9: 32:2b:f7:1d:77:25:9a:79:59:46:e1:6d:96:f7:b6:a9:7e:e3: a6:c5:e0:85:43:18:0a:8c:b9:12:59:b1:93:57:c7:d1:d1:a1: 79:d0:a9:c9:04:7c:9a:3a:4e:2a:a1:41:d0:99:87:7c:76:f7: 97:e3:fa:c2:26:a1:c2:80:50:74:9b:f6:46:35:4e:22:b0:40: 45:a9:2e:e9:5d:e0:93:a3:24:47:ba:02:5f:26:e4:19:48:1e: 4d:47:62:bc:77:d4:57:0f:30:bb:96:13:b4:59:0f:65:75:41: fe:22:a1:a6:58:02:92:56:4e:d9:a6:58:15:5d:f0:34:f6:ca: 50:51:7e:15:96:f0:49:21:ef:df:5b:99:9c:22:9f:98:b7:76: b3:35:c0:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXLgAKM4zFDQDnlhECGrR12AsUAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFFMTRBQkJENTE2MUJBMENBREIzQzQwQzFGOURGQ0JD OUNGMzQ3MDAeFw0yNjA5MjUwNDQxMTlaFw0yNjA5MjYwODM1MTlaMDMxMTAvBgNV BAMTKDdBODUyOUIxQjI5RjcyREJGMjdDQzIzMzQyM0EyNjhFMkY1RDAyMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcT4TtWLp9fcMRwU9o3SWUR6Ce 5ldh2VW67pbxcWWVn+j5pTGAv78pUmL6zAR9i56PDmOAKQrecAb1U/LQ6ozNf4w0 sB+nHnTIFoBSnluA+o18/12CNmMc6t/TeXkFQZzA75IUqB2GsM8sEG3GdNL5gODc ceECwnclSFAEHYXdCB/jFzdLKMbNzpKmZXk3/d90U7GmLqvZpwGAvTnfcplbu59+ 4wZ7qP0roZg9m74MA1c9tFtAifgmfuiWb1z/CfnyfjiJyHVf3sG+tBwN8KL6WAcN ElFHl3HTMRTr3bO7xe/2D+5lDMLRnW+Vb5ffeJNaZ3d+6JdJ8LRZkgMNayvhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeoUpsbKfctvyfMIzQjomji9dAhcwHwYDVR0j BBgwFoAUKuFKu9UWG6DK2zxAwfnfy8nPNHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkyNDM5NTAtM2ZkZi00OWFiLWJmZGMtZjU4NjQ1MzcwNGM2LzAvMkFFMTRBQkJE NTE2MUJBMENBREIzQzQwQzFGOURGQ0JDOUNGMzQ3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUUxNEFCQkQ1MTYxQkEwQ0FEQjNDNDBDMUY5REZDQkM5Q0Yz NDcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkyNDM5NTAtM2ZkZi00OWFiLWJm ZGMtZjU4NjQ1MzcwNGM2LzAvMkFFMTRBQkJENTE2MUJBMENBREIzQzQwQzFGOURG Q0JDOUNGMzQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3+Yh2WwmZ/KQ6zVfiE11+fVUcO7B5EdTxF HfKpxCK1Udn0yDYbumOygldknrAAMeV0zvEsCKbYCyf3rOZehT5BqpTMp0PWc/mq KpLD/LaJfr7t0MONBDWquTL4RzLx7+XIoY1tC1AFW5de+TIr9x13JZp5WUbhbZb3 tql+46bF4IVDGAqMuRJZsZNXx9HRoXnQqckEfJo6TiqhQdCZh3x295fj+sImocKA UHSb9kY1TiKwQEWpLuld4JOjJEe6Al8m5BlIHk1HYrx31FcPMLuWE7RZD2V1Qf4i oaZYApJWTtmmWBVd8DT2ylBRfhWW8Ekh799bmZwin5i3drM1wAc= -----END CERTIFICATE-----Generated at Fri Sep 25 17:20:23 2026 by rpki-client