$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft File: 2A494FAEE44F13448E6C43136F825053CE977009.mft (raw, json) Hash identifier: DbbfzwoqM+qaBHEfhMB2AM2lhXeiEw8QJtK2qY4Vq6c= Subject key identifier: 76:A3:0E:54:82:7E:56:35:51:B5:DB:1B:A5:BB:60:BD:D6:03:D8:89 Authority key identifier: 2A:49:4F:AE:E4:4F:13:44:8E:6C:43:13:6F:82:50:53:CE:97:70:09 Certificate issuer: /CN=2A494FAEE44F13448E6C43136F825053CE977009 Certificate serial: 2D5A5415ECC3C4158A207C2010801540B793887F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 18:17:38 +0000 Manifest this update: Sat 26 Sep 2026 18:12:38 +0000 Manifest next update: Sun 27 Sep 2026 19:21:38 +0000 Files and hashes: 1: 2A494FAEE44F13448E6C43136F825053CE977009.crl (hash: bp6/9fRIqG5DxxeJNbWV+UehWIBVN8MY98L8b/orcr8=) 2: 3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (hash: t2vA65s4Rw0JpR4oPJfjFnJ3dyjvcRRBFrdNUp3Bo2M=) 3: 3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa (hash: SSSkCi1zJkML5HF5+O+odxp65ltRBIRj0krRoe9GJqI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.crl rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5a:54:15:ec:c3:c4:15:8a:20:7c:20:10:80:15:40:b7:93:88:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A494FAEE44F13448E6C43136F825053CE977009 Validity Not Before: Sep 26 18:12:38 2026 GMT Not After : Sep 27 19:21:38 2026 GMT Subject: CN=76A30E54827E563551B5DB1BA5BB60BDD603D889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:80:11:0d:79:d7:fe:a2:d8:6a:86:8d:db:4a: a1:9e:eb:88:87:ab:0d:af:ab:58:8e:f2:d3:5d:62: 11:98:7e:2d:8a:70:e8:44:e4:28:0a:53:7c:7b:44: 64:0f:de:c4:c2:26:e1:c1:e1:41:e2:bf:8a:ec:c2: e3:04:00:f4:33:d7:45:7d:f3:f1:35:68:be:a8:8b: de:7b:05:3c:49:6c:f3:15:1c:d8:c9:d6:b1:6c:18: ff:7c:dd:ca:b6:63:a4:45:5a:4f:5c:62:a5:06:b5: f1:db:c0:2a:cf:e1:2b:82:8f:6c:17:d5:f7:e9:6c: 6d:9e:80:85:18:16:cb:93:5e:74:14:1b:7e:98:ed: be:b1:ad:8b:90:06:04:8d:eb:ac:37:c1:e5:7d:48: 62:82:21:b1:65:cc:18:3a:58:5f:82:50:f8:3e:16: 6e:55:31:98:87:fd:03:15:72:ff:83:de:88:70:0f: f9:1e:f8:3e:aa:2d:59:95:33:58:76:d8:55:ab:23: bb:b7:68:38:e9:f9:88:ae:6e:45:07:4e:cd:c6:d8: ad:15:56:e5:f4:da:b1:20:a8:f2:8e:64:38:3f:7e: 91:0a:6c:2b:e3:71:1a:81:ad:c1:44:e6:d0:86:7a: c9:0f:fe:39:6a:b7:bd:be:a4:eb:f4:50:8d:3a:4b: 45:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A3:0E:54:82:7E:56:35:51:B5:DB:1B:A5:BB:60:BD:D6:03:D8:89 X509v3 Authority Key Identifier: keyid:2A:49:4F:AE:E4:4F:13:44:8E:6C:43:13:6F:82:50:53:CE:97:70:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:79:fa:cd:95:92:c0:17:cc:83:4c:d6:db:8b:f1:f9:d0:20: b0:89:56:f7:f8:55:c7:0d:7e:45:1b:2f:a5:bf:4c:43:0c:b2: ee:97:9f:ab:3f:fe:06:5f:f0:de:91:15:4c:95:2a:53:a6:bd: 60:5b:9b:fa:47:7c:71:a3:4f:d7:87:e3:3c:a8:b2:4b:cf:f6: f1:a4:47:6f:70:21:4a:04:6d:c1:d6:f9:4b:77:2a:70:68:81: 90:a4:96:ce:fb:b0:6e:3d:6c:d6:1a:7b:31:34:24:49:61:0a: a7:4d:bd:2b:62:22:f1:44:f0:34:15:cc:c4:8c:06:41:f9:ac: 2e:ae:7d:82:37:a0:ca:73:d2:2e:26:8f:d1:40:be:f9:2a:ba: d9:20:12:af:01:09:8f:5f:dd:46:3c:77:0e:96:64:82:d1:2a: 25:c8:c0:16:a7:a9:71:ab:83:7d:4e:0e:54:45:65:e1:55:9b: 96:4b:55:b8:7d:d6:a2:0b:75:7d:be:b2:14:e1:8c:a8:7c:71: 27:8c:ba:23:83:6c:cc:bc:66:41:64:fb:af:f7:15:98:ff:d9: 31:02:af:0a:ce:0a:c2:f3:bd:8e:51:3b:2a:04:60:24:b4:f3: 48:01:4a:48:b1:93:a0:28:fd:06:20:0b:a6:40:45:82:5e:11: 4d:9d:42:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVpUFezDxBWKIHwgEIAVQLeTiH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE0OTRGQUVFNDRGMTM0NDhFNkM0MzEzNkY4MjUwNTND RTk3NzAwOTAeFw0yNjA5MjYxODEyMzhaFw0yNjA5MjcxOTIxMzhaMDMxMTAvBgNV BAMTKDc2QTMwRTU0ODI3RTU2MzU1MUI1REIxQkE1QkI2MEJERDYwM0Q4ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCygBENedf+othqho3bSqGe64iH qw2vq1iO8tNdYhGYfi2KcOhE5CgKU3x7RGQP3sTCJuHB4UHiv4rswuMEAPQz10V9 8/E1aL6oi957BTxJbPMVHNjJ1rFsGP983cq2Y6RFWk9cYqUGtfHbwCrP4SuCj2wX 1ffpbG2egIUYFsuTXnQUG36Y7b6xrYuQBgSN66w3weV9SGKCIbFlzBg6WF+CUPg+ Fm5VMZiH/QMVcv+D3ohwD/ke+D6qLVmVM1h22FWrI7u3aDjp+YiubkUHTs3G2K0V VuX02rEgqPKOZDg/fpEKbCvjcRqBrcFE5tCGeskP/jlqt72+pOv0UI06S0WjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdqMOVIJ+VjVRtdsbpbtgvdYD2IkwHwYDVR0j BBgwFoAUKklPruRPE0SObEMTb4JQU86XcAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBkYzEyODMtMWNlMi00MWE1LWFmZTYtZjBiZTMxZTliMTBkLzAvMkE0OTRGQUVF NDRGMTM0NDhFNkM0MzEzNkY4MjUwNTNDRTk3NzAwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTQ5NEZBRUU0NEYxMzQ0OEU2QzQzMTM2RjgyNTA1M0NFOTc3 MDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBkYzEyODMtMWNlMi00MWE1LWFm ZTYtZjBiZTMxZTliMTBkLzAvMkE0OTRGQUVFNDRGMTM0NDhFNkM0MzEzNkY4MjUw NTNDRTk3NzAwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIF5+s2VksAXzINM1tuL8fnQILCJVvf4VccN fkUbL6W/TEMMsu6Xn6s//gZf8N6RFUyVKlOmvWBbm/pHfHGjT9eH4zyoskvP9vGk R29wIUoEbcHW+Ut3KnBogZCkls77sG49bNYaezE0JElhCqdNvStiIvFE8DQVzMSM BkH5rC6ufYI3oMpz0i4mj9FAvvkqutkgEq8BCY9f3UY8dw6WZILRKiXIwBanqXGr g31ODlRFZeFVm5ZLVbh91qILdX2+shThjKh8cSeMuiODbMy8ZkFk+6/3FZj/2TEC rwrOCsLzvY5ROyoEYCS080gBSkixk6Ao/QYgC6ZARYJeEU2dQkU= -----END CERTIFICATE-----Generated at Sun Sep 27 11:48:07 2026 by rpki-client