$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft File: 2A494FAEE44F13448E6C43136F825053CE977009.mft (raw, json) Hash identifier: 4yZ2DcaMlsQteB1qd//JICFLpYZUjLdUzNR6eWLLxJY= Subject key identifier: 72:4A:6D:82:A6:52:C8:3F:94:21:70:8A:F7:9A:85:59:3F:C4:4C:78 Authority key identifier: 2A:49:4F:AE:E4:4F:13:44:8E:6C:43:13:6F:82:50:53:CE:97:70:09 Certificate issuer: /CN=2A494FAEE44F13448E6C43136F825053CE977009 Certificate serial: 5D6D65AD324095499C4269708C8C425FB64990A6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 07:09:36 +0000 Manifest this update: Thu 24 Sep 2026 07:04:36 +0000 Manifest next update: Fri 25 Sep 2026 11:01:36 +0000 Files and hashes: 1: 3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (hash: t2vA65s4Rw0JpR4oPJfjFnJ3dyjvcRRBFrdNUp3Bo2M=) 2: 2A494FAEE44F13448E6C43136F825053CE977009.crl (hash: 5vCukfhBhvTxsilh3I6qVy+VJnZuLhMvYx+U7DoUEvc=) 3: 3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa (hash: SSSkCi1zJkML5HF5+O+odxp65ltRBIRj0krRoe9GJqI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.crl rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6d:65:ad:32:40:95:49:9c:42:69:70:8c:8c:42:5f:b6:49:90:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A494FAEE44F13448E6C43136F825053CE977009 Validity Not Before: Sep 24 07:04:36 2026 GMT Not After : Sep 25 11:01:36 2026 GMT Subject: CN=724A6D82A652C83F9421708AF79A85593FC44C78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:72:76:0e:24:de:ae:d3:f0:45:5f:75:e9:0e: 51:de:cd:79:13:2d:bc:53:13:60:73:ee:cc:10:6d: fe:58:de:4d:56:70:fa:5f:25:34:1a:f1:a5:ad:de: ff:7b:56:83:0c:7a:06:26:ea:41:8f:89:0e:00:bb: 3e:51:27:3b:38:66:c7:cd:0f:b2:61:ac:a8:d0:07: 58:db:a6:de:5e:7a:09:5e:f0:9c:f9:f4:e9:d3:91: 94:be:5b:50:0a:93:57:a5:46:9a:c1:b8:56:3c:08: c2:b3:07:6a:42:da:0f:7b:0a:97:5a:45:59:ff:29: 88:d0:4a:3f:4f:1f:ce:a2:e5:90:b1:c6:21:1a:bd: 0d:12:ea:65:98:ec:6d:42:1b:f2:6f:28:f8:cf:0b: 74:fb:65:31:09:a0:34:8b:f8:86:1c:52:95:b1:9d: 2c:40:c1:a8:85:74:35:14:c8:ca:15:16:cc:83:10: 9e:1e:0f:5c:10:c4:d0:69:a6:cc:d3:a2:60:d1:c0: 47:d4:4b:23:2d:75:06:b9:9f:22:35:61:db:03:26: cb:49:cc:20:a8:13:96:41:87:03:10:a1:35:02:dc: b6:82:20:e1:05:76:02:45:6d:02:29:b6:35:1e:c6: d9:83:4a:be:ee:c3:91:6e:89:34:2c:a0:11:e7:ce: 0b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4A:6D:82:A6:52:C8:3F:94:21:70:8A:F7:9A:85:59:3F:C4:4C:78 X509v3 Authority Key Identifier: keyid:2A:49:4F:AE:E4:4F:13:44:8E:6C:43:13:6F:82:50:53:CE:97:70:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:8b:99:7b:7b:3e:54:5e:1b:19:80:63:19:95:be:83:e3:2b: de:b1:3d:06:c8:1a:82:2c:3a:bc:25:85:31:1b:21:ea:e7:1e: 1b:64:38:8c:cb:ba:3c:e6:73:1c:6b:88:5d:25:4a:06:1d:a7: 4f:51:ad:77:bf:0e:79:30:62:01:64:8b:59:6b:cd:08:39:13: c1:64:e4:73:78:e7:f2:26:57:0e:a4:74:87:f0:09:d1:d9:d9: c7:d9:37:29:e7:64:9d:4e:71:c5:f4:0e:34:77:a6:77:30:c7: 82:9e:f7:40:a1:dc:1c:77:b3:a3:78:83:c4:1a:41:57:27:bb: 7b:6b:c0:ab:a1:29:04:9f:97:86:c9:e9:e8:68:23:a1:d7:c1: 6f:f6:fe:28:59:44:85:5a:12:c6:25:83:9c:0b:4b:55:36:e5: 31:4c:57:5e:cc:85:61:c4:fd:45:64:a3:ad:15:40:e9:62:1d: 6a:6f:54:f6:e8:6d:c4:1e:1e:3d:a6:fc:01:e3:1f:dc:f4:f5: c8:b1:02:3a:6a:36:c2:b7:2d:b1:36:6e:86:3a:90:f3:e2:a5: 4b:75:79:dc:90:aa:51:19:d2:b9:89:5f:45:36:31:cf:6f:c2: 80:8b:80:e2:7e:cd:91:b4:c4:a2:e9:69:c9:87:09:0f:13:31: 8a:51:a6:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXW1lrTJAlUmcQmlwjIxCX7ZJkKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE0OTRGQUVFNDRGMTM0NDhFNkM0MzEzNkY4MjUwNTND RTk3NzAwOTAeFw0yNjA5MjQwNzA0MzZaFw0yNjA5MjUxMTAxMzZaMDMxMTAvBgNV BAMTKDcyNEE2RDgyQTY1MkM4M0Y5NDIxNzA4QUY3OUE4NTU5M0ZDNDRDNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEcnYOJN6u0/BFX3XpDlHezXkT LbxTE2Bz7swQbf5Y3k1WcPpfJTQa8aWt3v97VoMMegYm6kGPiQ4Auz5RJzs4ZsfN D7JhrKjQB1jbpt5eegle8Jz59OnTkZS+W1AKk1elRprBuFY8CMKzB2pC2g97Cpda RVn/KYjQSj9PH86i5ZCxxiEavQ0S6mWY7G1CG/JvKPjPC3T7ZTEJoDSL+IYcUpWx nSxAwaiFdDUUyMoVFsyDEJ4eD1wQxNBppszTomDRwEfUSyMtdQa5nyI1YdsDJstJ zCCoE5ZBhwMQoTUC3LaCIOEFdgJFbQIptjUextmDSr7uw5FuiTQsoBHnzgsBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUckptgqZSyD+UIXCK95qFWT/ETHgwHwYDVR0j BBgwFoAUKklPruRPE0SObEMTb4JQU86XcAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBkYzEyODMtMWNlMi00MWE1LWFmZTYtZjBiZTMxZTliMTBkLzAvMkE0OTRGQUVF NDRGMTM0NDhFNkM0MzEzNkY4MjUwNTNDRTk3NzAwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTQ5NEZBRUU0NEYxMzQ0OEU2QzQzMTM2RjgyNTA1M0NFOTc3 MDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBkYzEyODMtMWNlMi00MWE1LWFm ZTYtZjBiZTMxZTliMTBkLzAvMkE0OTRGQUVFNDRGMTM0NDhFNkM0MzEzNkY4MjUw NTNDRTk3NzAwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmLmXt7PlReGxmAYxmVvoPjK96xPQbIGoIs OrwlhTEbIernHhtkOIzLujzmcxxriF0lSgYdp09RrXe/DnkwYgFki1lrzQg5E8Fk 5HN45/ImVw6kdIfwCdHZ2cfZNynnZJ1OccX0DjR3pncwx4Ke90Ch3Bx3s6N4g8Qa QVcnu3trwKuhKQSfl4bJ6ehoI6HXwW/2/ihZRIVaEsYlg5wLS1U25TFMV17MhWHE /UVko60VQOliHWpvVPbobcQeHj2m/AHjH9z09cixAjpqNsK3LbE2boY6kPPipUt1 edyQqlEZ0rmJX0U2Mc9vwoCLgOJ+zZG0xKLpacmHCQ8TMYpRpvo= -----END CERTIFICATE-----Generated at Thu Sep 24 12:36:37 2026 by rpki-client