$ rpki-client -vvvf rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft File: 2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft (raw, json) Hash identifier: UTOtijU4skQLdZOsz4FBACVCweVNuRcfK3NfaS7y8o4= Subject key identifier: 13:65:9C:C4:80:70:BB:1F:9B:C3:AD:02:57:06:EE:78:9A:C5:BB:70 Authority key identifier: 2A:3B:71:13:CD:87:30:2B:2B:15:C0:36:DA:BB:55:A1:C6:1A:4B:C7 Certificate issuer: /CN=2A3B7113CD87302B2B15C036DABB55A1C61A4BC7 Certificate serial: 7B1356A8629F6ED7586876A18F1F03B47F5CBF2C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 00:11:28 +0000 Manifest this update: Wed 23 Sep 2026 00:06:28 +0000 Manifest next update: Thu 24 Sep 2026 03:12:28 +0000 Files and hashes: 1: 3130332e31362e3131392e302f32342d3234203d3e20313530323234.roa (hash: I2YIeew2oZSIPdct3GSYzDNuqJxTOhVzByMVv86tq2I=) 2: 3130332e31362e3131382e302f32332d3233203d3e20313530323234.roa (hash: cHWRS9jvMLPJtfkGwJTsPEjSAtpAq4obnCko3LPwDM4=) 3: 3130332e31362e3131382e302f32342d3234203d3e20313530323234.roa (hash: DmsqvgbVPNfcNdfJtucN0xsEHJ0/UNUr4pV2Ej4ylVY=) 4: 2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl (hash: nFFm9g+HrX0CWQa+rGsZQRPyDXG9IdEWVxDb1E4ZtNo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 03:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:13:56:a8:62:9f:6e:d7:58:68:76:a1:8f:1f:03:b4:7f:5c:bf:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A3B7113CD87302B2B15C036DABB55A1C61A4BC7 Validity Not Before: Sep 23 00:06:28 2026 GMT Not After : Sep 24 03:12:28 2026 GMT Subject: CN=13659CC48070BB1F9BC3AD025706EE789AC5BB70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3b:a4:a7:39:31:8b:67:07:bf:78:2a:81:85: 16:79:fc:b6:11:db:0e:dd:51:d2:1d:12:11:60:24: b6:dc:76:4e:f8:91:5a:d5:91:73:fa:ec:06:21:52: 6f:a9:b5:4c:98:ae:63:5a:f6:91:8a:f7:33:35:50: a5:01:c5:f0:a6:7f:a8:fc:eb:78:60:ab:65:6f:3e: b1:bb:bb:39:4a:87:6f:07:8f:ce:23:dc:b8:8d:f5: 31:b3:48:85:23:27:fc:c8:7d:3d:24:ca:cc:df:55: 3d:16:23:3a:22:9e:eb:77:85:50:0f:4c:3c:7d:81: 6f:9d:6b:e6:8b:b6:02:20:7c:ae:94:5f:e3:b9:7d: 39:97:e1:c2:98:6c:bc:b5:99:ee:96:c6:44:a8:0a: bd:f0:4e:3d:15:b9:26:6c:78:63:bc:db:26:cd:5f: 5e:6e:bc:ec:08:f2:18:78:4b:52:17:ba:8c:2d:3b: 8b:a2:37:ac:8e:52:d7:35:3a:f2:e4:69:78:e8:9a: af:4e:d3:52:89:af:21:b5:c0:83:1f:f8:d9:46:10: 86:36:e3:45:00:21:9e:b5:87:90:9e:07:20:e5:4d: f3:8e:0b:9e:70:d9:79:47:06:14:6d:db:65:01:f1: 6f:33:c6:69:44:41:2c:0a:39:a1:e6:92:95:04:9d: 22:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:65:9C:C4:80:70:BB:1F:9B:C3:AD:02:57:06:EE:78:9A:C5:BB:70 X509v3 Authority Key Identifier: keyid:2A:3B:71:13:CD:87:30:2B:2B:15:C0:36:DA:BB:55:A1:C6:1A:4B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:16:4d:4c:68:5e:8f:55:72:7f:31:66:84:ec:71:15:09:83: e4:f3:54:cf:a6:8d:1a:13:c4:84:4f:0b:78:ab:98:27:bc:e3: 2e:a4:d1:2f:72:25:dc:ad:06:62:2b:de:b8:c5:44:81:ae:0d: a1:71:9b:0b:5a:2a:3b:13:01:ee:91:d1:a1:84:2f:b7:d2:02: de:c7:78:35:7d:b7:45:37:fa:37:fb:c4:98:a9:18:50:5e:96: e7:ff:45:da:05:9a:b1:9a:84:47:f3:0e:03:a3:34:37:22:01: ae:aa:cd:68:22:2a:86:30:4b:de:ae:eb:39:1b:12:a7:68:e0: 0a:65:63:3f:04:c0:52:65:88:ef:52:52:e6:86:45:3f:9e:90: 4a:b0:00:dd:67:08:36:a5:c4:aa:de:a5:f9:d1:9c:5d:e9:7b: b2:c2:39:66:29:9e:0d:db:49:c9:a8:c3:b5:e8:27:b5:f5:22: e0:8f:3d:9a:be:0f:b6:0f:09:e1:3d:05:15:f2:9c:9c:cd:1c: 2a:a8:3e:bd:76:9a:22:ca:65:f9:5c:f3:3b:d9:49:0a:ca:26: 0e:be:21:38:76:78:37:35:03:64:30:b9:74:c3:b1:26:79:ca: bf:08:54:94:01:81:50:b6:42:29:a4:2f:f3:d8:1d:df:28:8c: 76:6d:45:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUexNWqGKfbtdYaHahjx8DtH9cvywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzQjcxMTNDRDg3MzAyQjJCMTVDMDM2REFCQjU1QTFD NjFBNEJDNzAeFw0yNjA5MjMwMDA2MjhaFw0yNjA5MjQwMzEyMjhaMDMxMTAvBgNV BAMTKDEzNjU5Q0M0ODA3MEJCMUY5QkMzQUQwMjU3MDZFRTc4OUFDNUJCNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwO6SnOTGLZwe/eCqBhRZ5/LYR 2w7dUdIdEhFgJLbcdk74kVrVkXP67AYhUm+ptUyYrmNa9pGK9zM1UKUBxfCmf6j8 63hgq2VvPrG7uzlKh28Hj84j3LiN9TGzSIUjJ/zIfT0kyszfVT0WIzoinut3hVAP TDx9gW+da+aLtgIgfK6UX+O5fTmX4cKYbLy1me6WxkSoCr3wTj0VuSZseGO82ybN X15uvOwI8hh4S1IXuowtO4uiN6yOUtc1OvLkaXjomq9O01KJryG1wIMf+NlGEIY2 40UAIZ61h5CeByDlTfOOC55w2XlHBhRt22UB8W8zxmlEQSwKOaHmkpUEnSIjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE2WcxIBwux+bw60CVwbueJrFu3AwHwYDVR0j BBgwFoAUKjtxE82HMCsrFcA22rtVocYaS8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTk4Nzk3NDQtYjgxOC00NmRjLThkOWYtOWMzNTc5M2Y0Y2JiLzAvMkEzQjcxMTND RDg3MzAyQjJCMTVDMDM2REFCQjU1QTFDNjFBNEJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTNCNzExM0NEODczMDJCMkIxNUMwMzZEQUJCNTVBMUM2MUE0 QkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTk4Nzk3NDQtYjgxOC00NmRjLThk OWYtOWMzNTc5M2Y0Y2JiLzAvMkEzQjcxMTNDRDg3MzAyQjJCMTVDMDM2REFCQjU1 QTFDNjFBNEJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsWTUxoXo9Vcn8xZoTscRUJg+TzVM+mjRoT xIRPC3irmCe84y6k0S9yJdytBmIr3rjFRIGuDaFxmwtaKjsTAe6R0aGEL7fSAt7H eDV9t0U3+jf7xJipGFBeluf/RdoFmrGahEfzDgOjNDciAa6qzWgiKoYwS96u6zkb Eqdo4AplYz8EwFJliO9SUuaGRT+ekEqwAN1nCDalxKrepfnRnF3pe7LCOWYpng3b Scmow7XoJ7X1IuCPPZq+D7YPCeE9BRXynJzNHCqoPr12miLKZflc8zvZSQrKJg6+ ITh2eDc1A2QwuXTDsSZ5yr8IVJQBgVC2QimkL/PYHd8ojHZtRcw= -----END CERTIFICATE-----Generated at Wed Sep 23 11:05:52 2026 by rpki-client