$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft File: 2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft (raw, json) Hash identifier: qzNCTzpUdjGem0oi6b4zxi1IYrwEMHsiYGoIxt9IQ9I= Subject key identifier: 38:9E:85:AD:09:9F:8E:59:80:08:CE:2C:14:6B:C0:A7:C0:01:98:3B Authority key identifier: 2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5 Certificate issuer: /CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5 Certificate serial: 60A87794C0C2CE5CEAC05D1A0AA800FACCD8E284 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft Manifest number: BF Signing time: Tue 22 Sep 2026 06:44:51 +0000 Manifest this update: Tue 22 Sep 2026 06:39:51 +0000 Manifest next update: Wed 23 Sep 2026 09:56:51 +0000 Files and hashes: 1: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: 8N1ryLqGS1Ck4AODHf8NX/rVMxyMRb5QCwGLiIIXGg8=) 2: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: 8wKUF9NYC7pRZOxvlEf5LxZ2nZECYvwr1BSS5u1G+4Y=) 3: 2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl (hash: M9ioyURogsAYuokfDL8LIJ7jKKvY2Z0qaz+OkD3k0FQ=) 4: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: K2AeuLRVAE8BPE4wuWW8WhZGZyYvk9GHwxpL0SCIDfk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a8:77:94:c0:c2:ce:5c:ea:c0:5d:1a:0a:a8:00:fa:cc:d8:e2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5 Validity Not Before: Sep 22 06:39:51 2026 GMT Not After : Sep 23 09:56:51 2026 GMT Subject: CN=389E85AD099F8E598008CE2C146BC0A7C001983B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2f:3f:46:c1:7a:73:72:88:36:cd:2c:8b:a5: ae:0e:67:da:9f:33:9c:62:ab:a3:ec:f7:0b:d0:b0: 74:3d:49:61:17:26:51:5e:89:cc:f9:d5:f5:9a:58: 9e:7c:f4:a5:79:65:e3:b6:be:d6:77:c3:20:fe:5f: 16:2a:a5:e1:c9:50:a9:88:af:2b:3b:30:66:cd:72: 8f:59:18:e1:57:04:9f:2e:88:79:40:b5:ca:30:b8: 1e:27:92:b3:ba:e1:41:71:db:1e:74:46:9b:b7:52: 52:5e:3e:36:47:20:d9:af:82:2e:35:09:d6:9c:63: f3:95:b7:5a:5d:cf:75:22:fe:a4:82:a2:a8:b1:7f: ba:bc:76:37:3f:4b:d4:12:ec:87:e1:bd:31:4f:42: 12:ea:7e:c4:3a:d2:32:8f:48:50:21:fe:fc:0d:13: 10:95:b2:de:df:c6:93:80:29:cb:35:dc:fd:a2:00: e0:5e:06:f0:2d:90:a8:2c:9a:85:f5:62:eb:bf:d9: 7b:ee:ba:2f:67:6e:cb:c6:70:b1:8f:29:bc:0f:92: fd:8c:2f:ef:51:8f:3e:72:04:40:e0:32:b7:72:3b: 10:c6:6f:e5:2d:ea:62:b6:4a:67:83:59:79:c0:a6: dd:5f:54:25:1a:f5:72:d3:c1:bb:15:0b:1b:c0:3f: 10:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9E:85:AD:09:9F:8E:59:80:08:CE:2C:14:6B:C0:A7:C0:01:98:3B X509v3 Authority Key Identifier: keyid:2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:5e:ae:28:9d:2e:dd:7e:26:07:e3:bd:20:37:d1:2d:f0:bc: 82:8b:f2:99:b7:ce:50:e5:4b:a3:38:14:7b:e4:34:26:9c:be: 3c:e8:c0:96:04:ab:a0:63:1d:ff:90:b0:02:3c:85:8c:d3:b2: e5:2b:2c:60:d6:0d:61:c8:e6:42:01:f7:73:08:5e:3e:ce:b8: 9b:5b:99:24:19:35:56:b7:3a:41:ff:84:d3:d8:a3:47:4e:b0: 3d:64:72:14:e5:ac:6a:f9:3f:e5:63:a1:33:98:8a:73:1c:bb: f3:62:e8:c8:f8:d0:b2:3c:b1:58:07:3d:9d:f8:d2:3b:2e:f0: f4:4e:e7:5a:e5:1e:e9:1b:7a:01:4d:91:0d:65:1f:a7:46:a6: 18:38:5a:a8:b7:27:09:1f:16:f2:db:8a:64:61:df:c9:7c:7f: eb:cd:31:fa:3d:d4:bb:63:e7:a5:84:1b:a5:4a:c9:e7:6c:bd: 67:24:98:fe:5a:6f:34:be:51:62:c6:f0:b3:9f:31:9d:0b:d7: b3:10:88:7b:54:a5:6f:aa:a4:4e:d6:c3:5c:41:e4:c9:cc:bb: 70:27:fa:d3:4a:8f:e7:c4:73:55:93:71:b2:6c:55:cb:51:bc: 0e:f0:b3:ca:21:f4:87:78:76:e0:b2:39:a7:23:fb:c4:7c:0b: 38:30:d4:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYKh3lMDCzlzqwF0aCqgA+szY4oQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFFMTQzM0JCODJGMjc3MTZERjUyNkRBRENDQzRDMkIz NzU4OUNBNTAeFw0yNjA5MjIwNjM5NTFaFw0yNjA5MjMwOTU2NTFaMDMxMTAvBgNV BAMTKDM4OUU4NUFEMDk5RjhFNTk4MDA4Q0UyQzE0NkJDMEE3QzAwMTk4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTLz9GwXpzcog2zSyLpa4OZ9qf M5xiq6Ps9wvQsHQ9SWEXJlFeicz51fWaWJ589KV5ZeO2vtZ3wyD+XxYqpeHJUKmI rys7MGbNco9ZGOFXBJ8uiHlAtcowuB4nkrO64UFx2x50Rpu3UlJePjZHINmvgi41 CdacY/OVt1pdz3Ui/qSCoqixf7q8djc/S9QS7IfhvTFPQhLqfsQ60jKPSFAh/vwN ExCVst7fxpOAKcs13P2iAOBeBvAtkKgsmoX1Yuu/2Xvuui9nbsvGcLGPKbwPkv2M L+9Rjz5yBEDgMrdyOxDGb+Ut6mK2SmeDWXnApt1fVCUa9XLTwbsVCxvAPxBtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOJ6FrQmfjlmACM4sFGvAp8ABmDswHwYDVR0j BBgwFoAUKuFDO7gvJ3Ft9Sba3MxMKzdYnKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQwMTFhMWMtYTBhZC00ZDkzLTg2YWYtM2YwYWFkZDk2ODRmLzAvMkFFMTQzM0JC ODJGMjc3MTZERjUyNkRBRENDQzRDMkIzNzU4OUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yQUUxNDMzQkI4MkYyNzcxNkRGNTI2REFEQ0NDNEMyQjM3NTg5 Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvMkFFMTQzM0JCODJGMjc3MTZERjUyNkRBRENDQzRD MkIzNzU4OUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOheriidLt1+JgfjvSA30S3wvIKL8pm3zlDl S6M4FHvkNCacvjzowJYEq6BjHf+QsAI8hYzTsuUrLGDWDWHI5kIB93MIXj7OuJtb mSQZNVa3OkH/hNPYo0dOsD1kchTlrGr5P+VjoTOYinMcu/Ni6Mj40LI8sVgHPZ34 0jsu8PRO51rlHukbegFNkQ1lH6dGphg4Wqi3JwkfFvLbimRh38l8f+vNMfo91Ltj 56WEG6VKyedsvWckmP5abzS+UWLG8LOfMZ0L17MQiHtUpW+qpE7Ww1xB5MnMu3An +tNKj+fEc1WTcbJsVctRvA7ws8oh9Id4duCyOacj+8R8Czgw1Ng= -----END CERTIFICATE-----Generated at Tue Sep 22 13:10:54 2026 by rpki-client