$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft File: 2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft (raw, json) Hash identifier: qOvh1UJK+XcdAJafcgidoaOosfxDPa24VVcLrX3LmPA= Subject key identifier: 59:E7:37:AA:3A:5E:1E:46:FA:71:28:78:64:DE:C6:EF:42:7F:71:94 Authority key identifier: 2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5 Certificate issuer: /CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5 Certificate serial: 611FD89B773D40207CA454C803FE0DBA9FD0765F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft Manifest number: BE Signing time: Mon 21 Sep 2026 12:11:24 +0000 Manifest this update: Mon 21 Sep 2026 12:06:24 +0000 Manifest next update: Tue 22 Sep 2026 14:41:24 +0000 Files and hashes: 1: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: 8N1ryLqGS1Ck4AODHf8NX/rVMxyMRb5QCwGLiIIXGg8=) 2: 2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl (hash: 2lyVGOpJNKZpzGD2DZRanMapQyKdb5WAFxf4TkMw6RI=) 3: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: K2AeuLRVAE8BPE4wuWW8WhZGZyYvk9GHwxpL0SCIDfk=) 4: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: 8wKUF9NYC7pRZOxvlEf5LxZ2nZECYvwr1BSS5u1G+4Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:1f:d8:9b:77:3d:40:20:7c:a4:54:c8:03:fe:0d:ba:9f:d0:76:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5 Validity Not Before: Sep 21 12:06:24 2026 GMT Not After : Sep 22 14:41:24 2026 GMT Subject: CN=59E737AA3A5E1E46FA71287864DEC6EF427F7194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:01:33:ed:98:fc:ac:7e:38:25:f5:16:6c:02: 97:fd:69:e9:dc:59:5a:2d:ea:aa:be:4c:7b:4c:36: eb:36:cd:6a:bc:e9:26:e2:c7:34:a0:72:69:f3:2a: b4:2a:f3:5a:da:31:4e:61:76:02:a2:66:a6:48:d3: 6c:52:5b:ca:69:83:13:f3:01:60:01:7c:cf:f7:15: 4e:a1:4a:cb:f6:1e:a8:5a:66:cf:99:d0:63:da:1e: fa:b7:cd:aa:86:ae:11:47:de:62:d9:cf:4e:3d:43: 62:80:0f:2e:76:4d:4d:20:1e:4d:ac:19:92:b7:6d: 47:d4:b9:ff:cd:60:7e:98:7e:dc:4f:4d:b1:47:37: 3f:05:ca:83:b0:b9:71:26:65:4b:c5:d5:41:62:f1: ce:4c:20:7d:85:d9:d2:08:4a:c9:04:46:9d:c8:a2: 30:0b:4f:9f:b1:ec:b2:02:9b:6c:91:94:e5:e1:4d: 34:d2:8c:06:1d:73:52:8a:c1:14:9e:fd:a8:f9:e5: 8e:55:51:9a:b2:03:7c:6b:f1:24:dd:84:c6:23:95: d0:e0:28:05:12:d7:78:ef:64:86:e5:17:d5:9e:2a: b3:01:87:32:fc:d5:03:6c:f3:a5:c0:66:0c:7c:0d: b6:fd:ea:ad:3c:dd:a6:f7:19:af:1e:c3:53:9a:ed: 9e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E7:37:AA:3A:5E:1E:46:FA:71:28:78:64:DE:C6:EF:42:7F:71:94 X509v3 Authority Key Identifier: keyid:2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:75:b8:f3:f1:c0:9a:10:f4:26:cf:ed:d6:9c:6b:ba:e7:73: c1:11:17:ea:69:39:27:9d:fa:85:88:9d:f4:c4:65:6d:e4:0e: 76:84:be:e2:67:ef:61:aa:a8:f9:e1:7a:2b:e9:6e:b5:cb:8a: 93:6c:b5:5b:29:20:97:03:62:53:87:32:66:9b:46:75:75:6c: c2:11:b2:ee:9e:a4:25:b0:5c:13:b7:01:6e:66:c8:4d:9f:a4: a1:29:2c:cd:be:7b:56:87:76:92:fc:3d:27:89:2c:62:99:b5: 43:c7:15:7e:61:e5:6e:94:20:df:42:76:31:d7:20:67:db:60: a7:eb:1b:b8:07:79:7d:fc:87:e7:40:f8:35:74:c5:56:49:ed: fc:90:dc:11:45:26:aa:78:44:bb:cc:58:25:2b:ed:43:b8:74: f9:11:8c:1b:19:38:61:46:74:1b:1d:37:45:bc:92:9f:45:ae: 5a:73:fc:36:a0:d6:6a:b5:ab:ca:96:bc:25:90:10:6b:8c:aa: a7:ec:64:15:86:02:60:2f:07:b0:75:ae:37:bd:ef:15:b0:a0: 42:b6:ac:f2:be:e2:49:dc:bb:5e:3d:c0:6d:3e:1e:89:9b:52: c3:48:81:c2:dd:63:3b:26:44:84:07:05:8b:70:49:9a:d5:c4: b0:c5:4e:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYR/Ym3c9QCB8pFTIA/4Nup/Qdl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFFMTQzM0JCODJGMjc3MTZERjUyNkRBRENDQzRDMkIz NzU4OUNBNTAeFw0yNjA5MjExMjA2MjRaFw0yNjA5MjIxNDQxMjRaMDMxMTAvBgNV BAMTKDU5RTczN0FBM0E1RTFFNDZGQTcxMjg3ODY0REVDNkVGNDI3RjcxOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuATPtmPysfjgl9RZsApf9aenc WVot6qq+THtMNus2zWq86SbixzSgcmnzKrQq81raMU5hdgKiZqZI02xSW8ppgxPz AWABfM/3FU6hSsv2HqhaZs+Z0GPaHvq3zaqGrhFH3mLZz049Q2KADy52TU0gHk2s GZK3bUfUuf/NYH6YftxPTbFHNz8FyoOwuXEmZUvF1UFi8c5MIH2F2dIISskERp3I ojALT5+x7LICm2yRlOXhTTTSjAYdc1KKwRSe/aj55Y5VUZqyA3xr8STdhMYjldDg KAUS13jvZIblF9WeKrMBhzL81QNs86XAZgx8Dbb96q083ab3Ga8ew1Oa7Z4DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWec3qjpeHkb6cSh4ZN7G70J/cZQwHwYDVR0j BBgwFoAUKuFDO7gvJ3Ft9Sba3MxMKzdYnKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQwMTFhMWMtYTBhZC00ZDkzLTg2YWYtM2YwYWFkZDk2ODRmLzAvMkFFMTQzM0JC ODJGMjc3MTZERjUyNkRBRENDQzRDMkIzNzU4OUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yQUUxNDMzQkI4MkYyNzcxNkRGNTI2REFEQ0NDNEMyQjM3NTg5 Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvMkFFMTQzM0JCODJGMjc3MTZERjUyNkRBRENDQzRD MkIzNzU4OUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGp1uPPxwJoQ9CbP7daca7rnc8ERF+ppOSed +oWInfTEZW3kDnaEvuJn72GqqPnheivpbrXLipNstVspIJcDYlOHMmabRnV1bMIR su6epCWwXBO3AW5myE2fpKEpLM2+e1aHdpL8PSeJLGKZtUPHFX5h5W6UIN9CdjHX IGfbYKfrG7gHeX38h+dA+DV0xVZJ7fyQ3BFFJqp4RLvMWCUr7UO4dPkRjBsZOGFG dBsdN0W8kp9Frlpz/Dag1mq1q8qWvCWQEGuMqqfsZBWGAmAvB7B1rje97xWwoEK2 rPK+4kncu149wG0+HombUsNIgcLdYzsmRIQHBYtwSZrVxLDFTj0= -----END CERTIFICATE-----Generated at Tue Sep 22 00:07:18 2026 by rpki-client