$ rpki-client -vvvf rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft File: 2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft (raw, json) Hash identifier: nmNuSrbNVCzYbMQ0kK4jBrygIWpm+elI3gGlfkk0zVc= Subject key identifier: A8:81:1A:6B:1D:6A:5B:0E:89:E6:82:4B:2F:C5:2A:30:91:36:AE:EB Authority key identifier: 2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63 Certificate issuer: /CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463 Certificate serial: 3B6359375131786552A21E4848C1E681B2D7DF52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft Manifest number: BD Signing time: Mon 21 Sep 2026 19:20:22 +0000 Manifest this update: Mon 21 Sep 2026 19:15:22 +0000 Manifest next update: Tue 22 Sep 2026 22:34:22 +0000 Files and hashes: 1: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: JbxVAMh0l8cOOEqUdkvkAwk1Vty1kRSyKXbV2pl/yFg=) 2: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: 6oOlCIxGneY8XQmzJaSA+rXwKrW4Xz1wcUf44XfKjgk=) 3: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: 6lFtnPCNARkQq8uMVyUcH9X2yfQ7BRCjGYYqyfiHjKo=) 4: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: i83P/tWxpN7+zDb3L4rKQFgIev7DrUCxoADIDDyJE9U=) 5: 2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl (hash: 15xMGYW8P4nIQZSxp08qrlWl/vzXzvMEsi11VzqkE0g=) 6: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: iJm4NhgPbIn9ZoK9MCrx0LzGYq+XRWtI9oNHEB41bTw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:63:59:37:51:31:78:65:52:a2:1e:48:48:c1:e6:81:b2:d7:df:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463 Validity Not Before: Sep 21 19:15:22 2026 GMT Not After : Sep 22 22:34:22 2026 GMT Subject: CN=A8811A6B1D6A5B0E89E6824B2FC52A309136AEEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7c:42:d4:d5:07:a0:1b:cc:c5:bc:b0:3e:7c: 34:df:15:bd:35:8e:41:a1:70:8c:77:b6:d5:fe:f8: 3d:af:35:f5:94:7e:1b:cd:17:b8:02:ec:bd:6b:f0: a5:54:1a:1e:1d:30:a2:9b:5f:f7:03:d8:7e:9d:56: 8a:e1:de:23:91:30:92:fe:6d:e5:ec:66:03:75:e1: e4:5f:07:d7:2b:3e:93:53:14:9f:85:0d:cc:af:55: ba:5e:c4:5e:c0:60:d0:35:7b:0f:24:4f:c7:94:89: 0d:e2:37:65:3b:42:f6:80:d5:83:19:66:1b:3a:5f: 52:b0:eb:10:7c:d9:18:26:0a:62:85:e8:8a:f4:7c: 9f:0e:16:88:a2:5e:8d:44:f2:12:bf:98:30:e0:1f: a8:67:ed:04:c5:04:da:dc:50:d8:48:2d:8c:d4:fc: a8:77:49:3b:f4:8a:42:45:46:41:25:86:5d:1c:3d: fe:44:d6:a3:78:63:ec:8f:78:a0:3d:fd:e8:06:52: fc:fe:9c:20:3f:6a:5e:8b:09:df:d1:7a:91:4a:08: a3:bb:c3:42:9f:74:8e:dc:9a:5f:99:1f:72:6b:8f: 90:fd:32:66:c0:77:dd:31:4c:85:57:f9:85:08:05: 7e:8b:fb:10:35:bb:5e:f4:df:0e:fe:21:ef:cd:96: d4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:81:1A:6B:1D:6A:5B:0E:89:E6:82:4B:2F:C5:2A:30:91:36:AE:EB X509v3 Authority Key Identifier: keyid:2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:3d:94:9a:4a:ce:18:d0:09:76:cb:22:1d:09:b7:c2:1a:c8: 19:2d:d1:a3:41:f7:72:27:89:23:46:15:cc:e2:10:32:18:ab: 18:ab:ce:be:57:eb:34:a1:49:cd:22:53:65:d7:c4:2c:89:05: 14:ed:09:af:d6:12:9e:da:04:ff:8e:36:40:3a:bf:67:54:a6: aa:64:45:d7:4f:f2:40:cd:c1:42:e9:5d:e7:23:3d:f8:b0:9d: ac:95:bd:50:eb:e6:74:bb:ac:d8:7e:92:2a:6b:d3:f3:cf:58: 99:50:56:54:2b:71:1d:b7:46:47:95:4e:64:0b:e8:4b:ff:9f: 04:db:04:fe:b8:1b:f4:ec:f3:25:77:c2:e0:cf:20:55:04:9a: c7:70:ce:42:bd:65:6f:dc:7b:9b:7d:f8:36:d5:6a:5b:09:a8: be:62:85:08:2c:73:d9:38:44:56:1b:bc:8e:11:0f:a3:9e:31: 54:e1:ad:53:7c:3b:1a:31:38:69:f8:d1:fb:37:22:02:b5:49: 52:40:62:4e:ba:a6:ac:89:a0:cd:57:47:9a:40:51:1c:a9:42: f4:f5:df:a6:06:21:ea:ea:66:7c:68:43:58:54:50:e9:ca:63: 6b:30:57:f3:01:d9:a3:a3:69:dd:ba:ae:07:c3:54:62:af:62: cd:6d:37:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO2NZN1ExeGVSoh5ISMHmgbLX31IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzMTM3RUVGNzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3 MkUyQzQ2MzAeFw0yNjA5MjExOTE1MjJaFw0yNjA5MjIyMjM0MjJaMDMxMTAvBgNV BAMTKEE4ODExQTZCMUQ2QTVCMEU4OUU2ODI0QjJGQzUyQTMwOTEzNkFFRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgfELU1QegG8zFvLA+fDTfFb01 jkGhcIx3ttX++D2vNfWUfhvNF7gC7L1r8KVUGh4dMKKbX/cD2H6dVorh3iORMJL+ beXsZgN14eRfB9crPpNTFJ+FDcyvVbpexF7AYNA1ew8kT8eUiQ3iN2U7QvaA1YMZ Zhs6X1Kw6xB82RgmCmKF6Ir0fJ8OFoiiXo1E8hK/mDDgH6hn7QTFBNrcUNhILYzU /Kh3STv0ikJFRkElhl0cPf5E1qN4Y+yPeKA9/egGUvz+nCA/al6LCd/RepFKCKO7 w0KfdI7cml+ZH3Jrj5D9MmbAd90xTIVX+YUIBX6L+xA1u1703w7+Ie/NltSJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqIEaax1qWw6J5oJLL8UqMJE2ruswHwYDVR0j BBgwFoAUKjE37vd/GvFvehLdbTaUTHLixGMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI4ZWVjNWItNTMyNC00NDIyLWEzMmYtOWIxZGNlZDM3NTlmLzAvMkEzMTM3RUVG NzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3MkUyQzQ2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTMxMzdFRUY3N0YxQUYxNkY3QTEyREQ2RDM2OTQ0QzcyRTJD NDYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMkEzMTM3RUVGNzdGMUFGMTZGN0ExMkRENkQzNjk0 NEM3MkUyQzQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABk9lJpKzhjQCXbLIh0Jt8IayBkt0aNB93In iSNGFcziEDIYqxirzr5X6zShSc0iU2XXxCyJBRTtCa/WEp7aBP+ONkA6v2dUpqpk RddP8kDNwULpXecjPfiwnayVvVDr5nS7rNh+kipr0/PPWJlQVlQrcR23RkeVTmQL 6Ev/nwTbBP64G/Ts8yV3wuDPIFUEmsdwzkK9ZW/ce5t9+DbValsJqL5ihQgsc9k4 RFYbvI4RD6OeMVThrVN8OxoxOGn40fs3IgK1SVJAYk66pqyJoM1XR5pAURypQvT1 36YGIerqZnxoQ1hUUOnKY2swV/MB2aOjad26rgfDVGKvYs1tNz8= -----END CERTIFICATE-----Generated at Tue Sep 22 05:45:43 2026 by rpki-client