$ rpki-client -vvvf rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft File: 2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft (raw, json) Hash identifier: QZNdSeKxSQ9cvVHzERzxQKmQMgp6MYMoccTgGtANtPc= Subject key identifier: D5:7E:9F:09:F7:35:AF:44:06:B2:E3:1D:93:AB:DB:E8:67:97:0B:FD Authority key identifier: 2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63 Certificate issuer: /CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463 Certificate serial: 43248E3117414B2063EF8EBAB03C00C8F9023ACA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 10:47:24 +0000 Manifest this update: Sun 15 Nov 2026 10:42:24 +0000 Manifest next update: Mon 16 Nov 2026 14:42:24 +0000 Files and hashes: 1: 2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl (hash: O/l/UC6mPJzMpqEZTPw33m9YePmpaLpfh9CLGb5CW3I=) 2: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: 6lFtnPCNARkQq8uMVyUcH9X2yfQ7BRCjGYYqyfiHjKo=) 3: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: iJm4NhgPbIn9ZoK9MCrx0LzGYq+XRWtI9oNHEB41bTw=) 4: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: 6oOlCIxGneY8XQmzJaSA+rXwKrW4Xz1wcUf44XfKjgk=) 5: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: JbxVAMh0l8cOOEqUdkvkAwk1Vty1kRSyKXbV2pl/yFg=) 6: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: i83P/tWxpN7+zDb3L4rKQFgIev7DrUCxoADIDDyJE9U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:24:8e:31:17:41:4b:20:63:ef:8e:ba:b0:3c:00:c8:f9:02:3a:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463 Validity Not Before: Nov 15 10:42:24 2026 GMT Not After : Nov 16 14:42:24 2026 GMT Subject: CN=D57E9F09F735AF4406B2E31D93ABDBE867970BFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:40:44:2e:91:42:fe:52:a2:0c:13:43:82:8c: 3c:6c:fa:1e:0e:80:63:cc:f7:a1:d5:8e:c8:9e:61: 0b:c4:37:12:ea:4f:27:79:7a:9b:e7:82:43:b3:a3: 9a:c4:6f:47:53:47:67:7a:db:18:c7:74:92:59:03: 34:1e:d5:78:f3:05:a8:87:85:30:f2:9b:dc:f8:81: f8:26:4e:91:15:6b:ab:04:b0:90:d1:8f:e5:6a:53: fa:10:1e:c4:e8:23:4b:1e:67:88:d9:00:0e:88:7a: c2:90:fc:23:dd:1e:04:91:a9:08:4e:18:cf:9d:46: 83:fa:86:90:dc:d6:35:47:ce:03:7b:fc:cb:39:19: 00:de:c0:1d:5a:46:64:63:73:ab:eb:34:be:9c:ac: 6b:aa:65:5d:c7:9f:b8:e5:6d:1b:18:5f:1c:c1:fc: 9b:33:c4:82:f2:5c:00:04:34:5f:16:01:fd:5f:2c: fe:25:3f:eb:c8:69:66:9f:d1:19:95:7d:98:f2:24: e2:54:01:17:b4:fe:0c:11:d8:e9:08:a1:0d:f4:c1: 4b:01:ec:ff:a3:6b:58:42:c7:d7:41:1f:f8:bc:ca: 9a:e5:c2:f2:b6:40:dd:0a:58:83:cb:a8:da:47:a7: 42:2d:d4:ee:63:93:23:35:8f:1b:84:86:fa:de:9a: 26:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7E:9F:09:F7:35:AF:44:06:B2:E3:1D:93:AB:DB:E8:67:97:0B:FD X509v3 Authority Key Identifier: keyid:2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:fd:db:dd:50:14:02:0a:8c:c2:d8:9c:31:7e:a8:3e:44:a2: 66:90:3e:70:bd:b1:ff:fa:9b:80:23:02:79:bc:12:b6:08:31: 65:d2:df:4a:bf:56:2d:c2:c5:f7:7f:20:f3:3f:dd:fb:01:ce: 62:ad:0c:e6:09:a6:69:06:39:a5:24:78:08:8b:40:54:ea:09: 70:57:65:56:e5:e5:a7:5b:a4:1b:22:dd:09:b2:64:df:f0:4b: 13:7f:2d:dd:c9:55:88:15:67:0e:2e:89:9f:38:fa:51:db:70: ab:26:46:1e:f5:71:65:a0:65:2a:e4:20:ad:2d:b8:ed:e9:a2: 13:02:81:1d:63:8c:54:c2:09:30:7e:80:c9:3c:bd:a3:f1:43: 90:36:43:5b:5b:1a:a1:aa:d2:40:d0:df:f9:44:cb:1f:3f:d7: 3e:dc:75:c4:38:d1:41:a6:3e:87:3f:cf:22:e0:d2:6f:80:cd: 30:c8:c9:b8:d1:c9:a1:4a:9f:09:4f:6d:ec:80:80:49:ea:0b: 6a:c4:79:42:8b:e1:15:a9:b4:d1:c2:37:53:25:e3:6d:84:13: 23:3a:75:52:b8:4d:96:32:06:95:3d:72:cb:bd:27:4d:c8:53: e5:b6:27:73:10:54:6c:88:2a:1e:0c:36:8b:00:81:e8:01:f8: 30:42:3d:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQySOMRdBSyBj7466sDwAyPkCOsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzMTM3RUVGNzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3 MkUyQzQ2MzAeFw0yNjExMTUxMDQyMjRaFw0yNjExMTYxNDQyMjRaMDMxMTAvBgNV BAMTKEQ1N0U5RjA5RjczNUFGNDQwNkIyRTMxRDkzQUJEQkU4Njc5NzBCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeQEQukUL+UqIME0OCjDxs+h4O gGPM96HVjsieYQvENxLqTyd5epvngkOzo5rEb0dTR2d62xjHdJJZAzQe1XjzBaiH hTDym9z4gfgmTpEVa6sEsJDRj+VqU/oQHsToI0seZ4jZAA6IesKQ/CPdHgSRqQhO GM+dRoP6hpDc1jVHzgN7/Ms5GQDewB1aRmRjc6vrNL6crGuqZV3Hn7jlbRsYXxzB /JszxILyXAAENF8WAf1fLP4lP+vIaWaf0RmVfZjyJOJUARe0/gwR2OkIoQ30wUsB 7P+ja1hCx9dBH/i8yprlwvK2QN0KWIPLqNpHp0It1O5jkyM1jxuEhvremibtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1X6fCfc1r0QGsuMdk6vb6GeXC/0wHwYDVR0j BBgwFoAUKjE37vd/GvFvehLdbTaUTHLixGMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI4ZWVjNWItNTMyNC00NDIyLWEzMmYtOWIxZGNlZDM3NTlmLzAvMkEzMTM3RUVG NzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3MkUyQzQ2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTMxMzdFRUY3N0YxQUYxNkY3QTEyREQ2RDM2OTQ0QzcyRTJD NDYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMkEzMTM3RUVGNzdGMUFGMTZGN0ExMkRENkQzNjk0 NEM3MkUyQzQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABz9291QFAIKjMLYnDF+qD5EomaQPnC9sf/6 m4AjAnm8ErYIMWXS30q/Vi3Cxfd/IPM/3fsBzmKtDOYJpmkGOaUkeAiLQFTqCXBX ZVbl5adbpBsi3QmyZN/wSxN/Ld3JVYgVZw4uiZ84+lHbcKsmRh71cWWgZSrkIK0t uO3pohMCgR1jjFTCCTB+gMk8vaPxQ5A2Q1tbGqGq0kDQ3/lEyx8/1z7cdcQ40UGm Poc/zyLg0m+AzTDIybjRyaFKnwlPbeyAgEnqC2rEeUKL4RWptNHCN1Ml422EEyM6 dVK4TZYyBpU9csu9J03IU+W2J3MQVGyIKh4MNosAgegB+DBCPXA= -----END CERTIFICATE-----Generated at Sun Nov 15 12:16:35 2026 by rpki-client