$ rpki-client -vvvf rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft File: 2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft (raw, json) Hash identifier: YKXP4EWjW7CqzQ8K2cCZDVSdlXIeXCUntxy1FcQRCsQ= Subject key identifier: 93:80:C8:06:0B:FB:48:B6:B6:E7:18:27:89:1F:FB:80:72:A9:88:DC Authority key identifier: 2A:0F:66:41:16:FB:E2:E0:71:7E:83:DF:D4:F2:B6:ED:EB:09:E1:7E Certificate issuer: /CN=2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E Certificate serial: 29FA8EDA58560CAB6CF9F7567FDFF2B3B3B9C732 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft Manifest number: BE Signing time: Sun 20 Sep 2026 22:09:17 +0000 Manifest this update: Sun 20 Sep 2026 22:04:17 +0000 Manifest next update: Mon 21 Sep 2026 23:56:17 +0000 Files and hashes: 1: 323030313a6466333a316363303a3a2f34382d3438203d3e20313532303035.roa (hash: 6lgQliV3qWJWSqE96iH08yO2bxxIknhiUKxtAeSrcOo=) 2: 3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (hash: /Da4Pm0aCGjoevGiiRcx0Xt7whtWvoaG8WYvVgD2NtQ=) 3: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (hash: MDqOFg62hmCAUHW4Muj3krYCTsgPpqhMHNl5EdSS1rQ=) 4: 3130332e36372e39302e302f32342d3234203d3e20313532303035.roa (hash: D74+LFtaiM6p1bNo+g/DP+Bfx1wgVTvyGuc6jRnjUKM=) 5: 2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl (hash: BcnvocZEVpuF96a+OHe83WUhVADgLdTcjPF6CgvWapc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 23:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:fa:8e:da:58:56:0c:ab:6c:f9:f7:56:7f:df:f2:b3:b3:b9:c7:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E Validity Not Before: Sep 20 22:04:17 2026 GMT Not After : Sep 21 23:56:17 2026 GMT Subject: CN=9380C8060BFB48B6B6E71827891FFB8072A988DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ee:02:93:aa:07:7e:a5:e9:73:be:6e:06:48: 5b:c3:35:e1:be:18:7d:ce:d7:4a:1a:88:92:51:66: 45:55:6e:81:a5:29:7d:ef:80:f6:e0:9c:69:52:af: c6:a8:24:b0:da:59:24:09:ec:48:8f:86:d1:85:5c: 90:2a:7c:48:8d:4f:3b:2d:3b:3b:ef:92:2a:5e:92: 94:72:5c:10:fe:bd:54:ba:8b:15:3c:95:66:68:ca: f3:78:0f:52:83:d9:05:6c:60:fa:66:62:d6:88:b9: cc:4b:9b:9b:e8:b1:1e:09:b6:52:f1:d7:84:e4:65: 9c:46:49:fc:a5:85:1b:bf:77:fe:32:6a:e0:a3:81: ac:e3:99:8e:3c:ea:08:d5:4e:d8:e2:ca:68:ee:e3: 30:7d:a6:94:39:ac:6c:4a:84:2c:3e:52:ac:d8:0d: 47:18:37:ab:51:06:1b:d9:43:e1:fc:50:30:b2:88: 66:db:dd:c6:91:8c:cf:fe:87:84:a5:36:82:d5:91: 04:14:08:ed:22:57:e2:a9:f7:b5:7f:4f:b9:d0:66: 88:f4:b4:a5:05:49:77:5c:61:15:bb:bc:4e:2a:30: 1c:ab:03:9b:86:14:d0:d4:da:af:f9:8d:dd:4c:ae: f9:61:e8:df:4e:fb:df:f2:0b:08:7b:37:68:8b:1f: a2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:80:C8:06:0B:FB:48:B6:B6:E7:18:27:89:1F:FB:80:72:A9:88:DC X509v3 Authority Key Identifier: keyid:2A:0F:66:41:16:FB:E2:E0:71:7E:83:DF:D4:F2:B6:ED:EB:09:E1:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:4b:ea:b5:e9:50:5f:42:1c:c6:a6:3b:c8:e5:06:58:f8:2b: 7e:01:51:ee:6b:da:55:07:76:df:5d:5e:de:2b:98:56:2a:45: ff:2c:2e:6d:c9:8d:25:b6:1d:23:40:e9:c3:36:3e:20:c0:5a: 53:2a:9d:70:98:a7:b6:f5:8c:2c:a8:20:75:85:0b:f1:3e:db: 2f:b7:3e:23:84:23:ba:c2:30:ed:eb:7a:12:4f:93:f2:12:29: e6:d1:5f:a2:bd:d3:51:59:ee:53:d5:af:26:ee:9c:48:6d:83: c3:6f:af:d9:41:9c:0f:2b:b9:7b:ba:38:1e:43:a4:46:bf:eb: 03:45:62:4f:a6:61:d3:e7:63:dc:00:7b:8f:e9:48:1e:d7:d6: 55:db:ce:07:87:4f:32:29:e3:c8:29:f7:92:67:7e:87:5d:7f: a2:cb:bf:69:d8:73:59:d9:f4:64:5d:c7:6c:2b:a4:e2:21:4f: 4a:6b:2f:0e:bc:83:5a:0e:27:a4:a9:bc:54:50:05:9c:58:dd: 12:dc:9d:f7:fd:7d:50:c2:5e:2b:6e:2a:88:c6:1b:52:33:d2: 9c:54:82:7c:f0:bd:5b:87:2e:fb:32:02:d9:51:9f:00:4f:0d: cf:80:a4:64:83:b3:28:0e:15:3b:28:d2:7f:4f:98:12:35:c1: 2b:68:93:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKfqO2lhWDKts+fdWf9/ys7O5xzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwRjY2NDExNkZCRTJFMDcxN0U4M0RGRDRGMkI2RURF QjA5RTE3RTAeFw0yNjA5MjAyMjA0MTdaFw0yNjA5MjEyMzU2MTdaMDMxMTAvBgNV BAMTKDkzODBDODA2MEJGQjQ4QjZCNkU3MTgyNzg5MUZGQjgwNzJBOTg4REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW7gKTqgd+pelzvm4GSFvDNeG+ GH3O10oaiJJRZkVVboGlKX3vgPbgnGlSr8aoJLDaWSQJ7EiPhtGFXJAqfEiNTzst OzvvkipekpRyXBD+vVS6ixU8lWZoyvN4D1KD2QVsYPpmYtaIucxLm5vosR4JtlLx 14TkZZxGSfylhRu/d/4yauCjgazjmY486gjVTtjiymju4zB9ppQ5rGxKhCw+UqzY DUcYN6tRBhvZQ+H8UDCyiGbb3caRjM/+h4SlNoLVkQQUCO0iV+Kp97V/T7nQZoj0 tKUFSXdcYRW7vE4qMByrA5uGFNDU2q/5jd1Mrvlh6N9O+9/yCwh7N2iLH6L1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk4DIBgv7SLa25xgniR/7gHKpiNwwHwYDVR0j BBgwFoAUKg9mQRb74uBxfoPf1PK27esJ4X4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg0ODg1MTktOGYwNC00NGY1LTgzMTItOGQ5ZDM2MTZkMGQ5LzAvMkEwRjY2NDEx NkZCRTJFMDcxN0U4M0RGRDRGMkI2RURFQjA5RTE3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTBGNjY0MTE2RkJFMkUwNzE3RTgzREZENEYyQjZFREVCMDlF MTdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg0ODg1MTktOGYwNC00NGY1LTgz MTItOGQ5ZDM2MTZkMGQ5LzAvMkEwRjY2NDExNkZCRTJFMDcxN0U4M0RGRDRGMkI2 RURFQjA5RTE3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdL6rXpUF9CHMamO8jlBlj4K34BUe5r2lUH dt9dXt4rmFYqRf8sLm3JjSW2HSNA6cM2PiDAWlMqnXCYp7b1jCyoIHWFC/E+2y+3 PiOEI7rCMO3rehJPk/ISKebRX6K901FZ7lPVrybunEhtg8Nvr9lBnA8ruXu6OB5D pEa/6wNFYk+mYdPnY9wAe4/pSB7X1lXbzgeHTzIp48gp95Jnfoddf6LLv2nYc1nZ 9GRdx2wrpOIhT0prLw68g1oOJ6SpvFRQBZxY3RLcnff9fVDCXituKojGG1Iz0pxU gnzwvVuHLvsyAtlRnwBPDc+ApGSDsygOFTso0n9PmBI1wStokww= -----END CERTIFICATE-----Generated at Mon Sep 21 11:42:47 2026 by rpki-client