$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft File: 2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft (raw, json) Hash identifier: avgOyu1jxnYyKFPamarsMvDX1WXyvybx2Wz+ks/p5+A= Subject key identifier: 8E:8A:E9:7C:45:47:5A:07:5C:E6:AB:19:79:AE:5D:B2:88:AA:E8:B0 Authority key identifier: 2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74 Certificate issuer: /CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274 Certificate serial: 5A6500E3795DE9039D03ED202772F2DDCA885588 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft Manifest number: BD Signing time: Sun 20 Sep 2026 15:31:09 +0000 Manifest this update: Sun 20 Sep 2026 15:26:09 +0000 Manifest next update: Mon 21 Sep 2026 16:25:09 +0000 Files and hashes: 1: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: 1IjnkMC3ga8KbKp+1i4junuLJGtmG26jgGjukZ4rmxk=) 2: 2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl (hash: O1QWQNSnfxFHAVVfzdgMyj+wxJY7LrUbFq+QJPETZC8=) 3: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: V2s2v2zyv88cwsslpUJdds/b+6l6rcgW5NHb7V5SYWY=) 4: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: iezQTzMxWp3Coix5fz9eGS/c/h2ulbbwObi3kCUHkW4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 16:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:65:00:e3:79:5d:e9:03:9d:03:ed:20:27:72:f2:dd:ca:88:55:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274 Validity Not Before: Sep 20 15:26:09 2026 GMT Not After : Sep 21 16:25:09 2026 GMT Subject: CN=8E8AE97C45475A075CE6AB1979AE5DB288AAE8B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:12:2f:6d:26:a8:75:7d:72:23:c9:e1:f6:54: d4:f9:b4:e8:23:0b:6c:a6:0d:ef:df:c5:ad:ec:11: 13:b9:4c:c4:21:21:6b:19:db:b3:7a:60:f2:ff:62: 21:f3:b2:fe:87:a0:b4:3e:91:c6:e4:52:34:a1:a4: d5:a5:fd:da:86:0d:ba:4f:60:0c:35:1c:19:fb:23: 7b:7e:20:cd:f4:1c:e9:55:0d:6d:6c:8c:8d:f4:eb: c1:f0:d8:f6:89:e8:eb:84:d5:94:5a:0a:d2:f9:2e: f5:90:7f:65:7a:61:b6:bf:9f:b4:2d:df:44:ab:ee: c3:51:03:34:10:8b:e4:ad:c0:01:1c:f5:b1:a6:6d: 32:6e:72:99:df:85:c4:5d:ed:85:a3:da:a1:dc:63: 62:de:df:58:b9:f1:64:37:15:41:62:74:4c:02:e6: 5e:2d:23:69:a5:29:8d:23:45:ee:98:03:73:94:b3: cf:e2:56:51:a4:63:81:b7:3b:d3:4b:03:7e:87:ef: 6f:93:4d:91:1d:6b:3f:58:41:af:09:ed:f6:07:90: d9:58:d8:47:0c:f9:3c:87:7f:a4:aa:dc:79:36:19: a2:e6:1e:09:ae:a5:85:96:65:62:8c:d1:61:fa:3f: ed:9c:e4:cd:fa:1b:e5:3a:95:00:40:8f:50:f3:79: 4f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8A:E9:7C:45:47:5A:07:5C:E6:AB:19:79:AE:5D:B2:88:AA:E8:B0 X509v3 Authority Key Identifier: keyid:2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d6:63:10:f9:52:71:67:b8:6c:8e:d6:41:1c:8c:99:d8:fa: 88:ed:35:22:2a:a2:27:e9:29:64:f2:57:c3:65:7d:a4:81:6e: 0f:d6:e0:42:6b:d8:bf:29:0d:05:c0:13:0b:9f:a5:f8:da:ca: 78:3a:01:7b:77:2d:fc:73:14:b3:db:97:cb:e6:88:15:ad:86: 04:24:73:b7:da:87:df:c3:75:f6:b5:ce:1b:bd:ce:3f:71:89: 70:c9:24:e9:97:16:7e:2c:f5:bf:01:29:96:31:f8:ad:3b:b1: 4e:c5:8e:dd:22:0e:33:43:ea:4c:fe:18:4d:78:1e:c0:fb:36: 4e:8d:8f:49:a4:7b:d3:58:69:80:de:1d:f9:e0:1d:5d:70:3b: 54:c6:06:49:d8:2c:a0:2f:de:7b:fc:d9:6a:20:a3:5c:27:13: 0c:c5:ef:88:13:4e:7f:c3:a9:b7:30:8d:6b:fd:c7:da:dd:37: 45:05:01:9f:9f:07:26:e3:4d:ff:24:f6:fb:b5:b9:5d:0f:76: b0:ac:5a:0f:fa:f6:8d:8b:2a:0c:57:5a:72:e3:30:e5:62:ef: eb:51:34:86:db:64:c0:4e:3c:3a:3e:33:eb:a4:7b:1f:30:8b: fa:12:96:bb:28:30:ca:c3:d9:93:c3:e8:47:eb:34:f4:84:56: a7:83:47:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWmUA43ld6QOdA+0gJ3Ly3cqIVYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2RjE2RTgwQkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0QjBE N0Q5QzI3NDAeFw0yNjA5MjAxNTI2MDlaFw0yNjA5MjExNjI1MDlaMDMxMTAvBgNV BAMTKDhFOEFFOTdDNDU0NzVBMDc1Q0U2QUIxOTc5QUU1REIyODhBQUU4QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGEi9tJqh1fXIjyeH2VNT5tOgj C2ymDe/fxa3sERO5TMQhIWsZ27N6YPL/YiHzsv6HoLQ+kcbkUjShpNWl/dqGDbpP YAw1HBn7I3t+IM30HOlVDW1sjI3068Hw2PaJ6OuE1ZRaCtL5LvWQf2V6Yba/n7Qt 30Sr7sNRAzQQi+StwAEc9bGmbTJucpnfhcRd7YWj2qHcY2Le31i58WQ3FUFidEwC 5l4tI2mlKY0jRe6YA3OUs8/iVlGkY4G3O9NLA36H72+TTZEdaz9YQa8J7fYHkNlY 2EcM+TyHf6Sq3Hk2GaLmHgmupYWWZWKM0WH6P+2c5M36G+U6lQBAj1DzeU9zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjorpfEVHWgdc5qsZea5dsoiq6LAwHwYDVR0j BBgwFoAUKm8W6Av9x7TWeXcm+4/UsNfZwnQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E0NjM2MGQtNjYyYi00ZjdkLWJiMTctZDg2MDgyMTUyNDcxLzAvMkE2RjE2RTgw QkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0QjBEN0Q5QzI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTZGMTZFODBCRkRDN0I0RDY3OTc3MjZGQjhGRDRCMEQ3RDlD Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvMkE2RjE2RTgwQkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0 QjBEN0Q5QzI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTWYxD5UnFnuGyO1kEcjJnY+ojtNSIqoifp KWTyV8NlfaSBbg/W4EJr2L8pDQXAEwufpfjayng6AXt3LfxzFLPbl8vmiBWthgQk c7fah9/Ddfa1zhu9zj9xiXDJJOmXFn4s9b8BKZYx+K07sU7Fjt0iDjND6kz+GE14 HsD7Nk6Nj0mke9NYaYDeHfngHV1wO1TGBknYLKAv3nv82Wogo1wnEwzF74gTTn/D qbcwjWv9x9rdN0UFAZ+fBybjTf8k9vu1uV0PdrCsWg/69o2LKgxXWnLjMOVi7+tR NIbbZMBOPDo+M+ukex8wi/oSlrsoMMrD2ZPD6EfrNPSEVqeDRzQ= -----END CERTIFICATE-----Generated at Sun Sep 20 23:31:46 2026 by rpki-client