$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft File: 2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft (raw, json) Hash identifier: nhs9nnBwj8cGx4h2pqiMGuadR58PsrABSh0IVlaF338= Subject key identifier: A7:E9:35:0B:DC:38:26:4A:53:05:85:4E:F9:21:1B:0F:77:BD:34:0A Authority key identifier: 2A:C4:B9:21:8D:44:A8:AF:6A:89:3D:00:D5:F2:8F:34:AD:B8:3E:ED Certificate issuer: /CN=2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED Certificate serial: 6FC77C264512665605AFBC397F1312B72941ED64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft Manifest number: FF Signing time: Mon 09 Nov 2026 17:32:37 +0000 Manifest this update: Mon 09 Nov 2026 17:27:37 +0000 Manifest next update: Tue 10 Nov 2026 19:53:37 +0000 Files and hashes: 1: 2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl (hash: e7aE/6Dqpmliq6Mg5s0mTHYqncCHhDLI2whd/FSA6Xw=) 2: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: Yu7TLcR1tuusuhDSrYnM4of9BN5qOWkNLvH5+MvtCeE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 19:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c7:7c:26:45:12:66:56:05:af:bc:39:7f:13:12:b7:29:41:ed:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED Validity Not Before: Nov 9 17:27:37 2026 GMT Not After : Nov 10 19:53:37 2026 GMT Subject: CN=A7E9350BDC38264A5305854EF9211B0F77BD340A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:93:f8:e1:ec:c7:20:05:46:fe:b4:9a:47:0e: 42:55:d9:60:69:d4:2d:3d:52:38:9d:1f:3b:f6:c4: da:2f:a2:f6:13:78:a8:2f:d6:81:8d:da:e6:80:3a: b0:dd:28:1e:49:33:f3:13:ff:f4:3c:11:1d:6a:4e: f5:27:0f:a1:20:39:fb:eb:43:39:65:26:42:1d:7a: 99:80:aa:fe:e5:e7:4e:c7:60:74:24:cf:e0:fd:0e: d4:c1:ed:9c:57:66:4a:66:a7:7d:d6:06:db:b3:1c: 31:4a:03:4b:5f:0f:12:22:80:21:d1:6c:48:94:04: 6f:33:3e:dd:82:4c:03:dd:19:6a:01:96:df:65:90: f6:ae:85:b9:18:86:cd:3c:c0:bd:1f:d4:07:86:dc: aa:fa:f9:28:c2:f0:61:05:79:81:57:a1:fe:1b:6d: 44:13:a5:0e:6c:b4:ca:f1:75:51:a1:d6:79:ca:0f: ed:2c:a8:60:76:6d:3e:b1:f9:9a:0f:33:98:5c:4d: 8b:a8:a1:48:f3:5c:2d:13:aa:88:65:8f:64:02:1f: 7c:b0:12:13:99:d2:7d:4a:82:b7:87:92:1a:57:be: a3:80:b8:9a:86:a9:48:56:20:97:f3:0e:12:92:3e: 43:5f:d0:03:5b:7f:8c:83:9c:1a:54:d4:66:3e:0b: 5a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E9:35:0B:DC:38:26:4A:53:05:85:4E:F9:21:1B:0F:77:BD:34:0A X509v3 Authority Key Identifier: keyid:2A:C4:B9:21:8D:44:A8:AF:6A:89:3D:00:D5:F2:8F:34:AD:B8:3E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:d1:10:c6:83:f7:2b:a6:96:98:97:73:a5:57:85:4d:5d:53: ad:5e:4b:9d:ea:31:06:51:9b:ee:ba:54:58:e2:c4:c2:f3:c5: 1d:ac:1e:2b:cb:1b:73:52:b4:73:80:28:32:ee:ba:be:12:09: b8:a9:3c:59:96:fa:14:7f:42:84:e3:50:4d:76:fa:8d:9f:20: d7:b9:50:b0:ab:37:23:d5:4b:d3:78:fa:62:0c:f6:43:b8:94: 4c:02:8e:4d:a2:dd:e9:25:d9:e2:95:e6:af:5c:a7:d1:78:6b: aa:95:b5:05:62:01:59:47:37:88:05:f1:aa:c1:a1:cb:45:6b: e1:1f:64:4e:24:e8:42:61:f4:81:07:fd:83:ae:31:f9:7d:5c: ae:99:d0:d1:db:f1:03:19:7b:1b:4d:0c:27:41:5e:55:62:ff: 9a:56:b5:d5:5a:b1:ea:d4:98:2e:03:19:e5:50:da:44:47:1d: d5:9a:00:94:08:c7:10:21:47:52:b6:ea:4a:0d:02:5f:50:96: 93:1a:89:61:16:e1:0b:1b:83:7d:c1:cd:e4:c7:27:5a:25:27: f2:ce:de:33:dc:df:35:c0:fa:30:3f:01:6d:e3:5d:0e:5e:9c: a3:e0:fe:89:5f:fc:b0:e0:7b:77:78:f4:7f:16:ce:fd:fa:8b: 10:a5:81:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb8d8JkUSZlYFr7w5fxMStylB7WQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFDNEI5MjE4RDQ0QThBRjZBODkzRDAwRDVGMjhGMzRB REI4M0VFRDAeFw0yNjExMDkxNzI3MzdaFw0yNjExMTAxOTUzMzdaMDMxMTAvBgNV BAMTKEE3RTkzNTBCREMzODI2NEE1MzA1ODU0RUY5MjExQjBGNzdCRDM0MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3k/jh7McgBUb+tJpHDkJV2WBp 1C09UjidHzv2xNovovYTeKgv1oGN2uaAOrDdKB5JM/MT//Q8ER1qTvUnD6EgOfvr QzllJkIdepmAqv7l507HYHQkz+D9DtTB7ZxXZkpmp33WBtuzHDFKA0tfDxIigCHR bEiUBG8zPt2CTAPdGWoBlt9lkPauhbkYhs08wL0f1AeG3Kr6+SjC8GEFeYFXof4b bUQTpQ5stMrxdVGh1nnKD+0sqGB2bT6x+ZoPM5hcTYuooUjzXC0Tqohlj2QCH3yw EhOZ0n1KgreHkhpXvqOAuJqGqUhWIJfzDhKSPkNf0ANbf4yDnBpU1GY+C1obAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp+k1C9w4JkpTBYVO+SEbD3e9NAowHwYDVR0j BBgwFoAUKsS5IY1EqK9qiT0A1fKPNK24Pu0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4NmNiNWQtZjA3ZC00MjZhLThlNWUtYTc3YTk3OGRkMmVlLzAvMkFDNEI5MjE4 RDQ0QThBRjZBODkzRDAwRDVGMjhGMzRBREI4M0VFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUM0QjkyMThENDRBOEFGNkE4OTNEMDBENUYyOEYzNEFEQjgz RUVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvMkFDNEI5MjE4RDQ0QThBRjZBODkzRDAwRDVGMjhG MzRBREI4M0VFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXREMaD9yumlpiXc6VXhU1dU61eS53qMQZR m+66VFjixMLzxR2sHivLG3NStHOAKDLuur4SCbipPFmW+hR/QoTjUE12+o2fINe5 ULCrNyPVS9N4+mIM9kO4lEwCjk2i3ekl2eKV5q9cp9F4a6qVtQViAVlHN4gF8arB octFa+EfZE4k6EJh9IEH/YOuMfl9XK6Z0NHb8QMZextNDCdBXlVi/5pWtdVaserU mC4DGeVQ2kRHHdWaAJQIxxAhR1K26koNAl9QlpMaiWEW4Qsbg33BzeTHJ1olJ/LO 3jPc3zXA+jA/AW3jXQ5enKPg/olf/LDge3d49H8Wzv36ixClgU0= -----END CERTIFICATE-----Generated at Tue Nov 10 08:34:34 2026 by rpki-client