$ rpki-client -vvvf rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft File: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft (raw, json) Hash identifier: BctdkQcZWM0M9eIlKZ6OlqjExi8jC80bkhoVXH+8nQ4= Subject key identifier: C0:42:33:9E:76:43:85:CE:76:DF:59:66:D8:40:E8:4F:F3:C5:29:DA Authority key identifier: A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 Certificate issuer: /CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Certificate serial: 3BAF87EEA3E27B2B03B46167F44C181B7F1D39FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft Manifest number: BE Signing time: Mon 21 Sep 2026 08:11:44 +0000 Manifest this update: Mon 21 Sep 2026 08:06:44 +0000 Manifest next update: Tue 22 Sep 2026 09:28:44 +0000 Files and hashes: 1: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: C70wRs8+D3qa05IzuPgxi0Gg8OUanZPuCF0j6nRzOxs=) 2: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl (hash: PMpMyvG1/jw5QtYpRaq97+hOpWxZkJs+35rmjsB1KXQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:af:87:ee:a3:e2:7b:2b:03:b4:61:67:f4:4c:18:1b:7f:1d:39:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Validity Not Before: Sep 21 08:06:44 2026 GMT Not After : Sep 22 09:28:44 2026 GMT Subject: CN=C042339E764385CE76DF5966D840E84FF3C529DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:56:e8:28:60:8b:58:8f:19:42:bd:6a:74:56: 0b:44:4a:f4:dc:ce:e0:5c:c1:18:e5:67:cc:94:e7: 2b:66:1d:c0:ce:2f:c3:e3:5a:d5:a3:9a:a9:3c:5b: 40:65:8e:cf:1f:db:69:9d:8a:41:40:ed:64:99:fe: 64:eb:f9:9f:e4:cf:37:43:ce:7a:18:0e:f7:c8:0b: 8e:09:ce:7e:6a:f7:a0:18:a5:d1:0d:78:a9:6d:ae: c4:60:34:77:21:2c:f4:ea:7a:d2:8c:98:56:30:5d: 0f:be:6d:ce:0b:77:4a:4b:3f:91:72:52:96:fe:86: 9a:30:36:08:02:71:bb:0a:e1:90:fb:e9:53:ba:8b: f5:5b:92:4f:a0:e5:29:eb:e8:53:a8:0c:d7:3c:6d: 6e:dd:c1:11:0d:e2:70:10:70:7a:d7:88:1d:e8:1f: f5:a1:9a:f7:3f:1f:a7:5c:52:df:e2:07:61:1d:22: 63:d5:9f:fe:81:bd:89:c4:39:b3:c1:cc:8c:9d:78: 56:1b:c6:44:20:1f:ae:12:d4:8f:c1:34:8f:a0:0f: 2a:5b:c2:2e:91:c1:fe:e7:8d:f7:c6:9a:9d:7b:d9: 58:1a:f0:83:e8:5d:3b:28:91:37:b9:74:06:51:52: f1:3d:58:d3:8e:3a:e8:62:11:df:c3:be:4d:9e:25: 4f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:42:33:9E:76:43:85:CE:76:DF:59:66:D8:40:E8:4F:F3:C5:29:DA X509v3 Authority Key Identifier: keyid:A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:8b:8f:b8:d7:be:e5:3c:22:7f:15:15:ed:68:70:74:d4:3e: 77:96:e0:bb:66:16:d6:9e:b9:da:f8:30:7f:7b:a4:b1:e0:b4: 53:32:31:da:89:8f:92:d5:45:07:5f:a5:b3:da:f6:d1:f9:a7: be:1e:de:77:ad:9e:60:1b:4e:6d:0d:00:f4:ba:4c:bc:df:35: a5:59:f6:bc:93:24:02:70:a4:5f:e3:02:d5:cb:3f:76:f1:d3: ff:f7:0e:a3:11:82:37:84:ff:6d:b9:a0:e2:cd:32:91:9f:06: b4:05:4a:38:0a:e1:03:b1:8e:25:a9:9e:c0:c2:a5:23:d7:f1: d0:57:49:51:5d:75:53:4b:ea:da:2b:da:04:b8:f4:1b:4d:2f: 9f:87:ff:01:9b:4b:ba:d6:f2:1b:67:af:2e:b8:ee:19:d6:c9: 46:2b:a2:f5:be:5f:dc:29:cb:68:7f:40:13:92:05:73:3a:97: f5:47:46:a2:db:89:70:53:f9:20:01:56:e2:25:2b:7c:89:7b: 35:04:a8:b6:b0:59:63:d9:66:dc:9b:6c:7e:47:76:b6:5f:25: ca:a0:81:12:e3:99:49:37:47:68:b8:d8:1f:c4:d5:b9:6a:d4: 9e:df:89:4a:52:61:b8:43:79:ef:88:14:d8:8b:30:36:ff:56: 70:26:96:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO6+H7qPieysDtGFn9EwYG38dOf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3 NzcyRUU4NjAeFw0yNjA5MjEwODA2NDRaFw0yNjA5MjIwOTI4NDRaMDMxMTAvBgNV BAMTKEMwNDIzMzlFNzY0Mzg1Q0U3NkRGNTk2NkQ4NDBFODRGRjNDNTI5REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjVugoYItYjxlCvWp0VgtESvTc zuBcwRjlZ8yU5ytmHcDOL8PjWtWjmqk8W0Bljs8f22mdikFA7WSZ/mTr+Z/kzzdD znoYDvfIC44Jzn5q96AYpdENeKltrsRgNHchLPTqetKMmFYwXQ++bc4Ld0pLP5Fy Upb+hpowNggCcbsK4ZD76VO6i/Vbkk+g5Snr6FOoDNc8bW7dwREN4nAQcHrXiB3o H/Whmvc/H6dcUt/iB2EdImPVn/6BvYnEObPBzIydeFYbxkQgH64S1I/BNI+gDypb wi6Rwf7njffGmp172Vga8IPoXTsokTe5dAZRUvE9WNOOOuhiEd/Dvk2eJU8JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwEIznnZDhc5231lm2EDoT/PFKdowHwYDVR0j BBgwFoAUosq8LlK/fmX8UB8HrEg0rHdy7oYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJkYWI0NmEtMDg1ZS00NDMyLTk4MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1 MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3NzcyRUU4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkNBQkMyRTUyQkY3RTY1RkM1MDFGMDdBQzQ4MzRBQzc3NzJF RTg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0 QUM3NzcyRUU4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuLj7jXvuU8In8VFe1ocHTUPneW4LtmFtae udr4MH97pLHgtFMyMdqJj5LVRQdfpbPa9tH5p74e3netnmAbTm0NAPS6TLzfNaVZ 9ryTJAJwpF/jAtXLP3bx0//3DqMRgjeE/225oOLNMpGfBrQFSjgK4QOxjiWpnsDC pSPX8dBXSVFddVNL6tor2gS49BtNL5+H/wGbS7rW8htnry647hnWyUYrovW+X9wp y2h/QBOSBXM6l/VHRqLbiXBT+SABVuIlK3yJezUEqLawWWPZZtybbH5HdrZfJcqg gRLjmUk3R2i42B/E1blq1J7fiUpSYbhDee+IFNiLMDb/VnAmlug= -----END CERTIFICATE-----Generated at Mon Sep 21 13:25:06 2026 by rpki-client