$ rpki-client -vvf rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft File: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft (raw, json) Hash identifier: vbGBKurcX0Z/gpDDh04wyf+xbh964YeraYvmSW7tdMw= Subject key identifier: 01:30:95:18:F9:40:46:98:E5:9E:CC:20:68:60:1E:02:8B:9A:14:C2 Authority key identifier: A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 Certificate issuer: /CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Certificate serial: 3DB57C1D6A41278381A9A15769A916A80ADE0C13 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 04:27:41 +0000 Manifest this update: Tue 28 Jul 2026 04:22:41 +0000 Manifest next update: Wed 29 Jul 2026 07:47:41 +0000 Files and hashes: 1: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: C70wRs8+D3qa05IzuPgxi0Gg8OUanZPuCF0j6nRzOxs=) 2: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl (hash: UxQphKIAdxctjG8DZuCTyHBV2dRIDU9sVe/J4v1BhRs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b5:7c:1d:6a:41:27:83:81:a9:a1:57:69:a9:16:a8:0a:de:0c:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Validity Not Before: Jul 28 04:22:41 2026 GMT Not After : Jul 29 07:47:41 2026 GMT Subject: CN=01309518F9404698E59ECC2068601E028B9A14C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:79:29:6e:55:72:51:40:08:11:d3:d4:10:05: f9:eb:43:67:14:50:58:bd:5d:97:99:37:e7:17:23: 16:53:49:7f:a4:d3:f2:64:29:af:ae:d2:63:d6:39: e4:6f:0d:6d:29:5c:12:15:64:30:34:fd:4b:30:8a: bd:13:6b:5c:9c:3d:53:5e:e1:ea:c0:9a:b4:84:f2: f7:0c:5f:e0:3a:c1:ea:c0:84:e7:32:c6:d6:21:f4: c9:99:e9:d8:e9:00:93:80:64:44:2e:a7:49:d1:a5: d5:f4:ec:ca:53:3b:6b:ce:5d:2a:29:a8:43:5b:bf: 13:96:3d:93:44:d9:a4:67:26:9c:76:78:c1:20:20: 5b:56:1e:f4:b8:96:a2:da:aa:51:d3:87:a2:a2:d9: fa:f4:cd:3a:74:ce:9f:92:02:1f:bb:ca:b6:47:b4: de:ac:d8:60:50:40:5f:fe:8f:57:38:75:01:82:6d: d4:dc:ed:c6:6e:ee:df:9e:c8:8f:a7:9d:ec:b0:fa: e2:83:61:77:79:d9:05:e8:cb:7d:53:e2:bd:5a:e3: 6e:0f:67:7d:06:04:8e:97:b7:fa:b4:2c:fb:7d:ee: 47:4e:ae:d6:2e:74:b1:bd:86:85:d9:da:20:86:6c: b5:e1:3b:5b:f0:8e:b2:12:fe:b9:5e:6d:63:2b:0f: 6b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:30:95:18:F9:40:46:98:E5:9E:CC:20:68:60:1E:02:8B:9A:14:C2 X509v3 Authority Key Identifier: keyid:A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:6c:2d:e4:b5:d7:9e:7a:9b:53:a1:ff:4b:8e:ff:63:a8:f0: 42:e1:18:37:c6:15:e1:5e:ca:d2:b7:df:e2:20:c7:4a:5c:53: 75:28:6c:98:ca:c4:94:e4:fe:02:83:86:fa:57:1f:45:87:46: 59:95:2b:f6:e7:1a:c5:39:99:30:c6:a4:f7:fc:99:64:e4:67: 0c:df:df:71:8e:e0:bc:50:75:7d:f1:7f:5f:bc:05:a4:30:48: ca:64:e6:dd:43:eb:64:fd:75:3d:45:e5:b8:65:14:ea:41:08: 33:32:a6:3c:a8:23:91:9e:61:3b:54:79:77:72:94:9a:ab:72: b3:1e:91:db:f4:69:23:fb:7e:5b:08:e5:72:37:ec:cb:c1:44: 17:67:52:de:12:ef:bf:e4:ad:4f:72:9a:ea:dc:03:10:44:fb: 61:30:b0:41:e3:f3:6f:23:a4:75:7c:07:63:4c:71:66:6b:b0: ed:c8:7b:66:6f:fa:60:50:08:03:48:8b:c0:dd:3f:50:16:c4: 25:d1:4b:45:d9:93:c2:ae:47:96:3b:c3:b3:02:e1:fa:fc:dd: e5:7d:8d:a1:9a:34:cc:07:f9:91:0a:16:d8:a2:3e:e8:51:63: 46:41:7a:40:ce:ce:16:ff:56:e5:a6:60:4d:4c:ac:ca:6f:db: 10:41:76:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPbV8HWpBJ4OBqaFXaakWqAreDBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3 NzcyRUU4NjAeFw0yNjA3MjgwNDIyNDFaFw0yNjA3MjkwNzQ3NDFaMDMxMTAvBgNV BAMTKDAxMzA5NTE4Rjk0MDQ2OThFNTlFQ0MyMDY4NjAxRTAyOEI5QTE0QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCneSluVXJRQAgR09QQBfnrQ2cU UFi9XZeZN+cXIxZTSX+k0/JkKa+u0mPWOeRvDW0pXBIVZDA0/Uswir0Ta1ycPVNe 4erAmrSE8vcMX+A6werAhOcyxtYh9MmZ6djpAJOAZEQup0nRpdX07MpTO2vOXSop qENbvxOWPZNE2aRnJpx2eMEgIFtWHvS4lqLaqlHTh6Ki2fr0zTp0zp+SAh+7yrZH tN6s2GBQQF/+j1c4dQGCbdTc7cZu7t+eyI+nneyw+uKDYXd52QXoy31T4r1a424P Z30GBI6Xt/q0LPt97kdOrtYudLG9hoXZ2iCGbLXhO1vwjrIS/rlebWMrD2sTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUATCVGPlARpjlnswgaGAeAouaFMIwHwYDVR0j BBgwFoAUosq8LlK/fmX8UB8HrEg0rHdy7oYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJkYWI0NmEtMDg1ZS00NDMyLTk4MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1 MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3NzcyRUU4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkNBQkMyRTUyQkY3RTY1RkM1MDFGMDdBQzQ4MzRBQzc3NzJF RTg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0 QUM3NzcyRUU4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdsLeS11556m1Oh/0uO/2Oo8ELhGDfGFeFe ytK33+Igx0pcU3UobJjKxJTk/gKDhvpXH0WHRlmVK/bnGsU5mTDGpPf8mWTkZwzf 33GO4LxQdX3xf1+8BaQwSMpk5t1D62T9dT1F5bhlFOpBCDMypjyoI5GeYTtUeXdy lJqrcrMekdv0aSP7flsI5XI37MvBRBdnUt4S77/krU9ymurcAxBE+2EwsEHj828j pHV8B2NMcWZrsO3Ie2Zv+mBQCANIi8DdP1AWxCXRS0XZk8KuR5Y7w7MC4fr83eV9 jaGaNMwH+ZEKFtiiPuhRY0ZBekDOzhb/VuWmYE1MrMpv2xBBdg0= -----END CERTIFICATE-----Generated at Wed Jul 29 00:09:25 2026 by rpki-client