$ rpki-client -vvf rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft File: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft (raw, json) Hash identifier: FaJa3tU/bTMhTePlgMSLxZrOz1nDFZ3jo/H+oCHrlrI= Subject key identifier: BC:80:14:34:CE:99:D3:FA:FB:5B:FD:64:60:91:C8:58:77:E5:9D:C5 Authority key identifier: A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 Certificate issuer: /CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Certificate serial: 5B33594E923B3CF060E9679752629E461C912FD2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft Manifest number: 38 Signing time: Fri 12 Jun 2026 19:39:11 +0000 Manifest this update: Fri 12 Jun 2026 19:34:11 +0000 Manifest next update: Sat 13 Jun 2026 23:22:11 +0000 Files and hashes: 1: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: C70wRs8+D3qa05IzuPgxi0Gg8OUanZPuCF0j6nRzOxs=) 2: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl (hash: oC7eXKEsiBQ5MhpuIdwaQVCVnE3P0fvtiIjC9BhOeUY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 21:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:33:59:4e:92:3b:3c:f0:60:e9:67:97:52:62:9e:46:1c:91:2f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Validity Not Before: Jun 12 19:34:11 2026 GMT Not After : Jun 13 23:22:11 2026 GMT Subject: CN=BC801434CE99D3FAFB5BFD646091C85877E59DC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5e:34:32:d8:7d:b6:ee:b2:9b:a3:b6:b9:29: 30:0a:5a:de:27:86:69:08:56:83:df:c9:ba:e2:5b: 2f:6a:77:ab:62:88:d0:65:b1:20:4d:79:6c:11:bf: 8f:dc:74:a8:a2:27:44:e3:2f:ac:02:c4:7c:1b:2c: 1f:b6:f9:94:6f:55:e3:c4:ac:7a:5f:78:e6:fc:04: 12:f2:28:27:fb:80:d4:f0:ce:25:bb:c6:91:f0:ad: 9f:13:80:ce:40:25:84:9f:5d:91:ed:6a:aa:40:7d: 0b:3e:6a:65:98:e2:75:85:6a:13:38:d9:06:54:6e: c0:92:b9:f5:4c:f8:9c:99:38:95:13:e5:03:0c:36: 3d:25:9c:b1:33:0d:6d:3b:20:86:f3:b0:ab:c2:99: ef:c1:0f:6c:0a:57:3c:72:9d:7d:88:06:2a:5a:a8: d4:6e:dc:13:ba:57:e8:81:22:2d:93:38:66:6a:f7: 88:1c:72:03:24:c4:ca:48:4f:1a:c7:9e:a6:b0:6d: 03:48:d2:89:57:fc:0c:31:a7:e3:05:34:fd:bc:d0: 91:f0:03:12:00:3a:4b:4f:ad:bf:f4:1a:85:65:1c: 8f:4e:44:ca:96:7f:0b:54:1d:b5:38:fe:50:c2:ca: 7f:71:e4:21:15:8b:bb:c9:f5:b0:2f:ac:fe:71:ee: f7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:80:14:34:CE:99:D3:FA:FB:5B:FD:64:60:91:C8:58:77:E5:9D:C5 X509v3 Authority Key Identifier: keyid:A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:1c:18:8c:68:f8:ae:a3:a1:43:83:57:d6:a9:9c:d4:ce:01: a8:ce:de:10:f2:b7:d8:58:53:c3:15:54:73:78:22:ed:a0:04: 3b:6a:6e:19:61:2b:a1:eb:2a:20:6f:ec:82:9c:c8:8d:a0:b7: bb:10:0f:fb:e0:48:f7:0f:e6:13:cb:3f:4c:5c:61:f6:16:e2: 3d:3e:cf:5f:a7:c5:88:d3:60:b0:13:f0:be:12:01:11:c1:ba: 6e:d7:2a:5a:97:f2:e5:9b:b0:be:dc:50:e3:bd:6e:73:65:09: 62:5d:c6:27:0a:ad:cd:63:a8:46:0d:5f:df:3b:da:95:c6:c1: ef:ba:d6:65:5c:7a:46:01:e6:ea:39:3d:f8:1d:5e:04:02:b9: 2b:b2:11:77:28:8f:7b:3a:fb:9c:9e:ec:df:01:f0:33:c7:58: 73:f3:cd:66:c8:02:3d:6d:aa:ac:45:f1:88:84:9e:25:07:19: 4b:aa:a1:f2:81:c7:15:b7:19:15:47:2a:ea:53:d8:03:6a:20: fb:16:52:f7:6c:51:35:59:45:20:70:e1:65:27:70:aa:6e:07: 8e:2b:d0:85:6e:11:1b:7f:2f:b7:a2:b5:91:c4:cc:c3:4c:16: 89:ef:cd:26:63:2a:36:95:04:fa:d5:21:91:a3:e8:91:62:4e: 1c:73:96:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWzNZTpI7PPBg6WeXUmKeRhyRL9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3 NzcyRUU4NjAeFw0yNjA2MTIxOTM0MTFaFw0yNjA2MTMyMzIyMTFaMDMxMTAvBgNV BAMTKEJDODAxNDM0Q0U5OUQzRkFGQjVCRkQ2NDYwOTFDODU4NzdFNTlEQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLXjQy2H227rKbo7a5KTAKWt4n hmkIVoPfybriWy9qd6tiiNBlsSBNeWwRv4/cdKiiJ0TjL6wCxHwbLB+2+ZRvVePE rHpfeOb8BBLyKCf7gNTwziW7xpHwrZ8TgM5AJYSfXZHtaqpAfQs+amWY4nWFahM4 2QZUbsCSufVM+JyZOJUT5QMMNj0lnLEzDW07IIbzsKvCme/BD2wKVzxynX2IBipa qNRu3BO6V+iBIi2TOGZq94gccgMkxMpITxrHnqawbQNI0olX/Awxp+MFNP280JHw AxIAOktPrb/0GoVlHI9ORMqWfwtUHbU4/lDCyn9x5CEVi7vJ9bAvrP5x7vdJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvIAUNM6Z0/r7W/1kYJHIWHflncUwHwYDVR0j BBgwFoAUosq8LlK/fmX8UB8HrEg0rHdy7oYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJkYWI0NmEtMDg1ZS00NDMyLTk4MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1 MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3NzcyRUU4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkNBQkMyRTUyQkY3RTY1RkM1MDFGMDdBQzQ4MzRBQzc3NzJF RTg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0 QUM3NzcyRUU4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwcGIxo+K6joUODV9apnNTOAajO3hDyt9hY U8MVVHN4Iu2gBDtqbhlhK6HrKiBv7IKcyI2gt7sQD/vgSPcP5hPLP0xcYfYW4j0+ z1+nxYjTYLAT8L4SARHBum7XKlqX8uWbsL7cUOO9bnNlCWJdxicKrc1jqEYNX987 2pXGwe+61mVcekYB5uo5PfgdXgQCuSuyEXcoj3s6+5ye7N8B8DPHWHPzzWbIAj1t qqxF8YiEniUHGUuqofKBxxW3GRVHKupT2ANqIPsWUvdsUTVZRSBw4WUncKpuB44r 0IVuERt/L7eitZHEzMNMFonvzSZjKjaVBPrVIZGj6JFiThxzlgg= -----END CERTIFICATE-----Generated at Sat Jun 13 13:38:42 2026 by rpki-client