$ rpki-client -vvvf rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft File: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft (raw, json) Hash identifier: I1+Mi0TILlAsFjXtbQavfA8wZKzw4qZjyyGQbIQdvLM= Subject key identifier: 92:87:01:C0:5F:F9:70:A0:5C:58:F1:64:67:B6:94:79:11:96:25:AA Authority key identifier: A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 Certificate issuer: /CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Certificate serial: 76548960D48E4D10F5B550EB775F4795DB0E3089 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 18:54:53 +0000 Manifest this update: Tue 22 Sep 2026 18:49:53 +0000 Manifest next update: Wed 23 Sep 2026 19:56:53 +0000 Files and hashes: 1: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: C70wRs8+D3qa05IzuPgxi0Gg8OUanZPuCF0j6nRzOxs=) 2: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl (hash: litPFA4Keq/3wx4noyE+mW+eKHUZ/hyy0wQL7WAsJZg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 19:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:54:89:60:d4:8e:4d:10:f5:b5:50:eb:77:5f:47:95:db:0e:30:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Validity Not Before: Sep 22 18:49:53 2026 GMT Not After : Sep 23 19:56:53 2026 GMT Subject: CN=928701C05FF970A05C58F16467B69479119625AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:22:67:ac:8d:0f:cf:14:c4:4a:cf:12:87:db: 6d:14:6d:d7:0c:34:9f:01:84:4b:da:c9:cb:91:52: 3c:97:8d:ec:6a:73:20:fc:b0:37:67:c2:ba:3f:37: 68:72:ff:95:d9:e2:41:6e:6e:d4:8f:05:67:f3:22: 82:35:33:89:b4:5c:cb:50:c9:e3:b8:38:f8:a9:7f: 45:7a:4e:8f:1d:eb:b3:c3:ef:57:06:4b:6f:3a:9f: 70:f4:c0:a9:3a:73:c1:69:dc:ca:45:06:8e:c7:34: f1:72:31:06:6c:2c:96:50:ca:09:c2:a7:a4:67:82: 81:b0:24:01:13:d2:41:89:42:a4:b1:61:aa:cb:e1: 2b:34:74:c2:a5:dd:63:87:89:b1:9c:f1:4b:93:09: 68:e1:df:70:96:d0:1d:7a:e4:67:eb:4c:d6:2a:f0: ed:44:98:2d:29:93:46:2e:c1:a5:fb:ab:e8:34:7a: 5e:1d:cd:84:7b:b6:f3:be:cf:d8:c4:5e:94:d6:51: fb:9c:45:f8:53:1c:ae:b5:9d:c0:c9:1f:f3:f0:d2: 93:58:ca:04:2f:0b:4c:57:4a:3d:63:48:54:94:c9: c1:8b:6b:64:3a:75:7e:1d:d2:9e:e9:69:96:c0:f1: 10:b3:69:eb:2b:17:60:74:87:be:21:f0:8d:01:ea: 73:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:87:01:C0:5F:F9:70:A0:5C:58:F1:64:67:B6:94:79:11:96:25:AA X509v3 Authority Key Identifier: keyid:A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c1:cd:fb:3e:65:ac:81:1f:32:7d:06:ee:f7:b8:de:89:53: 13:72:ee:38:3d:7d:f4:1a:08:ce:b2:f2:51:b0:2b:0b:06:a9: a9:35:fc:b3:cc:12:d3:47:82:1e:2b:e1:53:8e:c6:a8:d7:f5: 7c:88:66:7b:62:7f:67:a3:61:ca:ab:49:6d:5e:5e:08:ea:e2: c3:a3:0e:4b:ee:cc:80:ed:c2:63:6d:ba:ac:61:dd:4c:c8:5a: 61:76:8e:ae:51:16:c2:73:4a:29:55:86:1b:8e:74:18:1b:c1: 3e:7e:77:26:88:e3:42:17:66:cf:bd:31:93:9c:bb:87:ed:b3: 31:7d:7e:b9:ed:94:08:86:ff:40:67:de:7b:0a:7b:3c:27:94: 93:13:45:ee:88:33:0a:fe:e7:9e:94:78:f9:5b:1e:29:f8:a5: b2:27:29:31:86:2b:1a:3d:94:23:94:1e:d2:45:93:74:99:df: b3:6e:98:70:91:45:3f:be:22:58:2d:0f:b6:1e:f1:1d:5f:58: b4:77:4c:a3:0b:62:de:68:51:a7:3f:3a:05:a2:c6:8b:7e:3a: f2:25:22:e1:3e:55:b4:f9:5f:c5:c8:f7:10:2f:c9:52:69:8e: 77:6d:67:91:68:d3:35:f5:68:4e:a7:47:1b:94:f7:27:3a:45: 53:18:69:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdlSJYNSOTRD1tVDrd19HldsOMIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3 NzcyRUU4NjAeFw0yNjA5MjIxODQ5NTNaFw0yNjA5MjMxOTU2NTNaMDMxMTAvBgNV BAMTKDkyODcwMUMwNUZGOTcwQTA1QzU4RjE2NDY3QjY5NDc5MTE5NjI1QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjImesjQ/PFMRKzxKH220UbdcM NJ8BhEvaycuRUjyXjexqcyD8sDdnwro/N2hy/5XZ4kFubtSPBWfzIoI1M4m0XMtQ yeO4OPipf0V6To8d67PD71cGS286n3D0wKk6c8Fp3MpFBo7HNPFyMQZsLJZQygnC p6RngoGwJAET0kGJQqSxYarL4Ss0dMKl3WOHibGc8UuTCWjh33CW0B165GfrTNYq 8O1EmC0pk0YuwaX7q+g0el4dzYR7tvO+z9jEXpTWUfucRfhTHK61ncDJH/Pw0pNY ygQvC0xXSj1jSFSUycGLa2Q6dX4d0p7paZbA8RCzaesrF2B0h74h8I0B6nNhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkocBwF/5cKBcWPFkZ7aUeRGWJaowHwYDVR0j BBgwFoAUosq8LlK/fmX8UB8HrEg0rHdy7oYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJkYWI0NmEtMDg1ZS00NDMyLTk4MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1 MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3NzcyRUU4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkNBQkMyRTUyQkY3RTY1RkM1MDFGMDdBQzQ4MzRBQzc3NzJF RTg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0 QUM3NzcyRUU4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDBzfs+ZayBHzJ9Bu73uN6JUxNy7jg9ffQa CM6y8lGwKwsGqak1/LPMEtNHgh4r4VOOxqjX9XyIZntif2ejYcqrSW1eXgjq4sOj DkvuzIDtwmNtuqxh3UzIWmF2jq5RFsJzSilVhhuOdBgbwT5+dyaI40IXZs+9MZOc u4ftszF9frntlAiG/0Bn3nsKezwnlJMTRe6IMwr+556UePlbHin4pbInKTGGKxo9 lCOUHtJFk3SZ37NumHCRRT++IlgtD7Ye8R1fWLR3TKMLYt5oUac/OgWixot+OvIl IuE+VbT5X8XI9xAvyVJpjndtZ5Fo0zX1aE6nRxuU9yc6RVMYaX4= -----END CERTIFICATE-----Generated at Wed Sep 23 07:33:52 2026 by rpki-client