$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.mft File: A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.mft (raw, json) Hash identifier: HNhthKX8jZq5muuhbDNHZRVRTG+9T5A/O/23yXOcIZw= Subject key identifier: 96:34:09:FE:CA:0E:BD:80:4F:CC:79:FF:0D:DD:C1:F5:B9:B8:C3:1F Authority key identifier: A2:A5:5E:F8:A6:D2:DB:E3:C6:A4:6F:E8:9F:AF:F5:06:EE:6E:BE:C6 Certificate issuer: /CN=A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6 Certificate serial: 05410F9DC5CB660D351D9DD74E6F19850BE05D44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.mft Manifest number: 37 Signing time: Mon 09 Nov 2026 04:36:15 +0000 Manifest this update: Mon 09 Nov 2026 04:31:15 +0000 Manifest next update: Tue 10 Nov 2026 05:58:15 +0000 Files and hashes: 1: A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.crl (hash: 9cdpHyYe1PgVux7Lwy3CiNVRLOWF0gBeDuHhSAeyEl0=) 2: 3230332e3230312e3139302e302f32332d3234203d3e20313534383333.roa (hash: FedQW0GWU8P5i3M8nF0hYiFJaRTI3w977R1u+knEuLI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.crl rsync://rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 05:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:41:0f:9d:c5:cb:66:0d:35:1d:9d:d7:4e:6f:19:85:0b:e0:5d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6 Validity Not Before: Nov 9 04:31:15 2026 GMT Not After : Nov 10 05:58:15 2026 GMT Subject: CN=963409FECA0EBD804FCC79FF0DDDC1F5B9B8C31F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:63:44:28:9d:b5:4b:75:fc:50:b2:42:59:fc: 9e:fc:73:fa:38:ca:8d:01:97:6b:a9:59:10:ff:31: d1:2e:28:da:7a:9b:61:64:ac:e1:cc:a2:8f:f3:4e: ad:18:02:76:51:5d:f8:09:ad:d2:d1:5e:6a:51:ef: d8:33:95:2e:ae:19:7d:91:04:5c:73:10:09:52:e9: 9b:c3:0b:35:7d:80:8c:3f:94:7b:be:17:68:d7:08: d5:c2:9c:15:b3:be:23:6b:0b:15:47:15:64:ec:b8: 84:10:f6:3b:c6:fc:9c:ac:9b:fe:64:37:46:4a:9c: e7:6d:16:24:37:12:7f:1a:e3:e9:1d:0b:b7:c5:e3: 90:a2:be:18:2d:d2:44:e2:45:f2:6c:ca:8d:e5:a2: 82:c0:4a:66:ee:0f:d5:a6:1b:70:3a:4c:3e:7d:ed: 9a:b4:cd:e1:f4:b8:7e:2e:e2:5f:69:b1:5e:9e:c5: d9:fa:5c:f8:cd:70:9c:47:1d:3e:cb:14:99:a7:37: 9c:6f:cc:f5:cc:3e:c9:f1:c2:0a:c1:15:5b:be:7c: 80:b7:e6:33:f7:df:64:59:fd:a8:2f:3c:b0:29:4c: ff:02:55:40:5e:f5:0c:07:91:be:2a:6d:49:67:7d: da:b1:ce:f7:31:09:71:e0:25:d0:4a:ac:06:b8:0b: b3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:34:09:FE:CA:0E:BD:80:4F:CC:79:FF:0D:DD:C1:F5:B9:B8:C3:1F X509v3 Authority Key Identifier: keyid:A2:A5:5E:F8:A6:D2:DB:E3:C6:A4:6F:E8:9F:AF:F5:06:EE:6E:BE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:0f:cf:dc:46:fa:5f:aa:f5:40:21:d7:57:de:fc:89:e7:54: a3:8a:f0:79:f7:1f:15:65:9b:53:9c:7f:f9:ac:64:9c:94:df: 2e:e0:86:9e:8c:43:fa:2b:9b:f1:8c:4c:dd:40:37:6d:80:7c: 72:5f:ee:ad:1f:74:b1:41:5a:76:11:fa:80:c1:70:71:9f:a7: 97:bf:cb:28:ae:94:04:03:f6:4e:4b:15:ec:10:dd:a3:f0:59: 93:9a:90:62:14:db:32:2b:f3:6c:cf:ff:8a:9c:03:f5:f5:e9: 89:12:42:30:63:8d:b5:85:71:06:8b:22:46:10:a8:61:a3:dc: 0a:a0:19:f6:94:06:f3:3a:f6:28:ac:0d:0d:a3:17:9c:6b:49: 08:0f:ce:92:d1:3d:fd:63:56:df:09:23:b4:33:b6:ed:42:25: ad:7b:b4:fc:93:43:2f:3b:43:18:a6:d1:d6:e8:a5:34:99:8f: 2f:14:33:49:6c:55:0d:2a:60:a0:ef:f0:c6:30:d7:96:87:71: 4d:5e:13:a5:a9:4c:1a:14:39:e5:01:73:be:e1:aa:39:a5:82: d9:9f:d8:f9:87:b2:33:05:85:8a:8a:35:78:da:19:49:ba:8d: 3d:ec:17:f4:78:61:14:7d:95:18:1b:b1:70:cf:b6:d6:da:4e: f5:7e:31:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBUEPncXLZg01HZ3XTm8ZhQvgXUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJBNTVFRjhBNkQyREJFM0M2QTQ2RkU4OUZBRkY1MDZF RTZFQkVDNjAeFw0yNjExMDkwNDMxMTVaFw0yNjExMTAwNTU4MTVaMDMxMTAvBgNV BAMTKDk2MzQwOUZFQ0EwRUJEODA0RkNDNzlGRjBERERDMUY1QjlCOEMzMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Y0QonbVLdfxQskJZ/J78c/o4 yo0Bl2upWRD/MdEuKNp6m2FkrOHMoo/zTq0YAnZRXfgJrdLRXmpR79gzlS6uGX2R BFxzEAlS6ZvDCzV9gIw/lHu+F2jXCNXCnBWzviNrCxVHFWTsuIQQ9jvG/Jysm/5k N0ZKnOdtFiQ3En8a4+kdC7fF45Civhgt0kTiRfJsyo3looLASmbuD9WmG3A6TD59 7Zq0zeH0uH4u4l9psV6exdn6XPjNcJxHHT7LFJmnN5xvzPXMPsnxwgrBFVu+fIC3 5jP332RZ/agvPLApTP8CVUBe9QwHkb4qbUlnfdqxzvcxCXHgJdBKrAa4C7NfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUljQJ/soOvYBPzHn/Dd3B9bm4wx8wHwYDVR0j BBgwFoAUoqVe+KbS2+PGpG/on6/1Bu5uvsYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzg2ODExOWQtZTAxMi00ZmI0LTk2NTAtYjNhZmQyNjI5YjRlLzAvQTJBNTVFRjhB NkQyREJFM0M2QTQ2RkU4OUZBRkY1MDZFRTZFQkVDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMkE1NUVGOEE2RDJEQkUzQzZBNDZGRTg5RkFGRjUwNkVFNkVC RUM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzg2ODExOWQtZTAxMi00ZmI0LTk2 NTAtYjNhZmQyNjI5YjRlLzAvQTJBNTVFRjhBNkQyREJFM0M2QTQ2RkU4OUZBRkY1 MDZFRTZFQkVDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcPz9xG+l+q9UAh11fe/InnVKOK8Hn3HxVl m1Ocf/msZJyU3y7ghp6MQ/orm/GMTN1AN22AfHJf7q0fdLFBWnYR+oDBcHGfp5e/ yyiulAQD9k5LFewQ3aPwWZOakGIU2zIr82zP/4qcA/X16YkSQjBjjbWFcQaLIkYQ qGGj3AqgGfaUBvM69iisDQ2jF5xrSQgPzpLRPf1jVt8JI7Qztu1CJa17tPyTQy87 Qxim0dbopTSZjy8UM0lsVQ0qYKDv8MYw15aHcU1eE6WpTBoUOeUBc77hqjmlgtmf 2PmHsjMFhYqKNXjaGUm6jT3sF/R4YRR9lRgbsXDPttbaTvV+MQQ= -----END CERTIFICATE-----Generated at Mon Nov 9 17:21:14 2026 by rpki-client