$ rpki-client -vvf rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft File: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft (raw, json) Hash identifier: NhQ9EnWjJW/AyK/dE8luAtt9W5h/JQQKPD8Z5jljC6M= Subject key identifier: 1B:FB:5A:45:2F:AC:A1:2D:4C:5A:23:06:DB:F0:28:95:EC:89:AC:FF Authority key identifier: A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 Certificate issuer: /CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Certificate serial: 2D24F891602A164288913B916DF9F12FD866E134 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft Manifest number: 37 Signing time: Fri 12 Jun 2026 17:11:07 +0000 Manifest this update: Fri 12 Jun 2026 17:06:07 +0000 Manifest next update: Sat 13 Jun 2026 20:16:07 +0000 Files and hashes: 1: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: Ms5lVpCR+d3KiqA+8+cluXhFQb/KgXQqPnflZyEWwJA=) 2: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: Sl5RIQ6TEp2vaieF8W/DsRGoACBj5tfJiV0/4Hnxdeo=) 3: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl (hash: 0EM6lVciHypWKlSRLXnbB1SewRe0y8c7SRRDNoQ9MHc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 20:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:24:f8:91:60:2a:16:42:88:91:3b:91:6d:f9:f1:2f:d8:66:e1:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Validity Not Before: Jun 12 17:06:07 2026 GMT Not After : Jun 13 20:16:07 2026 GMT Subject: CN=1BFB5A452FACA12D4C5A2306DBF02895EC89ACFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c5:6b:b4:03:32:a5:ca:67:08:de:a4:57:2b: 91:a0:7c:83:82:a4:09:38:e6:e2:33:d5:06:10:c9: 34:00:06:d9:17:54:d2:b2:9c:b6:2a:c9:82:71:74: 25:90:8f:fa:f9:b2:3e:75:3b:66:ac:b2:3a:82:4a: f7:bd:f1:1c:aa:bb:5c:1f:d9:b2:45:78:ee:b0:d4: 4b:f0:9f:ef:17:e5:2a:9a:65:4a:2d:64:f7:30:d6: 84:28:d8:30:cd:62:93:6e:1a:56:38:d1:20:e0:5e: db:b1:6d:8c:55:0a:7b:d4:26:cd:18:dc:10:b3:c5: a2:20:d9:18:f6:92:21:79:72:64:58:1b:7d:11:53: 07:71:5d:56:47:02:72:b1:c8:d3:ca:f1:ed:a1:df: 25:39:14:31:41:5a:4c:44:3c:e1:f7:ed:a1:dc:57: 5c:8a:74:d5:19:38:4f:79:2b:12:a5:f9:78:d2:11: 03:4d:cb:9b:f6:52:03:a1:b1:6b:7e:85:f9:24:52: 11:3f:fe:26:8d:d3:ef:4c:4c:10:c3:97:aa:2f:3c: a3:a5:3b:b0:aa:21:c5:d5:97:93:eb:b2:ab:e4:b2: 92:4c:3c:c8:9d:72:06:08:55:0f:a1:2d:c4:37:3b: f6:80:e2:22:96:aa:93:7a:9c:b8:8e:96:34:d1:cd: ff:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FB:5A:45:2F:AC:A1:2D:4C:5A:23:06:DB:F0:28:95:EC:89:AC:FF X509v3 Authority Key Identifier: keyid:A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:af:e1:58:3e:b0:93:b4:20:16:5f:a5:80:73:af:d8:db:f5: b3:5a:b3:61:07:a0:b4:6a:54:94:a3:c3:9e:9c:df:7a:0b:00: e6:27:c8:01:5b:15:1e:ee:c6:56:e5:f5:ba:0a:e8:f3:eb:17: 14:52:5b:98:e4:d5:a4:b0:b5:93:8b:2d:2b:45:3b:83:66:73: a6:99:39:ff:2d:84:54:54:54:9b:7b:2b:1b:2e:72:8f:73:81: 09:78:fc:e3:a1:0c:ab:b0:95:f8:8a:53:95:2e:32:fc:ac:69: a8:67:de:82:70:d1:82:82:21:d8:7d:7f:d8:93:90:b1:01:e0: 38:23:8e:25:31:57:25:ce:32:32:f6:1d:34:e2:74:3f:b4:40: 38:23:f4:54:6f:b8:5c:08:14:a2:3b:9c:13:e0:a1:56:70:f3: 21:a2:31:7c:07:3b:c5:92:37:86:e1:8b:00:ca:52:ab:f5:c1: 14:21:27:c4:9e:a6:73:cc:4d:4a:9a:00:2f:ac:ff:4d:62:c2: b2:0e:6c:7a:bd:e4:3e:60:a6:c2:c7:97:2a:4b:d6:b7:67:8e: 35:16:5d:29:9f:a1:6c:0c:d3:21:de:aa:b4:0c:9d:f5:cb:3e: 26:80:56:5c:dd:a1:92:a8:07:a2:2b:a1:b8:22:5a:71:0f:e1: 7b:c1:98:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULST4kWAqFkKIkTuRbfnxL9hm4TQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFF OTBGQ0IwMzAeFw0yNjA2MTIxNzA2MDdaFw0yNjA2MTMyMDE2MDdaMDMxMTAvBgNV BAMTKDFCRkI1QTQ1MkZBQ0ExMkQ0QzVBMjMwNkRCRjAyODk1RUM4OUFDRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoxWu0AzKlymcI3qRXK5GgfIOC pAk45uIz1QYQyTQABtkXVNKynLYqyYJxdCWQj/r5sj51O2assjqCSve98Ryqu1wf 2bJFeO6w1Evwn+8X5SqaZUotZPcw1oQo2DDNYpNuGlY40SDgXtuxbYxVCnvUJs0Y 3BCzxaIg2Rj2kiF5cmRYG30RUwdxXVZHAnKxyNPK8e2h3yU5FDFBWkxEPOH37aHc V1yKdNUZOE95KxKl+XjSEQNNy5v2UgOhsWt+hfkkUhE//iaN0+9MTBDDl6ovPKOl O7CqIcXVl5PrsqvkspJMPMidcgYIVQ+hLcQ3O/aA4iKWqpN6nLiOljTRzf9fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG/taRS+soS1MWiMG2/AoleyJrP8wHwYDVR0j BBgwFoAUoum7qBCWLHwwP3QFKtqPiukPywMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmI2OWQ2NjctMTdhNC00ZmRkLTljNTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgx MDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFFOTBGQ0IwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkU5QkJBODEwOTYyQzdDMzAzRjc0MDUyQURBOEY4QUU5MEZD QjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThG OEFFOTBGQ0IwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEav4Vg+sJO0IBZfpYBzr9jb9bNas2EHoLRq VJSjw56c33oLAOYnyAFbFR7uxlbl9boK6PPrFxRSW5jk1aSwtZOLLStFO4Nmc6aZ Of8thFRUVJt7Kxsuco9zgQl4/OOhDKuwlfiKU5UuMvysaahn3oJw0YKCIdh9f9iT kLEB4DgjjiUxVyXOMjL2HTTidD+0QDgj9FRvuFwIFKI7nBPgoVZw8yGiMXwHO8WS N4bhiwDKUqv1wRQhJ8SepnPMTUqaAC+s/01iwrIObHq95D5gpsLHlypL1rdnjjUW XSmfoWwM0yHeqrQMnfXLPiaAVlzdoZKoB6IrobgiWnEP4XvBmP4= -----END CERTIFICATE-----Generated at Sat Jun 13 13:38:42 2026 by rpki-client