$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft File: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft (raw, json) Hash identifier: tpPrOrBkGw/hvgrpurp6e1SEx+FTuA1RjwbQGUfV0hU= Subject key identifier: E8:E0:3E:30:24:79:44:4D:FD:80:C8:57:9A:4A:26:B1:2B:9A:BD:95 Authority key identifier: A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 Certificate issuer: /CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Certificate serial: 0D14C93732A43E841CBF83E3406D6A58D3B7385B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft Manifest number: BE Signing time: Tue 22 Sep 2026 09:58:55 +0000 Manifest this update: Tue 22 Sep 2026 09:53:55 +0000 Manifest next update: Wed 23 Sep 2026 12:02:55 +0000 Files and hashes: 1: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: Ms5lVpCR+d3KiqA+8+cluXhFQb/KgXQqPnflZyEWwJA=) 2: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl (hash: 6HmUdcTPPwWVfGPglEhpAPjTajTPHYyWtOxEbHv/ou0=) 3: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: Sl5RIQ6TEp2vaieF8W/DsRGoACBj5tfJiV0/4Hnxdeo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 11:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:14:c9:37:32:a4:3e:84:1c:bf:83:e3:40:6d:6a:58:d3:b7:38:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Validity Not Before: Sep 22 09:53:55 2026 GMT Not After : Sep 23 12:02:55 2026 GMT Subject: CN=E8E03E302479444DFD80C8579A4A26B12B9ABD95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:35:e5:56:98:78:4b:d5:92:04:c5:61:cf:1a: 7b:bd:0b:ab:53:4f:b3:ad:52:97:46:84:fa:5e:9b: 16:bd:76:28:96:0e:2d:43:5e:2f:4a:56:66:cb:f9: 89:60:4b:50:b6:a2:a8:aa:9e:50:6d:b1:06:00:1e: 06:85:af:29:08:c1:d8:53:0b:c3:18:9c:28:3c:c7: b4:26:23:bf:bc:db:09:29:e1:04:b6:ac:0e:b0:0b: 96:b5:48:af:ac:50:f1:06:c0:d6:9f:1a:21:fa:c9: 6e:60:9c:57:a4:c1:7a:fe:0a:cf:b6:49:19:62:65: a4:c8:26:ff:5a:eb:74:9a:72:e1:e3:e7:2a:e1:23: 04:96:52:40:a2:bd:d2:64:d1:88:00:0b:da:cd:dd: cd:5a:ad:69:53:43:59:e6:14:ea:de:e7:44:a1:3a: c8:61:8c:b9:4d:02:97:7e:cf:61:f5:a7:75:58:95: 86:a7:fd:f8:db:3b:a0:17:36:cb:1a:cb:2c:4a:da: 1f:93:95:1f:57:8b:a1:e2:e3:ad:85:2a:2c:ab:7f: 36:53:91:7f:8f:d8:9b:01:5c:f0:c1:99:ee:f0:62: 7b:42:68:e9:8c:a6:3d:23:bc:2e:29:00:14:81:b3: 3c:51:d1:91:65:12:0f:a7:2d:0b:5e:23:9e:3f:e1: e7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E0:3E:30:24:79:44:4D:FD:80:C8:57:9A:4A:26:B1:2B:9A:BD:95 X509v3 Authority Key Identifier: keyid:A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e8:65:be:24:b9:28:5c:0b:43:17:35:54:f1:eb:27:e5:df: f0:13:58:24:99:af:7f:d7:75:62:45:71:96:41:78:57:1f:d5: 86:dc:4a:69:c3:c0:08:28:f8:1f:d0:f5:98:bc:30:5c:c1:cb: 30:10:9f:01:10:92:56:4d:6a:61:f4:bd:55:d3:c3:63:5c:4e: 9f:50:d9:3a:24:9b:80:21:76:3a:31:2f:13:54:76:de:54:3d: 07:23:76:25:00:ad:61:4e:15:c4:3a:5f:ba:a4:2c:7e:84:8d: ba:8e:ef:06:29:b1:6b:75:a1:83:f2:53:21:ea:a8:97:98:fe: fc:af:dc:e5:8f:22:38:43:5b:70:4d:ce:ea:e7:45:b9:f5:5f: 58:10:3e:7d:58:18:a0:1d:f1:e5:73:e8:f3:a3:44:dc:f2:f1: 18:22:a2:83:37:de:2a:ba:10:57:82:ff:19:d4:6b:66:b2:42: fd:46:a6:cd:e2:56:a1:a7:3d:b4:3b:90:cb:cd:a1:d3:eb:63: 50:c5:6f:ea:b9:dc:5f:5d:ff:97:00:4b:5e:72:fe:56:9e:4f: 17:03:8f:c5:5c:01:ee:7f:32:46:1f:f4:6b:05:66:38:8a:b2: 7c:72:f4:fc:d2:f3:5b:20:06:f6:55:37:c0:a5:29:e3:05:16: cf:48:41:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDRTJNzKkPoQcv4PjQG1qWNO3OFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFF OTBGQ0IwMzAeFw0yNjA5MjIwOTUzNTVaFw0yNjA5MjMxMjAyNTVaMDMxMTAvBgNV BAMTKEU4RTAzRTMwMjQ3OTQ0NERGRDgwQzg1NzlBNEEyNkIxMkI5QUJEOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmNeVWmHhL1ZIExWHPGnu9C6tT T7OtUpdGhPpemxa9diiWDi1DXi9KVmbL+YlgS1C2oqiqnlBtsQYAHgaFrykIwdhT C8MYnCg8x7QmI7+82wkp4QS2rA6wC5a1SK+sUPEGwNafGiH6yW5gnFekwXr+Cs+2 SRliZaTIJv9a63SacuHj5yrhIwSWUkCivdJk0YgAC9rN3c1arWlTQ1nmFOre50Sh OshhjLlNApd+z2H1p3VYlYan/fjbO6AXNssayyxK2h+TlR9Xi6Hi462FKiyrfzZT kX+P2JsBXPDBme7wYntCaOmMpj0jvC4pABSBszxR0ZFlEg+nLQteI54/4ecTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6OA+MCR5RE39gMhXmkomsSuavZUwHwYDVR0j BBgwFoAUoum7qBCWLHwwP3QFKtqPiukPywMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmI2OWQ2NjctMTdhNC00ZmRkLTljNTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgx MDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFFOTBGQ0IwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkU5QkJBODEwOTYyQzdDMzAzRjc0MDUyQURBOEY4QUU5MEZD QjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThG OEFFOTBGQ0IwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/oZb4kuShcC0MXNVTx6yfl3/ATWCSZr3/X dWJFcZZBeFcf1YbcSmnDwAgo+B/Q9Zi8MFzByzAQnwEQklZNamH0vVXTw2NcTp9Q 2Tokm4AhdjoxLxNUdt5UPQcjdiUArWFOFcQ6X7qkLH6EjbqO7wYpsWt1oYPyUyHq qJeY/vyv3OWPIjhDW3BNzurnRbn1X1gQPn1YGKAd8eVz6POjRNzy8RgiooM33iq6 EFeC/xnUa2ayQv1Gps3iVqGnPbQ7kMvNodPrY1DFb+q53F9d/5cAS15y/laeTxcD j8VcAe5/MkYf9GsFZjiKsnxy9PzS81sgBvZVN8ClKeMFFs9IQSg= -----END CERTIFICATE-----Generated at Tue Sep 22 14:21:38 2026 by rpki-client