$ rpki-client -vvf rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft File: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft (raw, json) Hash identifier: qr46o8AHK732uSdSMAlYpoKOsgWat1QBoaWaNFUjfiQ= Subject key identifier: 0D:65:F0:D0:9D:E8:FD:CD:16:69:CF:5E:27:5B:9B:BC:CA:4E:1F:71 Authority key identifier: A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 Certificate issuer: /CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Certificate serial: 726901CCDE3DDE46DE21AA87A91F4B83048A9A6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft Manifest number: 73 Signing time: Tue 28 Jul 2026 06:19:53 +0000 Manifest this update: Tue 28 Jul 2026 06:14:53 +0000 Manifest next update: Wed 29 Jul 2026 09:41:53 +0000 Files and hashes: 1: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: Sl5RIQ6TEp2vaieF8W/DsRGoACBj5tfJiV0/4Hnxdeo=) 2: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl (hash: MQMfcPuUCrqV2ckIIh0i9tppQO1/HywxeG5GTDtWlBA=) 3: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: Ms5lVpCR+d3KiqA+8+cluXhFQb/KgXQqPnflZyEWwJA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:69:01:cc:de:3d:de:46:de:21:aa:87:a9:1f:4b:83:04:8a:9a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Validity Not Before: Jul 28 06:14:53 2026 GMT Not After : Jul 29 09:41:53 2026 GMT Subject: CN=0D65F0D09DE8FDCD1669CF5E275B9BBCCA4E1F71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:74:b1:50:b7:0d:ea:b6:f3:11:60:0e:63:1f: ed:72:b8:77:e1:d9:23:c8:26:77:10:17:3e:bf:46: 60:a1:cb:4f:52:8a:bf:17:90:62:8f:0b:f9:f4:dd: 27:09:ed:dc:e5:85:d6:5f:1b:94:bc:0b:d4:3c:bf: 4a:ef:2a:38:24:ab:18:27:70:0b:85:65:7b:92:cc: 04:a2:31:b4:00:37:b3:66:6e:d0:f2:7a:74:f9:12: 7c:2b:03:a3:d3:e4:0a:0a:e6:91:aa:65:7c:91:e0: 4d:37:81:e4:1d:a7:45:9e:d1:cf:0f:d7:88:15:f3: cb:7e:34:36:92:fd:96:82:45:03:75:f1:67:c5:32: 7b:0e:6c:c0:30:3a:3e:3b:f2:2d:31:2f:7a:f2:de: d2:4a:3d:64:87:a0:72:9e:27:31:ea:d7:cc:08:99: c7:38:2c:9c:ca:f9:5c:75:d2:87:7e:1e:75:76:9e: dd:36:7c:c1:7f:ad:33:cb:b3:1d:17:b8:81:08:9c: d6:17:2a:c2:ba:3e:e7:9d:60:26:f8:51:0c:fc:fe: 97:c5:bb:f7:5b:ee:d1:3f:70:fa:38:fe:67:c8:75: 74:a9:83:cd:ec:72:cf:58:91:05:a8:a7:d2:58:c4: fc:b4:aa:77:88:09:4a:13:92:d4:72:0a:e2:99:5f: 9d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:65:F0:D0:9D:E8:FD:CD:16:69:CF:5E:27:5B:9B:BC:CA:4E:1F:71 X509v3 Authority Key Identifier: keyid:A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:1c:6f:fe:3a:69:69:e4:a6:4b:f3:64:94:69:45:8e:29:5a: 50:7c:ce:27:0c:5f:92:e5:85:72:ef:1f:ce:66:99:5f:a0:cf: a8:40:4a:9e:b1:43:a3:e2:4b:de:34:bc:75:a0:7b:35:1d:24: 54:3a:e3:37:b8:e9:fb:1b:53:00:e5:25:4d:2c:ae:49:de:11: ac:49:a8:c4:16:e3:05:a4:83:2d:f9:bb:e9:80:36:4c:8b:85: e7:1b:30:06:ed:7a:64:4c:ad:24:ef:cf:a8:02:d4:a5:e3:6f: 29:d8:50:bd:ad:0d:af:11:3f:4b:08:c2:37:79:c4:10:9e:25: c0:e8:02:08:85:7a:b5:4d:27:f3:3a:df:ff:cd:65:22:2b:e9: 55:da:d9:26:b5:37:6c:e3:3a:67:3f:7f:b9:10:24:90:63:02: 4b:44:34:66:c4:f9:d5:79:1a:0f:7e:ca:82:47:4d:46:bf:65: c1:68:09:c3:8f:61:d7:94:25:d2:de:17:4e:dd:31:f3:ce:17: 2a:db:7a:f5:a0:9e:f4:39:31:b9:29:6f:88:3d:4a:c6:ef:68: 31:64:34:2c:e1:3d:4d:63:3d:af:0a:24:21:d9:db:57:54:c3: 6e:bb:73:ce:e0:a2:9f:2a:78:55:42:87:ea:8d:4d:b8:7d:57: 40:39:2b:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcmkBzN493kbeIaqHqR9LgwSKmm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFF OTBGQ0IwMzAeFw0yNjA3MjgwNjE0NTNaFw0yNjA3MjkwOTQxNTNaMDMxMTAvBgNV BAMTKDBENjVGMEQwOURFOEZEQ0QxNjY5Q0Y1RTI3NUI5QkJDQ0E0RTFGNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCydLFQtw3qtvMRYA5jH+1yuHfh 2SPIJncQFz6/RmChy09Sir8XkGKPC/n03ScJ7dzlhdZfG5S8C9Q8v0rvKjgkqxgn cAuFZXuSzASiMbQAN7NmbtDyenT5EnwrA6PT5AoK5pGqZXyR4E03geQdp0We0c8P 14gV88t+NDaS/ZaCRQN18WfFMnsObMAwOj478i0xL3ry3tJKPWSHoHKeJzHq18wI mcc4LJzK+Vx10od+HnV2nt02fMF/rTPLsx0XuIEInNYXKsK6PuedYCb4UQz8/pfF u/db7tE/cPo4/mfIdXSpg83scs9YkQWop9JYxPy0qneICUoTktRyCuKZX52PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDWXw0J3o/c0Wac9eJ1ubvMpOH3EwHwYDVR0j BBgwFoAUoum7qBCWLHwwP3QFKtqPiukPywMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmI2OWQ2NjctMTdhNC00ZmRkLTljNTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgx MDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFFOTBGQ0IwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkU5QkJBODEwOTYyQzdDMzAzRjc0MDUyQURBOEY4QUU5MEZD QjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThG OEFFOTBGQ0IwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYcb/46aWnkpkvzZJRpRY4pWlB8zicMX5Ll hXLvH85mmV+gz6hASp6xQ6PiS940vHWgezUdJFQ64ze46fsbUwDlJU0srkneEaxJ qMQW4wWkgy35u+mANkyLhecbMAbtemRMrSTvz6gC1KXjbynYUL2tDa8RP0sIwjd5 xBCeJcDoAgiFerVNJ/M63//NZSIr6VXa2Sa1N2zjOmc/f7kQJJBjAktENGbE+dV5 Gg9+yoJHTUa/ZcFoCcOPYdeUJdLeF07dMfPOFyrbevWgnvQ5Mbkpb4g9SsbvaDFk NCzhPU1jPa8KJCHZ21dUw267c87gop8qeFVCh+qNTbh9V0A5K98= -----END CERTIFICATE-----Generated at Wed Jul 29 00:09:26 2026 by rpki-client