$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft File: 2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft (raw, json) Hash identifier: WvGY+UYHzJPPY4UvX97N+u2PazBAUc/t/O9p8JryurY= Subject key identifier: ED:BE:26:43:33:F8:4F:1B:D3:C9:56:74:C2:63:25:07:32:DE:B7:79 Authority key identifier: 2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA Certificate issuer: /CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA Certificate serial: 3BC8C310E9094EAC3BFF573872C11AF210C973E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft Manifest number: BD Signing time: Mon 21 Sep 2026 00:06:37 +0000 Manifest this update: Mon 21 Sep 2026 00:01:37 +0000 Manifest next update: Tue 22 Sep 2026 03:02:37 +0000 Files and hashes: 1: 2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl (hash: AoYU5JzIps/IOcrequxYkAyBDiY9XrGgUSov6PaFebw=) 2: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: eNG7+LqFPcA2X6MnUSyw57FaBVmmkZ9qB88jQfVFgQw=) 3: 3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa (hash: Jv5U5LGovEDFBhrf2yN8LsratIXrB4UcO/MW+FaftYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c8:c3:10:e9:09:4e:ac:3b:ff:57:38:72:c1:1a:f2:10:c9:73:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA Validity Not Before: Sep 21 00:01:37 2026 GMT Not After : Sep 22 03:02:37 2026 GMT Subject: CN=EDBE264333F84F1BD3C95674C263250732DEB779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:0c:2c:c0:bb:e8:a0:57:48:d6:e1:c3:7d: a9:6e:4b:a7:0b:59:e1:86:d5:88:95:bf:87:03:67: b7:18:a2:97:9c:37:e5:b0:52:a7:2c:a2:ed:d2:40: 4c:02:33:6d:c1:9a:fa:82:47:0c:29:9e:ac:57:48: af:ff:12:7b:84:6b:a1:b6:dd:77:fc:9d:45:60:e5: a7:c0:c4:77:85:d7:fb:76:6a:11:ad:63:48:f9:62: 01:f0:95:02:8d:cd:00:0c:57:5f:37:e2:dc:b2:da: b0:34:2e:5c:98:00:5e:4c:b3:f9:16:ca:7b:ae:7a: a5:33:f1:49:2d:f0:14:ab:67:b8:d0:f9:c7:d1:2b: ef:8c:12:86:22:e3:3e:3f:1a:02:ff:b8:19:30:bf: 50:80:24:d5:f8:22:e0:2a:99:b9:04:dd:0d:6c:b8: 80:3e:f5:81:b7:f6:45:1e:c5:2e:9c:e5:54:de:74: 0f:eb:f0:7c:f5:8a:6e:70:fc:31:35:a9:aa:67:31: 07:28:1b:15:5e:67:4d:55:32:31:7f:d7:1b:f4:6d: 21:41:c1:3d:06:a9:3b:d9:06:ef:c6:ad:d2:70:ed: 7c:ab:e5:11:c1:eb:e7:97:df:42:d4:26:66:0d:54: 8e:d5:d2:a1:2b:0c:f7:a7:44:f1:e4:54:61:81:f5: cd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BE:26:43:33:F8:4F:1B:D3:C9:56:74:C2:63:25:07:32:DE:B7:79 X509v3 Authority Key Identifier: keyid:2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:e9:a0:52:8d:b9:2f:4a:ce:77:2f:6b:ec:8e:db:8d:3b:ce: 5f:ff:bf:30:c4:a7:b0:1a:6c:0d:7e:6f:45:5f:c0:75:21:2b: f3:14:16:b0:c1:5b:e7:bd:bc:6d:ff:ef:45:ae:aa:eb:63:09: 1c:d1:25:2d:08:e5:c8:4e:61:9c:61:64:da:6d:0c:5f:a3:0b: 70:df:99:08:9e:41:2c:8a:31:5d:71:8d:36:e5:55:e6:bd:3d: c3:e0:88:15:db:cc:ab:9f:94:e7:9a:00:90:f3:f1:18:db:38: c0:9c:d0:f4:70:6d:fa:db:3c:67:60:81:0b:1c:8c:a0:ce:6d: c5:1f:f6:c7:a0:5a:12:f2:dd:1b:62:95:f5:79:b1:de:ca:3a: 28:45:97:c9:72:c4:7b:52:4c:8d:e2:41:37:92:81:40:5f:7d: 8f:9f:d8:9e:a2:90:8b:28:c7:c1:59:f0:51:a4:d2:54:22:41: 16:c5:1b:1a:91:38:4f:8f:ee:f2:05:0c:29:06:87:34:f6:d6: ea:0a:2a:e9:c6:34:a2:c7:6c:f5:4a:85:d5:4b:e2:18:c3:7c: c4:a4:0b:2b:35:14:bd:3a:e0:f9:83:99:4f:71:6d:6f:66:c4: 98:35:fb:d7:0b:e7:24:d3:75:53:0b:a3:f7:50:24:26:8a:73: 35:11:3f:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO8jDEOkJTqw7/1c4csEa8hDJc+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE3RkI4MDE2REEwMDBBOUQxMEM5ODA5QzQ0RURFMkU5 RkRBQjZGQTAeFw0yNjA5MjEwMDAxMzdaFw0yNjA5MjIwMzAyMzdaMDMxMTAvBgNV BAMTKEVEQkUyNjQzMzNGODRGMUJEM0M5NTY3NEMyNjMyNTA3MzJERUI3NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6JwwswLvooFdI1uHDfaluS6cL WeGG1YiVv4cDZ7cYopecN+WwUqcsou3SQEwCM23BmvqCRwwpnqxXSK//EnuEa6G2 3Xf8nUVg5afAxHeF1/t2ahGtY0j5YgHwlQKNzQAMV1834tyy2rA0LlyYAF5Ms/kW ynuueqUz8Ukt8BSrZ7jQ+cfRK++MEoYi4z4/GgL/uBkwv1CAJNX4IuAqmbkE3Q1s uIA+9YG39kUexS6c5VTedA/r8Hz1im5w/DE1qapnMQcoGxVeZ01VMjF/1xv0bSFB wT0GqTvZBu/GrdJw7Xyr5RHB6+eX30LUJmYNVI7V0qErDPenRPHkVGGB9c0ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7b4mQzP4TxvTyVZ0wmMlBzLet3kwHwYDVR0j BBgwFoAUKn+4AW2gAKnRDJgJxE7eLp/atvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NhMmUwZGItZTI5My00MWM1LTg1ODMtMzgwMTU3NTg0MjFjLzAvMkE3RkI4MDE2 REEwMDBBOUQxMEM5ODA5QzQ0RURFMkU5RkRBQjZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTdGQjgwMTZEQTAwMEE5RDEwQzk4MDlDNDRFREUyRTlGREFC NkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvMkE3RkI4MDE2REEwMDBBOUQxMEM5ODA5QzQ0RURF MkU5RkRBQjZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL3poFKNuS9Kzncva+yO2407zl//vzDEp7Aa bA1+b0VfwHUhK/MUFrDBW+e9vG3/70WuqutjCRzRJS0I5chOYZxhZNptDF+jC3Df mQieQSyKMV1xjTblVea9PcPgiBXbzKuflOeaAJDz8RjbOMCc0PRwbfrbPGdggQsc jKDObcUf9segWhLy3RtilfV5sd7KOihFl8lyxHtSTI3iQTeSgUBffY+f2J6ikIso x8FZ8FGk0lQiQRbFGxqROE+P7vIFDCkGhzT21uoKKunGNKLHbPVKhdVL4hjDfMSk Cys1FL064PmDmU9xbW9mxJg1+9cL5yTTdVMLo/dQJCaKczURP1I= -----END CERTIFICATE-----Generated at Mon Sep 21 09:55:00 2026 by rpki-client