$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft File: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft (raw, json) Hash identifier: MbRKqZBEL6NIPvg0jtD3CFDmUPQapjiA1m7RNX+iDqg= Subject key identifier: AF:2A:80:96:47:ED:C1:93:98:01:C5:5C:2E:28:0B:A2:B2:EB:DA:5B Authority key identifier: 2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 Certificate issuer: /CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Certificate serial: 0E74054E558EB2B3E8655A82EE34F9367EF82D16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 10:08:10 +0000 Manifest this update: Thu 24 Sep 2026 10:03:10 +0000 Manifest next update: Fri 25 Sep 2026 12:46:10 +0000 Files and hashes: 1: 3130332e3133312e3130372e302f32342d3234203d3e20313338313139.roa (hash: cKDgVoSVAFZfl4hgrIHwI1J4tBbCiwmqXmahxpGLx8I=) 2: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl (hash: VGHkupxDgUWzhWdivWC2FkfP70jcfnZEheJwmX33MYE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:74:05:4e:55:8e:b2:b3:e8:65:5a:82:ee:34:f9:36:7e:f8:2d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Validity Not Before: Sep 24 10:03:10 2026 GMT Not After : Sep 25 12:46:10 2026 GMT Subject: CN=AF2A809647EDC1939801C55C2E280BA2B2EBDA5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:de:33:68:76:71:95:43:5e:9b:7b:d1:de: d4:4d:7b:82:75:1f:0c:ee:0a:ad:16:88:45:35:51: 9f:4d:7b:14:54:42:32:03:62:55:cd:38:d1:34:8a: d7:a9:32:ef:e6:e4:c7:d1:7f:a4:d3:e0:3b:dd:4b: df:d6:70:2e:8b:62:31:e7:ac:05:e9:df:d9:df:60: 67:1e:e3:47:fa:06:aa:f4:3f:d0:fe:fe:42:88:5a: 98:e2:32:d8:73:80:47:28:6d:5d:d7:0c:cd:50:f7: 50:72:d8:ea:13:05:65:3d:5e:15:b7:c7:96:27:80: e2:f7:00:90:84:53:c5:1c:e8:47:7e:11:b4:2f:a9: 50:90:c3:17:34:c3:ea:38:d8:d3:2f:52:bc:95:ba: f8:e6:3d:24:4c:4f:3f:dd:72:ae:82:76:5e:51:83: 26:15:39:ab:02:2a:f2:85:57:fd:e5:20:eb:0e:70: 55:7b:c0:b8:29:62:a4:ea:82:1b:70:5a:d0:49:6d: 73:96:62:0d:59:53:52:f5:62:54:1c:35:20:0b:25: 8c:13:6c:6a:ee:e2:7f:b0:4f:3e:45:9e:91:30:bb: 05:45:14:52:ac:97:56:01:63:b3:0c:72:5a:fe:e2: 6b:c4:4b:0b:5d:93:e2:f4:fa:67:ec:c1:13:40:bc: 93:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2A:80:96:47:ED:C1:93:98:01:C5:5C:2E:28:0B:A2:B2:EB:DA:5B X509v3 Authority Key Identifier: keyid:2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:54:00:52:15:c7:95:40:d1:22:bb:16:82:a6:dc:62:4a:52: 30:58:ea:fb:b7:c5:0b:d8:82:29:a7:ab:5c:47:81:1f:4a:25: 33:9a:23:d2:8d:81:e4:c1:47:f7:0f:a9:4d:a4:23:15:d0:64: 5b:34:9c:c7:14:b3:52:b7:1a:74:fb:f2:9f:ff:42:d0:94:7d: 02:36:fd:79:a8:b2:4f:1d:7c:8e:97:2f:23:65:f1:d7:5c:0d: 05:c2:06:d1:95:3a:a9:c5:fd:08:68:ab:44:8b:7a:07:93:33: a2:ad:0a:39:08:e7:88:8d:e1:94:0e:7e:d4:82:d5:e4:4f:e8: 67:54:66:9e:5a:64:10:6a:64:d7:5e:b5:7e:3a:71:70:60:99: 2b:a9:43:02:a5:a6:3f:0c:53:e0:bb:a3:e1:e1:55:07:b8:65: 21:f6:5f:24:23:bf:67:00:ca:bb:b5:71:58:d5:a6:f0:58:79: 9c:06:34:04:15:d2:25:f4:1b:e7:f2:01:fe:ef:51:42:e6:9b: 7d:22:df:23:7f:86:43:14:ef:42:11:e9:1f:0a:21:c7:93:b3: 5a:1c:d7:7d:df:f1:41:76:9c:47:2c:21:a3:7a:e4:4c:d5:9c: 9d:38:b4:e7:d5:23:d6:e3:a0:d3:8d:3d:b5:88:96:5a:45:fc: 9d:3f:2c:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDnQFTlWOsrPoZVqC7jT5Nn74LRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFFMTRBQkJENTE2MUJBMENBREIzQzQwQzFGOURGQ0JD OUNGMzQ3MDAeFw0yNjA5MjQxMDAzMTBaFw0yNjA5MjUxMjQ2MTBaMDMxMTAvBgNV BAMTKEFGMkE4MDk2NDdFREMxOTM5ODAxQzU1QzJFMjgwQkEyQjJFQkRBNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5pd4zaHZxlUNem3vR3tRNe4J1 HwzuCq0WiEU1UZ9NexRUQjIDYlXNONE0itepMu/m5MfRf6TT4DvdS9/WcC6LYjHn rAXp39nfYGce40f6Bqr0P9D+/kKIWpjiMthzgEcobV3XDM1Q91By2OoTBWU9XhW3 x5YngOL3AJCEU8Uc6Ed+EbQvqVCQwxc0w+o42NMvUryVuvjmPSRMTz/dcq6Cdl5R gyYVOasCKvKFV/3lIOsOcFV7wLgpYqTqghtwWtBJbXOWYg1ZU1L1YlQcNSALJYwT bGru4n+wTz5FnpEwuwVFFFKsl1YBY7MMclr+4mvESwtdk+L0+mfswRNAvJMdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUryqAlkftwZOYAcVcLigLorLr2lswHwYDVR0j BBgwFoAUKuFKu9UWG6DK2zxAwfnfy8nPNHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkyNDM5NTAtM2ZkZi00OWFiLWJmZGMtZjU4NjQ1MzcwNGM2LzAvMkFFMTRBQkJE NTE2MUJBMENBREIzQzQwQzFGOURGQ0JDOUNGMzQ3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUUxNEFCQkQ1MTYxQkEwQ0FEQjNDNDBDMUY5REZDQkM5Q0Yz NDcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkyNDM5NTAtM2ZkZi00OWFiLWJm ZGMtZjU4NjQ1MzcwNGM2LzAvMkFFMTRBQkJENTE2MUJBMENBREIzQzQwQzFGOURG Q0JDOUNGMzQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9UAFIVx5VA0SK7FoKm3GJKUjBY6vu3xQvY gimnq1xHgR9KJTOaI9KNgeTBR/cPqU2kIxXQZFs0nMcUs1K3GnT78p//QtCUfQI2 /Xmosk8dfI6XLyNl8ddcDQXCBtGVOqnF/Qhoq0SLegeTM6KtCjkI54iN4ZQOftSC 1eRP6GdUZp5aZBBqZNdetX46cXBgmSupQwKlpj8MU+C7o+HhVQe4ZSH2XyQjv2cA yru1cVjVpvBYeZwGNAQV0iX0G+fyAf7vUULmm30i3yN/hkMU70IR6R8KIceTs1oc 133f8UF2nEcsIaN65EzVnJ04tOfVI9bjoNONPbWIllpF/J0/LGU= -----END CERTIFICATE-----Generated at Thu Sep 24 22:55:07 2026 by rpki-client