$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft File: 2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft (raw, json) Hash identifier: GWG7LfRHV+EYmbZ5aK1I29YttOFEju70G0QkTQ7rC70= Subject key identifier: 37:37:6C:A9:D8:13:2E:0B:D5:F9:BD:33:20:4F:40:C5:EE:9A:75:FE Authority key identifier: 2C:A6:27:0F:A0:99:DB:2B:77:ED:B7:EA:A9:30:40:FF:23:6B:21:4B Certificate issuer: /CN=2CA6270FA099DB2B77EDB7EAA93040FF236B214B Certificate serial: 09B8270989138BF05AEE1F8DE3BBADD950B7391D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 11:38:32 +0000 Manifest this update: Sun 15 Nov 2026 11:33:32 +0000 Manifest next update: Mon 16 Nov 2026 11:57:32 +0000 Files and hashes: 1: 3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (hash: 7n3FY8Iu2mTaPEdpSsiUuLrwQ3K9YP1KBkJ8ERWrHmg=) 2: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (hash: 5yASRqMJGpH3BlgDiF4qbtYdpHoRGPLyhQdyV1pz60w=) 3: 2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl (hash: XkHB7NjTXMVUE/BVTVME3HiJDRs0ku392Ju1J93M5hY=) 4: 3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (hash: RYdUas2TasB0Egv36O3FoGBWixKmz+f1qKRhr6wdPhI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b8:27:09:89:13:8b:f0:5a:ee:1f:8d:e3:bb:ad:d9:50:b7:39:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA6270FA099DB2B77EDB7EAA93040FF236B214B Validity Not Before: Nov 15 11:33:32 2026 GMT Not After : Nov 16 11:57:32 2026 GMT Subject: CN=37376CA9D8132E0BD5F9BD33204F40C5EE9A75FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b2:4e:e4:80:20:7e:2e:0e:5a:fb:e2:95:bc: 3a:ba:1f:4a:7c:df:64:f1:b3:6b:a5:a3:8a:e0:5d: 0d:82:3b:db:74:85:1a:4c:e3:ac:80:0c:ae:23:bb: 45:5c:26:35:e5:bb:33:d5:b9:f0:b1:2e:56:88:96: da:5f:7f:86:d8:23:1b:5d:03:e1:40:20:c0:55:8e: 7e:b2:95:6d:13:f1:81:80:41:39:d1:e3:0a:bc:27: fa:cc:e0:9b:d7:f2:64:da:7b:a0:b2:f5:d3:8b:45: ac:23:ea:49:1f:d7:ea:08:54:a2:19:88:f0:7c:6b: 58:01:90:2a:62:c5:83:c7:97:84:4d:16:f8:41:d4: c3:89:4e:03:ac:a2:a9:99:28:b9:76:a4:45:f0:8b: 53:85:cf:62:89:ef:c3:60:5b:bd:c7:32:85:76:79: 86:1a:ae:9d:2a:79:da:8c:a0:30:d5:0e:9a:9b:0c: 87:e2:4c:82:b0:d3:aa:ed:64:df:9c:d4:1f:ad:c9: 1f:51:10:3c:86:50:91:fc:c9:95:b9:37:e8:16:bb: 6a:33:e6:24:92:f2:a5:83:f7:7e:71:07:f7:0f:f7: 78:ea:81:a1:12:41:38:86:10:de:ac:e1:4b:24:82: f8:c3:be:78:a9:94:4d:c0:e4:62:98:4f:d2:6f:7f: 8e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:37:6C:A9:D8:13:2E:0B:D5:F9:BD:33:20:4F:40:C5:EE:9A:75:FE X509v3 Authority Key Identifier: keyid:2C:A6:27:0F:A0:99:DB:2B:77:ED:B7:EA:A9:30:40:FF:23:6B:21:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/2CA6270FA099DB2B77EDB7EAA93040FF236B214B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:64:78:97:57:89:2b:53:17:b6:dc:fd:66:9c:3c:c7:e4:88: 57:6c:6d:58:ce:b8:42:8f:db:fe:d3:97:44:c0:bb:28:4d:6f: 51:85:45:f4:27:94:b1:3a:45:6c:55:e0:d3:dd:bc:42:2c:61: 28:8d:69:36:2a:8a:2d:99:95:34:c0:7d:a2:e3:c3:97:fd:f3: 92:54:85:9a:b3:7a:9e:2c:4a:86:a6:c4:1f:3d:37:56:94:01: b6:c7:b6:d4:73:8d:f7:da:67:9b:a1:0c:44:d0:66:7b:c0:b9: 95:8a:17:54:97:c3:86:a2:ca:36:9e:3d:8f:f9:39:90:80:99: ed:ba:73:a3:88:12:97:36:0c:e3:44:36:6b:05:3a:34:cd:be: a2:bc:13:dd:ee:1d:7e:f2:a1:47:8f:8e:a1:a4:27:79:e7:92: 1d:91:60:5d:47:b4:31:a1:0c:c6:88:d1:fb:de:56:b6:38:d1: 6c:07:07:4e:6d:eb:90:71:99:fa:fe:2c:0e:ad:fa:15:d9:03: 56:35:c3:f4:8e:ba:4e:be:9e:fe:cc:25:ee:e2:9d:d4:39:d8: ff:93:fd:69:50:ce:22:02:b5:ea:be:f9:9c:ca:58:f9:a9:c3: ce:b1:cb:fd:3e:4c:35:f2:99:5e:fd:c0:68:a9:dd:8d:0c:8c: d7:4d:c1:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCbgnCYkTi/Ba7h+N47ut2VC3OR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNjI3MEZBMDk5REIyQjc3RURCN0VBQTkzMDQwRkYy MzZCMjE0QjAeFw0yNjExMTUxMTMzMzJaFw0yNjExMTYxMTU3MzJaMDMxMTAvBgNV BAMTKDM3Mzc2Q0E5RDgxMzJFMEJENUY5QkQzMzIwNEY0MEM1RUU5QTc1RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjsk7kgCB+Lg5a++KVvDq6H0p8 32Txs2ulo4rgXQ2CO9t0hRpM46yADK4ju0VcJjXluzPVufCxLlaIltpff4bYIxtd A+FAIMBVjn6ylW0T8YGAQTnR4wq8J/rM4JvX8mTae6Cy9dOLRawj6kkf1+oIVKIZ iPB8a1gBkCpixYPHl4RNFvhB1MOJTgOsoqmZKLl2pEXwi1OFz2KJ78NgW73HMoV2 eYYarp0qedqMoDDVDpqbDIfiTIKw06rtZN+c1B+tyR9REDyGUJH8yZW5N+gWu2oz 5iSS8qWD935xB/cP93jqgaESQTiGEN6s4UskgvjDvniplE3A5GKYT9Jvf46zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNzdsqdgTLgvV+b0zIE9Axe6adf4wHwYDVR0j BBgwFoAULKYnD6CZ2yt37bfqqTBA/yNrIUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY3YTdmMGUtOGQwNy00NWRlLTgyNTItM2JmZmMwNWU1NjQ5LzAvMkNBNjI3MEZB MDk5REIyQjc3RURCN0VBQTkzMDQwRkYyMzZCMjE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0E2MjcwRkEwOTlEQjJCNzdFREI3RUFBOTMwNDBGRjIzNkIy MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTY3YTdmMGUtOGQwNy00NWRlLTgy NTItM2JmZmMwNWU1NjQ5LzAvMkNBNjI3MEZBMDk5REIyQjc3RURCN0VBQTkzMDQw RkYyMzZCMjE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFkeJdXiStTF7bc/WacPMfkiFdsbVjOuEKP 2/7Tl0TAuyhNb1GFRfQnlLE6RWxV4NPdvEIsYSiNaTYqii2ZlTTAfaLjw5f985JU hZqzep4sSoamxB89N1aUAbbHttRzjffaZ5uhDETQZnvAuZWKF1SXw4aiyjaePY/5 OZCAme26c6OIEpc2DONENmsFOjTNvqK8E93uHX7yoUePjqGkJ3nnkh2RYF1HtDGh DMaI0fveVrY40WwHB05t65Bxmfr+LA6t+hXZA1Y1w/SOuk6+nv7MJe7indQ52P+T /WlQziICteq++ZzKWPmpw86xy/0+TDXymV79wGip3Y0MjNdNwQY= -----END CERTIFICATE-----Generated at Sun Nov 15 17:44:10 2026 by rpki-client