$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft File: 2A494FAEE44F13448E6C43136F825053CE977009.mft (raw, json) Hash identifier: Lpt0Szcqn/tuTBGhFa5O0DsPz3qLq8RqEQ1Guta39Q4= Subject key identifier: A4:02:AB:35:03:4E:90:E5:23:3B:79:DA:8E:F3:12:1A:DB:87:85:1B Authority key identifier: 2A:49:4F:AE:E4:4F:13:44:8E:6C:43:13:6F:82:50:53:CE:97:70:09 Certificate issuer: /CN=2A494FAEE44F13448E6C43136F825053CE977009 Certificate serial: 3254D0E2BACAD4FFE21755BE9591FBEC6F54BFFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 20:06:21 +0000 Manifest this update: Tue 22 Sep 2026 20:01:21 +0000 Manifest next update: Wed 23 Sep 2026 21:47:21 +0000 Files and hashes: 1: 3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa (hash: SSSkCi1zJkML5HF5+O+odxp65ltRBIRj0krRoe9GJqI=) 2: 2A494FAEE44F13448E6C43136F825053CE977009.crl (hash: 9D2bBgDB5tPg9B68KlWwX/mxBauTeO3b0VxqVG/q3GE=) 3: 3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (hash: t2vA65s4Rw0JpR4oPJfjFnJ3dyjvcRRBFrdNUp3Bo2M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.crl rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 21:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:54:d0:e2:ba:ca:d4:ff:e2:17:55:be:95:91:fb:ec:6f:54:bf:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A494FAEE44F13448E6C43136F825053CE977009 Validity Not Before: Sep 22 20:01:21 2026 GMT Not After : Sep 23 21:47:21 2026 GMT Subject: CN=A402AB35034E90E5233B79DA8EF3121ADB87851B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:32:1f:6a:ad:7a:a5:89:62:4f:b3:19:52:45: 8b:49:7d:27:53:3c:5f:19:86:e4:91:26:9a:d6:2a: ae:cb:15:0a:0a:0c:65:41:4c:9a:18:36:c3:74:7a: e0:16:a8:74:f0:57:10:22:25:79:ea:5b:9f:fc:b7: 6a:8a:c9:79:f8:a4:23:40:2d:8f:d2:08:b2:f6:34: 03:6d:f6:81:9e:3b:c3:25:3b:7a:ae:0c:0c:30:00: 2a:d8:9b:33:09:f4:b9:6a:69:02:c9:96:43:39:8f: 31:a9:2f:ba:97:77:05:46:21:6d:8d:ec:b8:00:d4: f4:8c:55:53:1f:a0:2a:e2:3d:75:5a:fd:45:00:7d: 60:d7:86:57:83:ce:dd:5e:92:d3:38:ec:41:aa:7d: 89:f4:12:4c:77:db:3c:b4:46:9f:10:9a:5a:5a:3d: 3f:59:9e:55:ca:ae:21:76:00:e2:a8:aa:47:02:f7: 17:07:b8:b1:9a:12:ee:b5:14:5d:a0:4b:c2:5e:69: d3:ea:13:84:c0:09:8c:b6:24:86:34:68:60:9b:19: 33:df:0d:bb:03:e7:bb:0e:65:05:f1:c7:b7:e6:34: fc:65:06:c1:a5:79:cd:8c:53:6b:65:bd:bb:c9:58: 65:b3:7a:ea:b4:65:15:e5:75:39:5b:84:17:4d:06: 22:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:02:AB:35:03:4E:90:E5:23:3B:79:DA:8E:F3:12:1A:DB:87:85:1B X509v3 Authority Key Identifier: keyid:2A:49:4F:AE:E4:4F:13:44:8E:6C:43:13:6F:82:50:53:CE:97:70:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b1:24:d3:02:cb:b7:d3:c4:ab:2b:16:f3:d8:0b:54:38:58: 21:e0:51:61:5e:26:33:4c:90:56:6d:bd:f9:0c:c7:e3:3a:3f: 98:48:cc:d2:27:84:f2:ad:51:41:9b:d1:ad:26:63:fe:19:eb: 84:bf:4c:9c:d7:54:0e:46:68:f0:02:cb:85:5b:97:17:b1:7e: 86:af:66:20:2b:cd:26:8e:01:4a:6f:c8:12:e0:09:d8:23:5e: df:4f:1c:a1:9c:7b:f0:e6:c2:1f:97:07:15:df:af:57:69:9a: e1:5d:19:c6:9a:53:dd:81:c5:cf:e8:ce:63:07:7f:ee:65:da: bf:1d:f4:26:6c:70:6d:1f:c6:b9:eb:25:5d:64:00:d6:d9:3e: 98:d1:99:53:aa:fe:26:f8:b7:ea:3a:06:5a:30:db:d2:ee:83: 74:27:a0:33:e7:42:b9:38:39:64:cb:a6:0c:e9:50:f2:4e:02: 4c:43:e6:8b:c6:09:b5:2d:b3:47:a1:69:5f:6d:1c:a9:c3:fb: a7:cc:19:c9:ee:ba:d2:0d:72:dc:a2:d6:7d:70:9d:5e:c5:3d: b6:6e:63:f4:5e:6a:93:48:e2:b8:78:01:36:0d:37:65:4f:e8: 35:bf:67:6d:a3:e9:3b:ed:09:05:11:89:69:a3:ec:b0:54:ea: 38:d3:05:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMlTQ4rrK1P/iF1W+lZH77G9Uv/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE0OTRGQUVFNDRGMTM0NDhFNkM0MzEzNkY4MjUwNTND RTk3NzAwOTAeFw0yNjA5MjIyMDAxMjFaFw0yNjA5MjMyMTQ3MjFaMDMxMTAvBgNV BAMTKEE0MDJBQjM1MDM0RTkwRTUyMzNCNzlEQThFRjMxMjFBREI4Nzg1MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZMh9qrXqliWJPsxlSRYtJfSdT PF8ZhuSRJprWKq7LFQoKDGVBTJoYNsN0euAWqHTwVxAiJXnqW5/8t2qKyXn4pCNA LY/SCLL2NANt9oGeO8MlO3quDAwwACrYmzMJ9LlqaQLJlkM5jzGpL7qXdwVGIW2N 7LgA1PSMVVMfoCriPXVa/UUAfWDXhleDzt1ektM47EGqfYn0Ekx32zy0Rp8Qmlpa PT9ZnlXKriF2AOKoqkcC9xcHuLGaEu61FF2gS8JeadPqE4TACYy2JIY0aGCbGTPf DbsD57sOZQXxx7fmNPxlBsGlec2MU2tlvbvJWGWzeuq0ZRXldTlbhBdNBiJ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpAKrNQNOkOUjO3najvMSGtuHhRswHwYDVR0j BBgwFoAUKklPruRPE0SObEMTb4JQU86XcAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBkYzEyODMtMWNlMi00MWE1LWFmZTYtZjBiZTMxZTliMTBkLzAvMkE0OTRGQUVF NDRGMTM0NDhFNkM0MzEzNkY4MjUwNTNDRTk3NzAwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTQ5NEZBRUU0NEYxMzQ0OEU2QzQzMTM2RjgyNTA1M0NFOTc3 MDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBkYzEyODMtMWNlMi00MWE1LWFm ZTYtZjBiZTMxZTliMTBkLzAvMkE0OTRGQUVFNDRGMTM0NDhFNkM0MzEzNkY4MjUw NTNDRTk3NzAwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEexJNMCy7fTxKsrFvPYC1Q4WCHgUWFeJjNM kFZtvfkMx+M6P5hIzNInhPKtUUGb0a0mY/4Z64S/TJzXVA5GaPACy4Vblxexfoav ZiArzSaOAUpvyBLgCdgjXt9PHKGce/Dmwh+XBxXfr1dpmuFdGcaaU92Bxc/ozmMH f+5l2r8d9CZscG0fxrnrJV1kANbZPpjRmVOq/ib4t+o6Blow29Lug3QnoDPnQrk4 OWTLpgzpUPJOAkxD5ovGCbUts0ehaV9tHKnD+6fMGcnuutINctyi1n1wnV7FPbZu Y/ReapNI4rh4ATYNN2VP6DW/Z22j6TvtCQURiWmj7LBU6jjTBU0= -----END CERTIFICATE-----Generated at Wed Sep 23 05:39:36 2026 by rpki-client