$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft File: 2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft (raw, json) Hash identifier: S1FD08pWQ+VHyzrEFlHuoo4qY7KEiL3O6Sol088UvtM= Subject key identifier: 19:7A:F9:38:51:48:2F:18:3A:49:33:DF:29:EB:F0:50:4B:CC:9B:F0 Authority key identifier: 2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5 Certificate issuer: /CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5 Certificate serial: 4A1569705A9C3DC7D89C1B45341AECCC312A0AEE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 16:53:47 +0000 Manifest this update: Tue 03 Nov 2026 16:48:47 +0000 Manifest next update: Wed 04 Nov 2026 19:53:47 +0000 Files and hashes: 1: 2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl (hash: amASq3so4EYpc5E2QTCYLpfoi0kRwAtcb4l6ETIjwZ8=) 2: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: 8N1ryLqGS1Ck4AODHf8NX/rVMxyMRb5QCwGLiIIXGg8=) 3: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: 8wKUF9NYC7pRZOxvlEf5LxZ2nZECYvwr1BSS5u1G+4Y=) 4: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: K2AeuLRVAE8BPE4wuWW8WhZGZyYvk9GHwxpL0SCIDfk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 19:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:15:69:70:5a:9c:3d:c7:d8:9c:1b:45:34:1a:ec:cc:31:2a:0a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5 Validity Not Before: Nov 3 16:48:47 2026 GMT Not After : Nov 4 19:53:47 2026 GMT Subject: CN=197AF93851482F183A4933DF29EBF0504BCC9BF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3b:0c:78:12:be:f1:73:06:38:8b:63:f1:45: c4:87:45:eb:33:60:1f:3d:d3:5c:11:6b:d7:80:b8: 18:e5:21:dc:90:f4:66:98:34:aa:f0:97:18:bd:53: df:25:cb:06:8f:3d:67:cf:25:2c:56:c6:7f:b0:4e: 62:31:8f:b1:d0:ac:2c:df:36:37:8c:73:61:33:e9: 3e:8a:c5:65:97:1b:cf:6d:8e:fb:be:f1:de:fa:f2: 2b:eb:14:62:ef:eb:75:d8:05:fd:b5:c2:41:39:2a: af:59:f8:d4:19:b7:ef:68:22:05:77:78:21:76:ef: a8:b2:20:03:96:e1:8b:2c:cd:5d:01:18:81:e1:4f: 77:35:e4:d7:dc:7a:a7:a2:d3:a3:df:8f:df:ea:31: 1f:3f:7e:6e:b9:46:26:ad:3f:f4:54:01:d0:ca:78: 68:f7:4c:cd:85:c0:de:4f:b1:9a:81:5d:be:cf:fd: fb:1c:f5:27:6f:5d:ca:da:d2:28:b8:1d:7d:3e:76: ac:57:c6:f0:0a:35:4a:48:c1:74:11:46:99:35:79: 7a:ab:fa:34:f2:55:69:5d:9b:51:99:04:5f:0e:60: 61:f3:0c:ed:a1:c8:9d:87:3e:75:cf:a5:0d:a2:31: af:34:ba:bc:b6:b2:28:43:59:10:f1:cb:20:56:1d: fc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7A:F9:38:51:48:2F:18:3A:49:33:DF:29:EB:F0:50:4B:CC:9B:F0 X509v3 Authority Key Identifier: keyid:2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ea:08:d9:93:6c:cd:43:53:30:ea:d4:cf:eb:7e:05:6a:54: 68:80:f9:9f:b6:a0:5f:a5:5f:10:60:df:54:9b:7e:14:9a:7a: 72:b2:3c:f6:35:3e:43:8b:69:10:bc:14:78:f6:61:ab:04:f0: 8b:e2:30:43:c7:88:10:f3:3c:5f:67:2d:30:5f:38:18:eb:50: 35:bd:3b:97:9e:72:10:08:8d:b0:58:c0:a6:a1:18:d9:d0:b8: a1:af:93:2a:89:e1:9c:3b:6e:65:cd:3f:17:8e:84:cb:83:20: 77:9a:63:69:14:2d:ea:3f:2d:c9:e6:ce:f1:d9:b7:29:8e:db: 32:ef:40:ee:1c:fe:e1:d4:da:bf:61:56:8f:eb:32:cb:cd:ec: d3:83:e0:88:ef:80:5a:c7:13:4c:fb:63:a2:c5:3e:1d:7b:e1: de:f9:4b:56:6a:72:57:ae:a1:29:2c:b8:fe:d1:bc:f1:50:82: 9c:a4:56:0f:a1:fb:13:ba:97:7d:dd:5b:c6:b7:85:11:bd:2c: ba:8c:d1:e3:05:e0:e1:35:7e:de:33:06:96:fe:6d:c8:ba:e5: fd:c1:9e:d8:92:33:d5:f4:06:e9:49:e4:d1:6a:73:64:2d:95: 65:4a:e1:ff:50:03:61:c6:bd:9b:89:7d:6c:f6:2b:ef:54:c5: 59:9a:73:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUShVpcFqcPcfYnBtFNBrszDEqCu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFFMTQzM0JCODJGMjc3MTZERjUyNkRBRENDQzRDMkIz NzU4OUNBNTAeFw0yNjExMDMxNjQ4NDdaFw0yNjExMDQxOTUzNDdaMDMxMTAvBgNV BAMTKDE5N0FGOTM4NTE0ODJGMTgzQTQ5MzNERjI5RUJGMDUwNEJDQzlCRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCOwx4Er7xcwY4i2PxRcSHResz YB8901wRa9eAuBjlIdyQ9GaYNKrwlxi9U98lywaPPWfPJSxWxn+wTmIxj7HQrCzf NjeMc2Ez6T6KxWWXG89tjvu+8d768ivrFGLv63XYBf21wkE5Kq9Z+NQZt+9oIgV3 eCF276iyIAOW4YsszV0BGIHhT3c15Nfceqei06Pfj9/qMR8/fm65RiatP/RUAdDK eGj3TM2FwN5PsZqBXb7P/fsc9SdvXcra0ii4HX0+dqxXxvAKNUpIwXQRRpk1eXqr +jTyVWldm1GZBF8OYGHzDO2hyJ2HPnXPpQ2iMa80ury2sihDWRDxyyBWHfxJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGXr5OFFILxg6STPfKevwUEvMm/AwHwYDVR0j BBgwFoAUKuFDO7gvJ3Ft9Sba3MxMKzdYnKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQwMTFhMWMtYTBhZC00ZDkzLTg2YWYtM2YwYWFkZDk2ODRmLzAvMkFFMTQzM0JC ODJGMjc3MTZERjUyNkRBRENDQzRDMkIzNzU4OUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yQUUxNDMzQkI4MkYyNzcxNkRGNTI2REFEQ0NDNEMyQjM3NTg5 Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvMkFFMTQzM0JCODJGMjc3MTZERjUyNkRBRENDQzRD MkIzNzU4OUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzqCNmTbM1DUzDq1M/rfgVqVGiA+Z+2oF+l XxBg31SbfhSaenKyPPY1PkOLaRC8FHj2YasE8IviMEPHiBDzPF9nLTBfOBjrUDW9 O5eechAIjbBYwKahGNnQuKGvkyqJ4Zw7bmXNPxeOhMuDIHeaY2kULeo/LcnmzvHZ tymO2zLvQO4c/uHU2r9hVo/rMsvN7NOD4IjvgFrHE0z7Y6LFPh174d75S1Zqcleu oSksuP7RvPFQgpykVg+h+xO6l33dW8a3hRG9LLqM0eMF4OE1ft4zBpb+bci65f3B ntiSM9X0BulJ5NFqc2QtlWVK4f9QA2HGvZuJfWz2K+9UxVmac34= -----END CERTIFICATE-----Generated at Wed Nov 4 11:04:25 2026 by rpki-client