$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft File: 2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft (raw, json) Hash identifier: 32uS1aZJHRXqr5BWbXzBBTH+pW1ifCzpXSmLvWdcn2Y= Subject key identifier: D3:D8:8B:4C:D3:16:FC:39:0A:E3:F0:83:A9:46:2E:C7:0B:C6:FA:C9 Authority key identifier: 2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74 Certificate issuer: /CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274 Certificate serial: 22F0CDB4B0247EA029CDD788CA8D5B670827573E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 13:12:59 +0000 Manifest this update: Thu 03 Sep 2026 13:07:59 +0000 Manifest next update: Fri 04 Sep 2026 13:42:59 +0000 Files and hashes: 1: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: iezQTzMxWp3Coix5fz9eGS/c/h2ulbbwObi3kCUHkW4=) 2: 2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl (hash: ORsCws9b66Cq1EbEn1+w6svZ2YIYwqDLnaDUdLg4sEQ=) 3: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: V2s2v2zyv88cwsslpUJdds/b+6l6rcgW5NHb7V5SYWY=) 4: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: 1IjnkMC3ga8KbKp+1i4junuLJGtmG26jgGjukZ4rmxk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f0:cd:b4:b0:24:7e:a0:29:cd:d7:88:ca:8d:5b:67:08:27:57:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274 Validity Not Before: Sep 3 13:07:59 2026 GMT Not After : Sep 4 13:42:59 2026 GMT Subject: CN=D3D88B4CD316FC390AE3F083A9462EC70BC6FAC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ce:1b:e7:75:b0:9f:43:ed:ee:12:6c:0e:1b: 10:d1:52:9d:19:d3:ee:2f:9a:5c:97:2a:d3:83:ac: ec:0b:64:3f:96:bc:c5:cb:a8:c7:39:a7:f4:df:0a: c2:a7:ec:bf:8b:cc:3a:9d:c3:12:f4:bf:7b:b0:97: 32:5f:00:4f:a9:9f:49:53:2a:3a:6c:d3:f2:ef:81: d4:99:3d:f8:70:27:85:e2:47:f4:fa:ce:38:2a:84: 85:01:84:18:91:bd:2d:12:9c:a6:a9:15:db:71:04: 8a:41:f0:c0:3d:3f:ba:af:de:0e:a3:22:74:1b:59: 17:ab:01:8b:31:ae:15:47:66:da:97:d6:ef:c3:b9: 0d:4b:a7:69:37:79:9e:61:df:45:a7:d0:da:ff:21: 18:e8:15:f0:34:e3:56:24:ab:a5:29:8a:2f:91:a3: 27:53:6e:84:eb:08:4f:77:90:98:16:75:cd:a4:c3: a5:cc:d9:ca:fa:94:ef:43:21:a8:2b:c1:65:fe:29: b8:0a:7b:18:06:51:99:41:2d:05:0f:71:c7:b5:f2: d7:1f:e6:0d:db:ca:e8:32:1b:90:3f:75:57:ec:07: f8:ba:44:e9:89:31:ae:80:0b:82:fd:37:93:6f:66: ac:b7:10:b6:af:30:1b:cb:b7:09:ca:26:f8:1b:c3: ca:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D8:8B:4C:D3:16:FC:39:0A:E3:F0:83:A9:46:2E:C7:0B:C6:FA:C9 X509v3 Authority Key Identifier: keyid:2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:1c:36:8e:4f:51:c4:02:49:34:4c:e9:0b:63:b2:30:2a:1c: 84:cf:01:d6:53:38:9e:04:82:31:d0:92:f2:7a:70:4d:8d:0b: d6:de:66:36:b2:a8:6f:39:49:82:e8:d5:2e:7e:52:7a:46:a1: 0f:94:b8:38:66:e8:f7:d4:f0:f4:48:08:90:b7:b3:7a:07:e7: db:47:08:4f:6b:1d:0a:16:86:20:95:08:72:0d:a8:ff:25:61: 63:2d:b7:e3:46:c6:79:e6:00:cc:c2:ac:ea:d6:a4:c2:fd:b1: 9b:64:8a:cd:32:13:be:95:1f:45:0f:0a:30:d0:3c:26:0d:15: be:51:ec:54:1d:16:c9:29:b8:b9:0a:c2:14:e4:9a:6a:14:08: 97:35:8b:d6:30:ec:c0:0d:31:a8:0d:fd:f3:52:8d:75:28:5d: e3:47:eb:c3:f8:a3:50:7f:63:59:d2:87:cb:a5:8c:d8:51:9a: d8:a0:38:df:cf:0c:a4:a7:a1:1a:64:c5:90:64:55:3e:92:09: c8:fe:d1:f2:9e:25:4b:28:60:e6:e8:83:5d:df:d6:14:29:00: 2f:e8:df:21:cb:d5:0d:22:19:3d:95:22:18:72:70:4c:7e:77: 44:3a:a9:a5:c7:7b:19:8c:1d:e7:07:a7:2d:16:43:00:07:70: f5:ee:db:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIvDNtLAkfqApzdeIyo1bZwgnVz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2RjE2RTgwQkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0QjBE N0Q5QzI3NDAeFw0yNjA5MDMxMzA3NTlaFw0yNjA5MDQxMzQyNTlaMDMxMTAvBgNV BAMTKEQzRDg4QjRDRDMxNkZDMzkwQUUzRjA4M0E5NDYyRUM3MEJDNkZBQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWzhvndbCfQ+3uEmwOGxDRUp0Z 0+4vmlyXKtODrOwLZD+WvMXLqMc5p/TfCsKn7L+LzDqdwxL0v3uwlzJfAE+pn0lT Kjps0/LvgdSZPfhwJ4XiR/T6zjgqhIUBhBiRvS0SnKapFdtxBIpB8MA9P7qv3g6j InQbWRerAYsxrhVHZtqX1u/DuQ1Lp2k3eZ5h30Wn0Nr/IRjoFfA041Ykq6Upii+R oydTboTrCE93kJgWdc2kw6XM2cr6lO9DIagrwWX+KbgKexgGUZlBLQUPcce18tcf 5g3byugyG5A/dVfsB/i6ROmJMa6AC4L9N5NvZqy3ELavMBvLtwnKJvgbw8qHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU09iLTNMW/DkK4/CDqUYuxwvG+skwHwYDVR0j BBgwFoAUKm8W6Av9x7TWeXcm+4/UsNfZwnQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E0NjM2MGQtNjYyYi00ZjdkLWJiMTctZDg2MDgyMTUyNDcxLzAvMkE2RjE2RTgw QkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0QjBEN0Q5QzI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTZGMTZFODBCRkRDN0I0RDY3OTc3MjZGQjhGRDRCMEQ3RDlD Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvMkE2RjE2RTgwQkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0 QjBEN0Q5QzI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0cNo5PUcQCSTRM6QtjsjAqHITPAdZTOJ4E gjHQkvJ6cE2NC9beZjayqG85SYLo1S5+UnpGoQ+UuDhm6PfU8PRICJC3s3oH59tH CE9rHQoWhiCVCHINqP8lYWMtt+NGxnnmAMzCrOrWpML9sZtkis0yE76VH0UPCjDQ PCYNFb5R7FQdFskpuLkKwhTkmmoUCJc1i9Yw7MANMagN/fNSjXUoXeNH68P4o1B/ Y1nSh8uljNhRmtigON/PDKSnoRpkxZBkVT6SCcj+0fKeJUsoYObog13f1hQpAC/o 3yHL1Q0iGT2VIhhycEx+d0Q6qaXHexmMHecHpy0WQwAHcPXu2+k= -----END CERTIFICATE-----Generated at Thu Sep 3 20:48:38 2026 by rpki-client