$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft File: 2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft (raw, json) Hash identifier: 6nrViR++uWeqouVK/op+JPNJu0+cdrKBFY6zsfACwS0= Subject key identifier: D0:24:08:CF:38:89:3A:30:5F:91:1F:DE:C3:F1:D0:AD:CB:0F:CB:E4 Authority key identifier: 2A:C4:B9:21:8D:44:A8:AF:6A:89:3D:00:D5:F2:8F:34:AD:B8:3E:ED Certificate issuer: /CN=2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED Certificate serial: 69A540F1027D4E27FE5221F2E81E335941F6F33D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 18:50:53 +0000 Manifest this update: Wed 02 Sep 2026 18:45:53 +0000 Manifest next update: Thu 03 Sep 2026 20:28:53 +0000 Files and hashes: 1: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: Yu7TLcR1tuusuhDSrYnM4of9BN5qOWkNLvH5+MvtCeE=) 2: 2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl (hash: n4Yfr9JeakTPotXX00H4RKohgZ0qvRzTkGJcnW5c0DA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 20:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a5:40:f1:02:7d:4e:27:fe:52:21:f2:e8:1e:33:59:41:f6:f3:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED Validity Not Before: Sep 2 18:45:53 2026 GMT Not After : Sep 3 20:28:53 2026 GMT Subject: CN=D02408CF38893A305F911FDEC3F1D0ADCB0FCBE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8a:ec:30:0a:e3:35:ce:f7:e7:7b:af:19:3b: cb:7c:e3:62:12:39:f0:98:9d:30:e8:19:44:d6:29: 5c:06:e2:0f:f3:6b:fe:42:1a:08:20:f3:9d:a8:9a: 8d:70:c3:a2:16:b2:e7:93:fe:33:21:63:87:da:6a: 3f:ca:45:9f:a7:61:42:3e:b3:c0:89:d7:dd:81:0b: d9:f3:bf:b3:17:a3:ff:53:31:78:3a:42:38:1b:df: 55:4a:91:18:0f:2e:5e:9a:3d:fe:67:ab:4e:77:84: fe:33:1f:a7:00:06:c7:e3:9b:ed:eb:d8:d1:b4:90: c0:ac:16:7b:6a:e6:79:36:a7:14:0a:86:31:1a:cb: 14:34:cc:9e:d3:8a:75:a4:75:85:0b:c7:40:b2:7b: 91:bc:17:75:25:10:bd:56:3a:93:bb:14:cf:8e:dc: a5:e9:c2:b4:d4:8f:66:c0:c5:d3:73:64:60:f3:dd: 07:5b:a7:dc:5e:b6:8c:85:6f:e7:9a:5b:3e:cc:8b: 61:4a:22:a0:08:36:bc:5a:54:9a:d5:82:1b:2d:73: c8:08:de:bf:39:d0:d9:49:8d:dc:23:07:ea:96:b8: cf:40:c0:67:3e:58:15:a2:c1:ff:34:d0:a2:55:ed: f6:cc:32:0d:77:81:e5:7e:2c:31:cb:87:9c:60:b2: f1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:24:08:CF:38:89:3A:30:5F:91:1F:DE:C3:F1:D0:AD:CB:0F:CB:E4 X509v3 Authority Key Identifier: keyid:2A:C4:B9:21:8D:44:A8:AF:6A:89:3D:00:D5:F2:8F:34:AD:B8:3E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:69:55:13:55:08:32:65:5a:d4:cf:a4:2a:8d:bb:df:7f:9c: 58:77:2d:25:40:87:b2:62:f4:fb:39:87:ad:4a:d2:55:35:70: af:0a:ac:39:3a:b6:1b:bc:7b:3c:cd:e2:2b:92:04:21:c5:c6: 8a:2d:57:6d:bf:b7:e5:95:db:fc:bd:72:f8:26:0e:67:e8:39: 16:64:dd:58:a8:39:8c:9c:c9:01:67:4d:a1:a2:b1:de:fd:16: 26:0b:37:85:e9:10:9b:a5:86:be:d7:42:c4:bf:de:62:ad:a4: 11:30:e3:e0:31:be:40:a4:e6:98:16:f3:6a:e2:58:ad:a5:92: 10:77:c9:1d:1e:a5:76:7e:6c:21:e2:4d:48:39:55:dd:97:f1: 44:67:c0:f8:34:0e:2b:d0:54:b1:ac:dd:8a:a6:5f:2e:f7:5c: 82:af:7e:f3:d2:8b:fe:28:6e:2d:f5:5c:f6:39:89:00:d3:5a: 4d:ad:cd:04:81:ec:cb:e3:51:25:bb:48:9a:9b:0b:1a:07:57: d4:43:d4:c1:39:10:30:9f:4b:e8:52:2a:b7:d9:76:34:45:01: c9:3e:35:07:e9:15:39:92:81:b0:7b:6c:c8:39:a4:c8:59:58: 7b:a8:ec:45:c1:f1:6a:78:45:ef:ab:77:f0:ff:85:99:9f:e1: 04:91:f1:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaaVA8QJ9Tif+UiHy6B4zWUH28z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFDNEI5MjE4RDQ0QThBRjZBODkzRDAwRDVGMjhGMzRB REI4M0VFRDAeFw0yNjA5MDIxODQ1NTNaFw0yNjA5MDMyMDI4NTNaMDMxMTAvBgNV BAMTKEQwMjQwOENGMzg4OTNBMzA1RjkxMUZERUMzRjFEMEFEQ0IwRkNCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUiuwwCuM1zvfne68ZO8t842IS OfCYnTDoGUTWKVwG4g/za/5CGggg852omo1ww6IWsueT/jMhY4faaj/KRZ+nYUI+ s8CJ192BC9nzv7MXo/9TMXg6Qjgb31VKkRgPLl6aPf5nq053hP4zH6cABsfjm+3r 2NG0kMCsFntq5nk2pxQKhjEayxQ0zJ7TinWkdYULx0Cye5G8F3UlEL1WOpO7FM+O 3KXpwrTUj2bAxdNzZGDz3Qdbp9xetoyFb+eaWz7Mi2FKIqAINrxaVJrVghstc8gI 3r850NlJjdwjB+qWuM9AwGc+WBWiwf800KJV7fbMMg13geV+LDHLh5xgsvF7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0CQIzziJOjBfkR/ew/HQrcsPy+QwHwYDVR0j BBgwFoAUKsS5IY1EqK9qiT0A1fKPNK24Pu0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4NmNiNWQtZjA3ZC00MjZhLThlNWUtYTc3YTk3OGRkMmVlLzAvMkFDNEI5MjE4 RDQ0QThBRjZBODkzRDAwRDVGMjhGMzRBREI4M0VFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUM0QjkyMThENDRBOEFGNkE4OTNEMDBENUYyOEYzNEFEQjgz RUVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvMkFDNEI5MjE4RDQ0QThBRjZBODkzRDAwRDVGMjhG MzRBREI4M0VFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNpVRNVCDJlWtTPpCqNu99/nFh3LSVAh7Ji 9Ps5h61K0lU1cK8KrDk6thu8ezzN4iuSBCHFxootV22/t+WV2/y9cvgmDmfoORZk 3VioOYycyQFnTaGisd79FiYLN4XpEJulhr7XQsS/3mKtpBEw4+AxvkCk5pgW82ri WK2lkhB3yR0epXZ+bCHiTUg5Vd2X8URnwPg0DivQVLGs3YqmXy73XIKvfvPSi/4o bi31XPY5iQDTWk2tzQSB7MvjUSW7SJqbCxoHV9RD1ME5EDCfS+hSKrfZdjRFAck+ NQfpFTmSgbB7bMg5pMhZWHuo7EXB8Wp4Re+rd/D/hZmf4QSR8dk= -----END CERTIFICATE-----Generated at Thu Sep 3 09:13:56 2026 by rpki-client