$ rpki-client -vvvf rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft File: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft (raw, json) Hash identifier: I4WxXLVZjOleDAehEEU0wKYaoKNXirnjkgjmew1fKyo= Subject key identifier: 48:8F:40:9B:3F:E0:A2:B2:47:F9:A9:B0:F0:63:C9:C6:1A:D9:41:6E Authority key identifier: A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 Certificate issuer: /CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Certificate serial: 27709F9E4A4D742763C705235D1F2B15AB712873 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 03:47:18 +0000 Manifest this update: Mon 02 Nov 2026 03:42:18 +0000 Manifest next update: Tue 03 Nov 2026 06:09:18 +0000 Files and hashes: 1: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: C70wRs8+D3qa05IzuPgxi0Gg8OUanZPuCF0j6nRzOxs=) 2: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl (hash: aZOycpIci+pZge/STx8jpM28eyTQ35FaUZ7Lu9qn8pE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 06:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:70:9f:9e:4a:4d:74:27:63:c7:05:23:5d:1f:2b:15:ab:71:28:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Validity Not Before: Nov 2 03:42:18 2026 GMT Not After : Nov 3 06:09:18 2026 GMT Subject: CN=488F409B3FE0A2B247F9A9B0F063C9C61AD9416E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e1:83:64:f7:2f:b8:5e:94:e0:78:82:5f:f2: b1:9d:65:d0:67:f3:74:96:1c:e8:9f:93:96:ad:73: 58:d4:de:7c:5b:88:91:d6:bb:24:3d:0d:90:7f:7d: 00:a1:8d:a9:6e:c3:72:eb:cc:f9:37:a8:53:c8:60: 74:b9:cc:de:de:0e:e7:60:96:ea:a2:13:87:93:da: fb:2c:ac:a7:aa:79:af:55:6c:bf:85:78:9b:b0:5c: 5b:25:c2:94:d2:e6:5e:1f:bd:89:b1:f9:5a:99:36: 06:51:48:87:75:b6:96:98:a5:5b:bb:9d:d0:17:6d: 69:85:07:25:aa:63:fc:f6:b5:11:59:2b:9d:f3:a4: 4f:ed:32:39:4e:f8:f6:a7:4f:a0:f0:28:55:0d:03: a6:cd:08:a6:cf:52:ff:f7:62:5a:9c:2e:44:0e:cd: 11:ff:bc:0b:4d:50:a4:2a:b4:09:b5:87:26:16:75: a5:81:db:14:17:2e:a3:b5:eb:9b:d2:1a:f3:e9:d3: f5:3e:84:2b:01:14:5b:2a:9d:b7:75:5e:33:5f:db: f5:13:73:07:cc:c9:be:33:9f:66:0c:bf:7e:c5:72: 6f:19:e0:68:46:e1:4c:ad:9b:6d:1c:3d:58:ed:e0: 8e:fe:8d:bd:5b:d6:d1:f3:9d:b7:fb:21:33:a9:82: 52:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8F:40:9B:3F:E0:A2:B2:47:F9:A9:B0:F0:63:C9:C6:1A:D9:41:6E X509v3 Authority Key Identifier: keyid:A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:cc:47:e7:05:c7:ed:4f:66:10:a5:bc:81:1b:22:f9:91:79: a5:40:b5:4c:e2:bc:79:a1:e1:e1:c3:8c:03:6d:ef:1a:1c:76: 11:8d:c6:5b:b7:10:99:19:be:a6:76:a1:e8:d8:64:41:0e:c3: 41:e7:5a:3f:0b:55:8f:0f:03:1b:5c:b1:ac:c6:90:81:97:db: 2c:c8:64:43:45:ca:f2:41:39:09:19:81:09:0f:32:0f:7c:b7: 50:a1:7e:46:0e:b3:ad:01:da:56:6f:c6:93:67:7f:05:8f:0a: c9:ce:c4:b1:f3:54:d4:0a:34:e4:02:42:e3:a3:83:4e:2b:82: 5f:bc:1d:00:6d:ff:2c:13:4b:22:51:0a:16:c8:f0:39:07:9c: cc:bc:19:e5:fb:49:e8:52:a4:83:18:49:c2:65:e0:44:ec:8d: ab:dc:a5:71:5a:68:1e:78:80:0b:c5:af:8c:16:1e:b2:69:8a: e4:8b:8c:ca:19:4a:5c:fc:bb:30:51:17:77:80:04:83:e9:84: 3d:3e:8e:60:b2:c3:e8:3f:43:71:36:77:b1:fc:3b:50:1e:fe: 3c:58:f8:f9:11:76:1d:ab:35:5a:1b:50:e3:d0:81:90:74:01: c6:52:6d:d7:59:e2:30:34:f8:ad:2a:d7:16:d4:97:8f:ab:aa: 90:dc:8d:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ3CfnkpNdCdjxwUjXR8rFatxKHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3 NzcyRUU4NjAeFw0yNjExMDIwMzQyMThaFw0yNjExMDMwNjA5MThaMDMxMTAvBgNV BAMTKDQ4OEY0MDlCM0ZFMEEyQjI0N0Y5QTlCMEYwNjNDOUM2MUFEOTQxNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM4YNk9y+4XpTgeIJf8rGdZdBn 83SWHOifk5atc1jU3nxbiJHWuyQ9DZB/fQChjaluw3LrzPk3qFPIYHS5zN7eDudg luqiE4eT2vssrKeqea9VbL+FeJuwXFslwpTS5l4fvYmx+VqZNgZRSId1tpaYpVu7 ndAXbWmFByWqY/z2tRFZK53zpE/tMjlO+PanT6DwKFUNA6bNCKbPUv/3YlqcLkQO zRH/vAtNUKQqtAm1hyYWdaWB2xQXLqO165vSGvPp0/U+hCsBFFsqnbd1XjNf2/UT cwfMyb4zn2YMv37Fcm8Z4GhG4Uytm20cPVjt4I7+jb1b1tHznbf7ITOpglInAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSI9Amz/gorJH+amw8GPJxhrZQW4wHwYDVR0j BBgwFoAUosq8LlK/fmX8UB8HrEg0rHdy7oYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJkYWI0NmEtMDg1ZS00NDMyLTk4MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1 MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3NzcyRUU4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkNBQkMyRTUyQkY3RTY1RkM1MDFGMDdBQzQ4MzRBQzc3NzJF RTg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0 QUM3NzcyRUU4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHMR+cFx+1PZhClvIEbIvmReaVAtUzivHmh 4eHDjANt7xocdhGNxlu3EJkZvqZ2oejYZEEOw0HnWj8LVY8PAxtcsazGkIGX2yzI ZENFyvJBOQkZgQkPMg98t1ChfkYOs60B2lZvxpNnfwWPCsnOxLHzVNQKNOQCQuOj g04rgl+8HQBt/ywTSyJRChbI8DkHnMy8GeX7SehSpIMYScJl4ETsjavcpXFaaB54 gAvFr4wWHrJpiuSLjMoZSlz8uzBRF3eABIPphD0+jmCyw+g/Q3E2d7H8O1Ae/jxY +PkRdh2rNVobUOPQgZB0AcZSbddZ4jA0+K0q1xbUl4+rqpDcjVg= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:57 2026 by rpki-client