$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft File: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft (raw, json) Hash identifier: a04gQgZ1Nar3jmgMALbe507Jfkouyoc77sQzI4gurO0= Subject key identifier: 18:45:FB:F2:2E:ED:A0:02:07:09:CB:9C:92:FF:FB:69:6E:55:BD:0F Authority key identifier: A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 Certificate issuer: /CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Certificate serial: 2F71C671EBF657E7CD90472295227072B5CDB2B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft Manifest number: F6 Signing time: Tue 03 Nov 2026 16:28:12 +0000 Manifest this update: Tue 03 Nov 2026 16:23:12 +0000 Manifest next update: Wed 04 Nov 2026 20:02:12 +0000 Files and hashes: 1: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl (hash: 2q5outjgbk6q8YomXfEM2pLuU2P6fKtrK6ER/j7mg2E=) 2: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: Sl5RIQ6TEp2vaieF8W/DsRGoACBj5tfJiV0/4Hnxdeo=) 3: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: Ms5lVpCR+d3KiqA+8+cluXhFQb/KgXQqPnflZyEWwJA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 12:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:71:c6:71:eb:f6:57:e7:cd:90:47:22:95:22:70:72:b5:cd:b2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Validity Not Before: Nov 3 16:23:12 2026 GMT Not After : Nov 4 20:02:12 2026 GMT Subject: CN=1845FBF22EEDA0020709CB9C92FFFB696E55BD0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cb:ca:62:b9:b4:98:82:be:08:bb:54:64:3d: ee:25:7f:dc:43:a6:ab:cd:8a:78:56:95:07:87:7a: d3:f7:e0:eb:0f:ab:29:6a:f4:95:1d:cd:96:08:1f: c5:3e:96:f6:b5:89:17:00:14:6a:5e:8a:2b:39:74: 59:54:1b:cc:7e:51:2d:08:d8:bf:06:f7:fd:92:d8: 6a:87:75:e3:86:7b:25:db:46:c7:4e:29:80:e4:e7: 47:f7:87:60:5b:5b:7e:a8:c9:9f:52:2d:0f:7e:82: 37:54:27:99:7e:45:e2:79:91:3d:cf:07:1a:96:ab: 38:c0:27:94:7e:1e:0f:e5:b8:19:60:23:5b:da:a9: 77:6d:51:07:de:cf:a0:7d:3a:3a:01:6c:72:68:39: fc:84:e8:90:40:5f:27:b2:5c:a8:76:13:a4:e5:a8: e3:db:3f:ca:f1:a4:61:91:0a:cd:9a:f2:be:88:4e: 1d:a9:f1:9a:8b:40:3c:f5:bc:20:0e:4c:d8:24:46: 13:7c:22:34:a6:c6:32:cc:54:f3:c3:a0:db:44:24: 18:e4:53:33:86:89:65:f0:28:d6:a6:17:75:53:25: 75:5e:5e:22:d3:50:63:cc:3e:28:d6:f6:7f:64:e0: d1:8f:6b:c8:7c:fe:79:eb:8d:4f:d3:7e:a8:ee:4e: 3c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:45:FB:F2:2E:ED:A0:02:07:09:CB:9C:92:FF:FB:69:6E:55:BD:0F X509v3 Authority Key Identifier: keyid:A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:40:f4:9e:be:5c:88:88:74:96:73:3a:31:1b:81:ec:00:be: f7:83:a8:f5:6f:56:d5:51:bc:9c:e1:21:c0:07:55:97:9e:5e: f2:1d:ae:be:f2:8d:3f:d9:4e:5b:68:f9:e9:29:36:59:95:03: 8d:ef:d9:08:d9:11:46:ec:01:cd:fe:81:c6:f4:ff:81:3a:f0: de:97:61:f1:4d:0e:9d:14:3a:9e:25:c0:02:32:e0:79:15:06: 47:c7:99:a4:a4:53:0f:98:58:2b:15:b9:01:a8:20:1c:4b:85: 90:bb:12:2b:15:12:69:58:8b:f2:e4:72:d4:56:15:fc:bb:e8: f0:96:8b:49:d2:98:05:fe:5b:b8:1b:79:82:38:ae:81:52:9f: 4c:15:62:2f:10:52:f6:43:45:e7:c5:34:9b:6f:9b:02:58:dc: 9e:03:08:3c:4e:6e:76:2a:09:f9:97:fe:d4:a7:76:e2:85:d7: cc:cc:08:74:ed:05:14:e9:bc:59:d9:43:3e:70:cd:e1:a2:12: 37:96:7f:3a:0d:a7:83:c3:3f:3a:4e:6a:d1:dc:2c:92:9b:e6: 39:06:86:c9:dc:39:61:e2:3b:b1:b2:61:f7:5d:7f:d5:c5:c5: f0:be:bf:f3:ea:ce:d0:c4:4f:11:fd:5f:d1:59:77:4e:48:33: 66:43:6b:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL3HGcev2V+fNkEcilSJwcrXNsrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFF OTBGQ0IwMzAeFw0yNjExMDMxNjIzMTJaFw0yNjExMDQyMDAyMTJaMDMxMTAvBgNV BAMTKDE4NDVGQkYyMkVFREEwMDIwNzA5Q0I5QzkyRkZGQjY5NkU1NUJEMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCAy8piubSYgr4Iu1RkPe4lf9xD pqvNinhWlQeHetP34OsPqylq9JUdzZYIH8U+lva1iRcAFGpeiis5dFlUG8x+US0I 2L8G9/2S2GqHdeOGeyXbRsdOKYDk50f3h2BbW36oyZ9SLQ9+gjdUJ5l+ReJ5kT3P BxqWqzjAJ5R+Hg/luBlgI1vaqXdtUQfez6B9OjoBbHJoOfyE6JBAXyeyXKh2E6Tl qOPbP8rxpGGRCs2a8r6ITh2p8ZqLQDz1vCAOTNgkRhN8IjSmxjLMVPPDoNtEJBjk UzOGiWXwKNamF3VTJXVeXiLTUGPMPijW9n9k4NGPa8h8/nnrjU/TfqjuTjyfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGEX78i7toAIHCcuckv/7aW5VvQ8wHwYDVR0j BBgwFoAUoum7qBCWLHwwP3QFKtqPiukPywMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmI2OWQ2NjctMTdhNC00ZmRkLTljNTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgx MDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFFOTBGQ0IwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkU5QkJBODEwOTYyQzdDMzAzRjc0MDUyQURBOEY4QUU5MEZD QjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThG OEFFOTBGQ0IwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtA9J6+XIiIdJZzOjEbgewAvveDqPVvVtVR vJzhIcAHVZeeXvIdrr7yjT/ZTlto+ekpNlmVA43v2QjZEUbsAc3+gcb0/4E68N6X YfFNDp0UOp4lwAIy4HkVBkfHmaSkUw+YWCsVuQGoIBxLhZC7EisVEmlYi/LkctRW Ffy76PCWi0nSmAX+W7gbeYI4roFSn0wVYi8QUvZDRefFNJtvmwJY3J4DCDxObnYq CfmX/tSnduKF18zMCHTtBRTpvFnZQz5wzeGiEjeWfzoNp4PDPzpOatHcLJKb5jkG hsncOWHiO7GyYfddf9XFxfC+v/PqztDETxH9X9FZd05IM2ZDa4M= -----END CERTIFICATE-----Generated at Wed Nov 4 05:28:59 2026 by rpki-client