$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft File: 2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft (raw, json) Hash identifier: rdM+jENoAR6W8KN8zHJnh9/gstq7pL26moXRCI55lns= Subject key identifier: F1:21:35:21:81:7D:12:41:00:80:FD:85:C5:F2:93:62:0E:03:9A:88 Authority key identifier: 2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA Certificate issuer: /CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA Certificate serial: 1D06006D7FFF69D169299C9AFF2FCAEFE5481C39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft Manifest number: F4 Signing time: Sun 01 Nov 2026 21:29:32 +0000 Manifest this update: Sun 01 Nov 2026 21:24:32 +0000 Manifest next update: Mon 02 Nov 2026 23:15:32 +0000 Files and hashes: 1: 2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl (hash: 5V6WW/HF6XC711YPgWQZlixi3UPtTl0UaxCSxBJZHHk=) 2: 3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa (hash: Jv5U5LGovEDFBhrf2yN8LsratIXrB4UcO/MW+FaftYc=) 3: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: eNG7+LqFPcA2X6MnUSyw57FaBVmmkZ9qB88jQfVFgQw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:06:00:6d:7f:ff:69:d1:69:29:9c:9a:ff:2f:ca:ef:e5:48:1c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA Validity Not Before: Nov 1 21:24:32 2026 GMT Not After : Nov 2 23:15:32 2026 GMT Subject: CN=F1213521817D12410080FD85C5F293620E039A88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:45:78:44:65:34:38:7a:3e:52:ca:d1:86:61: e6:49:36:ae:94:f6:0c:66:64:1d:4d:7a:a8:d6:61: 8f:4a:d6:a5:18:81:1f:a2:37:b0:74:e0:6d:03:f4: 30:b6:3c:74:9f:bc:69:10:c7:36:03:9c:23:5c:a0: 95:f5:d5:9c:a4:09:25:f3:48:7c:bd:1d:60:f2:4a: 1d:84:ce:78:b9:29:ed:52:7e:c2:0a:ee:56:e7:23: f5:f0:37:cf:21:04:15:2a:69:9b:a9:94:b0:72:09: 6d:1f:56:37:fa:e4:d5:56:04:57:92:7e:32:37:97: bc:6c:32:7a:8f:64:66:e7:e0:0c:dd:a0:1e:26:3d: 33:ba:df:2f:f9:30:02:6a:19:36:84:eb:20:ca:e9: 61:4c:61:df:e0:dc:bb:86:7d:ca:8b:a0:09:d9:51: 2b:b8:7e:83:72:0e:dc:31:46:60:76:5a:74:32:54: a4:4c:c2:3a:1d:2b:4e:45:31:99:6b:62:fa:7c:fd: 9b:86:98:d6:70:33:02:ed:fa:ea:68:48:67:66:2e: 9c:96:00:ef:4f:11:e5:ce:b9:2e:97:55:ab:92:9c: c5:d5:ce:77:63:09:fa:5f:bf:35:1e:f0:87:cf:49: f1:f8:9b:fd:52:13:c0:b2:be:4b:e1:73:4c:c4:71: 46:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:21:35:21:81:7D:12:41:00:80:FD:85:C5:F2:93:62:0E:03:9A:88 X509v3 Authority Key Identifier: keyid:2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:8d:0f:e6:42:a9:60:c2:62:d9:d0:1c:bb:80:38:06:83:2a: e1:90:55:dc:e3:01:05:1d:7f:51:8f:cc:eb:b9:ba:6c:95:26: a2:3b:0e:d5:96:78:86:56:9c:2a:e2:ac:75:e2:f4:3d:bd:e1: d5:38:16:24:91:54:9b:bb:78:eb:bf:8a:af:1c:c6:7c:53:da: 20:81:3c:cd:72:45:7b:ad:4a:dc:de:f4:94:2d:6f:8a:c6:0a: 27:bd:1f:81:23:89:a7:a9:9b:3e:24:05:b4:4c:c5:2b:7e:ab: 39:6e:7b:88:55:a0:f1:0c:b4:95:a3:6a:7a:ea:4b:1c:73:78: 5e:ab:49:0f:29:bd:cf:1a:da:d0:68:2f:f4:a2:82:4a:5f:a7: 85:33:7c:18:b7:ad:52:d9:d6:0e:3d:c9:1d:c0:bc:51:54:2d: 92:3f:7f:30:59:29:1a:eb:ab:68:10:54:82:c1:a4:d0:30:22: 30:fa:df:b6:f3:73:5c:49:e2:ff:89:36:22:f2:35:ab:17:6b: fa:9e:b3:81:83:11:98:d5:e1:e9:33:65:24:58:1a:f7:b0:b3: 0d:03:05:20:e1:39:22:46:41:55:47:c2:93:2b:82:8b:33:f0: c6:a6:23:f5:92:8a:4d:bc:59:5a:e1:af:71:13:5e:5a:3a:ec: 2b:3c:14:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQYAbX//adFpKZya/y/K7+VIHDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE3RkI4MDE2REEwMDBBOUQxMEM5ODA5QzQ0RURFMkU5 RkRBQjZGQTAeFw0yNjExMDEyMTI0MzJaFw0yNjExMDIyMzE1MzJaMDMxMTAvBgNV BAMTKEYxMjEzNTIxODE3RDEyNDEwMDgwRkQ4NUM1RjI5MzYyMEUwMzlBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuRXhEZTQ4ej5SytGGYeZJNq6U 9gxmZB1NeqjWYY9K1qUYgR+iN7B04G0D9DC2PHSfvGkQxzYDnCNcoJX11ZykCSXz SHy9HWDySh2Ezni5Ke1SfsIK7lbnI/XwN88hBBUqaZuplLByCW0fVjf65NVWBFeS fjI3l7xsMnqPZGbn4AzdoB4mPTO63y/5MAJqGTaE6yDK6WFMYd/g3LuGfcqLoAnZ USu4foNyDtwxRmB2WnQyVKRMwjodK05FMZlrYvp8/ZuGmNZwMwLt+upoSGdmLpyW AO9PEeXOuS6XVauSnMXVzndjCfpfvzUe8IfPSfH4m/1SE8Cyvkvhc0zEcUZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8SE1IYF9EkEAgP2FxfKTYg4DmogwHwYDVR0j BBgwFoAUKn+4AW2gAKnRDJgJxE7eLp/atvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NhMmUwZGItZTI5My00MWM1LTg1ODMtMzgwMTU3NTg0MjFjLzAvMkE3RkI4MDE2 REEwMDBBOUQxMEM5ODA5QzQ0RURFMkU5RkRBQjZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTdGQjgwMTZEQTAwMEE5RDEwQzk4MDlDNDRFREUyRTlGREFC NkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvMkE3RkI4MDE2REEwMDBBOUQxMEM5ODA5QzQ0RURF MkU5RkRBQjZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGND+ZCqWDCYtnQHLuAOAaDKuGQVdzjAQUd f1GPzOu5umyVJqI7DtWWeIZWnCrirHXi9D294dU4FiSRVJu7eOu/iq8cxnxT2iCB PM1yRXutStze9JQtb4rGCie9H4Ejiaepmz4kBbRMxSt+qzlue4hVoPEMtJWjanrq SxxzeF6rSQ8pvc8a2tBoL/Sigkpfp4UzfBi3rVLZ1g49yR3AvFFULZI/fzBZKRrr q2gQVILBpNAwIjD637bzc1xJ4v+JNiLyNasXa/qes4GDEZjV4ekzZSRYGvewsw0D BSDhOSJGQVVHwpMrgosz8MamI/WSik28WVrhr3ETXlo67Cs8FGw= -----END CERTIFICATE-----Generated at Mon Nov 2 02:48:21 2026 by rpki-client