$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft File: 2A494FAEE44F13448E6C43136F825053CE977009.mft (raw, json) Hash identifier: ZWPrLJJAXWS7i38/AcxS6yijD843tcnuEQw2gWwqJic= Subject key identifier: BF:6D:FF:43:CB:BF:1E:F7:BD:57:42:AC:F8:AF:F8:F5:08:85:8B:D1 Authority key identifier: 2A:49:4F:AE:E4:4F:13:44:8E:6C:43:13:6F:82:50:53:CE:97:70:09 Certificate issuer: /CN=2A494FAEE44F13448E6C43136F825053CE977009 Certificate serial: 722D0D9E301F4A63DB8604F8CAE9CD3D82601D80 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 02:36:11 +0000 Manifest this update: Thu 03 Sep 2026 02:31:11 +0000 Manifest next update: Fri 04 Sep 2026 03:52:11 +0000 Files and hashes: 1: 3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (hash: t2vA65s4Rw0JpR4oPJfjFnJ3dyjvcRRBFrdNUp3Bo2M=) 2: 3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa (hash: SSSkCi1zJkML5HF5+O+odxp65ltRBIRj0krRoe9GJqI=) 3: 2A494FAEE44F13448E6C43136F825053CE977009.crl (hash: 3EdX1tOAwUjC/oV/p2liWJlH1ynXKah5fah0gVBPnck=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.crl rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:2d:0d:9e:30:1f:4a:63:db:86:04:f8:ca:e9:cd:3d:82:60:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A494FAEE44F13448E6C43136F825053CE977009 Validity Not Before: Sep 3 02:31:11 2026 GMT Not After : Sep 4 03:52:11 2026 GMT Subject: CN=BF6DFF43CBBF1EF7BD5742ACF8AFF8F508858BD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:47:94:7c:7b:e9:03:bd:58:ac:c4:17:df:a5: ba:a6:44:e8:02:5c:8b:d7:bc:ee:a9:3e:5d:93:38: bc:61:7c:b1:b3:cc:02:02:2f:c2:09:b8:bb:7c:0c: b8:2f:02:00:93:b3:94:53:fc:57:d3:7a:4f:55:b7: 6e:37:dc:0a:db:c2:78:9c:90:63:6c:c8:df:23:f2: 78:5b:a5:88:0f:57:dd:e8:cb:f8:7f:e7:7c:b2:24: 18:7e:e5:50:62:4d:ad:af:93:99:c0:6d:3f:3d:7c: 54:1f:35:a8:cd:91:47:6e:15:a6:e3:e3:86:6c:45: 87:bd:ac:f1:d1:71:5a:33:fe:69:a8:b3:c4:d4:18: bf:8e:29:d5:36:e0:3f:c5:d2:72:53:b0:83:5d:49: 2c:f3:b3:e0:1b:e1:62:96:d6:dd:f2:77:ca:22:f5: c0:42:aa:86:70:3c:2d:de:7f:b1:b4:c9:9c:d6:36: 1b:ce:47:76:02:2e:1b:01:92:ce:58:96:9c:9d:cb: bf:19:d4:c8:a4:92:b6:6d:97:e0:14:86:0e:e1:c3: 0d:e7:cb:3d:ca:a2:b9:1e:61:a5:38:2e:4b:f1:a0: 6c:34:e0:e2:0f:f5:86:07:e8:65:a4:77:5e:db:e6: 47:aa:dc:1a:42:be:bd:27:21:e3:99:fc:5e:8a:a4: 1b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6D:FF:43:CB:BF:1E:F7:BD:57:42:AC:F8:AF:F8:F5:08:85:8B:D1 X509v3 Authority Key Identifier: keyid:2A:49:4F:AE:E4:4F:13:44:8E:6C:43:13:6F:82:50:53:CE:97:70:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:11:6f:a9:4a:96:0c:83:89:59:4f:d6:ac:62:77:07:73:18: b4:e5:99:55:b6:21:e8:c4:25:02:bc:79:74:dd:8f:85:6e:b6: f5:bf:67:dd:87:08:4f:4f:12:50:5e:af:40:23:6a:95:8c:01: 22:5d:f2:cf:92:f2:6f:e4:07:bb:47:da:14:3f:2b:8d:68:c9: bb:e1:32:be:a7:b6:95:49:5c:1c:52:bf:95:87:0d:fc:eb:e6: e1:d9:d4:04:11:16:6f:a0:14:4b:c6:a8:7d:d9:14:7a:b2:b0: 11:7a:74:b3:d6:58:e9:27:8c:6f:c8:4b:a5:21:b7:dd:3c:8b: 0d:26:d1:fa:ab:e0:23:3a:9a:d7:d1:43:3e:d0:db:e6:24:88: 36:58:cd:d9:6e:95:63:8d:60:c5:fc:cf:05:5d:ae:37:1e:99: 20:58:31:50:70:a5:bd:fc:86:e0:1a:75:16:4d:61:4b:0a:ba: 91:b1:b9:d6:01:71:bc:94:2a:ab:13:70:32:45:2f:37:f6:5f: ca:9f:eb:8a:b3:df:4d:59:77:2b:b6:6b:78:f3:10:59:75:d0: 17:d7:18:c8:82:37:7d:f9:2d:ff:fb:5c:48:2d:cf:1c:63:da: 65:92:85:2c:3f:9d:9d:81:d6:3f:44:a3:ce:d7:42:6a:b1:2a: 52:35:71:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUci0NnjAfSmPbhgT4yunNPYJgHYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE0OTRGQUVFNDRGMTM0NDhFNkM0MzEzNkY4MjUwNTND RTk3NzAwOTAeFw0yNjA5MDMwMjMxMTFaFw0yNjA5MDQwMzUyMTFaMDMxMTAvBgNV BAMTKEJGNkRGRjQzQ0JCRjFFRjdCRDU3NDJBQ0Y4QUZGOEY1MDg4NThCRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7R5R8e+kDvVisxBffpbqmROgC XIvXvO6pPl2TOLxhfLGzzAICL8IJuLt8DLgvAgCTs5RT/FfTek9Vt2433Arbwnic kGNsyN8j8nhbpYgPV93oy/h/53yyJBh+5VBiTa2vk5nAbT89fFQfNajNkUduFabj 44ZsRYe9rPHRcVoz/mmos8TUGL+OKdU24D/F0nJTsINdSSzzs+Ab4WKW1t3yd8oi 9cBCqoZwPC3ef7G0yZzWNhvOR3YCLhsBks5Ylpydy78Z1MikkrZtl+AUhg7hww3n yz3KorkeYaU4LkvxoGw04OIP9YYH6GWkd17b5keq3BpCvr0nIeOZ/F6KpBtzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv23/Q8u/Hve9V0Ks+K/49QiFi9EwHwYDVR0j BBgwFoAUKklPruRPE0SObEMTb4JQU86XcAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBkYzEyODMtMWNlMi00MWE1LWFmZTYtZjBiZTMxZTliMTBkLzAvMkE0OTRGQUVF NDRGMTM0NDhFNkM0MzEzNkY4MjUwNTNDRTk3NzAwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTQ5NEZBRUU0NEYxMzQ0OEU2QzQzMTM2RjgyNTA1M0NFOTc3 MDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBkYzEyODMtMWNlMi00MWE1LWFm ZTYtZjBiZTMxZTliMTBkLzAvMkE0OTRGQUVFNDRGMTM0NDhFNkM0MzEzNkY4MjUw NTNDRTk3NzAwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwRb6lKlgyDiVlP1qxidwdzGLTlmVW2IejE JQK8eXTdj4VutvW/Z92HCE9PElBer0AjapWMASJd8s+S8m/kB7tH2hQ/K41oybvh Mr6ntpVJXBxSv5WHDfzr5uHZ1AQRFm+gFEvGqH3ZFHqysBF6dLPWWOknjG/IS6Uh t908iw0m0fqr4CM6mtfRQz7Q2+YkiDZYzdlulWONYMX8zwVdrjcemSBYMVBwpb38 huAadRZNYUsKupGxudYBcbyUKqsTcDJFLzf2X8qf64qz301Zdyu2a3jzEFl10BfX GMiCN335Lf/7XEgtzxxj2mWShSw/nZ2B1j9Eo87XQmqxKlI1cVM= -----END CERTIFICATE-----Generated at Thu Sep 3 09:47:39 2026 by rpki-client