$ rpki-client -vvvf rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft File: 2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft (raw, json) Hash identifier: UmrNLFQMcH1Krm5CJu6fkWuJxLQ6eidpYkYlL1EQxfQ= Subject key identifier: 09:0F:DB:CB:68:DC:A9:A7:E8:3E:2C:1D:44:33:F8:4F:5C:40:DB:FD Authority key identifier: 2A:3B:71:13:CD:87:30:2B:2B:15:C0:36:DA:BB:55:A1:C6:1A:4B:C7 Certificate issuer: /CN=2A3B7113CD87302B2B15C036DABB55A1C61A4BC7 Certificate serial: 19045B9B8B7F628BC57607662BBAD07ED1F318A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft Manifest number: BA Signing time: Thu 17 Sep 2026 05:25:06 +0000 Manifest this update: Thu 17 Sep 2026 05:20:06 +0000 Manifest next update: Fri 18 Sep 2026 06:58:06 +0000 Files and hashes: 1: 3130332e31362e3131382e302f32332d3233203d3e20313530323234.roa (hash: cHWRS9jvMLPJtfkGwJTsPEjSAtpAq4obnCko3LPwDM4=) 2: 2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl (hash: +ANrrk/p+29qlFEFF+4EYptYMgjZvRMI7u/yCVbYS7E=) 3: 3130332e31362e3131382e302f32342d3234203d3e20313530323234.roa (hash: DmsqvgbVPNfcNdfJtucN0xsEHJ0/UNUr4pV2Ej4ylVY=) 4: 3130332e31362e3131392e302f32342d3234203d3e20313530323234.roa (hash: I2YIeew2oZSIPdct3GSYzDNuqJxTOhVzByMVv86tq2I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:04:5b:9b:8b:7f:62:8b:c5:76:07:66:2b:ba:d0:7e:d1:f3:18:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A3B7113CD87302B2B15C036DABB55A1C61A4BC7 Validity Not Before: Sep 17 05:20:06 2026 GMT Not After : Sep 18 06:58:06 2026 GMT Subject: CN=090FDBCB68DCA9A7E83E2C1D4433F84F5C40DBFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dc:23:bf:67:13:97:39:0b:dc:06:1c:f7:2f: 52:33:ba:0e:8d:79:07:a5:58:c3:48:68:6d:a1:86: f4:fe:5b:f5:a4:28:04:ac:1c:6a:c6:47:02:a4:09: b4:01:2c:d8:c1:a2:30:09:0c:b4:e6:5c:ff:27:ad: 30:25:2f:a2:a6:50:b9:13:fa:f8:d2:74:0c:9c:fe: 85:94:40:d0:3b:bd:20:93:84:f6:96:30:11:59:35: 8f:a4:fe:90:1e:7b:ba:27:96:07:ad:ba:f0:6f:48: c7:01:09:ea:6e:b2:94:29:42:15:47:ab:98:7a:6e: 68:22:42:60:40:62:94:1a:05:48:1b:b5:36:12:43: e0:83:ce:c4:26:40:c2:d4:7c:ae:25:5a:f4:bf:cd: a3:31:bd:c5:7d:9c:92:cd:b1:7d:2f:4d:74:3f:40: cf:d9:3f:95:63:53:23:8c:7e:de:6f:4e:d3:f9:71: 15:38:4e:b0:52:b4:3e:ef:28:1b:3e:b7:4f:64:6b: c0:2e:36:ab:f6:96:fe:f1:a8:3c:0c:5a:05:05:a6: ea:f0:7f:27:b8:c9:5e:55:f4:17:06:74:b7:0c:c0: 19:f5:be:ad:5f:33:11:37:4f:a1:93:8f:21:04:75: b7:19:6d:b3:dc:6b:94:07:dc:2a:ac:24:1b:1d:6e: 75:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0F:DB:CB:68:DC:A9:A7:E8:3E:2C:1D:44:33:F8:4F:5C:40:DB:FD X509v3 Authority Key Identifier: keyid:2A:3B:71:13:CD:87:30:2B:2B:15:C0:36:DA:BB:55:A1:C6:1A:4B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a8:bf:c2:0c:d9:fd:0f:15:d4:a8:f3:49:46:ea:ea:9a:26: 57:93:4c:a2:e9:d5:cb:bf:39:00:58:df:06:77:d2:a5:5d:4f: a8:46:76:30:05:0c:d3:53:79:ce:b0:56:40:16:89:68:a0:4e: 5d:ff:a0:87:39:e3:47:ff:1c:12:a8:c6:b3:86:ef:df:69:1d: c1:f1:1a:13:23:ba:77:93:fc:d3:87:77:26:2a:74:30:42:dc: fc:31:94:98:68:20:70:fa:f6:bf:80:c9:35:8f:e0:11:24:13: 1f:20:96:a5:11:22:e9:57:ae:37:05:06:c1:41:b5:4a:66:e9: c0:23:62:e2:83:05:28:c6:25:3c:3d:06:fd:38:86:43:80:8c: dc:4f:c7:27:84:00:20:87:f6:3b:82:1b:74:f1:e1:0a:da:8b: ba:59:51:45:99:ae:65:65:ec:f9:37:2d:8b:45:0a:17:f4:17: 30:8e:71:c7:c2:fd:8f:96:e6:38:65:14:37:fc:14:9a:05:db: 55:76:58:d8:5d:c0:68:06:7a:9d:ea:2f:99:31:a7:2f:f3:a1: f8:20:1f:ca:b7:0e:69:2f:b4:03:c1:1a:9d:30:6b:04:f7:b0: 37:67:e4:19:17:7d:2c:b0:b3:de:9e:60:cf:43:ff:b4:bf:6d: e0:3e:8a:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGQRbm4t/YovFdgdmK7rQftHzGKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzQjcxMTNDRDg3MzAyQjJCMTVDMDM2REFCQjU1QTFD NjFBNEJDNzAeFw0yNjA5MTcwNTIwMDZaFw0yNjA5MTgwNjU4MDZaMDMxMTAvBgNV BAMTKDA5MEZEQkNCNjhEQ0E5QTdFODNFMkMxRDQ0MzNGODRGNUM0MERCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm3CO/ZxOXOQvcBhz3L1Izug6N eQelWMNIaG2hhvT+W/WkKASsHGrGRwKkCbQBLNjBojAJDLTmXP8nrTAlL6KmULkT +vjSdAyc/oWUQNA7vSCThPaWMBFZNY+k/pAee7onlgetuvBvSMcBCepuspQpQhVH q5h6bmgiQmBAYpQaBUgbtTYSQ+CDzsQmQMLUfK4lWvS/zaMxvcV9nJLNsX0vTXQ/ QM/ZP5VjUyOMft5vTtP5cRU4TrBStD7vKBs+t09ka8AuNqv2lv7xqDwMWgUFpurw fye4yV5V9BcGdLcMwBn1vq1fMxE3T6GTjyEEdbcZbbPca5QH3CqsJBsdbnUPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCQ/by2jcqafoPiwdRDP4T1xA2/0wHwYDVR0j BBgwFoAUKjtxE82HMCsrFcA22rtVocYaS8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTk4Nzk3NDQtYjgxOC00NmRjLThkOWYtOWMzNTc5M2Y0Y2JiLzAvMkEzQjcxMTND RDg3MzAyQjJCMTVDMDM2REFCQjU1QTFDNjFBNEJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTNCNzExM0NEODczMDJCMkIxNUMwMzZEQUJCNTVBMUM2MUE0 QkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTk4Nzk3NDQtYjgxOC00NmRjLThk OWYtOWMzNTc5M2Y0Y2JiLzAvMkEzQjcxMTNDRDg3MzAyQjJCMTVDMDM2REFCQjU1 QTFDNjFBNEJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2ov8IM2f0PFdSo80lG6uqaJleTTKLp1cu/ OQBY3wZ30qVdT6hGdjAFDNNTec6wVkAWiWigTl3/oIc540f/HBKoxrOG799pHcHx GhMjuneT/NOHdyYqdDBC3PwxlJhoIHD69r+AyTWP4BEkEx8glqURIulXrjcFBsFB tUpm6cAjYuKDBSjGJTw9Bv04hkOAjNxPxyeEACCH9juCG3Tx4Qrai7pZUUWZrmVl 7Pk3LYtFChf0FzCOccfC/Y+W5jhlFDf8FJoF21V2WNhdwGgGep3qL5kxpy/zofgg H8q3DmkvtAPBGp0wawT3sDdn5BkXfSyws96eYM9D/7S/beA+ivs= -----END CERTIFICATE-----Generated at Thu Sep 17 16:49:40 2026 by rpki-client