$ rpki-client -vvf rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft File: 2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft (raw, json) Hash identifier: xSgAUwlFZ+L48lZrYIQvMy5C4ouaKnTORI733PsiuFA= Subject key identifier: A4:B3:6C:27:53:FD:57:BD:9C:7F:D1:DA:D7:EA:1F:7D:B0:6A:36:8F Authority key identifier: 2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63 Certificate issuer: /CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463 Certificate serial: 4835FBCC43CBBF7625785F741F5795C8E9BCDA51 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft Manifest number: 92 Signing time: Thu 20 Aug 2026 06:56:09 +0000 Manifest this update: Thu 20 Aug 2026 06:51:09 +0000 Manifest next update: Fri 21 Aug 2026 10:37:09 +0000 Files and hashes: 1: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: 6oOlCIxGneY8XQmzJaSA+rXwKrW4Xz1wcUf44XfKjgk=) 2: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: 6lFtnPCNARkQq8uMVyUcH9X2yfQ7BRCjGYYqyfiHjKo=) 3: 2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl (hash: rzTjykxyU5haWYmcIfh7AgMK9O6qX+SdmLwRrSmzH34=) 4: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: JbxVAMh0l8cOOEqUdkvkAwk1Vty1kRSyKXbV2pl/yFg=) 5: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: iJm4NhgPbIn9ZoK9MCrx0LzGYq+XRWtI9oNHEB41bTw=) 6: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: i83P/tWxpN7+zDb3L4rKQFgIev7DrUCxoADIDDyJE9U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 06:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:35:fb:cc:43:cb:bf:76:25:78:5f:74:1f:57:95:c8:e9:bc:da:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463 Validity Not Before: Aug 20 06:51:09 2026 GMT Not After : Aug 21 10:37:09 2026 GMT Subject: CN=A4B36C2753FD57BD9C7FD1DAD7EA1F7DB06A368F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5f:7a:d3:ed:0a:c2:73:4f:54:3b:86:f9:80: 10:fb:c0:47:ff:10:1e:81:f3:b3:b9:fb:b4:2b:fa: d2:78:d5:13:c3:8b:a6:39:5c:7a:1a:42:74:5f:c3: a7:51:27:95:0c:95:61:6f:80:e4:89:33:d1:17:cb: f3:9d:a6:6e:af:ed:a6:9d:cf:c2:ad:09:82:6c:14: 7c:c4:a1:bf:21:d1:cb:1e:6a:ef:77:f7:31:f9:f7: c4:c6:b7:df:7c:77:ce:3c:bb:7f:ab:26:4f:d5:cf: d5:cb:23:a7:a5:9b:b3:8d:c8:a1:d0:7a:3e:b2:de: bf:45:c4:01:6b:d1:c0:e4:55:f8:3e:2d:86:4d:12: ec:11:1f:d6:0b:19:a8:54:d6:96:8a:94:b7:89:e8: 51:e8:04:44:04:c2:20:ae:1c:7f:bc:52:b2:1e:2e: d1:c6:b8:ae:c3:8a:a3:12:d5:73:56:3f:91:f9:d4: 55:f8:46:1f:b4:7c:c9:f7:45:5a:21:f9:d9:a4:61: 9c:c6:7e:ae:d7:03:40:30:aa:68:a0:6a:78:0d:78: a3:42:e6:b7:ee:e6:82:d9:02:89:95:90:12:4c:e1: 0a:3e:ca:c6:7f:8a:8d:68:72:21:1a:87:d0:a1:6c: fe:c1:e6:31:a2:bc:d0:31:b6:eb:5a:46:d9:f9:94: 74:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B3:6C:27:53:FD:57:BD:9C:7F:D1:DA:D7:EA:1F:7D:B0:6A:36:8F X509v3 Authority Key Identifier: keyid:2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:1d:55:e8:1d:72:35:a9:e6:56:86:b0:5f:74:e0:1e:a7:bd: 14:de:7f:5f:0d:63:08:10:29:66:b4:b9:6e:48:3e:8d:42:e8: 2d:71:68:f5:e5:f8:80:f0:f7:75:e0:5b:ae:66:b7:77:07:be: 59:29:13:18:10:bd:7a:5e:0e:6b:3c:a4:cc:e5:8f:8a:e0:c5: 0c:d4:ee:a0:25:72:97:7f:44:95:68:64:32:91:0b:2a:fb:c2: a0:2a:76:b0:88:2f:6d:e1:74:37:14:26:ce:b6:88:f0:cb:52: cb:7f:11:73:58:05:3b:2a:f9:2f:bf:8b:24:31:89:48:a7:37: 21:4b:77:15:cd:50:e6:31:47:3d:f4:05:48:5c:6b:01:61:cf: eb:23:84:a7:d1:0e:6d:fc:d9:34:66:1f:27:82:80:4c:49:10: f9:9d:ae:9c:94:86:15:12:21:f9:97:50:50:2c:70:58:51:c9: 85:b3:18:cd:0a:dc:d4:b1:1a:61:52:11:87:a5:7c:6b:d9:23: 16:e7:52:b6:82:5a:db:72:d3:5c:51:5e:88:c5:3a:06:25:b3: 38:19:8a:f1:18:7d:02:30:e3:d0:f5:88:73:6c:80:c0:d1:35: e7:c1:a0:84:89:67:85:d4:03:34:7a:e3:c3:ea:df:23:51:6d: 67:41:0b:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSDX7zEPLv3YleF90H1eVyOm82lEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzMTM3RUVGNzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3 MkUyQzQ2MzAeFw0yNjA4MjAwNjUxMDlaFw0yNjA4MjExMDM3MDlaMDMxMTAvBgNV BAMTKEE0QjM2QzI3NTNGRDU3QkQ5QzdGRDFEQUQ3RUExRjdEQjA2QTM2OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVX3rT7QrCc09UO4b5gBD7wEf/ EB6B87O5+7Qr+tJ41RPDi6Y5XHoaQnRfw6dRJ5UMlWFvgOSJM9EXy/Odpm6v7aad z8KtCYJsFHzEob8h0cseau939zH598TGt998d848u3+rJk/Vz9XLI6elm7ONyKHQ ej6y3r9FxAFr0cDkVfg+LYZNEuwRH9YLGahU1paKlLeJ6FHoBEQEwiCuHH+8UrIe LtHGuK7DiqMS1XNWP5H51FX4Rh+0fMn3RVoh+dmkYZzGfq7XA0AwqmigangNeKNC 5rfu5oLZAomVkBJM4Qo+ysZ/io1ociEah9ChbP7B5jGivNAxtutaRtn5lHQlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpLNsJ1P9V72cf9Ha1+offbBqNo8wHwYDVR0j BBgwFoAUKjE37vd/GvFvehLdbTaUTHLixGMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI4ZWVjNWItNTMyNC00NDIyLWEzMmYtOWIxZGNlZDM3NTlmLzAvMkEzMTM3RUVG NzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3MkUyQzQ2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTMxMzdFRUY3N0YxQUYxNkY3QTEyREQ2RDM2OTQ0QzcyRTJD NDYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMkEzMTM3RUVGNzdGMUFGMTZGN0ExMkRENkQzNjk0 NEM3MkUyQzQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcdVegdcjWp5laGsF904B6nvRTef18NYwgQ KWa0uW5IPo1C6C1xaPXl+IDw93XgW65mt3cHvlkpExgQvXpeDms8pMzlj4rgxQzU 7qAlcpd/RJVoZDKRCyr7wqAqdrCIL23hdDcUJs62iPDLUst/EXNYBTsq+S+/iyQx iUinNyFLdxXNUOYxRz30BUhcawFhz+sjhKfRDm382TRmHyeCgExJEPmdrpyUhhUS IfmXUFAscFhRyYWzGM0K3NSxGmFSEYelfGvZIxbnUraCWtty01xRXojFOgYlszgZ ivEYfQIw49D1iHNsgMDRNefBoISJZ4XUAzR648Pq3yNRbWdBC+M= -----END CERTIFICATE-----Generated at Thu Aug 20 13:15:04 2026 by rpki-client