$ rpki-client -vvvf rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft File: 2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft (raw, json) Hash identifier: yZuH+KDa5CUHM64ju+t7hGIZktYVKZ3m1+zmbrl4nAE= Subject key identifier: 0D:FD:C1:D4:5E:54:28:CD:52:1D:4A:09:4A:E4:8B:F1:37:6D:78:63 Authority key identifier: 2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63 Certificate issuer: /CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463 Certificate serial: 5834AD405CC062FFA030E4E09B6B0A369701EA6E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft Manifest number: D3 Signing time: Thu 08 Oct 2026 10:10:30 +0000 Manifest this update: Thu 08 Oct 2026 10:05:30 +0000 Manifest next update: Fri 09 Oct 2026 13:13:30 +0000 Files and hashes: 1: 2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl (hash: plR506riLYoZ7Dvunlt6Rx2GEuEAJeJo1mq5aiRTMpk=) 2: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: i83P/tWxpN7+zDb3L4rKQFgIev7DrUCxoADIDDyJE9U=) 3: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: 6lFtnPCNARkQq8uMVyUcH9X2yfQ7BRCjGYYqyfiHjKo=) 4: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: iJm4NhgPbIn9ZoK9MCrx0LzGYq+XRWtI9oNHEB41bTw=) 5: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: 6oOlCIxGneY8XQmzJaSA+rXwKrW4Xz1wcUf44XfKjgk=) 6: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: JbxVAMh0l8cOOEqUdkvkAwk1Vty1kRSyKXbV2pl/yFg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 11:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:34:ad:40:5c:c0:62:ff:a0:30:e4:e0:9b:6b:0a:36:97:01:ea:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463 Validity Not Before: Oct 8 10:05:30 2026 GMT Not After : Oct 9 13:13:30 2026 GMT Subject: CN=0DFDC1D45E5428CD521D4A094AE48BF1376D7863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0c:44:5e:a2:0b:5b:0e:f3:69:99:2e:e1:d3: e5:e9:36:98:18:86:33:b2:87:0a:2c:71:65:7d:f9: c7:66:0b:39:11:34:27:ae:17:29:f9:06:ce:31:89: 11:63:55:d1:b4:32:3e:ea:9c:b1:ee:2d:02:8e:e6: 7e:1b:26:7f:bc:1a:f4:97:75:05:44:fd:23:5f:d2: f1:1b:25:43:00:b3:7d:34:f2:79:f7:48:2f:af:5e: 54:e0:51:01:bd:94:ea:41:60:29:6d:0e:97:56:16: e9:bf:fc:8b:1d:1d:98:44:15:d9:af:63:25:6a:25: cf:d3:d3:c6:74:3a:99:12:15:79:f2:ed:a3:78:b0: f9:2e:da:a8:19:8e:ba:08:23:d0:af:28:d2:62:61: 22:b2:3d:c7:b6:8e:c8:81:35:c5:6e:39:3a:8c:04: 29:12:da:a7:81:5b:6f:58:60:92:46:f6:c2:72:c4: eb:55:fa:8b:24:72:ef:1f:3b:90:5c:12:64:10:a0: b6:6e:84:08:5e:d0:c3:72:0e:3a:a3:e3:06:fa:0e: 9c:0e:1e:31:be:ab:10:c3:56:65:98:28:cc:3d:77: cb:80:d8:3d:67:4c:a1:bc:9c:e1:3f:2e:6d:da:f8: 4b:38:91:33:cc:fc:4c:4f:70:f9:a5:31:fd:0e:72: b6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FD:C1:D4:5E:54:28:CD:52:1D:4A:09:4A:E4:8B:F1:37:6D:78:63 X509v3 Authority Key Identifier: keyid:2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:a4:bd:d0:57:de:2b:58:1c:17:26:76:76:39:f2:19:21:15: 18:74:d3:ea:ea:95:c4:d6:d5:e6:6d:46:36:13:2a:11:84:04: 33:54:2a:20:b7:7f:7a:d3:03:59:1c:05:e3:0c:ac:5d:3d:a8: 4f:1d:e8:c8:ad:c0:d5:e0:7c:2f:5c:7d:72:45:52:72:14:1b: ef:04:eb:b7:da:e6:84:b9:81:69:d9:27:a2:78:bc:ca:30:15: 47:90:bd:f5:24:fd:a1:4a:59:1f:81:88:cb:d0:84:b0:54:7c: b2:28:56:ce:e8:c8:54:91:0a:d0:24:4a:4b:d0:a5:a2:a5:ea: bf:1b:0c:19:d2:19:a9:10:83:5e:8b:0e:d6:23:64:0b:ad:6a: 8c:a7:d6:03:7a:25:07:5b:da:9d:83:9e:39:23:b1:18:7b:3f: 60:26:a8:61:f3:02:cd:58:85:f9:11:49:f0:b5:fe:55:d7:41: f5:c1:80:81:af:42:7a:12:44:26:f5:db:9e:cd:a1:6c:28:f8: 2b:ce:6b:1f:fa:a1:d4:19:5e:2d:17:07:e9:e4:c6:aa:d6:09: 54:89:ed:f0:65:46:a5:19:62:15:f9:a6:14:29:38:66:be:35: ed:b9:17:77:61:d3:c2:fe:76:02:89:2a:db:77:3f:6e:1b:20: cb:87:a6:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWDStQFzAYv+gMOTgm2sKNpcB6m4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzMTM3RUVGNzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3 MkUyQzQ2MzAeFw0yNjEwMDgxMDA1MzBaFw0yNjEwMDkxMzEzMzBaMDMxMTAvBgNV BAMTKDBERkRDMUQ0NUU1NDI4Q0Q1MjFENEEwOTRBRTQ4QkYxMzc2RDc4NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsDEReogtbDvNpmS7h0+XpNpgY hjOyhwoscWV9+cdmCzkRNCeuFyn5Bs4xiRFjVdG0Mj7qnLHuLQKO5n4bJn+8GvSX dQVE/SNf0vEbJUMAs3008nn3SC+vXlTgUQG9lOpBYCltDpdWFum//IsdHZhEFdmv YyVqJc/T08Z0OpkSFXny7aN4sPku2qgZjroII9CvKNJiYSKyPce2jsiBNcVuOTqM BCkS2qeBW29YYJJG9sJyxOtV+oskcu8fO5BcEmQQoLZuhAhe0MNyDjqj4wb6DpwO HjG+qxDDVmWYKMw9d8uA2D1nTKG8nOE/Lm3a+Es4kTPM/ExPcPmlMf0Ocrb1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDf3B1F5UKM1SHUoJSuSL8TdteGMwHwYDVR0j BBgwFoAUKjE37vd/GvFvehLdbTaUTHLixGMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI4ZWVjNWItNTMyNC00NDIyLWEzMmYtOWIxZGNlZDM3NTlmLzAvMkEzMTM3RUVG NzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3MkUyQzQ2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTMxMzdFRUY3N0YxQUYxNkY3QTEyREQ2RDM2OTQ0QzcyRTJD NDYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMkEzMTM3RUVGNzdGMUFGMTZGN0ExMkRENkQzNjk0 NEM3MkUyQzQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqkvdBX3itYHBcmdnY58hkhFRh00+rqlcTW 1eZtRjYTKhGEBDNUKiC3f3rTA1kcBeMMrF09qE8d6MitwNXgfC9cfXJFUnIUG+8E 67fa5oS5gWnZJ6J4vMowFUeQvfUk/aFKWR+BiMvQhLBUfLIoVs7oyFSRCtAkSkvQ paKl6r8bDBnSGakQg16LDtYjZAutaoyn1gN6JQdb2p2DnjkjsRh7P2AmqGHzAs1Y hfkRSfC1/lXXQfXBgIGvQnoSRCb1257NoWwo+CvOax/6odQZXi0XB+nkxqrWCVSJ 7fBlRqUZYhX5phQpOGa+Ne25F3dh08L+dgKJKtt3P24bIMuHpi0= -----END CERTIFICATE-----Generated at Thu Oct 8 14:03:01 2026 by rpki-client