$ rpki-client -vvvf rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft File: 2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft (raw, json) Hash identifier: rrISrTsbbyCm3iNXPpZlEkR4UNgW+PIBwUjhYAUiw5Y= Subject key identifier: 01:91:4E:96:DC:41:0E:69:9F:F4:61:89:35:48:00:CB:61:C8:6B:02 Authority key identifier: 2A:0F:66:41:16:FB:E2:E0:71:7E:83:DF:D4:F2:B6:ED:EB:09:E1:7E Certificate issuer: /CN=2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E Certificate serial: 222F78E3897492EF8117947BAD0E5D2E44B77FF6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 00:39:24 +0000 Manifest this update: Thu 17 Sep 2026 00:34:24 +0000 Manifest next update: Fri 18 Sep 2026 03:00:24 +0000 Files and hashes: 1: 2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl (hash: 1FKa8ue3VhF0YovUzxPes/wzkpOl+jGO0g7LQyrAkpI=) 2: 323030313a6466333a316363303a3a2f34382d3438203d3e20313532303035.roa (hash: 6lgQliV3qWJWSqE96iH08yO2bxxIknhiUKxtAeSrcOo=) 3: 3130332e36372e39302e302f32342d3234203d3e20313532303035.roa (hash: D74+LFtaiM6p1bNo+g/DP+Bfx1wgVTvyGuc6jRnjUKM=) 4: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (hash: MDqOFg62hmCAUHW4Muj3krYCTsgPpqhMHNl5EdSS1rQ=) 5: 3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (hash: /Da4Pm0aCGjoevGiiRcx0Xt7whtWvoaG8WYvVgD2NtQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:2f:78:e3:89:74:92:ef:81:17:94:7b:ad:0e:5d:2e:44:b7:7f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E Validity Not Before: Sep 17 00:34:24 2026 GMT Not After : Sep 18 03:00:24 2026 GMT Subject: CN=01914E96DC410E699FF46189354800CB61C86B02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c4:57:23:09:fb:5e:f1:a5:93:d0:7f:15:3f: 7b:3f:a3:f6:0f:bb:6a:91:e8:4d:e0:9f:5c:14:26: 7c:93:86:31:a0:ac:fd:15:54:7d:61:f8:55:74:cd: 89:fb:10:23:b9:19:ca:9f:0a:96:18:26:a5:61:83: 8a:10:c6:1f:7e:b1:bf:f5:37:bd:d0:a9:6d:09:e8: d1:53:5d:24:59:9d:8e:b1:cf:63:27:55:f8:cd:24: fc:91:3a:cc:53:10:03:f1:07:0f:9a:25:4a:02:35: 14:d8:cf:c8:35:97:23:ea:3b:d7:b6:7f:35:ef:eb: 70:04:af:ce:e8:18:17:dd:f1:88:b9:75:69:31:6d: 54:e6:c1:74:52:97:27:97:d4:df:e0:78:dc:5c:ab: c5:b6:2c:bc:b1:8a:39:38:7a:87:97:30:52:ec:d1: d6:f1:74:90:9a:d1:c7:5b:61:69:cb:a2:ac:31:74: 99:f4:8d:84:b1:d4:f1:9d:4e:53:30:07:7a:ca:58: 2e:1f:ca:78:5f:c6:1c:45:ca:b5:a5:38:58:9a:4d: c6:44:14:ad:00:2e:30:c6:47:35:ff:46:b9:02:62: 80:c4:47:a9:64:c8:2c:af:aa:1e:c8:20:ff:10:f4: 1b:98:ce:5c:be:b9:fc:33:58:79:9d:8e:7f:be:df: cb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:91:4E:96:DC:41:0E:69:9F:F4:61:89:35:48:00:CB:61:C8:6B:02 X509v3 Authority Key Identifier: keyid:2A:0F:66:41:16:FB:E2:E0:71:7E:83:DF:D4:F2:B6:ED:EB:09:E1:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e9:e7:5f:ea:0e:fd:9c:e7:c7:35:98:c1:54:c4:cf:58:30: f0:f5:90:d2:37:cd:0b:66:54:8e:13:33:bb:fc:42:08:31:e1: e5:1a:1d:8d:13:ff:c9:c8:1b:9e:46:a0:e9:fa:8d:70:bc:58: ac:6a:27:f5:7c:a5:f0:2d:df:55:10:30:82:f4:ac:fe:81:15: 69:bb:5c:40:23:25:eb:5e:10:5c:71:8f:b4:f2:85:f7:91:bd: 26:78:4f:70:e7:77:1b:95:63:fb:d4:e5:aa:07:c2:f4:f0:e7: 5d:09:41:93:88:34:f5:b3:a0:11:0c:33:ff:44:59:fd:87:50: 71:a6:4d:53:59:0f:62:8f:04:84:69:54:6c:e2:95:57:32:b2: a6:cf:3f:54:67:b9:91:40:5f:7a:33:33:b7:60:03:34:d1:2f: 4c:fa:58:e5:94:0e:c8:a4:6b:45:3f:4b:71:46:89:6f:01:2f: 75:4b:cf:0f:30:f1:36:8c:4e:8d:21:4b:4c:11:8b:47:47:4b: 29:9c:b1:7a:fc:b3:42:93:85:4a:78:b4:0f:bd:1e:07:ee:81: 8e:b0:94:bb:9e:c8:95:e6:6c:2b:c7:67:e2:4f:50:b8:46:e1: c6:0a:50:b7:89:71:7d:7f:04:37:98:c6:2e:de:15:dd:bc:0b: 2b:de:c8:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIi9444l0ku+BF5R7rQ5dLkS3f/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwRjY2NDExNkZCRTJFMDcxN0U4M0RGRDRGMkI2RURF QjA5RTE3RTAeFw0yNjA5MTcwMDM0MjRaFw0yNjA5MTgwMzAwMjRaMDMxMTAvBgNV BAMTKDAxOTE0RTk2REM0MTBFNjk5RkY0NjE4OTM1NDgwMENCNjFDODZCMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfxFcjCfte8aWT0H8VP3s/o/YP u2qR6E3gn1wUJnyThjGgrP0VVH1h+FV0zYn7ECO5GcqfCpYYJqVhg4oQxh9+sb/1 N73QqW0J6NFTXSRZnY6xz2MnVfjNJPyROsxTEAPxBw+aJUoCNRTYz8g1lyPqO9e2 fzXv63AEr87oGBfd8Yi5dWkxbVTmwXRSlyeX1N/geNxcq8W2LLyxijk4eoeXMFLs 0dbxdJCa0cdbYWnLoqwxdJn0jYSx1PGdTlMwB3rKWC4fynhfxhxFyrWlOFiaTcZE FK0ALjDGRzX/RrkCYoDER6lkyCyvqh7IIP8Q9BuYzly+ufwzWHmdjn++38u7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAZFOltxBDmmf9GGJNUgAy2HIawIwHwYDVR0j BBgwFoAUKg9mQRb74uBxfoPf1PK27esJ4X4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg0ODg1MTktOGYwNC00NGY1LTgzMTItOGQ5ZDM2MTZkMGQ5LzAvMkEwRjY2NDEx NkZCRTJFMDcxN0U4M0RGRDRGMkI2RURFQjA5RTE3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTBGNjY0MTE2RkJFMkUwNzE3RTgzREZENEYyQjZFREVCMDlF MTdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg0ODg1MTktOGYwNC00NGY1LTgz MTItOGQ5ZDM2MTZkMGQ5LzAvMkEwRjY2NDExNkZCRTJFMDcxN0U4M0RGRDRGMkI2 RURFQjA5RTE3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHp51/qDv2c58c1mMFUxM9YMPD1kNI3zQtm VI4TM7v8Qggx4eUaHY0T/8nIG55GoOn6jXC8WKxqJ/V8pfAt31UQMIL0rP6BFWm7 XEAjJeteEFxxj7TyhfeRvSZ4T3DndxuVY/vU5aoHwvTw510JQZOINPWzoBEMM/9E Wf2HUHGmTVNZD2KPBIRpVGzilVcysqbPP1RnuZFAX3ozM7dgAzTRL0z6WOWUDsik a0U/S3FGiW8BL3VLzw8w8TaMTo0hS0wRi0dHSymcsXr8s0KThUp4tA+9HgfugY6w lLueyJXmbCvHZ+JPULhG4cYKULeJcX1/BDeYxi7eFd28CyveyOI= -----END CERTIFICATE-----Generated at Thu Sep 17 09:23:41 2026 by rpki-client