$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft File: 2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft (raw, json) Hash identifier: rsCBVBo1FSA1/ElRTTW4A0U4iQ8Urn/ZWvfKaogmrUI= Subject key identifier: 15:02:A0:8F:CB:0D:23:98:83:64:2A:72:6B:E2:D5:AA:DB:5D:80:ED Authority key identifier: 2A:C4:B9:21:8D:44:A8:AF:6A:89:3D:00:D5:F2:8F:34:AD:B8:3E:ED Certificate issuer: /CN=2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED Certificate serial: 1083CA98C02725413E7E4B1BD46108D8E1B82249 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft Manifest number: EA Signing time: Sun 25 Oct 2026 01:56:31 +0000 Manifest this update: Sun 25 Oct 2026 01:51:31 +0000 Manifest next update: Mon 26 Oct 2026 02:59:31 +0000 Files and hashes: 1: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: Yu7TLcR1tuusuhDSrYnM4of9BN5qOWkNLvH5+MvtCeE=) 2: 2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl (hash: 8tOQoYFG6gJNEsSx2pIm83FPls+XUFjDsoRwjrdGeJ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 02:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:83:ca:98:c0:27:25:41:3e:7e:4b:1b:d4:61:08:d8:e1:b8:22:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED Validity Not Before: Oct 25 01:51:31 2026 GMT Not After : Oct 26 02:59:31 2026 GMT Subject: CN=1502A08FCB0D239883642A726BE2D5AADB5D80ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:34:f1:02:9e:4e:7a:ff:9d:43:16:b1:04:22: a3:0f:e8:5c:1b:76:ba:12:8b:06:02:3b:e0:0d:4d: 30:04:bb:d1:cf:50:92:5a:42:d8:23:e0:49:b2:ee: c1:d4:0f:0a:8c:19:1d:6d:52:04:72:0a:c9:fc:14: a1:0c:31:20:6e:4e:cd:49:19:7b:19:4d:2b:56:9a: 9a:5c:8a:e3:78:f1:1a:2b:f4:f7:9e:78:e9:0b:b5: 29:71:45:06:d9:6d:ac:67:2f:3d:6c:23:69:67:ba: 63:81:a4:ef:c9:fa:f0:85:cb:b9:a6:31:3c:3f:49: bf:70:e3:0a:7d:05:c0:48:a5:1d:bf:61:10:c7:80: 64:f5:ff:00:48:7a:fe:29:7b:26:97:16:7c:c6:8e: 31:13:39:4d:13:40:21:21:58:db:0f:63:84:91:9a: 1b:39:4a:8e:5b:74:2c:91:41:43:a5:94:2d:73:fc: 7b:fe:a5:62:59:c7:13:5b:e7:ba:8c:0d:bd:18:d2: 29:ad:57:d2:2a:3e:65:ec:e5:8e:9e:22:63:6c:df: 5f:9a:a5:90:9f:d2:95:a6:11:43:0a:1d:ec:df:3f: ac:2b:98:94:b1:a5:f8:c7:3e:ef:7c:ae:1e:f1:ef: 97:d1:93:d3:c1:7b:d5:b7:1b:a6:6e:ed:22:a5:53: f6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:02:A0:8F:CB:0D:23:98:83:64:2A:72:6B:E2:D5:AA:DB:5D:80:ED X509v3 Authority Key Identifier: keyid:2A:C4:B9:21:8D:44:A8:AF:6A:89:3D:00:D5:F2:8F:34:AD:B8:3E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:22:0a:6c:59:4c:1c:5a:8e:f4:d5:d4:a4:af:0e:f6:dd:70: 02:6f:f0:28:cf:e7:7e:93:d5:00:f8:63:3a:cf:9a:23:70:96: 8a:71:03:c0:a6:5d:14:ff:d6:fc:64:b9:17:3f:56:bd:d5:0d: 71:4f:02:db:44:6a:50:b4:66:47:18:b9:94:63:0b:d8:72:82: 7d:bd:18:2d:a9:19:69:72:b8:82:91:0b:fd:fa:dc:cd:c1:14: f1:bb:a7:31:4a:2a:7d:3d:26:7e:f2:49:ec:56:f9:59:a8:9a: 63:4b:72:52:1e:c7:4a:29:c4:ae:7a:a7:95:86:41:8e:28:e7: 4f:48:85:6e:24:94:06:36:2c:1d:98:13:f9:9d:54:b0:41:48: b3:42:0e:46:81:f8:93:a7:65:35:b5:21:50:e9:fb:e5:83:d1: e6:aa:04:78:b2:c4:a9:8a:f4:b8:2d:1a:62:7b:e6:b2:de:4d: 65:eb:f7:49:bc:44:02:f1:f6:6a:47:d4:35:17:c0:fd:5f:ac: ab:59:77:ae:db:ed:52:9a:d4:2d:2d:c7:43:7c:c5:57:ad:ba: 6e:94:5f:6d:a6:80:ad:c7:5a:e2:99:0a:de:ac:da:0d:01:8a: 29:7b:16:94:65:cd:33:50:65:2c:4c:a4:0f:0a:ea:85:ad:da: e5:9b:ad:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEIPKmMAnJUE+fksb1GEI2OG4IkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFDNEI5MjE4RDQ0QThBRjZBODkzRDAwRDVGMjhGMzRB REI4M0VFRDAeFw0yNjEwMjUwMTUxMzFaFw0yNjEwMjYwMjU5MzFaMDMxMTAvBgNV BAMTKDE1MDJBMDhGQ0IwRDIzOTg4MzY0MkE3MjZCRTJENUFBREI1RDgwRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTNPECnk56/51DFrEEIqMP6Fwb droSiwYCO+ANTTAEu9HPUJJaQtgj4Emy7sHUDwqMGR1tUgRyCsn8FKEMMSBuTs1J GXsZTStWmppciuN48Ror9PeeeOkLtSlxRQbZbaxnLz1sI2lnumOBpO/J+vCFy7mm MTw/Sb9w4wp9BcBIpR2/YRDHgGT1/wBIev4peyaXFnzGjjETOU0TQCEhWNsPY4SR mhs5So5bdCyRQUOllC1z/Hv+pWJZxxNb57qMDb0Y0imtV9IqPmXs5Y6eImNs31+a pZCf0pWmEUMKHezfP6wrmJSxpfjHPu98rh7x75fRk9PBe9W3G6Zu7SKlU/YDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFQKgj8sNI5iDZCpya+LVqttdgO0wHwYDVR0j BBgwFoAUKsS5IY1EqK9qiT0A1fKPNK24Pu0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4NmNiNWQtZjA3ZC00MjZhLThlNWUtYTc3YTk3OGRkMmVlLzAvMkFDNEI5MjE4 RDQ0QThBRjZBODkzRDAwRDVGMjhGMzRBREI4M0VFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUM0QjkyMThENDRBOEFGNkE4OTNEMDBENUYyOEYzNEFEQjgz RUVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvMkFDNEI5MjE4RDQ0QThBRjZBODkzRDAwRDVGMjhG MzRBREI4M0VFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkiCmxZTBxajvTV1KSvDvbdcAJv8CjP536T 1QD4YzrPmiNwlopxA8CmXRT/1vxkuRc/Vr3VDXFPAttEalC0ZkcYuZRjC9hygn29 GC2pGWlyuIKRC/363M3BFPG7pzFKKn09Jn7ySexW+VmommNLclIex0opxK56p5WG QY4o509IhW4klAY2LB2YE/mdVLBBSLNCDkaB+JOnZTW1IVDp++WD0eaqBHiyxKmK 9LgtGmJ75rLeTWXr90m8RALx9mpH1DUXwP1frKtZd67b7VKa1C0tx0N8xVetum6U X22mgK3HWuKZCt6s2g0Biil7FpRlzTNQZSxMpA8K6oWt2uWbrYs= -----END CERTIFICATE-----Generated at Sun Oct 25 20:53:04 2026 by rpki-client