$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft File: C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft (raw, json) Hash identifier: PdqAOFTOMA9IO9QUjZpWttG+KU5/Prpc7wQmaqRpifU= Subject key identifier: B9:96:9A:15:70:0B:AE:16:E4:A8:F0:C8:ED:5C:7A:AC:83:89:A0:BA Authority key identifier: C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F Certificate issuer: /CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Certificate serial: 722B18126CCA4821587B6914FD79B4631B00B277 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft Manifest number: EA Signing time: Sat 24 Oct 2026 15:13:09 +0000 Manifest this update: Sat 24 Oct 2026 15:08:09 +0000 Manifest next update: Sun 25 Oct 2026 17:54:09 +0000 Files and hashes: 1: 3230322e39332e32342e302f32312d3231203d3e203233393532.roa (hash: 3DKoXwBAcS+jAgG56so/w0LfTxjXkoMotMqExXI7Hkk=) 2: 3230322e39332e32392e302f32342d3234203d3e203233393532.roa (hash: Omke75z/uNaQobGnfXKQ3d9K7J2R9/Q2eOXtQtif9WU=) 3: 3230322e39332e32352e302f32342d3234203d3e203233393532.roa (hash: XDcl778T4rloVqTTjGoVuGMqfUdN427riMbFlonBX50=) 4: 3230322e39332e32362e302f32342d3234203d3e203233393532.roa (hash: wkOR/tKRFg1S67lRSPwTcy9/cVjDL9uk2HigWHRxfeU=) 5: 3230322e39332e32372e302f32342d3234203d3e203233393532.roa (hash: XriecMPCY4alQrxwYsfldyREke/eGKRNr/vElamRFhc=) 6: C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl (hash: FfX2eqJaV3MHkVrG2gN+lWZkl3Ez5E8SXvbCJk96ns4=) 7: 3230322e39332e33302e302f32342d3234203d3e203233393532.roa (hash: bpztS81zV/NNGiXHgumEn+WH+G0wv++4rGgXBHGkvA4=) 8: 3230322e39332e32342e302f32342d3234203d3e203233393532.roa (hash: 13PIyETCXWDo1Gv/U6Oaqwz2KRpjJgPdWNVs0uRPBXw=) 9: 3230322e39332e33312e302f32342d3234203d3e203233393532.roa (hash: d+9UVCD8niS1faGA61UPoVHLJY0k2w63v+pVMpLKKfc=) 10: 3230322e39332e32382e302f32342d3234203d3e203233393532.roa (hash: 9SwaYqrzPZ+NZyn3VVdmOLoMhtVvVQwxxV4EtTxtGy4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 17:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:2b:18:12:6c:ca:48:21:58:7b:69:14:fd:79:b4:63:1b:00:b2:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Validity Not Before: Oct 24 15:08:09 2026 GMT Not After : Oct 25 17:54:09 2026 GMT Subject: CN=B9969A15700BAE16E4A8F0C8ED5C7AAC8389A0BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9e:98:b2:1a:66:17:72:56:01:21:23:62:a6: f7:23:1c:99:91:84:bf:d6:64:8c:21:c6:83:bc:65: dd:9e:45:cc:a6:35:b1:13:22:16:e8:e1:59:5d:43: 8f:2a:64:9c:39:c8:e7:2e:de:c3:2d:c6:c5:e6:a2: 78:cb:66:3c:61:55:ba:21:f9:11:18:17:6b:43:16: ae:06:2f:b9:04:d4:9b:24:ac:da:00:99:f3:a9:5b: cf:73:02:da:66:2c:50:06:11:2e:11:dc:c2:42:49: 1b:06:2b:e0:0d:10:fa:9f:69:6c:88:c0:6c:d6:bf: 30:27:e7:6b:8a:79:a0:91:5f:aa:be:1f:35:c3:47: a7:11:22:72:cc:c4:06:9c:a5:ba:44:b9:3b:70:8f: 73:59:84:23:82:d7:f7:54:3e:ec:8f:14:90:7d:3c: e0:a3:b3:fa:d8:d4:63:0c:b7:d6:c1:5b:97:a9:07: fa:bf:2a:c3:30:42:c3:cb:da:b0:df:bc:7c:7e:53: 72:59:2a:20:24:3a:03:30:e1:48:a9:ae:e4:4e:fb: 0b:b3:83:f7:90:bb:e6:3d:85:2c:ff:8e:dd:86:c6: 7b:fd:8e:b8:f4:70:14:76:ca:23:0c:5f:5f:15:42: d9:67:1f:4f:4a:65:ad:ca:2a:8a:d1:3f:62:18:9e: 3c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:96:9A:15:70:0B:AE:16:E4:A8:F0:C8:ED:5C:7A:AC:83:89:A0:BA X509v3 Authority Key Identifier: keyid:C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b0:a6:bc:38:8a:4a:70:b3:02:a5:b2:3a:36:fd:c9:d0:60: 20:63:19:16:3a:2a:4e:00:ac:65:3c:d6:91:af:87:24:0c:b9: bb:ac:71:6e:f6:89:00:ed:1a:4e:b9:a6:66:d2:88:11:d7:34: f6:b0:c7:e4:97:c3:00:88:40:9c:b6:b2:80:2f:d3:1f:cf:6f: 0f:d7:00:a1:d7:df:fd:d9:3b:25:0a:3a:a3:96:37:c6:9b:e4: 7d:c1:49:d2:b8:95:4f:32:2f:92:1c:92:55:27:a4:4b:e4:4f: 06:b5:c1:35:c2:44:7e:13:5b:d4:62:be:75:fe:18:1a:5c:4d: 2b:55:87:86:ac:b2:18:c8:8f:53:b3:bf:fa:ea:08:4e:d7:31: be:8d:20:fa:32:25:5e:43:c7:fb:c3:d9:85:d9:e5:e3:ef:e2: 6f:c0:2b:b5:d1:bb:0b:76:13:62:10:f2:95:4a:7c:d1:36:38: 68:55:fa:11:2e:74:be:d9:84:b0:b7:e1:6b:5d:09:d0:34:34: 3e:a7:d2:02:d8:fe:16:5d:7e:ff:30:ce:aa:33:47:84:01:0c: 32:21:92:c9:3a:db:3a:66:97:33:b2:1a:2b:2e:f2:d3:18:d3: 6e:57:74:6e:fa:f8:3d:78:e6:02:2e:87:59:d5:0d:03:3c:7a: 9c:06:dc:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcisYEmzKSCFYe2kU/Xm0YxsAsncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQx RTU3MEExRjAeFw0yNjEwMjQxNTA4MDlaFw0yNjEwMjUxNzU0MDlaMDMxMTAvBgNV BAMTKEI5OTY5QTE1NzAwQkFFMTZFNEE4RjBDOEVENUM3QUFDODM4OUEwQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnpiyGmYXclYBISNipvcjHJmR hL/WZIwhxoO8Zd2eRcymNbETIhbo4VldQ48qZJw5yOcu3sMtxsXmonjLZjxhVboh +REYF2tDFq4GL7kE1JskrNoAmfOpW89zAtpmLFAGES4R3MJCSRsGK+ANEPqfaWyI wGzWvzAn52uKeaCRX6q+HzXDR6cRInLMxAacpbpEuTtwj3NZhCOC1/dUPuyPFJB9 POCjs/rY1GMMt9bBW5epB/q/KsMwQsPL2rDfvHx+U3JZKiAkOgMw4UipruRO+wuz g/eQu+Y9hSz/jt2Gxnv9jrj0cBR2yiMMX18VQtlnH09KZa3KKorRP2IYnjwNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuZaaFXALrhbkqPDI7Vx6rIOJoLowHwYDVR0j BBgwFoAUwqkKw2SBoZ7kFLtayqgAJB5XCh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4YWIzZTAtY2E2OC00MmY2LTk4ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2 NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQxRTU3MEExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkE5MEFDMzY0ODFBMTlFRTQxNEJCNUFDQUE4MDAyNDFFNTcw QTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4YWIzZTAtY2E2OC00MmY2LTk4 ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAw MjQxRTU3MEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmwprw4ikpwswKlsjo2/cnQYCBjGRY6Kk4A rGU81pGvhyQMubuscW72iQDtGk65pmbSiBHXNPawx+SXwwCIQJy2soAv0x/Pbw/X AKHX3/3ZOyUKOqOWN8ab5H3BSdK4lU8yL5IcklUnpEvkTwa1wTXCRH4TW9RivnX+ GBpcTStVh4asshjIj1Ozv/rqCE7XMb6NIPoyJV5Dx/vD2YXZ5ePv4m/AK7XRuwt2 E2IQ8pVKfNE2OGhV+hEudL7ZhLC34WtdCdA0ND6n0gLY/hZdfv8wzqozR4QBDDIh ksk62zpmlzOyGisu8tMY025XdG76+D145gIuh1nVDQM8epwG3PA= -----END CERTIFICATE-----Generated at Sun Oct 25 06:48:45 2026 by rpki-client