$ rpki-client -vvf rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft File: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft (raw, json) Hash identifier: TpX0QzTkm4EvD7IrkG/XLMi4+nClHgDDvUxU0YudsOs= Subject key identifier: 0D:7F:48:48:9C:B5:40:28:EB:47:63:D8:28:2B:FF:AD:45:96:A6:C0 Authority key identifier: A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 Certificate issuer: /CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Certificate serial: 53D3AAA36C71C4160D4D7D35D917F01E6139C2E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 06:30:07 +0000 Manifest this update: Thu 18 Jun 2026 06:25:07 +0000 Manifest next update: Fri 19 Jun 2026 06:39:07 +0000 Files and hashes: 1: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: C70wRs8+D3qa05IzuPgxi0Gg8OUanZPuCF0j6nRzOxs=) 2: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl (hash: qHUdW8zV5gqyHHB4PqB88ZNvZtNwaQgY+ilvR8DHbdM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 06:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d3:aa:a3:6c:71:c4:16:0d:4d:7d:35:d9:17:f0:1e:61:39:c2:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Validity Not Before: Jun 18 06:25:07 2026 GMT Not After : Jun 19 06:39:07 2026 GMT Subject: CN=0D7F48489CB54028EB4763D8282BFFAD4596A6C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e9:25:e7:dc:8d:89:0a:c0:21:09:3c:d5:e7: fa:20:34:64:c5:9a:96:ff:ba:03:79:c6:20:58:54: 45:e2:31:3a:73:ee:4d:11:9e:5e:ae:ef:07:79:48: 21:d3:7f:99:b1:88:a2:8b:45:ae:f9:f3:df:e3:b9: d5:38:8f:d2:ec:6b:0e:75:7b:e3:cd:a9:39:5e:59: 53:62:52:a0:3c:7e:e1:6b:09:14:54:06:d7:98:2a: 0a:5a:d5:8e:d4:9e:70:26:08:58:d6:49:3f:ed:26: 33:c7:87:bd:3a:76:a1:59:fc:10:a4:6b:05:e7:f3: 93:70:74:fe:f6:2c:0a:b2:66:97:ca:51:ca:03:0e: e0:c6:5b:d6:ca:9c:4a:a2:13:9b:02:40:10:e7:df: 19:7b:90:12:18:00:36:56:ca:28:fe:f4:22:b9:a8: 44:8d:46:ad:91:2d:16:fa:e5:e3:6f:1b:94:fe:5c: 27:f9:7b:61:b1:22:48:d4:4b:2e:89:30:d6:10:b7: d3:39:2e:40:4c:d4:ad:21:36:b0:48:c4:ca:fa:55: 0b:94:9a:4e:50:4c:41:ee:5a:20:f6:69:60:ba:52: 88:39:a7:5a:e2:95:af:37:1c:73:4d:a9:be:f4:5d: 8f:ca:85:04:97:dd:90:27:ef:40:40:f9:4d:97:da: 8c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7F:48:48:9C:B5:40:28:EB:47:63:D8:28:2B:FF:AD:45:96:A6:C0 X509v3 Authority Key Identifier: keyid:A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:82:41:e2:5b:ec:66:9f:f7:81:c8:4d:0f:9c:67:c2:b9:f0: ff:1c:b3:4a:92:8a:9a:9c:7d:a3:70:71:fd:40:52:66:df:b2: bb:ef:3e:08:7c:3d:3a:42:37:54:05:6f:45:fe:fa:2a:a8:aa: 1c:47:63:5e:ec:84:2a:69:b9:c4:0d:73:a2:f8:67:aa:05:8e: 72:98:28:f8:b8:48:df:4f:d9:2e:09:5c:fa:53:ed:03:4f:af: 79:25:6c:72:d8:96:6e:8d:5e:76:53:56:ea:20:fd:04:37:1e: 93:9b:2a:22:4d:ec:4d:ec:de:29:bd:1e:01:03:05:66:0e:34: 9a:8e:09:c5:58:f9:63:5f:14:63:43:09:c3:99:43:ba:7d:a7: c8:9c:7e:25:e7:30:0d:bb:1a:3e:cf:16:29:7d:0c:fe:e7:d3: 84:fa:ed:fb:a4:2d:6a:ab:92:5e:3c:1b:88:e5:2c:7d:b5:5e: 76:74:b7:ba:22:b0:b5:8d:b9:49:61:fa:cc:b1:35:3e:c0:d6: f8:06:ad:c7:d8:d1:22:2b:6b:8b:76:90:2f:39:71:32:ff:22: 7c:db:20:40:65:95:a6:c7:5d:21:d1:81:67:51:02:61:09:2b: b2:fe:d1:ea:6b:48:65:d1:4e:04:43:24:96:fb:d4:b9:5a:f5: ca:1c:7d:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU9Oqo2xxxBYNTX012RfwHmE5wucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3 NzcyRUU4NjAeFw0yNjA2MTgwNjI1MDdaFw0yNjA2MTkwNjM5MDdaMDMxMTAvBgNV BAMTKDBEN0Y0ODQ4OUNCNTQwMjhFQjQ3NjNEODI4MkJGRkFENDU5NkE2QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA6SXn3I2JCsAhCTzV5/ogNGTF mpb/ugN5xiBYVEXiMTpz7k0Rnl6u7wd5SCHTf5mxiKKLRa7589/judU4j9Lsaw51 e+PNqTleWVNiUqA8fuFrCRRUBteYKgpa1Y7UnnAmCFjWST/tJjPHh706dqFZ/BCk awXn85NwdP72LAqyZpfKUcoDDuDGW9bKnEqiE5sCQBDn3xl7kBIYADZWyij+9CK5 qESNRq2RLRb65eNvG5T+XCf5e2GxIkjUSy6JMNYQt9M5LkBM1K0hNrBIxMr6VQuU mk5QTEHuWiD2aWC6Uog5p1rila83HHNNqb70XY/KhQSX3ZAn70BA+U2X2oybAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDX9ISJy1QCjrR2PYKCv/rUWWpsAwHwYDVR0j BBgwFoAUosq8LlK/fmX8UB8HrEg0rHdy7oYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJkYWI0NmEtMDg1ZS00NDMyLTk4MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1 MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3NzcyRUU4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkNBQkMyRTUyQkY3RTY1RkM1MDFGMDdBQzQ4MzRBQzc3NzJF RTg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0 QUM3NzcyRUU4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqCQeJb7Gaf94HITQ+cZ8K58P8cs0qSipqc faNwcf1AUmbfsrvvPgh8PTpCN1QFb0X++iqoqhxHY17shCppucQNc6L4Z6oFjnKY KPi4SN9P2S4JXPpT7QNPr3klbHLYlm6NXnZTVuog/QQ3HpObKiJN7E3s3im9HgED BWYONJqOCcVY+WNfFGNDCcOZQ7p9p8icfiXnMA27Gj7PFil9DP7n04T67fukLWqr kl48G4jlLH21XnZ0t7oisLWNuUlh+syxNT7A1vgGrcfY0SIra4t2kC85cTL/Inzb IEBllabHXSHRgWdRAmEJK7L+0eprSGXRTgRDJJb71Lla9cocfas= -----END CERTIFICATE-----Generated at Thu Jun 18 17:09:22 2026 by rpki-client