$ rpki-client -vvvf rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft File: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft (raw, json) Hash identifier: sHX0Lt3qoJIZXYU9qoYIb89C4FozG9DYE0al82qwKuc= Subject key identifier: C0:62:EC:66:77:1D:49:30:34:E5:16:1B:01:24:93:FD:AF:39:56:C0 Authority key identifier: A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 Certificate issuer: /CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Certificate serial: 09FA3204DAB8B3DEB8BE0D224C729ACC04287136 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:10:07 +0000 Manifest this update: Wed 16 Sep 2026 21:05:07 +0000 Manifest next update: Fri 18 Sep 2026 00:52:07 +0000 Files and hashes: 1: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: C70wRs8+D3qa05IzuPgxi0Gg8OUanZPuCF0j6nRzOxs=) 2: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl (hash: Fj4NplPavmLwlE5B42QM1NZV+XOVI41f6PodYX4QxGE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:fa:32:04:da:b8:b3:de:b8:be:0d:22:4c:72:9a:cc:04:28:71:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Validity Not Before: Sep 16 21:05:07 2026 GMT Not After : Sep 18 00:52:07 2026 GMT Subject: CN=C062EC66771D493034E5161B012493FDAF3956C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:18:89:db:70:50:53:43:f3:41:7c:e2:63:fb: b8:69:a7:20:52:52:07:38:07:66:2f:0c:8b:74:4a: ab:cf:9d:41:6e:94:6a:38:f2:6b:33:80:50:bf:38: bc:51:50:19:d3:77:67:4f:3b:e5:2c:96:f0:2f:83: c8:37:07:4d:af:35:df:be:a5:77:45:d4:ba:03:aa: f9:30:bb:b7:22:ce:0b:5e:73:19:e8:2e:6a:f4:bf: cf:3c:28:a9:20:33:fe:6b:d0:e9:1b:7d:26:4b:2f: d6:da:da:19:20:03:5c:79:05:42:42:65:49:e5:bd: ba:0e:d9:40:d2:3a:4a:3f:ba:78:9b:dd:bc:62:be: 86:56:b7:c1:81:a4:df:a5:a9:f6:bc:67:df:ef:6e: 22:d3:82:e1:e6:0b:4d:fe:b8:fd:29:02:e7:32:7a: b8:bc:a2:c4:da:58:c9:21:53:0b:86:16:aa:37:73: 4f:09:f8:d5:67:0b:10:5c:a2:3e:4e:67:94:25:3f: fb:84:c8:c2:03:ea:89:2a:cf:c1:52:76:ea:92:48: 3d:b2:87:6d:5b:34:06:93:57:94:60:0b:0e:9f:2d: c7:e0:c3:8a:df:cd:d9:8b:1c:44:47:70:dc:b9:57: 5c:61:a2:a9:42:43:ba:f1:32:71:1f:4f:ac:34:61: 63:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:62:EC:66:77:1D:49:30:34:E5:16:1B:01:24:93:FD:AF:39:56:C0 X509v3 Authority Key Identifier: keyid:A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:88:25:2a:32:e3:1b:51:1d:84:66:67:76:73:89:ed:79:6a: d2:62:48:d4:f2:77:08:53:7f:5f:90:5d:ed:fb:5f:f0:c7:ee: ee:29:c5:7a:47:7a:c2:cc:a5:21:2c:75:b7:76:ce:60:98:6c: fd:e4:68:0f:d2:47:54:d7:40:8e:50:20:2b:d7:5d:2c:14:29: 61:aa:62:c3:dd:1c:d6:60:ee:f2:af:0b:58:6b:cb:5f:e8:57: 96:f2:67:5e:0a:c3:e1:a0:12:93:8d:20:72:54:e3:82:73:d6: 00:09:fd:4f:da:48:2e:d9:51:b2:45:89:91:2a:a9:42:49:78: b5:f2:3c:b7:37:d1:ae:9b:db:3b:8e:c2:12:1d:82:a6:a1:2a: 7e:7e:6b:08:0e:28:fa:69:3e:ae:b7:88:08:d6:ea:fb:21:bf: 61:64:0e:50:0e:66:01:34:8c:04:0f:97:5c:55:cd:29:c7:02: b2:01:ef:0f:21:31:09:9b:21:41:55:11:b9:dc:c0:e6:57:d4: 11:6b:3b:45:82:78:0a:3b:71:36:66:30:e5:5d:fb:a6:88:3e: c3:7f:c4:1f:e8:ae:d9:7c:a1:af:3b:96:18:72:6b:77:0e:28: ba:e7:12:e7:f9:c6:e1:0f:88:36:bd:bb:28:25:54:6b:cb:8d: 96:ab:40:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCfoyBNq4s964vg0iTHKazAQocTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3 NzcyRUU4NjAeFw0yNjA5MTYyMTA1MDdaFw0yNjA5MTgwMDUyMDdaMDMxMTAvBgNV BAMTKEMwNjJFQzY2NzcxRDQ5MzAzNEU1MTYxQjAxMjQ5M0ZEQUYzOTU2QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhGInbcFBTQ/NBfOJj+7hppyBS Ugc4B2YvDIt0SqvPnUFulGo48mszgFC/OLxRUBnTd2dPO+UslvAvg8g3B02vNd++ pXdF1LoDqvkwu7cizgtecxnoLmr0v888KKkgM/5r0OkbfSZLL9ba2hkgA1x5BUJC ZUnlvboO2UDSOko/unib3bxivoZWt8GBpN+lqfa8Z9/vbiLTguHmC03+uP0pAucy eri8osTaWMkhUwuGFqo3c08J+NVnCxBcoj5OZ5QlP/uEyMID6okqz8FSduqSSD2y h21bNAaTV5RgCw6fLcfgw4rfzdmLHERHcNy5V1xhoqlCQ7rxMnEfT6w0YWMhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwGLsZncdSTA05RYbASST/a85VsAwHwYDVR0j BBgwFoAUosq8LlK/fmX8UB8HrEg0rHdy7oYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJkYWI0NmEtMDg1ZS00NDMyLTk4MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1 MkJGN0U2NUZDNTAxRjA3QUM0ODM0QUM3NzcyRUU4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkNBQkMyRTUyQkY3RTY1RkM1MDFGMDdBQzQ4MzRBQzc3NzJF RTg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQTJDQUJDMkU1MkJGN0U2NUZDNTAxRjA3QUM0ODM0 QUM3NzcyRUU4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGIJSoy4xtRHYRmZ3Zzie15atJiSNTydwhT f1+QXe37X/DH7u4pxXpHesLMpSEsdbd2zmCYbP3kaA/SR1TXQI5QICvXXSwUKWGq YsPdHNZg7vKvC1hry1/oV5byZ14Kw+GgEpONIHJU44Jz1gAJ/U/aSC7ZUbJFiZEq qUJJeLXyPLc30a6b2zuOwhIdgqahKn5+awgOKPppPq63iAjW6vshv2FkDlAOZgE0 jAQPl1xVzSnHArIB7w8hMQmbIUFVEbncwOZX1BFrO0WCeAo7cTZmMOVd+6aIPsN/ xB/ortl8oa87lhhya3cOKLrnEuf5xuEPiDa9uyglVGvLjZarQBg= -----END CERTIFICATE-----Generated at Thu Sep 17 13:51:38 2026 by rpki-client