$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.mft File: A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.mft (raw, json) Hash identifier: rIXvGp/g4rxGxkMACiLA58E7ZluiFbAx9VZX/4uajeE= Subject key identifier: CA:09:3B:5A:B0:24:6B:C5:24:50:ED:32:D6:3E:BE:43:89:E4:BF:F0 Authority key identifier: A2:A5:5E:F8:A6:D2:DB:E3:C6:A4:6F:E8:9F:AF:F5:06:EE:6E:BE:C6 Certificate issuer: /CN=A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6 Certificate serial: 4D2D92704ACA6E46C5AEDB7D88F13A581B39B0B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.mft Manifest number: 21 Signing time: Sat 24 Oct 2026 01:00:18 +0000 Manifest this update: Sat 24 Oct 2026 00:55:18 +0000 Manifest next update: Sun 25 Oct 2026 02:37:18 +0000 Files and hashes: 1: A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.crl (hash: 5a9oJ/yqKNbnhlis9iUFJO0nek1v8VreycBblIXQZOQ=) 2: 3230332e3230312e3139302e302f32332d3234203d3e20313534383333.roa (hash: FedQW0GWU8P5i3M8nF0hYiFJaRTI3w977R1u+knEuLI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.crl rsync://rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 02:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:2d:92:70:4a:ca:6e:46:c5:ae:db:7d:88:f1:3a:58:1b:39:b0:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6 Validity Not Before: Oct 24 00:55:18 2026 GMT Not After : Oct 25 02:37:18 2026 GMT Subject: CN=CA093B5AB0246BC52450ED32D63EBE4389E4BFF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9d:0a:00:67:06:d4:28:0b:91:0e:19:07:d6: 53:a1:af:15:af:96:b5:cd:2a:c4:a4:ac:48:3c:06: 75:a7:c8:27:86:29:d4:cf:3c:d8:78:a9:44:84:e4: 22:f7:ee:0c:df:f3:f2:46:34:38:91:b4:77:cd:25: d2:12:0f:ac:31:dd:0e:9d:0f:d4:4a:2d:e8:9b:e8: e0:25:77:99:3e:f5:1a:b1:b5:33:ba:6f:42:55:5d: 83:c3:18:be:32:9c:c9:8a:86:b0:ea:42:f5:e7:b7: 92:20:72:45:16:3e:96:19:0d:22:50:5d:94:79:3d: a0:74:42:c4:8e:45:34:cb:69:f7:e8:e5:74:f5:0a: ba:f3:21:51:e2:18:08:92:e6:42:5b:77:55:8d:31: 3c:e3:d9:5e:d0:97:d2:7b:7c:03:ef:df:ef:ea:32: 07:77:be:1d:a2:cf:ba:25:8d:6b:a4:ee:37:f0:12: 15:05:a2:31:ae:98:b9:f7:35:e0:d6:82:7e:a4:07: 20:69:e9:66:21:d9:35:8e:42:d3:1d:a5:a6:03:8a: 50:6c:0c:ea:54:dc:76:b8:db:d7:dc:2f:40:69:ce: f3:59:ee:a9:65:62:ad:e9:38:61:8e:2c:d7:19:fb: 31:98:5d:24:7b:c4:db:29:43:9f:95:ac:97:aa:2f: 83:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:09:3B:5A:B0:24:6B:C5:24:50:ED:32:D6:3E:BE:43:89:E4:BF:F0 X509v3 Authority Key Identifier: keyid:A2:A5:5E:F8:A6:D2:DB:E3:C6:A4:6F:E8:9F:AF:F5:06:EE:6E:BE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:6f:af:19:4e:b2:bb:5d:b1:5a:66:73:c6:58:d1:2f:22:fb: 4c:44:0a:2c:51:d7:7c:37:ab:d9:6a:48:ba:a2:84:2b:5a:e5: 31:69:d1:a3:5c:ec:34:dd:b6:5b:fe:e8:3a:ef:bc:dc:bd:2c: fb:88:68:0e:88:a3:b9:ed:9a:ba:4d:e1:cf:c4:8a:27:38:3b: cb:5c:de:5e:35:c9:28:58:fb:21:64:ca:5e:12:e4:a3:93:51: b7:1a:d8:c7:13:31:e3:e2:1e:e9:f7:fd:97:cf:1a:5c:09:05: 04:ba:f0:6a:1d:1d:3d:20:32:02:fd:c9:f5:03:62:c1:b2:82: 5f:39:93:ea:5a:73:01:07:23:e7:fe:dc:ac:19:e5:55:70:41: d2:db:8a:39:1b:6b:ef:d0:d6:4c:7d:d0:11:1b:21:c0:f7:a1: 5b:14:c0:36:ac:33:63:f8:24:e8:8d:6e:71:50:d9:ae:28:fc: 6e:91:f1:75:97:5e:0d:75:ce:d7:2e:09:e5:a7:04:cf:75:4b: 2f:42:60:2e:61:0e:18:0e:fb:56:a3:27:19:da:51:97:9c:66: 0e:49:57:d9:80:99:01:4a:7c:a1:87:f5:a9:c0:72:01:73:57: 89:a7:14:c4:06:ef:0a:b4:f3:49:e0:1a:9e:fd:dd:f7:48:1f: 39:76:15:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTS2ScErKbkbFrtt9iPE6WBs5sLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJBNTVFRjhBNkQyREJFM0M2QTQ2RkU4OUZBRkY1MDZF RTZFQkVDNjAeFw0yNjEwMjQwMDU1MThaFw0yNjEwMjUwMjM3MThaMDMxMTAvBgNV BAMTKENBMDkzQjVBQjAyNDZCQzUyNDUwRUQzMkQ2M0VCRTQzODlFNEJGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqnQoAZwbUKAuRDhkH1lOhrxWv lrXNKsSkrEg8BnWnyCeGKdTPPNh4qUSE5CL37gzf8/JGNDiRtHfNJdISD6wx3Q6d D9RKLeib6OAld5k+9RqxtTO6b0JVXYPDGL4ynMmKhrDqQvXnt5IgckUWPpYZDSJQ XZR5PaB0QsSORTTLaffo5XT1CrrzIVHiGAiS5kJbd1WNMTzj2V7Ql9J7fAPv3+/q Mgd3vh2iz7oljWuk7jfwEhUFojGumLn3NeDWgn6kByBp6WYh2TWOQtMdpaYDilBs DOpU3Ha429fcL0BpzvNZ7qllYq3pOGGOLNcZ+zGYXSR7xNspQ5+VrJeqL4NFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUygk7WrAka8UkUO0y1j6+Q4nkv/AwHwYDVR0j BBgwFoAUoqVe+KbS2+PGpG/on6/1Bu5uvsYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzg2ODExOWQtZTAxMi00ZmI0LTk2NTAtYjNhZmQyNjI5YjRlLzAvQTJBNTVFRjhB NkQyREJFM0M2QTQ2RkU4OUZBRkY1MDZFRTZFQkVDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMkE1NUVGOEE2RDJEQkUzQzZBNDZGRTg5RkFGRjUwNkVFNkVC RUM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzg2ODExOWQtZTAxMi00ZmI0LTk2 NTAtYjNhZmQyNjI5YjRlLzAvQTJBNTVFRjhBNkQyREJFM0M2QTQ2RkU4OUZBRkY1 MDZFRTZFQkVDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlvrxlOsrtdsVpmc8ZY0S8i+0xECixR13w3 q9lqSLqihCta5TFp0aNc7DTdtlv+6DrvvNy9LPuIaA6Io7ntmrpN4c/Eiic4O8tc 3l41yShY+yFkyl4S5KOTUbca2McTMePiHun3/ZfPGlwJBQS68GodHT0gMgL9yfUD YsGygl85k+pacwEHI+f+3KwZ5VVwQdLbijkba+/Q1kx90BEbIcD3oVsUwDasM2P4 JOiNbnFQ2a4o/G6R8XWXXg11ztcuCeWnBM91Sy9CYC5hDhgO+1ajJxnaUZecZg5J V9mAmQFKfKGH9anAcgFzV4mnFMQG7wq080ngGp793fdIHzl2FYY= -----END CERTIFICATE-----Generated at Sat Oct 24 10:11:02 2026 by rpki-client