$ rpki-client -vvf rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft File: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft (raw, json) Hash identifier: YlGmYrl2Lb6cD+TGp0drY1FTgXFHj6ELFQCQZ+zeod0= Subject key identifier: 01:0A:09:CC:2C:76:A8:C2:3B:7D:97:09:33:F3:0F:A5:68:F2:F6:45 Authority key identifier: A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 Certificate issuer: /CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Certificate serial: 3DE8172DD77FEA73709F1BFFEB341E62092EC50F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft Manifest number: 3E Signing time: Thu 18 Jun 2026 04:32:26 +0000 Manifest this update: Thu 18 Jun 2026 04:27:26 +0000 Manifest next update: Fri 19 Jun 2026 05:40:26 +0000 Files and hashes: 1: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: Ms5lVpCR+d3KiqA+8+cluXhFQb/KgXQqPnflZyEWwJA=) 2: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl (hash: GFwz39eS2+GubouEkgNCEiO1PrdY8Z47/ro3DW3RthU=) 3: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: Sl5RIQ6TEp2vaieF8W/DsRGoACBj5tfJiV0/4Hnxdeo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 05:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e8:17:2d:d7:7f:ea:73:70:9f:1b:ff:eb:34:1e:62:09:2e:c5:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Validity Not Before: Jun 18 04:27:26 2026 GMT Not After : Jun 19 05:40:26 2026 GMT Subject: CN=010A09CC2C76A8C23B7D970933F30FA568F2F645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:68:0f:fa:45:8d:fe:33:55:4d:be:d0:72:de: 95:d6:35:7d:b6:41:a4:0d:c4:17:85:ee:2a:c7:4a: 0c:32:9d:a1:cf:9e:2e:dc:24:cc:02:2c:4c:83:aa: 23:e5:6d:80:f3:21:c6:3c:d7:ce:53:33:de:67:71: 22:cf:cc:c3:7d:72:57:b1:1a:7e:13:0e:4e:55:de: 75:e1:04:f7:08:b1:bb:8c:4f:bc:f2:aa:66:63:e6: 5a:4b:d9:a0:68:00:76:16:c6:e6:d5:18:ac:d8:19: f0:39:eb:15:52:bb:d4:ec:ef:49:3b:d5:40:25:ac: e4:93:3a:12:6d:ec:04:09:a8:bc:70:db:e8:f0:ca: 13:3c:9e:4a:de:f0:b4:d7:46:07:5b:3e:bf:1b:d0: 07:99:52:f3:93:a5:ea:bf:61:7b:09:1f:b0:11:a6: e6:fc:33:7a:a0:76:16:d0:11:8c:ed:eb:2a:73:c5: ce:da:49:0c:d5:12:09:e3:92:2e:59:66:ce:c3:95: bd:13:6d:8c:38:71:39:85:5b:d5:47:fd:82:55:40: 7f:ae:42:43:29:c7:6d:91:f2:9e:80:b2:fb:71:10: 2c:d5:c2:6e:6a:d1:33:61:98:21:36:76:9f:65:90: c6:b7:03:83:3d:e1:66:e3:3e:91:71:f7:05:0f:16: 0b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0A:09:CC:2C:76:A8:C2:3B:7D:97:09:33:F3:0F:A5:68:F2:F6:45 X509v3 Authority Key Identifier: keyid:A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:d1:bd:15:15:ab:8e:df:1f:e5:2d:c8:98:b8:ee:e8:80:d2: 33:d3:35:18:ce:39:8b:ca:0c:f3:69:d2:35:6d:0c:a0:09:e4: b5:9c:f5:f2:77:a9:0b:0e:32:62:f3:b5:fd:c5:98:fa:22:8b: 87:b4:b0:e9:99:d9:b0:6c:e4:62:09:29:a0:88:a2:6b:27:02: 6e:ba:cc:e5:9d:e3:14:c9:a6:a6:cc:bc:46:4e:92:53:41:a1: c9:32:4c:7f:11:55:97:dc:0c:5d:61:a9:8e:0c:2b:6d:35:6c: c9:cf:e3:c1:ab:ac:a5:70:9f:f8:75:de:e4:75:b3:9d:39:ba: e8:7c:81:77:eb:5d:6a:d4:c3:9d:a0:52:a3:44:4c:82:41:13: aa:f2:d8:3d:40:6f:15:6a:e9:72:78:33:e7:d4:7d:5e:69:9f: ad:27:34:ff:11:03:2c:db:8d:e9:55:7d:be:4d:b0:27:85:cc: 29:f8:11:fd:4a:11:6b:9c:c2:37:61:e1:51:d1:5f:9a:68:c7: 85:ec:d5:9e:f7:53:07:78:9c:c1:36:4f:ac:1b:31:22:08:81: 87:28:46:a2:c2:53:9f:68:41:06:b7:82:9c:2a:1f:86:5d:33: 45:e8:75:cf:f0:2f:2b:7d:21:02:ae:77:f0:03:36:40:a5:0c: 3e:83:80:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPegXLdd/6nNwnxv/6zQeYgkuxQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFF OTBGQ0IwMzAeFw0yNjA2MTgwNDI3MjZaFw0yNjA2MTkwNTQwMjZaMDMxMTAvBgNV BAMTKDAxMEEwOUNDMkM3NkE4QzIzQjdEOTcwOTMzRjMwRkE1NjhGMkY2NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0aA/6RY3+M1VNvtBy3pXWNX22 QaQNxBeF7irHSgwynaHPni7cJMwCLEyDqiPlbYDzIcY8185TM95ncSLPzMN9clex Gn4TDk5V3nXhBPcIsbuMT7zyqmZj5lpL2aBoAHYWxubVGKzYGfA56xVSu9Ts70k7 1UAlrOSTOhJt7AQJqLxw2+jwyhM8nkre8LTXRgdbPr8b0AeZUvOTpeq/YXsJH7AR pub8M3qgdhbQEYzt6ypzxc7aSQzVEgnjki5ZZs7Dlb0TbYw4cTmFW9VH/YJVQH+u QkMpx22R8p6AsvtxECzVwm5q0TNhmCE2dp9lkMa3A4M94WbjPpFx9wUPFgsxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAQoJzCx2qMI7fZcJM/MPpWjy9kUwHwYDVR0j BBgwFoAUoum7qBCWLHwwP3QFKtqPiukPywMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmI2OWQ2NjctMTdhNC00ZmRkLTljNTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgx MDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFFOTBGQ0IwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkU5QkJBODEwOTYyQzdDMzAzRjc0MDUyQURBOEY4QUU5MEZD QjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThG OEFFOTBGQ0IwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDRvRUVq47fH+UtyJi47uiA0jPTNRjOOYvK DPNp0jVtDKAJ5LWc9fJ3qQsOMmLztf3FmPoii4e0sOmZ2bBs5GIJKaCIomsnAm66 zOWd4xTJpqbMvEZOklNBockyTH8RVZfcDF1hqY4MK201bMnP48GrrKVwn/h13uR1 s505uuh8gXfrXWrUw52gUqNETIJBE6ry2D1AbxVq6XJ4M+fUfV5pn60nNP8RAyzb jelVfb5NsCeFzCn4Ef1KEWucwjdh4VHRX5pox4Xs1Z73Uwd4nME2T6wbMSIIgYco RqLCU59oQQa3gpwqH4ZdM0Xodc/wLyt9IQKud/ADNkClDD6DgKM= -----END CERTIFICATE-----Generated at Thu Jun 18 17:09:22 2026 by rpki-client