$ rpki-client -vvf rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft File: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft (raw, json) Hash identifier: Qr4JWuvIIxVvY0R8y8MvH/mfOrLcq4d6J3vpv2bZuGE= Subject key identifier: 7A:E1:1E:7A:63:BC:DD:A0:91:7F:2A:3F:66:D2:7C:9F:7C:68:1C:B7 Authority key identifier: A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 Certificate issuer: /CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Certificate serial: 3B2525ACAE833C743D1B28FB39E1232D9EC597F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft Manifest number: 7A Signing time: Sun 02 Aug 2026 16:06:54 +0000 Manifest this update: Sun 02 Aug 2026 16:01:54 +0000 Manifest next update: Mon 03 Aug 2026 17:34:54 +0000 Files and hashes: 1: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl (hash: acNI/YYzfX+5onA1lMzFRgZ96HBpUwAW+yZIYklhH8Q=) 2: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: Ms5lVpCR+d3KiqA+8+cluXhFQb/KgXQqPnflZyEWwJA=) 3: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: Sl5RIQ6TEp2vaieF8W/DsRGoACBj5tfJiV0/4Hnxdeo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:25:25:ac:ae:83:3c:74:3d:1b:28:fb:39:e1:23:2d:9e:c5:97:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Validity Not Before: Aug 2 16:01:54 2026 GMT Not After : Aug 3 17:34:54 2026 GMT Subject: CN=7AE11E7A63BCDDA0917F2A3F66D27C9F7C681CB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1d:ae:e4:e6:6d:61:be:79:8e:7d:16:8d:04: d0:57:15:67:46:ba:2c:02:01:59:78:20:b8:b4:40: 7e:53:56:31:70:ad:73:11:61:e6:21:cb:bc:3f:2e: 31:46:2d:84:64:33:50:0c:aa:8f:3b:dc:44:72:2e: 85:17:e9:62:0d:01:a1:52:4b:b1:04:74:8f:ef:8c: d3:8f:46:1f:d7:81:dc:40:5d:2c:45:08:f5:69:bf: bf:ed:24:75:18:56:f7:e7:14:03:3a:a1:ca:5f:00: b5:e3:51:10:66:57:78:96:46:ce:2a:df:2c:07:19: 86:cd:a6:3b:fa:1b:9d:ee:c2:17:5b:d0:69:20:7d: dc:ab:9e:1d:b1:e0:d9:66:b3:5b:fd:38:f6:6e:a7: f9:06:09:e7:50:db:0b:75:a4:f3:9b:3b:59:33:ce: 90:8c:90:9f:03:a0:f9:3f:0b:d8:d1:45:94:ae:0a: a0:4c:63:45:48:09:7d:a6:f8:b5:56:f1:78:12:7f: 4c:a2:59:8b:5c:e3:dd:f0:99:0c:44:c5:3b:b6:33: 23:ff:78:3b:40:dd:03:68:4b:8c:7e:aa:38:4a:95: 31:5a:f2:4c:1a:6b:00:29:f2:71:88:c6:82:82:df: ea:76:4e:a7:dd:7e:4f:d0:55:a1:9d:48:0e:01:e4: 1e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E1:1E:7A:63:BC:DD:A0:91:7F:2A:3F:66:D2:7C:9F:7C:68:1C:B7 X509v3 Authority Key Identifier: keyid:A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:9d:32:59:77:0f:97:7f:eb:20:0c:4e:1c:14:77:66:27:02: f8:49:59:b5:d3:92:f5:30:1d:71:b0:06:73:f5:69:75:a8:35: 53:70:56:62:64:d4:78:04:1b:a3:75:c6:fc:56:cd:12:11:20: 9b:22:87:4b:74:63:4a:28:6b:2b:a0:ac:69:93:0a:e4:a6:66: be:1b:f0:d9:8f:41:f0:3a:6b:43:a3:86:74:5a:58:05:64:c5: bf:e9:86:6a:1a:62:37:39:aa:c5:b1:ec:05:8d:f8:e8:2d:38: a3:d2:38:93:a4:ce:2e:f3:8c:b2:a1:08:df:ef:43:14:dd:97: d7:22:01:da:6f:22:dd:cf:6a:21:f7:49:32:3c:1a:ee:9c:31: 3f:08:b8:bc:53:9a:b5:2e:ce:40:56:fe:91:0a:47:4c:5e:50: f9:7b:64:43:ed:72:9f:85:36:ca:73:9a:e8:c0:a5:f5:eb:a5: 45:4c:d1:da:72:f5:b5:2e:fd:d8:c7:be:5c:70:1c:2b:71:87: 43:60:81:48:83:10:8d:c6:6a:a9:c5:cf:8e:9e:d7:02:b8:57: df:76:7a:be:4a:75:6a:bb:c1:e8:3b:f9:da:02:f7:9b:bb:15: a5:7a:d0:3e:41:84:5b:18:cc:cc:1f:3f:5e:09:4b:82:79:29: 68:18:3e:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOyUlrK6DPHQ9Gyj7OeEjLZ7Fl/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFF OTBGQ0IwMzAeFw0yNjA4MDIxNjAxNTRaFw0yNjA4MDMxNzM0NTRaMDMxMTAvBgNV BAMTKDdBRTExRTdBNjNCQ0REQTA5MTdGMkEzRjY2RDI3QzlGN0M2ODFDQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHa7k5m1hvnmOfRaNBNBXFWdG uiwCAVl4ILi0QH5TVjFwrXMRYeYhy7w/LjFGLYRkM1AMqo873ERyLoUX6WINAaFS S7EEdI/vjNOPRh/XgdxAXSxFCPVpv7/tJHUYVvfnFAM6ocpfALXjURBmV3iWRs4q 3ywHGYbNpjv6G53uwhdb0Gkgfdyrnh2x4Nlms1v9OPZup/kGCedQ2wt1pPObO1kz zpCMkJ8DoPk/C9jRRZSuCqBMY0VICX2m+LVW8XgSf0yiWYtc493wmQxExTu2MyP/ eDtA3QNoS4x+qjhKlTFa8kwaawAp8nGIxoKC3+p2Tqfdfk/QVaGdSA4B5B4PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeuEeemO83aCRfyo/ZtJ8n3xoHLcwHwYDVR0j BBgwFoAUoum7qBCWLHwwP3QFKtqPiukPywMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmI2OWQ2NjctMTdhNC00ZmRkLTljNTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgx MDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFFOTBGQ0IwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkU5QkJBODEwOTYyQzdDMzAzRjc0MDUyQURBOEY4QUU5MEZD QjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThG OEFFOTBGQ0IwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACydMll3D5d/6yAMThwUd2YnAvhJWbXTkvUw HXGwBnP1aXWoNVNwVmJk1HgEG6N1xvxWzRIRIJsih0t0Y0ooayugrGmTCuSmZr4b 8NmPQfA6a0OjhnRaWAVkxb/phmoaYjc5qsWx7AWN+OgtOKPSOJOkzi7zjLKhCN/v QxTdl9ciAdpvIt3PaiH3STI8Gu6cMT8IuLxTmrUuzkBW/pEKR0xeUPl7ZEPtcp+F NspzmujApfXrpUVM0dpy9bUu/djHvlxwHCtxh0NggUiDEI3GaqnFz46e1wK4V992 er5KdWq7weg7+doC95u7FaV60D5BhFsYzMwfP14JS4J5KWgYPnk= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:00 2026 by rpki-client