$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft File: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft (raw, json) Hash identifier: YAVpeMsfFgK4Fxf0ERt2DHqpmaOsB1sWvfC1MwRrVNs= Subject key identifier: 15:31:FC:F1:6B:9B:DD:F8:14:4A:FF:D6:35:50:B4:AC:70:FA:5F:87 Authority key identifier: A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 Certificate issuer: /CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Certificate serial: 27295B53A91CF84A7F5A6EA977838209EE5FB830 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 03:22:42 +0000 Manifest this update: Thu 17 Sep 2026 03:17:42 +0000 Manifest next update: Fri 18 Sep 2026 04:50:42 +0000 Files and hashes: 1: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: Ms5lVpCR+d3KiqA+8+cluXhFQb/KgXQqPnflZyEWwJA=) 2: A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl (hash: oYag7ULhcFXzjdRS6/mb39a/fvGytrraXMOKgSvY90s=) 3: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: Sl5RIQ6TEp2vaieF8W/DsRGoACBj5tfJiV0/4Hnxdeo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:29:5b:53:a9:1c:f8:4a:7f:5a:6e:a9:77:83:82:09:ee:5f:b8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Validity Not Before: Sep 17 03:17:42 2026 GMT Not After : Sep 18 04:50:42 2026 GMT Subject: CN=1531FCF16B9BDDF8144AFFD63550B4AC70FA5F87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d3:c9:6f:15:01:ce:4b:57:21:98:fc:e8:82: c1:48:6b:f7:95:d6:87:8c:66:78:c3:c3:21:e5:76: 22:da:98:45:57:bc:ab:b2:f8:7d:a9:2e:b4:ee:63: 2b:41:1d:49:d1:65:7a:31:6d:4a:52:dd:87:a6:98: b7:2b:1a:ac:89:fe:b3:cb:70:4a:c0:43:d5:a5:fd: 58:e0:2d:e8:9a:47:ae:a2:97:40:8f:cf:9f:4f:a0: 49:df:88:7d:60:fa:fd:81:e9:6a:ce:21:76:ef:45: fd:a1:f6:61:26:64:08:4b:29:75:3e:d6:63:56:0a: 03:24:39:55:41:9f:fd:5a:8a:67:8e:76:92:b4:97: 11:66:f7:5c:e5:52:f0:1d:5b:1c:8b:36:8b:07:c7: c1:ad:bf:5e:7d:83:e0:5e:c4:9b:1b:1e:a8:4f:98: c5:3f:ac:be:fa:b5:8c:3c:e7:4f:d8:79:59:41:7f: 5e:5c:19:f2:0e:b3:33:90:fd:3d:8f:8a:ef:73:03: cf:19:8e:e3:c2:c9:31:36:26:d0:db:dc:ac:e0:39: e6:60:70:35:f1:cb:c3:17:7d:67:74:9b:e7:59:13: 89:2c:8f:4b:6b:87:2d:9c:eb:59:ae:72:d7:e2:2d: 55:fa:7c:88:da:34:0d:dd:61:b3:c4:7e:28:96:31: 70:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:31:FC:F1:6B:9B:DD:F8:14:4A:FF:D6:35:50:B4:AC:70:FA:5F:87 X509v3 Authority Key Identifier: keyid:A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:07:76:b0:08:0f:31:3e:9d:aa:54:03:e8:13:44:93:18:15: 8b:2a:a1:e4:54:2c:d5:5a:fa:df:0b:d3:59:44:32:d7:0d:21: 86:d6:d8:88:60:2a:49:07:32:30:ef:f0:47:30:55:9d:c8:2a: 28:9f:b5:8a:dc:7a:db:a5:1b:1f:f2:a6:57:a5:6a:ff:02:29: c1:5b:c8:80:21:b4:d4:d9:68:f3:10:b0:c1:5e:ec:76:45:62: cb:0a:d0:7e:53:a9:4a:6b:13:4f:8f:6b:42:b1:ff:2b:b1:79: b1:d2:15:5b:4b:1c:b2:18:72:93:7c:eb:01:5b:84:4c:e3:33: a2:0b:a8:dd:eb:4a:0d:51:a3:5f:f1:ab:d6:35:e9:a1:34:b7: 49:97:85:39:eb:e4:1d:a4:d5:91:f8:18:1f:52:cc:d9:e9:62: 15:a9:0f:05:05:d6:b9:8c:2b:4f:47:e7:0d:03:fe:cf:33:16: a2:c4:1f:6d:b2:1b:1b:5e:bf:bb:41:95:95:26:6a:2d:c9:a4: dc:dc:c8:e7:61:5b:d5:c3:81:7a:83:3a:1e:c7:77:43:14:94: 96:83:fa:bb:c6:4b:f6:16:eb:0a:80:fb:b8:ea:91:6a:e9:0a: 96:31:7c:9e:1e:85:cc:1b:db:2b:aa:97:99:2e:d8:28:f3:a6: 78:42:3a:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJylbU6kc+Ep/Wm6pd4OCCe5fuDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFF OTBGQ0IwMzAeFw0yNjA5MTcwMzE3NDJaFw0yNjA5MTgwNDUwNDJaMDMxMTAvBgNV BAMTKDE1MzFGQ0YxNkI5QkRERjgxNDRBRkZENjM1NTBCNEFDNzBGQTVGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH08lvFQHOS1chmPzogsFIa/eV 1oeMZnjDwyHldiLamEVXvKuy+H2pLrTuYytBHUnRZXoxbUpS3YemmLcrGqyJ/rPL cErAQ9Wl/VjgLeiaR66il0CPz59PoEnfiH1g+v2B6WrOIXbvRf2h9mEmZAhLKXU+ 1mNWCgMkOVVBn/1aimeOdpK0lxFm91zlUvAdWxyLNosHx8Gtv159g+BexJsbHqhP mMU/rL76tYw850/YeVlBf15cGfIOszOQ/T2Piu9zA88ZjuPCyTE2JtDb3KzgOeZg cDXxy8MXfWd0m+dZE4ksj0trhy2c61muctfiLVX6fIjaNA3dYbPEfiiWMXCrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFTH88Wub3fgUSv/WNVC0rHD6X4cwHwYDVR0j BBgwFoAUoum7qBCWLHwwP3QFKtqPiukPywMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmI2OWQ2NjctMTdhNC00ZmRkLTljNTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgx MDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFFOTBGQ0IwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkU5QkJBODEwOTYyQzdDMzAzRjc0MDUyQURBOEY4QUU5MEZD QjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThG OEFFOTBGQ0IwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEHdrAIDzE+napUA+gTRJMYFYsqoeRULNVa +t8L01lEMtcNIYbW2IhgKkkHMjDv8EcwVZ3IKiiftYrcetulGx/yplelav8CKcFb yIAhtNTZaPMQsMFe7HZFYssK0H5TqUprE0+Pa0Kx/yuxebHSFVtLHLIYcpN86wFb hEzjM6ILqN3rSg1Ro1/xq9Y16aE0t0mXhTnr5B2k1ZH4GB9SzNnpYhWpDwUF1rmM K09H5w0D/s8zFqLEH22yGxtev7tBlZUmai3JpNzcyOdhW9XDgXqDOh7Hd0MUlJaD +rvGS/YW6wqA+7jqkWrpCpYxfJ4ehcwb2yuql5ku2CjzpnhCOv4= -----END CERTIFICATE-----Generated at Thu Sep 17 15:11:40 2026 by rpki-client