$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft File: 2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft (raw, json) Hash identifier: JdrdcEDieU+SMOk2/tl5R2U3jFuwcn8vVmqiSTU+SAk= Subject key identifier: 38:4C:B3:5A:35:BA:5E:1F:37:38:91:C3:4B:8E:DD:4B:FB:21:98:2E Authority key identifier: 2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA Certificate issuer: /CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA Certificate serial: 1422B97A79A11599C4AC602D2C6356077080652C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 04:39:11 +0000 Manifest this update: Thu 17 Sep 2026 04:34:11 +0000 Manifest next update: Fri 18 Sep 2026 06:52:11 +0000 Files and hashes: 1: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: eNG7+LqFPcA2X6MnUSyw57FaBVmmkZ9qB88jQfVFgQw=) 2: 2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl (hash: sYkDGKpqCDaAyoUdfG3YJG6p3yB0xxmRr61A8L89fOs=) 3: 3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa (hash: Jv5U5LGovEDFBhrf2yN8LsratIXrB4UcO/MW+FaftYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:22:b9:7a:79:a1:15:99:c4:ac:60:2d:2c:63:56:07:70:80:65:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA Validity Not Before: Sep 17 04:34:11 2026 GMT Not After : Sep 18 06:52:11 2026 GMT Subject: CN=384CB35A35BA5E1F373891C34B8EDD4BFB21982E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:49:99:93:6f:e4:97:15:12:3c:0b:0f:f2:8d: 75:94:da:4d:0d:80:ec:75:ab:46:69:1f:8a:3e:63: 44:75:36:2a:47:1c:7e:15:68:3e:29:bb:c5:9a:4c: 51:74:da:77:dc:12:77:da:c6:f2:6c:0a:5c:03:51: 06:d2:09:a2:7d:94:a1:a1:44:21:5d:04:f3:86:6d: 8a:15:ca:c7:b7:cd:76:16:e3:bf:ab:0a:e5:bb:c9: 22:d5:f0:d7:72:ec:87:02:e6:d2:f2:50:e9:54:90: f5:0b:b4:70:b5:8c:4c:f6:e4:c3:0a:86:38:db:a0: e3:8d:2e:ea:20:27:27:e1:f3:3a:86:07:34:55:42: 79:5f:d9:88:59:5f:81:3d:41:5a:b7:4c:e2:70:b7: 8e:bf:1e:0e:8b:b8:92:34:c7:ff:39:22:5f:30:c1: f7:bb:b4:a7:d8:80:2f:ce:0e:33:65:cb:37:5a:90: e5:f1:ff:8a:1e:90:fd:5d:ac:12:94:f2:8e:f6:92: e3:38:9e:cc:af:e7:a6:07:e0:be:a4:77:01:9c:5f: c1:d3:9c:bb:f5:2f:e3:c2:2e:29:b6:90:5a:79:b7: 84:2d:74:a2:df:c3:f0:63:15:b6:8a:e1:18:96:f9: e2:88:f1:5c:29:c6:9d:8a:52:07:51:ee:ec:68:d2: eb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4C:B3:5A:35:BA:5E:1F:37:38:91:C3:4B:8E:DD:4B:FB:21:98:2E X509v3 Authority Key Identifier: keyid:2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:cd:92:2e:8c:cd:ca:c0:af:c0:f8:ba:76:6a:58:89:8a:4c: 21:f3:68:0a:15:6d:dd:65:2d:4a:e2:8c:0c:e4:08:04:45:6b: db:2e:68:7d:f6:92:d8:00:ac:03:27:0b:66:8a:56:5b:88:d9: db:c6:18:20:f3:e1:98:a9:91:77:75:8b:36:76:8c:e1:df:11: c5:ff:f4:8a:48:93:06:13:65:28:74:b0:3d:31:34:b4:be:e0: a0:47:91:50:9c:18:62:5e:89:08:ab:b9:61:c5:a0:8c:04:8d: 97:09:5a:95:7f:f6:7a:7f:91:2a:eb:1f:f6:e5:ba:d7:bf:8e: 79:79:d1:b6:b4:18:1b:ab:71:cb:1c:87:ff:17:7e:ff:56:50: fe:c5:06:38:bb:92:61:54:42:89:8c:81:82:4e:1f:bd:46:03: 74:09:b8:36:ae:52:8e:bf:6e:d7:f2:60:db:fc:bd:e9:e5:af: 24:22:2b:63:e3:26:21:3e:a3:05:76:4c:72:d9:f7:24:0a:25: 19:88:8e:d7:97:0c:77:7b:0b:45:67:ab:9d:e7:13:7f:71:23: 4a:07:fb:65:b7:47:25:54:30:01:d1:71:6e:bf:c6:cb:6a:fc: 59:96:de:ac:1e:c4:78:85:67:38:29:5b:f1:c6:e5:5d:59:33: 3e:eb:ed:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFCK5enmhFZnErGAtLGNWB3CAZSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE3RkI4MDE2REEwMDBBOUQxMEM5ODA5QzQ0RURFMkU5 RkRBQjZGQTAeFw0yNjA5MTcwNDM0MTFaFw0yNjA5MTgwNjUyMTFaMDMxMTAvBgNV BAMTKDM4NENCMzVBMzVCQTVFMUYzNzM4OTFDMzRCOEVERDRCRkIyMTk4MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhSZmTb+SXFRI8Cw/yjXWU2k0N gOx1q0ZpH4o+Y0R1NipHHH4VaD4pu8WaTFF02nfcEnfaxvJsClwDUQbSCaJ9lKGh RCFdBPOGbYoVyse3zXYW47+rCuW7ySLV8Ndy7IcC5tLyUOlUkPULtHC1jEz25MMK hjjboOONLuogJyfh8zqGBzRVQnlf2YhZX4E9QVq3TOJwt46/Hg6LuJI0x/85Il8w wfe7tKfYgC/ODjNlyzdakOXx/4oekP1drBKU8o72kuM4nsyv56YH4L6kdwGcX8HT nLv1L+PCLim2kFp5t4QtdKLfw/BjFbaK4RiW+eKI8Vwpxp2KUgdR7uxo0uufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOEyzWjW6Xh83OJHDS47dS/shmC4wHwYDVR0j BBgwFoAUKn+4AW2gAKnRDJgJxE7eLp/atvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NhMmUwZGItZTI5My00MWM1LTg1ODMtMzgwMTU3NTg0MjFjLzAvMkE3RkI4MDE2 REEwMDBBOUQxMEM5ODA5QzQ0RURFMkU5RkRBQjZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTdGQjgwMTZEQTAwMEE5RDEwQzk4MDlDNDRFREUyRTlGREFC NkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvMkE3RkI4MDE2REEwMDBBOUQxMEM5ODA5QzQ0RURF MkU5RkRBQjZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMDNki6MzcrAr8D4unZqWImKTCHzaAoVbd1l LUrijAzkCARFa9suaH32ktgArAMnC2aKVluI2dvGGCDz4ZipkXd1izZ2jOHfEcX/ 9IpIkwYTZSh0sD0xNLS+4KBHkVCcGGJeiQiruWHFoIwEjZcJWpV/9np/kSrrH/bl ute/jnl50ba0GBurccsch/8Xfv9WUP7FBji7kmFUQomMgYJOH71GA3QJuDauUo6/ btfyYNv8venlryQiK2PjJiE+owV2THLZ9yQKJRmIjteXDHd7C0Vnq53nE39xI0oH +2W3RyVUMAHRcW6/xstq/FmW3qwexHiFZzgpW/HG5V1ZMz7r7WM= -----END CERTIFICATE-----Generated at Thu Sep 17 10:45:30 2026 by rpki-client