$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft File: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft (raw, json) Hash identifier: obMwCTTdBk/p/0tJXl7z5so/mLy19+Ce8ZcSQP2jz58= Subject key identifier: 78:4D:E6:B7:02:9D:87:00:3A:77:46:85:F4:B9:79:A4:F6:32:F2:CE Authority key identifier: 2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 Certificate issuer: /CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Certificate serial: 39C2208FA03DF186B6AB4B7E5CA83D024D318B89 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft Manifest number: F4 Signing time: Sat 31 Oct 2026 21:34:36 +0000 Manifest this update: Sat 31 Oct 2026 21:29:36 +0000 Manifest next update: Mon 02 Nov 2026 01:06:36 +0000 Files and hashes: 1: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl (hash: kinZL0tMgISCDqrKBru4peqaKkeVL17clmwGqMJOLFo=) 2: 3130332e3133312e3130372e302f32342d3234203d3e20313338313139.roa (hash: cKDgVoSVAFZfl4hgrIHwI1J4tBbCiwmqXmahxpGLx8I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 23:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c2:20:8f:a0:3d:f1:86:b6:ab:4b:7e:5c:a8:3d:02:4d:31:8b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Validity Not Before: Oct 31 21:29:36 2026 GMT Not After : Nov 2 01:06:36 2026 GMT Subject: CN=784DE6B7029D87003A774685F4B979A4F632F2CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:97:14:e6:4b:5d:a1:31:a5:7a:bb:9a:27:08: f5:3b:76:3b:64:40:a4:ff:ff:22:24:a6:af:15:e9: 2a:b1:48:e1:f1:b4:dd:84:5c:94:ad:85:65:70:ce: 99:73:12:fc:1f:ad:d5:53:91:9f:31:4a:b9:aa:11: 7e:33:ec:22:6d:d7:93:a4:0f:2d:c1:dc:d4:f0:f8: ab:1c:e4:5d:82:9d:2e:06:d6:f9:7b:a0:51:bb:f0: eb:b7:58:d3:0a:a2:85:d5:e4:4c:ba:ce:b8:90:be: bb:a7:cf:97:9d:a9:42:65:29:e4:7a:de:07:0c:3a: 76:73:da:46:d9:fd:14:27:52:42:f9:2c:70:ed:93: 3d:21:e8:27:aa:64:71:aa:15:0c:4e:f3:24:4c:90: 38:e8:b6:a6:01:7e:b5:10:9d:eb:18:ba:07:f7:f0: c2:4b:fc:b6:49:5b:2a:bd:a3:e7:a0:04:22:29:86: 9a:ea:56:7a:28:df:b8:e3:f8:5e:6e:88:24:4c:e7: 57:0a:39:c7:9d:bf:05:9a:9d:59:8c:29:1f:48:a7: 4d:90:05:0c:a8:b7:a4:b2:b1:f0:d2:1b:18:66:ca: 9b:ad:f1:f2:89:62:93:19:66:9a:df:53:db:3b:6f: c6:6d:53:37:67:ad:5c:7c:7b:8d:1d:e1:da:8a:95: 8b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4D:E6:B7:02:9D:87:00:3A:77:46:85:F4:B9:79:A4:F6:32:F2:CE X509v3 Authority Key Identifier: keyid:2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:25:58:dc:81:53:0c:6d:43:32:94:a5:3a:f2:cd:fd:cd:a7: 80:c7:09:c3:d4:96:ab:23:5e:8f:c5:29:cc:6c:e4:ad:77:7f: 43:be:55:39:1a:5d:74:b2:9f:6e:19:b6:0f:d0:cc:19:e0:64: 98:16:cc:65:20:f1:33:5a:d5:8b:6c:cb:2d:25:2d:8c:f2:3a: 1a:cf:eb:90:a4:ef:d4:4a:c1:47:d6:81:c8:77:50:ac:79:57: ab:ae:8a:64:bd:c1:ca:5b:83:9f:82:0c:1f:20:b8:c9:9a:72: 2c:4b:0d:e7:f9:b1:1a:e3:6d:d3:ad:8e:1b:31:10:7f:41:87: 8a:0f:6e:a9:cb:d6:f2:cc:08:8f:89:bf:75:51:d2:58:78:83: fc:38:1b:70:7a:f7:dd:e0:52:cb:52:18:fb:bc:f8:76:da:50: a3:23:f4:59:8d:ee:a8:0d:4b:76:5d:c1:85:48:a2:44:65:c4: ed:43:92:a8:fc:2f:42:b1:da:e9:69:47:4c:8d:ad:7c:df:5e: 45:f1:66:e6:42:af:fd:6e:38:26:b7:c4:64:32:74:a6:09:04: 80:d4:9c:97:a9:09:a3:6e:86:1c:92:6f:37:5b:c0:46:96:96: 02:f6:1b:3c:62:33:e4:56:ff:4c:94:ff:1a:42:90:1b:f4:4a: ca:cd:02:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOcIgj6A98Ya2q0t+XKg9Ak0xi4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFFMTRBQkJENTE2MUJBMENBREIzQzQwQzFGOURGQ0JD OUNGMzQ3MDAeFw0yNjEwMzEyMTI5MzZaFw0yNjExMDIwMTA2MzZaMDMxMTAvBgNV BAMTKDc4NERFNkI3MDI5RDg3MDAzQTc3NDY4NUY0Qjk3OUE0RjYzMkYyQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCclxTmS12hMaV6u5onCPU7djtk QKT//yIkpq8V6SqxSOHxtN2EXJSthWVwzplzEvwfrdVTkZ8xSrmqEX4z7CJt15Ok Dy3B3NTw+Ksc5F2CnS4G1vl7oFG78Ou3WNMKooXV5Ey6zriQvrunz5edqUJlKeR6 3gcMOnZz2kbZ/RQnUkL5LHDtkz0h6CeqZHGqFQxO8yRMkDjotqYBfrUQnesYugf3 8MJL/LZJWyq9o+egBCIphprqVnoo37jj+F5uiCRM51cKOcedvwWanVmMKR9Ip02Q BQyot6SysfDSGxhmyput8fKJYpMZZprfU9s7b8ZtUzdnrVx8e40d4dqKlYvhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeE3mtwKdhwA6d0aF9Ll5pPYy8s4wHwYDVR0j BBgwFoAUKuFKu9UWG6DK2zxAwfnfy8nPNHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkyNDM5NTAtM2ZkZi00OWFiLWJmZGMtZjU4NjQ1MzcwNGM2LzAvMkFFMTRBQkJE NTE2MUJBMENBREIzQzQwQzFGOURGQ0JDOUNGMzQ3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUUxNEFCQkQ1MTYxQkEwQ0FEQjNDNDBDMUY5REZDQkM5Q0Yz NDcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkyNDM5NTAtM2ZkZi00OWFiLWJm ZGMtZjU4NjQ1MzcwNGM2LzAvMkFFMTRBQkJENTE2MUJBMENBREIzQzQwQzFGOURG Q0JDOUNGMzQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGwlWNyBUwxtQzKUpTryzf3Np4DHCcPUlqsj Xo/FKcxs5K13f0O+VTkaXXSyn24Ztg/QzBngZJgWzGUg8TNa1Ytsyy0lLYzyOhrP 65Ck79RKwUfWgch3UKx5V6uuimS9wcpbg5+CDB8guMmacixLDef5sRrjbdOtjhsx EH9Bh4oPbqnL1vLMCI+Jv3VR0lh4g/w4G3B6993gUstSGPu8+HbaUKMj9FmN7qgN S3ZdwYVIokRlxO1Dkqj8L0Kx2ulpR0yNrXzfXkXxZuZCr/1uOCa3xGQydKYJBIDU nJepCaNuhhySbzdbwEaWlgL2GzxiM+RW/0yU/xpCkBv0SsrNArw= -----END CERTIFICATE-----Generated at Sun Nov 1 03:22:00 2026 by rpki-client