$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft File: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft (raw, json) Hash identifier: ey3mne36YfchDaP7uwSP1pOUn0pF629SAQWcHEuajBk= Subject key identifier: A5:52:18:B2:82:C5:FD:07:FF:D6:7A:6C:F5:93:40:EE:17:A1:08:C8 Authority key identifier: 2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 Certificate issuer: /CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Certificate serial: 176A8C5214995E75BC52C566F4DD52B6A66DAD48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft Manifest number: F3 Signing time: Sat 31 Oct 2026 02:33:33 +0000 Manifest this update: Sat 31 Oct 2026 02:28:33 +0000 Manifest next update: Sun 01 Nov 2026 05:31:33 +0000 Files and hashes: 1: 3130332e3133312e3130372e302f32342d3234203d3e20313338313139.roa (hash: cKDgVoSVAFZfl4hgrIHwI1J4tBbCiwmqXmahxpGLx8I=) 2: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl (hash: LSx2kT5foUD9YxBbfuGbnA4b38NctR2LY/g66tlzrjo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 05:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:6a:8c:52:14:99:5e:75:bc:52:c5:66:f4:dd:52:b6:a6:6d:ad:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Validity Not Before: Oct 31 02:28:33 2026 GMT Not After : Nov 1 05:31:33 2026 GMT Subject: CN=A55218B282C5FD07FFD67A6CF59340EE17A108C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:97:d3:1f:b8:31:a9:af:5e:f9:38:63:b8:09: a2:59:28:0a:56:02:f4:a0:73:07:77:35:54:c3:e6: 79:07:a9:0e:90:94:c5:bf:30:e6:95:0d:ba:86:8d: 99:e3:be:3f:1e:f5:25:04:07:c5:21:39:65:14:49: 53:6f:76:60:b5:bd:c7:f8:b3:b3:43:3c:fc:c7:8a: 28:0a:38:8e:49:c0:d6:fb:b1:ad:9d:aa:b0:e6:e3: b7:a4:f8:be:af:d7:e0:5f:b4:a7:b1:fa:98:c0:1e: 46:61:25:df:61:54:cc:a5:79:a1:01:af:3e:d1:8c: ee:81:8f:e6:4e:5b:4a:31:5a:28:77:b5:f6:d4:90: 53:9e:00:2e:25:be:73:aa:fc:24:15:2f:eb:b7:d2: 21:58:96:a3:7c:61:7b:b8:9f:87:ca:fc:d3:34:3f: fd:09:53:3d:28:e3:88:ca:34:d0:4d:3b:23:d6:39: a2:62:0c:d9:f4:bc:03:1f:0e:1a:58:0b:39:ac:40: d4:ad:ac:46:a1:52:d7:3f:20:5a:b0:97:27:aa:8e: 63:71:aa:60:f5:d7:c0:bc:d4:40:f7:56:70:6b:82: e5:f3:94:79:e1:95:8b:0a:85:0c:65:86:eb:60:27: c2:dc:4d:4a:52:6d:fd:3a:65:5e:92:0c:de:49:61: cc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:52:18:B2:82:C5:FD:07:FF:D6:7A:6C:F5:93:40:EE:17:A1:08:C8 X509v3 Authority Key Identifier: keyid:2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:38:c6:89:05:f5:d8:e4:ff:98:ac:50:dd:8d:c4:29:4d:31: de:c3:fc:05:cf:86:19:6e:21:68:e8:fd:9d:60:fd:d0:75:85: 66:14:b0:06:24:ad:58:98:e4:da:70:4f:72:20:a2:0d:dc:b0: 94:c3:7a:02:cd:25:68:00:8c:a8:47:d3:62:3f:0a:22:4f:12: b2:92:03:d5:1e:2c:b8:d0:8e:80:45:54:d1:d1:01:09:de:59: a4:c8:a5:b7:0f:b2:73:fb:4d:ca:c4:0b:9c:e2:e3:94:e3:79: 79:ba:0c:4a:ec:60:84:a6:51:c7:f9:a8:82:ef:9b:bd:3e:95: 90:93:39:a6:3b:1f:8e:ff:8b:81:28:13:bb:1a:1d:d5:5e:69: cb:17:e7:5b:f6:c7:5c:b5:89:43:d2:b8:d0:50:4d:7f:da:8a: 9a:94:50:cb:4b:be:22:02:ab:17:25:33:22:a6:c2:ed:58:0f: 11:d5:4b:5b:4a:e3:ba:3f:38:f8:ff:5c:15:b5:d4:f6:b3:1f: 1e:5d:e3:72:e8:44:6e:d1:25:2f:38:11:61:f8:c2:aa:28:ad: 19:c8:45:ba:34:ce:0e:87:54:e1:f4:1c:94:be:8b:4a:18:c4: 44:98:ba:d5:c5:41:6b:e8:a0:53:8f:55:fa:9f:41:72:b3:34: f1:4c:e4:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF2qMUhSZXnW8UsVm9N1StqZtrUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFFMTRBQkJENTE2MUJBMENBREIzQzQwQzFGOURGQ0JD OUNGMzQ3MDAeFw0yNjEwMzEwMjI4MzNaFw0yNjExMDEwNTMxMzNaMDMxMTAvBgNV BAMTKEE1NTIxOEIyODJDNUZEMDdGRkQ2N0E2Q0Y1OTM0MEVFMTdBMTA4QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkl9MfuDGpr175OGO4CaJZKApW AvSgcwd3NVTD5nkHqQ6QlMW/MOaVDbqGjZnjvj8e9SUEB8UhOWUUSVNvdmC1vcf4 s7NDPPzHiigKOI5JwNb7sa2dqrDm47ek+L6v1+BftKex+pjAHkZhJd9hVMyleaEB rz7RjO6Bj+ZOW0oxWih3tfbUkFOeAC4lvnOq/CQVL+u30iFYlqN8YXu4n4fK/NM0 P/0JUz0o44jKNNBNOyPWOaJiDNn0vAMfDhpYCzmsQNStrEahUtc/IFqwlyeqjmNx qmD118C81ED3VnBrguXzlHnhlYsKhQxlhutgJ8LcTUpSbf06ZV6SDN5JYcxJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpVIYsoLF/Qf/1nps9ZNA7hehCMgwHwYDVR0j BBgwFoAUKuFKu9UWG6DK2zxAwfnfy8nPNHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkyNDM5NTAtM2ZkZi00OWFiLWJmZGMtZjU4NjQ1MzcwNGM2LzAvMkFFMTRBQkJE NTE2MUJBMENBREIzQzQwQzFGOURGQ0JDOUNGMzQ3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUUxNEFCQkQ1MTYxQkEwQ0FEQjNDNDBDMUY5REZDQkM5Q0Yz NDcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkyNDM5NTAtM2ZkZi00OWFiLWJm ZGMtZjU4NjQ1MzcwNGM2LzAvMkFFMTRBQkJENTE2MUJBMENBREIzQzQwQzFGOURG Q0JDOUNGMzQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGk4xokF9djk/5isUN2NxClNMd7D/AXPhhlu IWjo/Z1g/dB1hWYUsAYkrViY5NpwT3Igog3csJTDegLNJWgAjKhH02I/CiJPErKS A9UeLLjQjoBFVNHRAQneWaTIpbcPsnP7TcrEC5zi45TjeXm6DErsYISmUcf5qILv m70+lZCTOaY7H47/i4EoE7saHdVeacsX51v2x1y1iUPSuNBQTX/aipqUUMtLviIC qxclMyKmwu1YDxHVS1tK47o/OPj/XBW11PazHx5d43LoRG7RJS84EWH4wqoorRnI Rbo0zg6HVOH0HJS+i0oYxESYutXFQWvooFOPVfqfQXKzNPFM5GY= -----END CERTIFICATE-----Generated at Sat Oct 31 22:49:35 2026 by rpki-client