$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft File: 2A494FAEE44F13448E6C43136F825053CE977009.mft (raw, json) Hash identifier: ++euzD8Al70CSNtFx+flR5URWsKlJpkbNmlgNI6YOVg= Subject key identifier: E8:D0:4A:A2:01:20:5F:3A:56:68:C5:EB:6E:BA:7F:AB:7B:AD:BD:01 Authority key identifier: 2A:49:4F:AE:E4:4F:13:44:8E:6C:43:13:6F:82:50:53:CE:97:70:09 Certificate issuer: /CN=2A494FAEE44F13448E6C43136F825053CE977009 Certificate serial: 44D9336E61E391463F3E8C1E79AC4818953DC492 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft Manifest number: EB Signing time: Sun 25 Oct 2026 08:37:14 +0000 Manifest this update: Sun 25 Oct 2026 08:32:14 +0000 Manifest next update: Mon 26 Oct 2026 12:03:14 +0000 Files and hashes: 1: 2A494FAEE44F13448E6C43136F825053CE977009.crl (hash: qJpOo02xi9DweuEo2Pk+AjB9vx668NIkhRu57yXNuwg=) 2: 3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (hash: t2vA65s4Rw0JpR4oPJfjFnJ3dyjvcRRBFrdNUp3Bo2M=) 3: 3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa (hash: SSSkCi1zJkML5HF5+O+odxp65ltRBIRj0krRoe9GJqI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.crl rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d9:33:6e:61:e3:91:46:3f:3e:8c:1e:79:ac:48:18:95:3d:c4:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A494FAEE44F13448E6C43136F825053CE977009 Validity Not Before: Oct 25 08:32:14 2026 GMT Not After : Oct 26 12:03:14 2026 GMT Subject: CN=E8D04AA201205F3A5668C5EB6EBA7FAB7BADBD01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a5:7e:74:c7:49:7f:86:83:5b:ea:c0:f0:14: c9:9e:c0:dc:5b:3b:8b:16:8a:fa:3a:b9:b6:01:64: da:dc:15:e0:9d:bd:0e:c2:95:98:fc:54:63:47:9d: 3b:d0:39:0d:d5:e3:96:8b:c9:4b:dc:24:fd:2e:02: 7c:68:4d:88:83:63:b1:67:50:e7:25:48:61:d6:39: a2:ef:e1:fc:d1:e8:82:76:d7:67:93:47:86:f0:1d: 39:53:65:a9:69:cc:24:58:59:71:e2:19:94:80:0d: 94:b0:9a:17:5a:7b:ff:75:70:0b:e5:0f:2b:a7:5f: 9a:16:9f:b5:ce:7b:f0:18:e5:b1:c4:ef:77:de:35: d5:92:43:c1:e3:aa:a7:3c:13:30:b1:31:fa:f4:2c: 7b:e6:02:9f:aa:36:93:d3:3a:90:b7:59:87:25:fc: 18:e9:ac:fb:30:a0:cd:83:51:3b:13:8c:f5:0f:72: 27:e2:19:ec:a7:37:17:74:75:62:9d:b8:c7:ca:f4: ff:4e:05:f7:14:0c:e8:41:b5:74:a4:c5:46:40:42: c0:ee:28:f8:50:1d:c4:38:d1:a7:f6:eb:03:f6:5c: ff:c2:b4:b9:10:92:88:ab:00:59:72:0e:d1:61:36: 25:8b:76:74:f9:42:94:20:9b:b0:c1:7a:21:d8:d3: fd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D0:4A:A2:01:20:5F:3A:56:68:C5:EB:6E:BA:7F:AB:7B:AD:BD:01 X509v3 Authority Key Identifier: keyid:2A:49:4F:AE:E4:4F:13:44:8E:6C:43:13:6F:82:50:53:CE:97:70:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:3f:ae:f2:ed:2a:15:b3:36:a4:24:b5:86:d1:aa:86:a6:ad: dc:cd:a6:8f:07:14:a7:71:4f:cd:96:d1:2e:f7:f8:76:8f:cb: 36:15:b8:e3:47:e0:4d:6a:71:c0:d1:97:b7:1e:82:86:7b:36: 57:b3:47:72:fc:99:92:af:fc:5e:88:c5:e5:12:4e:52:5c:d6: a1:29:58:36:58:10:a0:c8:05:db:99:98:29:1f:a6:94:24:2c: 2d:5a:bd:6e:bb:7b:0f:75:ca:7b:43:05:0f:f3:39:f3:49:1d: db:76:04:c9:6d:68:4e:b7:29:4f:0c:f2:a2:71:5e:ee:17:b1: 7d:84:57:68:17:ed:9b:28:35:51:f7:93:93:a7:db:0d:90:dd: 7a:22:c1:ed:d4:71:ac:fc:7c:67:e4:7e:78:5e:03:59:40:2d: 56:6c:40:42:eb:31:2b:6c:63:8f:db:35:f6:bc:1b:6e:cf:9e: 34:79:14:c5:99:37:ea:0d:d4:6a:dc:38:05:4f:39:93:b2:9b: f8:05:de:f7:5f:04:7e:74:d6:50:ba:dc:48:7a:db:da:7b:57: cb:93:14:38:da:d3:31:1e:7c:37:9f:d2:b9:ad:48:13:0a:42: 89:74:68:2a:a9:75:b6:9d:ad:f2:4d:48:e3:da:58:03:be:98: 11:9d:97:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURNkzbmHjkUY/PoweeaxIGJU9xJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE0OTRGQUVFNDRGMTM0NDhFNkM0MzEzNkY4MjUwNTND RTk3NzAwOTAeFw0yNjEwMjUwODMyMTRaFw0yNjEwMjYxMjAzMTRaMDMxMTAvBgNV BAMTKEU4RDA0QUEyMDEyMDVGM0E1NjY4QzVFQjZFQkE3RkFCN0JBREJEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqpX50x0l/hoNb6sDwFMmewNxb O4sWivo6ubYBZNrcFeCdvQ7ClZj8VGNHnTvQOQ3V45aLyUvcJP0uAnxoTYiDY7Fn UOclSGHWOaLv4fzR6IJ212eTR4bwHTlTZalpzCRYWXHiGZSADZSwmhdae/91cAvl DyunX5oWn7XOe/AY5bHE73feNdWSQ8Hjqqc8EzCxMfr0LHvmAp+qNpPTOpC3WYcl /BjprPswoM2DUTsTjPUPcifiGeynNxd0dWKduMfK9P9OBfcUDOhBtXSkxUZAQsDu KPhQHcQ40af26wP2XP/CtLkQkoirAFlyDtFhNiWLdnT5QpQgm7DBeiHY0/2nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6NBKogEgXzpWaMXrbrp/q3utvQEwHwYDVR0j BBgwFoAUKklPruRPE0SObEMTb4JQU86XcAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBkYzEyODMtMWNlMi00MWE1LWFmZTYtZjBiZTMxZTliMTBkLzAvMkE0OTRGQUVF NDRGMTM0NDhFNkM0MzEzNkY4MjUwNTNDRTk3NzAwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTQ5NEZBRUU0NEYxMzQ0OEU2QzQzMTM2RjgyNTA1M0NFOTc3 MDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBkYzEyODMtMWNlMi00MWE1LWFm ZTYtZjBiZTMxZTliMTBkLzAvMkE0OTRGQUVFNDRGMTM0NDhFNkM0MzEzNkY4MjUw NTNDRTk3NzAwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAU/rvLtKhWzNqQktYbRqoamrdzNpo8HFKdx T82W0S73+HaPyzYVuONH4E1qccDRl7cegoZ7NlezR3L8mZKv/F6IxeUSTlJc1qEp WDZYEKDIBduZmCkfppQkLC1avW67ew91yntDBQ/zOfNJHdt2BMltaE63KU8M8qJx Xu4XsX2EV2gX7ZsoNVH3k5On2w2Q3Xoiwe3Ucaz8fGfkfnheA1lALVZsQELrMSts Y4/bNfa8G27PnjR5FMWZN+oN1GrcOAVPOZOym/gF3vdfBH501lC63Eh629p7V8uT FDja0zEefDef0rmtSBMKQol0aCqpdbadrfJNSOPaWAO+mBGdl98= -----END CERTIFICATE-----Generated at Sun Oct 25 20:06:37 2026 by rpki-client