$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft File: A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft (raw, json) Hash identifier: TDCRq5EgbE5byVNagG2lfdWoCoHBrJRJwsPnur1PA08= Subject key identifier: 8A:D3:85:30:F0:B5:27:D0:4D:2C:78:83:E0:32:BC:33:B7:F2:66:E3 Authority key identifier: A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF Certificate issuer: /CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Certificate serial: 684633657C017E7A10C10995419E1D288C8958A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 20:46:46 +0000 Manifest this update: Wed 23 Sep 2026 20:41:46 +0000 Manifest next update: Thu 24 Sep 2026 23:24:46 +0000 Files and hashes: 1: A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl (hash: vCDtxHR5VW2DxRO7DtUGwta7+W8XsnW/J1mk/BOwC1Q=) 2: 3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa (hash: /KfC4nr32tMCkBy7+tyxmf0Ms+3hn6LQNee4YzYVhVM=) 3: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (hash: pahHbmXTulV++MGHGhEL8jSNz3xJ/1KdhQdlxBhfIw4=) 4: 3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (hash: h1TE3m56WQ+gTVyqOOSf1UTeQzb1azE9LGSpzK549vA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:46:33:65:7c:01:7e:7a:10:c1:09:95:41:9e:1d:28:8c:89:58:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Validity Not Before: Sep 23 20:41:46 2026 GMT Not After : Sep 24 23:24:46 2026 GMT Subject: CN=8AD38530F0B527D04D2C7883E032BC33B7F266E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3d:f9:b4:bd:54:a6:5c:b6:34:7c:04:1a:6f: ea:43:1d:59:02:81:51:b3:5d:a4:e6:a7:43:1b:31: 40:15:f3:43:f4:1d:b1:a6:ef:e9:1c:85:19:13:53: 08:dc:0a:2a:f6:99:62:08:df:e2:db:cb:9f:f0:7a: e2:04:85:fe:51:a6:58:b4:aa:f2:75:1b:10:1e:ab: 4d:38:2c:5b:a9:69:56:a5:3b:f5:e3:f5:2e:45:1c: 6f:1a:b5:33:83:b5:41:76:56:40:7b:8f:54:b1:0d: 08:b4:ff:5e:59:e9:dc:6c:23:d3:e9:2e:32:7d:ad: 5f:ff:41:58:43:06:88:af:2b:2e:82:a3:d3:0b:c8: 08:24:89:84:18:96:8d:b1:e8:a7:d4:82:6b:17:7a: bf:dc:8a:f9:77:bd:fe:37:b8:14:71:51:fb:04:45: e2:4f:1f:18:15:2c:a1:ac:7c:b5:cf:3b:be:93:9b: 37:9d:33:be:5e:dd:d4:ab:40:31:96:f8:92:0e:09: 1b:f3:6a:e2:a2:21:da:3a:f7:a3:9f:0d:1d:94:73: b8:4d:17:5a:a7:48:f8:a1:8f:1f:71:e4:a4:b5:cd: 89:da:7c:22:cd:12:3e:40:df:dc:ff:d9:0a:ff:4f: 37:e8:56:b7:94:d2:ac:46:91:70:34:c8:ee:d2:f0: 72:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D3:85:30:F0:B5:27:D0:4D:2C:78:83:E0:32:BC:33:B7:F2:66:E3 X509v3 Authority Key Identifier: keyid:A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:2e:23:56:c7:38:31:af:b5:c0:2f:31:04:3b:27:4b:81:31: d3:2a:a2:79:7a:66:d3:6b:0e:4e:b8:21:24:75:88:20:54:6e: 43:22:13:c0:f7:08:af:36:7c:7e:79:83:9a:88:b1:ec:c1:7c: 0f:ea:7c:9b:45:bc:ad:f3:ea:e0:78:be:60:e9:e5:e3:b9:ce: ad:73:58:db:70:97:14:7a:9c:59:3a:a1:5e:00:a0:df:bb:80: c5:4a:54:bb:23:ac:c2:a8:7e:68:7f:da:4a:68:aa:af:13:a7: e2:7b:f5:6f:38:58:78:5a:73:6a:c2:03:45:d0:2e:dd:87:86: 26:ee:d4:a3:06:90:a6:07:ac:4c:5d:d3:45:be:b3:34:b1:56: 8f:d6:6d:e0:2b:37:6f:50:1e:aa:e2:aa:e9:7f:71:09:c9:4d: d4:74:d4:f7:57:d8:17:dc:a0:71:93:27:6c:b0:87:fc:5c:cd: 33:42:01:52:ab:9c:98:6b:92:f0:76:ce:08:20:b9:89:82:2b: d1:44:ea:67:99:d7:7d:70:87:99:ee:c4:17:a1:46:36:89:ff: 5d:b0:08:b5:1a:b9:40:ea:14:fe:20:45:d2:9e:a3:d6:52:e3: 14:d2:5a:c9:fb:3d:95:00:f1:5d:1c:74:2d:91:35:68:36:4e: c3:5c:7f:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaEYzZXwBfnoQwQmVQZ4dKIyJWKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFFREYx MUQ0NzhDRjAeFw0yNjA5MjMyMDQxNDZaFw0yNjA5MjQyMzI0NDZaMDMxMTAvBgNV BAMTKDhBRDM4NTMwRjBCNTI3RDA0RDJDNzg4M0UwMzJCQzMzQjdGMjY2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiPfm0vVSmXLY0fAQab+pDHVkC gVGzXaTmp0MbMUAV80P0HbGm7+kchRkTUwjcCir2mWII3+Lby5/weuIEhf5Rpli0 qvJ1GxAeq004LFupaValO/Xj9S5FHG8atTODtUF2VkB7j1SxDQi0/15Z6dxsI9Pp LjJ9rV//QVhDBoivKy6Co9MLyAgkiYQYlo2x6KfUgmsXer/civl3vf43uBRxUfsE ReJPHxgVLKGsfLXPO76TmzedM75e3dSrQDGW+JIOCRvzauKiIdo696OfDR2Uc7hN F1qnSPihjx9x5KS1zYnafCLNEj5A39z/2Qr/TzfoVreU0qxGkXA0yO7S8HJLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUitOFMPC1J9BNLHiD4DK8M7fyZuMwHwYDVR0j BBgwFoAUqLQpDbHVABFykYWNrxse3xHUeM8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGMxZTQ5YWItNTBjYS00YjNlLTgyM2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERC MUQ1MDAxMTcyOTE4NThEQUYxQjFFREYxMUQ0NzhDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEI0MjkwREIxRDUwMDExNzI5MTg1OERBRjFCMUVERjExRDQ3 OENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGMxZTQ5YWItNTBjYS00YjNlLTgy M2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFF REYxMUQ0NzhDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcuI1bHODGvtcAvMQQ7J0uBMdMqonl6ZtNr Dk64ISR1iCBUbkMiE8D3CK82fH55g5qIsezBfA/qfJtFvK3z6uB4vmDp5eO5zq1z WNtwlxR6nFk6oV4AoN+7gMVKVLsjrMKofmh/2kpoqq8Tp+J79W84WHhac2rCA0XQ Lt2Hhibu1KMGkKYHrExd00W+szSxVo/WbeArN29QHqriqul/cQnJTdR01PdX2Bfc oHGTJ2ywh/xczTNCAVKrnJhrkvB2zggguYmCK9FE6meZ131wh5nuxBehRjaJ/12w CLUauUDqFP4gRdKeo9ZS4xTSWsn7PZUA8V0cdC2RNWg2TsNcf84= -----END CERTIFICATE-----Generated at Wed Sep 23 23:16:14 2026 by rpki-client