$ rpki-client -vvvf rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft File: A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft (raw, json) Hash identifier: QsBX1zE+rd+JkdYxg05V6ug61OjdIyBF1Eo+Ivx0mWg= Subject key identifier: D0:8A:F5:0D:EE:BF:25:47:45:D3:26:BA:CE:1F:BF:C7:49:49:31:7A Authority key identifier: A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50 Certificate issuer: /CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450 Certificate serial: 33951264D4161958CC21AFAB7A6426E68AF416DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 15:04:31 +0000 Manifest this update: Thu 24 Sep 2026 14:59:31 +0000 Manifest next update: Fri 25 Sep 2026 15:56:31 +0000 Files and hashes: 1: 3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa (hash: d3fL4T6FzL/T0DkQ+Ng+5zSK+zJSGTl7uPkkzl2dqNM=) 2: 3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa (hash: NdabufunGirMkyu0ATmpWQ6Rl+f746AXGi5jkT6y7RY=) 3: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: eZWOfDrRyxrGj36EawOrumVWs/n0x3oAEO6+YE8bAMk=) 4: A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl (hash: j62CUNkn22m9UjvI4sB0un6dfXndPiZwO5MNkLuTMBo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 15:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:95:12:64:d4:16:19:58:cc:21:af:ab:7a:64:26:e6:8a:f4:16:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450 Validity Not Before: Sep 24 14:59:31 2026 GMT Not After : Sep 25 15:56:31 2026 GMT Subject: CN=D08AF50DEEBF254745D326BACE1FBFC74949317A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:84:99:df:60:b8:99:d0:88:b9:76:b9:49:7e: 34:ed:2f:48:7d:16:89:ab:e3:a2:bd:ca:5c:bf:70: c5:bf:80:d4:50:b5:ea:a9:95:21:b5:6e:dd:1a:e0: 5e:60:ea:a8:bf:c9:31:da:f1:17:6f:24:26:fe:f0: 09:3c:0d:fb:69:de:c2:3d:f2:e7:46:f0:7e:50:c6: 0e:77:07:1a:c7:d4:b3:82:00:7d:f2:9e:63:79:85: 11:3d:ac:84:56:d3:a6:ca:96:a6:93:9f:97:8f:c9: 43:0e:ef:2f:9f:50:4f:9f:96:bb:9c:38:4b:d7:f1: 12:91:fc:c8:4d:72:57:8b:44:c8:e8:46:40:85:c8: 28:c7:4e:1d:25:2f:c6:fe:e2:ec:42:84:2f:27:7a: c3:cd:d1:06:a9:19:fe:72:9e:c4:96:da:21:c8:81: 29:5f:da:11:8c:fa:f3:22:00:35:f9:4b:23:b4:33: 78:48:46:c7:4c:38:87:d6:b7:06:d8:0e:cb:d3:0a: 60:e8:de:8b:3b:c0:ef:0e:c8:7c:42:86:89:36:06: b4:b1:f8:e2:05:53:14:89:d7:a6:08:82:0b:d2:c3: d7:23:e5:9a:ef:c1:3f:d9:d9:99:95:8d:ea:6a:ee: 46:8a:17:7e:5d:b9:da:19:b4:a4:d6:c5:b8:e2:a4: 54:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8A:F5:0D:EE:BF:25:47:45:D3:26:BA:CE:1F:BF:C7:49:49:31:7A X509v3 Authority Key Identifier: keyid:A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:01:ee:b9:9d:fb:52:ca:5f:af:87:52:91:26:a0:1c:e7:5f: 6e:52:42:b5:60:5a:08:72:41:58:38:d5:9f:83:21:f7:00:b1: cd:97:17:46:29:bf:64:b2:5a:c4:c1:69:75:77:42:04:00:b3: 9b:35:c2:0f:eb:b1:fa:bc:dc:84:d9:6c:ba:72:52:8e:45:d9: 23:51:b7:f4:39:82:10:01:d6:97:86:23:c6:7e:c4:9d:99:8f: 46:30:dc:14:1b:f9:3a:7b:64:25:5c:e0:af:91:20:ce:8c:46: 67:0c:70:67:c6:8d:8f:93:f4:1d:38:07:d0:35:a4:8e:0c:36: 6d:6b:5b:0b:55:fb:9d:10:52:7f:77:e5:80:ac:77:de:db:16: 23:f5:6b:c8:bb:1b:e6:dd:99:3b:96:c9:87:1d:7f:4d:bb:84: 56:20:b7:1a:53:b5:cf:f5:49:fd:32:96:41:e5:26:a8:2a:64: 28:cd:e8:81:c9:57:39:61:e9:81:cd:95:87:5d:f3:3e:fc:25: 87:b5:e8:92:cc:63:f4:52:42:63:97:8b:f7:6a:0a:f9:73:31: 42:c5:93:47:6b:09:fa:1a:e4:64:bb:9d:c8:bb:98:aa:47:e0: 94:4a:4e:a6:53:8e:c6:55:55:27:ef:1b:c8:f4:6f:da:40:86: e5:11:03:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM5USZNQWGVjMIa+remQm5or0FtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0MjdBMUY4QUNBNjBGOUFGN0Y4ODkyMEY4OUVFNTMz NTNGQTQ1MDAeFw0yNjA5MjQxNDU5MzFaFw0yNjA5MjUxNTU2MzFaMDMxMTAvBgNV BAMTKEQwOEFGNTBERUVCRjI1NDc0NUQzMjZCQUNFMUZCRkM3NDk0OTMxN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCohJnfYLiZ0Ii5drlJfjTtL0h9 Fomr46K9yly/cMW/gNRQteqplSG1bt0a4F5g6qi/yTHa8RdvJCb+8Ak8Dftp3sI9 8udG8H5Qxg53BxrH1LOCAH3ynmN5hRE9rIRW06bKlqaTn5ePyUMO7y+fUE+flruc OEvX8RKR/MhNcleLRMjoRkCFyCjHTh0lL8b+4uxChC8nesPN0QapGf5ynsSW2iHI gSlf2hGM+vMiADX5SyO0M3hIRsdMOIfWtwbYDsvTCmDo3os7wO8OyHxChok2BrSx +OIFUxSJ16YIggvSw9cj5ZrvwT/Z2ZmVjepq7kaKF35dudoZtKTWxbjipFRFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Ir1De6/JUdF0ya6zh+/x0lJMXowHwYDVR0j BBgwFoAUoUJ6H4rKYPmvf4iSD4nuUzU/pFAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTY4Y2MwNTktNWU2Yy00NTAxLWI4OTQtMTRhODJkMThkMjFlLzAvQTE0MjdBMUY4 QUNBNjBGOUFGN0Y4ODkyMEY4OUVFNTMzNTNGQTQ1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTQyN0ExRjhBQ0E2MEY5QUY3Rjg4OTIwRjg5RUU1MzM1M0ZB NDUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQTE0MjdBMUY4QUNBNjBGOUFGN0Y4ODkyMEY4OUVF NTMzNTNGQTQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkB7rmd+1LKX6+HUpEmoBznX25SQrVgWghy QVg41Z+DIfcAsc2XF0Ypv2SyWsTBaXV3QgQAs5s1wg/rsfq83ITZbLpyUo5F2SNR t/Q5ghAB1peGI8Z+xJ2Zj0Yw3BQb+Tp7ZCVc4K+RIM6MRmcMcGfGjY+T9B04B9A1 pI4MNm1rWwtV+50QUn935YCsd97bFiP1a8i7G+bdmTuWyYcdf027hFYgtxpTtc/1 Sf0ylkHlJqgqZCjN6IHJVzlh6YHNlYdd8z78JYe16JLMY/RSQmOXi/dqCvlzMULF k0drCfoa5GS7nci7mKpH4JRKTqZTjsZVVSfvG8j0b9pAhuURA7A= -----END CERTIFICATE-----Generated at Fri Sep 25 06:59:43 2026 by rpki-client