$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft File: A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft (raw, json) Hash identifier: 2G/2J/Y46UGCXlYcstF99nyBIlHFsNpOPTtTsn+4FiA= Subject key identifier: 5B:B0:AE:CD:FD:A1:C5:F4:9E:D6:22:7B:54:A6:41:05:5C:91:59:D9 Authority key identifier: A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE Certificate issuer: /CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE Certificate serial: 4B3A357F9C26E10276DB4A337051BEABACC10F2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 21:37:19 +0000 Manifest this update: Thu 24 Sep 2026 21:32:19 +0000 Manifest next update: Sat 26 Sep 2026 00:20:19 +0000 Files and hashes: 1: 3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (hash: ICLSFvgSRRkmlVey9F0aZzpRAm3MpVToF57RNv3826o=) 2: 3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (hash: XjEh4h/m9O4zav0oJbGUt3KwmUOKS7DwqIAy5aQ35aY=) 3: A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl (hash: d4CIODi3vGmAysZMesNN41pd7DkukDb/yeyIN9Mj3rA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:3a:35:7f:9c:26:e1:02:76:db:4a:33:70:51:be:ab:ac:c1:0f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE Validity Not Before: Sep 24 21:32:19 2026 GMT Not After : Sep 26 00:20:19 2026 GMT Subject: CN=5BB0AECDFDA1C5F49ED6227B54A641055C9159D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:59:c0:40:fb:d1:b9:33:ab:11:5e:be:be:f2: 44:12:e8:5b:81:15:49:be:38:53:32:2d:c0:86:2a: b6:dc:67:12:9e:a2:6d:95:20:c3:40:e6:3a:a7:63: 3f:0b:13:33:81:99:b9:2b:fe:a1:64:a5:70:ee:5f: 7c:71:67:b4:0b:c1:da:3f:22:f4:d8:ea:92:c2:15: 6d:fc:5d:bf:05:95:fc:5d:f2:f2:e7:3e:c7:dc:4c: c8:05:c4:ab:fe:22:44:45:c9:ba:98:c9:a4:f0:87: 40:95:f5:ac:98:b9:e0:38:cc:b1:a1:b0:23:17:3f: e2:e0:84:ed:2b:30:13:5a:0b:16:88:a5:d3:7f:fa: a6:58:e3:b4:6d:e9:33:54:96:c7:fb:5b:ec:42:f8: 6b:22:45:cd:97:13:16:37:6d:f8:ba:1e:8f:d2:00: df:7f:1d:79:9d:e3:51:d3:c8:a7:8b:f8:6c:85:4f: e2:7c:80:75:57:6f:e5:11:3f:85:48:21:45:2c:4b: 14:bb:d3:35:2c:96:13:96:f9:99:7a:9f:1a:b6:88: 01:fd:f6:90:88:0f:12:29:4c:82:d1:54:a2:8c:c6: 1c:61:e0:a1:e6:15:75:c1:43:4f:f5:02:75:83:6a: bd:3a:49:b4:3a:6c:74:8c:45:c3:78:cb:d3:6c:cc: 11:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B0:AE:CD:FD:A1:C5:F4:9E:D6:22:7B:54:A6:41:05:5C:91:59:D9 X509v3 Authority Key Identifier: keyid:A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f3:1b:96:35:e5:27:0d:cb:18:a5:d7:d7:da:70:00:ff:4a: 1d:6d:55:6b:77:4c:8d:1c:ee:09:e2:6e:27:96:78:52:7d:f8: fc:55:7f:a9:f8:cb:e6:a2:c8:37:17:3a:26:31:d8:fb:99:b2: 33:5f:02:b6:5f:69:71:6f:0d:07:62:d9:39:45:73:76:4f:ee: 34:a9:da:a6:f3:e3:28:b6:8a:4b:d6:f3:a4:f9:b8:dd:fd:65: 5f:42:44:9a:40:e9:17:27:b5:1a:bc:fa:a1:c8:a2:57:37:50: 8b:e8:f2:af:60:bd:95:73:49:c4:81:0d:b9:62:3a:e6:ec:58: 0d:0e:10:a5:0c:81:87:61:b2:4f:59:bf:8e:f2:a4:7f:3f:02: 3e:ed:75:e1:4f:3a:41:8d:c2:e6:6b:38:45:1d:4a:15:1a:a7: 54:d3:fd:b1:39:c4:58:2b:c0:7d:b2:9e:97:dc:89:32:17:4e: 09:f4:c9:cd:ed:64:49:b8:9e:ff:9e:8c:65:51:f0:58:8d:6a: ca:49:77:c2:d0:a5:e5:9b:b5:ce:e7:17:c7:b5:e6:cd:89:c6: e5:8d:c5:20:b2:34:3a:3d:35:6e:08:05:03:3d:47:d7:20:d5: 4b:ed:9b:98:b7:c9:67:85:f9:d7:d8:34:f7:da:86:c6:57:32: 82:be:47:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSzo1f5wm4QJ220ozcFG+q6zBDyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFOTdDOERDNTNFRDRCOTRGMDYyMDdEQUUyQjNCMjFC QTA4RDNGRTAeFw0yNjA5MjQyMTMyMTlaFw0yNjA5MjYwMDIwMTlaMDMxMTAvBgNV BAMTKDVCQjBBRUNERkRBMUM1RjQ5RUQ2MjI3QjU0QTY0MTA1NUM5MTU5RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WcBA+9G5M6sRXr6+8kQS6FuB FUm+OFMyLcCGKrbcZxKeom2VIMNA5jqnYz8LEzOBmbkr/qFkpXDuX3xxZ7QLwdo/ IvTY6pLCFW38Xb8Flfxd8vLnPsfcTMgFxKv+IkRFybqYyaTwh0CV9ayYueA4zLGh sCMXP+LghO0rMBNaCxaIpdN/+qZY47Rt6TNUlsf7W+xC+GsiRc2XExY3bfi6Ho/S AN9/HXmd41HTyKeL+GyFT+J8gHVXb+URP4VIIUUsSxS70zUslhOW+Zl6nxq2iAH9 9pCIDxIpTILRVKKMxhxh4KHmFXXBQ0/1AnWDar06SbQ6bHSMRcN4y9NszBEFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW7Cuzf2hxfSe1iJ7VKZBBVyRWdkwHwYDVR0j BBgwFoAUoel8jcU+1LlPBiB9ris7IboI0/4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA1MGRjYzMtODRkZC00NTk1LWJhMmMtYmM2OTk4OTY5MmYxLzAvQTFFOTdDOERD NTNFRDRCOTRGMDYyMDdEQUUyQjNCMjFCQTA4RDNGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUU5N0M4REM1M0VENEI5NEYwNjIwN0RBRTJCM0IyMUJBMDhE M0ZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvQTFFOTdDOERDNTNFRDRCOTRGMDYyMDdEQUUyQjNC MjFCQTA4RDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvzG5Y15ScNyxil19facAD/Sh1tVWt3TI0c 7gnibieWeFJ9+PxVf6n4y+aiyDcXOiYx2PuZsjNfArZfaXFvDQdi2TlFc3ZP7jSp 2qbz4yi2ikvW86T5uN39ZV9CRJpA6RcntRq8+qHIolc3UIvo8q9gvZVzScSBDbli OubsWA0OEKUMgYdhsk9Zv47ypH8/Aj7tdeFPOkGNwuZrOEUdShUap1TT/bE5xFgr wH2ynpfciTIXTgn0yc3tZEm4nv+ejGVR8FiNaspJd8LQpeWbtc7nF8e15s2JxuWN xSCyNDo9NW4IBQM9R9cg1Uvtm5i3yWeF+dfYNPfahsZXMoK+Rw8= -----END CERTIFICATE-----Generated at Fri Sep 25 03:13:57 2026 by rpki-client