$ rpki-client -vvvf rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft File: A7FB244B07B590E887183B90A5F474AF8A740E0D.mft (raw, json) Hash identifier: m13EefoC2HIW4xMVMVOCxbwpXIQiCN+hUCjWCCUtjzc= Subject key identifier: B1:E8:29:4E:8B:B9:C5:6B:B2:08:EE:73:42:82:97:35:E5:57:F5:34 Authority key identifier: A7:FB:24:4B:07:B5:90:E8:87:18:3B:90:A5:F4:74:AF:8A:74:0E:0D Certificate issuer: /CN=A7FB244B07B590E887183B90A5F474AF8A740E0D Certificate serial: 35EC1858C341A2AA3D0EBA62605E331469A3CA0D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 15:35:01 +0000 Manifest this update: Thu 24 Sep 2026 15:30:01 +0000 Manifest next update: Fri 25 Sep 2026 16:22:01 +0000 Files and hashes: 1: A7FB244B07B590E887183B90A5F474AF8A740E0D.crl (hash: tDM8Bks7kNP+qo7uW6Ovduza7/xIlLFjx0Fk/HQBIsM=) 2: 3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa (hash: 1rPPrUPUYQqxaBIZqYAyAxfvcUpoRBq/uR7Dh5JxpYE=) 3: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (hash: O4W7xGyLdg25nBLD06FHdWKOQMvZ4LJiQpV+BuyHkrg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.crl rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 16:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ec:18:58:c3:41:a2:aa:3d:0e:ba:62:60:5e:33:14:69:a3:ca:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7FB244B07B590E887183B90A5F474AF8A740E0D Validity Not Before: Sep 24 15:30:01 2026 GMT Not After : Sep 25 16:22:01 2026 GMT Subject: CN=B1E8294E8BB9C56BB208EE7342829735E557F534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0c:52:9b:b6:26:cc:3d:ea:c6:22:93:96:a6: 58:ec:14:72:ca:c2:94:a9:de:ed:62:a7:e6:e6:52: a8:e2:24:4e:31:6d:3c:17:8c:ae:b3:7f:54:d9:aa: 59:8c:42:b2:46:57:01:1f:dd:dd:4b:a5:ea:a7:67: 53:8a:0d:aa:d4:88:cd:59:87:93:bf:4d:6f:44:f9: 2f:df:26:11:64:68:4e:f3:4d:60:8c:7a:b0:b5:04: cc:43:aa:dd:45:99:9d:78:a4:ec:6b:40:c7:cf:a2: 83:88:0d:f7:17:16:6d:01:d6:d2:c8:c2:b3:2a:50: d6:9c:d2:88:37:42:d4:e0:6d:3c:a9:74:df:5c:dd: 37:ce:2b:47:4e:7f:3b:b3:64:72:84:02:2e:71:ba: f1:9d:16:58:82:0c:0f:b7:75:f4:a3:5b:c5:72:dc: 24:0a:98:36:55:c8:fd:20:7d:d8:15:e7:44:80:ae: 94:23:b0:8f:9b:4d:07:55:15:e3:a9:88:f5:49:66: e7:2c:70:e3:2b:75:d1:88:17:82:1e:f0:32:fa:03: 94:3c:37:ca:74:bb:c8:76:01:3a:91:39:c9:9c:c3: 31:8d:f1:5b:ff:66:8f:cb:09:b0:ad:14:0b:4b:15: e9:60:cb:da:d4:b2:be:2e:7e:a7:71:ee:f2:82:89: 86:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E8:29:4E:8B:B9:C5:6B:B2:08:EE:73:42:82:97:35:E5:57:F5:34 X509v3 Authority Key Identifier: keyid:A7:FB:24:4B:07:B5:90:E8:87:18:3B:90:A5:F4:74:AF:8A:74:0E:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:0e:7d:9f:4a:ca:39:a0:50:b3:9d:77:4c:fa:f3:c8:56:d5: e9:5b:a6:be:81:8f:c8:22:e7:dd:29:83:5b:83:48:e3:2f:b6: 45:79:29:89:40:be:7a:f3:d6:27:32:02:a1:8e:da:46:ea:f8: 78:60:61:cd:69:0c:2a:76:c0:2b:fe:75:27:21:aa:50:e4:f8: 1c:63:2d:91:08:21:89:1d:23:51:0f:37:c6:b2:59:98:9d:37: 41:3f:dc:27:5a:ae:45:fd:6b:d5:33:9f:f4:27:d1:28:14:9c: 23:f2:de:51:83:0d:9d:2c:53:32:23:f1:62:7e:27:92:73:67: 16:b8:c0:79:c3:99:6c:99:a1:92:b3:af:35:af:23:59:18:81: 1c:6f:7d:14:3b:62:49:41:ac:dc:0a:59:0f:30:42:2a:d7:eb: 33:a6:74:9e:7f:6c:79:3b:89:7e:19:58:a7:16:0d:9c:d8:41: 0a:16:81:02:e8:86:aa:1d:10:de:f5:9d:56:73:3a:f0:66:3f: b4:dd:73:61:b6:c2:de:d8:34:05:0b:ed:9d:31:92:8f:24:59: c0:97:88:8d:67:d3:fe:32:f4:2b:f6:b0:4c:3d:4e:81:2c:fb: d3:b1:f4:c6:57:72:2b:4b:98:f2:63:06:2a:4e:6f:73:0c:47: b9:eb:48:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNewYWMNBoqo9DrpiYF4zFGmjyg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdGQjI0NEIwN0I1OTBFODg3MTgzQjkwQTVGNDc0QUY4 QTc0MEUwRDAeFw0yNjA5MjQxNTMwMDFaFw0yNjA5MjUxNjIyMDFaMDMxMTAvBgNV BAMTKEIxRTgyOTRFOEJCOUM1NkJCMjA4RUU3MzQyODI5NzM1RTU1N0Y1MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpDFKbtibMPerGIpOWpljsFHLK wpSp3u1ip+bmUqjiJE4xbTwXjK6zf1TZqlmMQrJGVwEf3d1LpeqnZ1OKDarUiM1Z h5O/TW9E+S/fJhFkaE7zTWCMerC1BMxDqt1FmZ14pOxrQMfPooOIDfcXFm0B1tLI wrMqUNac0og3QtTgbTypdN9c3TfOK0dOfzuzZHKEAi5xuvGdFliCDA+3dfSjW8Vy 3CQKmDZVyP0gfdgV50SArpQjsI+bTQdVFeOpiPVJZucscOMrddGIF4Ie8DL6A5Q8 N8p0u8h2ATqROcmcwzGN8Vv/Zo/LCbCtFAtLFelgy9rUsr4ufqdx7vKCiYZfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsegpTou5xWuyCO5zQoKXNeVX9TQwHwYDVR0j BBgwFoAUp/skSwe1kOiHGDuQpfR0r4p0Dg0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjgyYTliZDktMTY2Zi00NTNlLWIzYzAtZTZiM2VmOTJhNTQwLzAvQTdGQjI0NEIw N0I1OTBFODg3MTgzQjkwQTVGNDc0QUY4QTc0MEUwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BN0ZCMjQ0QjA3QjU5MEU4ODcxODNCOTBBNUY0NzRBRjhBNzQw RTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjgyYTliZDktMTY2Zi00NTNlLWIz YzAtZTZiM2VmOTJhNTQwLzAvQTdGQjI0NEIwN0I1OTBFODg3MTgzQjkwQTVGNDc0 QUY4QTc0MEUwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIOfZ9KyjmgULOdd0z688hW1elbpr6Bj8gi 590pg1uDSOMvtkV5KYlAvnrz1icyAqGO2kbq+HhgYc1pDCp2wCv+dSchqlDk+Bxj LZEIIYkdI1EPN8ayWZidN0E/3CdarkX9a9Uzn/Qn0SgUnCPy3lGDDZ0sUzIj8WJ+ J5JzZxa4wHnDmWyZoZKzrzWvI1kYgRxvfRQ7YklBrNwKWQ8wQirX6zOmdJ5/bHk7 iX4ZWKcWDZzYQQoWgQLohqodEN71nVZzOvBmP7Tdc2G2wt7YNAUL7Z0xko8kWcCX iI1n0/4y9Cv2sEw9ToEs+9Ox9MZXcitLmPJjBipOb3MMR7nrSA4= -----END CERTIFICATE-----Generated at Fri Sep 25 08:54:54 2026 by rpki-client