$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft File: A65A7370A28DA71B1C11B89E09D51753C498246D.mft (raw, json) Hash identifier: /TnLlX5Po9Lid4fQQxgmAAAg3YiRr2rfig8YO/qfqa8= Subject key identifier: 70:3E:36:93:4D:76:17:D4:D3:78:E3:B0:84:65:5D:E9:B4:6E:70:B7 Authority key identifier: A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D Certificate issuer: /CN=A65A7370A28DA71B1C11B89E09D51753C498246D Certificate serial: 0778EAE9A6882A0E0A675E164C0A6A0CC4CF7AAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 07:20:16 +0000 Manifest this update: Wed 23 Sep 2026 07:15:16 +0000 Manifest next update: Thu 24 Sep 2026 08:50:16 +0000 Files and hashes: 1: 3135312e3135382e37352e302f32342d3234203d3e20313331343534.roa (hash: Ho6tdl1he9FR1/62MiqnACr306KYnR/YSxoabj/m7M4=) 2: 3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa (hash: yLjPOFhKt4noRbzRL2MIGaluRq2L7M9f6uyh5pKU9Ec=) 3: 3135312e3135382e37342e302f32332d3233203d3e20313331343534.roa (hash: kTQiZ7hK+M7BbCy/GwseyxlIaws4BXvafRAJzzRJxhc=) 4: A65A7370A28DA71B1C11B89E09D51753C498246D.crl (hash: SZVfYozE+WHnA4+q1smNJ8rlsmq1L2/oKVlZEXFCXfo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:78:ea:e9:a6:88:2a:0e:0a:67:5e:16:4c:0a:6a:0c:c4:cf:7a:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65A7370A28DA71B1C11B89E09D51753C498246D Validity Not Before: Sep 23 07:15:16 2026 GMT Not After : Sep 24 08:50:16 2026 GMT Subject: CN=703E36934D7617D4D378E3B084655DE9B46E70B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:7f:eb:fa:5c:a8:ef:aa:f0:36:b4:19:85: 23:ee:18:c3:03:fc:40:ee:64:79:04:f4:8e:e8:51: 26:3b:c4:03:f1:ef:54:09:96:b6:0e:d3:01:4a:d2: dc:3c:a2:bd:45:96:af:93:ef:bc:24:2c:50:3b:3a: 9e:ce:38:84:69:b2:2a:c1:b6:ac:f6:b6:46:63:d1: e0:f5:9d:d3:e5:ce:c3:8a:02:04:cd:39:d8:1b:fe: fb:9c:c2:36:d3:ef:86:0e:03:95:df:df:73:68:d5: ce:f2:82:7d:f4:ab:2e:8f:e6:ff:a7:cc:1c:6a:59: 64:2b:bb:03:1c:3a:ed:bc:24:95:f4:cf:a1:47:31: 2b:af:fa:c2:22:24:b8:11:cb:ed:45:2c:ce:9a:26: 47:58:97:19:6c:45:52:51:8e:09:be:bc:a9:24:85: 71:0b:28:21:63:9e:f0:18:2e:69:26:a3:f5:be:8a: 31:cf:84:18:eb:89:cd:5b:ae:e4:a6:b8:46:1b:76: ba:06:ba:c9:90:31:8b:5b:69:9e:9e:43:c9:f1:de: 30:70:87:33:b4:45:76:2c:c1:f5:23:8b:8f:39:41: 8a:df:f9:38:71:7c:ce:f0:a7:fe:df:ba:9a:bf:e3: ff:4e:2b:6b:73:68:05:6d:7b:7a:80:7e:61:5d:86: 76:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3E:36:93:4D:76:17:D4:D3:78:E3:B0:84:65:5D:E9:B4:6E:70:B7 X509v3 Authority Key Identifier: keyid:A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:14:fa:f7:ee:f0:7e:03:7d:06:a1:6f:0d:66:5f:99:2a:11: 12:ac:0a:97:e8:dd:b5:35:53:b5:7b:16:04:c1:0c:dc:d3:04: 4c:bd:49:74:68:ca:ef:69:82:58:b4:b3:33:0e:5f:55:74:f9: 76:88:9a:35:28:e7:8c:18:e9:07:57:cf:ca:65:78:f3:1a:0a: df:61:b5:9e:cd:d1:a0:c7:7c:39:9a:4d:48:e4:ef:b4:f3:6a: a8:11:45:c2:d7:0c:f4:fb:09:c1:9e:a1:63:e3:ea:bf:0c:0d: 06:51:2a:b4:19:3a:0c:4a:47:78:6e:c2:1f:44:d2:fb:6f:36: 09:38:39:32:5a:81:6a:9b:0f:04:fd:1e:fc:04:7b:a9:3f:62: c7:18:6b:87:78:18:d1:9b:07:ff:0c:7e:5f:5b:7a:f6:1f:17: 4b:9a:f4:08:80:94:98:77:f6:d7:1e:98:74:7e:ad:9d:e1:8c: c4:9f:ea:14:21:de:ef:c9:52:fd:5e:5f:71:af:1d:a7:95:78: ba:65:7f:d6:7c:8c:51:73:7e:d3:c4:d2:b8:96:41:96:68:82: 94:a3:5a:51:3c:4a:c1:b9:aa:d0:24:66:79:c4:d5:5d:cd:a4: bd:bd:d9:5d:34:60:6f:b5:cc:81:44:4f:19:f2:14:89:81:2b: 9a:7b:a9:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB3jq6aaIKg4KZ14WTApqDMTPeq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3NTND NDk4MjQ2RDAeFw0yNjA5MjMwNzE1MTZaFw0yNjA5MjQwODUwMTZaMDMxMTAvBgNV BAMTKDcwM0UzNjkzNEQ3NjE3RDREMzc4RTNCMDg0NjU1REU5QjQ2RTcwQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoU3/r+lyo76rwNrQZhSPuGMMD /EDuZHkE9I7oUSY7xAPx71QJlrYO0wFK0tw8or1Flq+T77wkLFA7Op7OOIRpsirB tqz2tkZj0eD1ndPlzsOKAgTNOdgb/vucwjbT74YOA5Xf33No1c7ygn30qy6P5v+n zBxqWWQruwMcOu28JJX0z6FHMSuv+sIiJLgRy+1FLM6aJkdYlxlsRVJRjgm+vKkk hXELKCFjnvAYLmkmo/W+ijHPhBjric1bruSmuEYbdroGusmQMYtbaZ6eQ8nx3jBw hzO0RXYswfUji485QYrf+ThxfM7wp/7fupq/4/9OK2tzaAVte3qAfmFdhnbLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcD42k012F9TTeOOwhGVd6bRucLcwHwYDVR0j BBgwFoAUplpzcKKNpxscEbieCdUXU8SYJG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmVmMTZmMzEtNjBjZS00N2E3LWFlOGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBB MjhEQTcxQjFDMTFCODlFMDlENTE3NTNDNDk4MjQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy9BNjVBNzM3MEEyOERBNzFCMUMxMUI4OUUwOUQ1MTc1M0M0OTgy NDZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3 NTNDNDk4MjQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcU+vfu8H4DfQahbw1mX5kqERKsCpfo3bU1 U7V7FgTBDNzTBEy9SXRoyu9pgli0szMOX1V0+XaImjUo54wY6QdXz8plePMaCt9h tZ7N0aDHfDmaTUjk77TzaqgRRcLXDPT7CcGeoWPj6r8MDQZRKrQZOgxKR3huwh9E 0vtvNgk4OTJagWqbDwT9HvwEe6k/YscYa4d4GNGbB/8Mfl9bevYfF0ua9AiAlJh3 9tcemHR+rZ3hjMSf6hQh3u/JUv1eX3GvHaeVeLplf9Z8jFFzftPE0riWQZZogpSj WlE8SsG5qtAkZnnE1V3NpL292V00YG+1zIFETxnyFImBK5p7qd4= -----END CERTIFICATE-----Generated at Thu Sep 24 03:49:51 2026 by rpki-client