$ rpki-client -vvvf rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft File: A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft (raw, json) Hash identifier: vtB7yZUKAJjs+uAqRkrA/m5VDxMhs62YTlmPexmCeF0= Subject key identifier: A5:F2:C5:66:A7:96:C6:7E:77:88:2F:98:A3:20:E2:5C:8A:71:95:E4 Authority key identifier: A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F Certificate issuer: /CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F Certificate serial: 382427A3C756F856331395F01DCFCC11C7F56173 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 20:56:21 +0000 Manifest this update: Thu 24 Sep 2026 20:51:21 +0000 Manifest next update: Fri 25 Sep 2026 21:30:21 +0000 Files and hashes: 1: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: Il2995+O34HRt5QUYak7wmOSE/xt1UwsadzXH7aEOYo=) 2: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: lknjz+xGrn74yDQTZoQhv/KjNKL2zVYWd4Swco59gWA=) 3: A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl (hash: S0rDJpeM+Rwvkj3fXkJDB+LEQOfqUfMwhS1gJTPAFbM=) 4: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: mTSHlFZAxZWWAKZzsiMuSqeFq/VKg23JR+BpuxRfCT8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 21:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:24:27:a3:c7:56:f8:56:33:13:95:f0:1d:cf:cc:11:c7:f5:61:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F Validity Not Before: Sep 24 20:51:21 2026 GMT Not After : Sep 25 21:30:21 2026 GMT Subject: CN=A5F2C566A796C67E77882F98A320E25C8A7195E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:81:3a:75:ee:b1:27:f3:8e:13:62:42:0f:f2: d3:e6:1c:db:0f:1a:8f:72:26:f1:bd:40:e3:9a:38: 19:27:58:6f:38:53:e0:2f:37:b1:e6:1f:3f:d3:99: 45:a5:48:e4:51:de:b3:59:33:f9:88:00:3a:37:bf: 1f:c3:c5:76:96:9b:8d:d2:04:7f:49:d3:22:ed:0b: bd:c8:90:06:fb:fb:6f:d7:4b:f9:bb:b1:ac:f5:ee: b5:ac:51:2f:c4:87:d2:06:f1:46:64:c6:e5:c5:51: b5:52:b9:f7:99:7b:79:1c:84:d3:c9:b1:82:16:cf: f4:77:72:ba:a9:b1:5b:e2:0f:c0:ab:01:e1:5e:d6: 14:b9:4c:ae:15:26:e9:14:43:f6:3c:ff:c6:45:a6: 15:4c:cf:21:ff:c2:f9:b0:82:57:34:09:53:ff:96: b2:85:8a:1d:7f:5e:ad:00:37:c5:5b:4e:08:84:17: 85:a9:a1:85:6f:f8:b3:c3:28:09:f0:7e:1a:7d:99: 43:00:43:5d:ef:5a:f7:23:66:17:ce:84:85:55:a2: 7a:5f:f5:18:89:cc:4e:22:9d:00:16:80:05:8d:4a: 28:e2:9f:07:19:37:f7:1c:35:61:ed:af:4b:b5:29: 4d:f7:54:e1:90:a8:54:05:b2:47:8e:10:66:30:ed: 51:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F2:C5:66:A7:96:C6:7E:77:88:2F:98:A3:20:E2:5C:8A:71:95:E4 X509v3 Authority Key Identifier: keyid:A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e1:15:bb:72:e9:82:b5:10:fa:62:bd:de:63:da:c3:bb:11: ba:fd:fe:44:bc:0f:49:6b:ee:7a:9e:2f:db:73:44:99:9f:a1: 5a:de:a0:13:82:4f:d1:75:8e:93:dd:d9:2d:7e:d4:e0:34:f8: 0e:12:e0:48:ce:a4:3b:34:45:5f:fc:99:c6:5c:5a:fe:c5:84: 47:a2:a7:dd:42:a1:e0:b4:e7:e5:fa:97:e5:d3:c6:68:a2:ce: f6:6d:9c:5f:01:79:32:f6:8f:b9:c2:01:af:1d:a8:22:15:d4: bd:1e:e1:5b:52:c0:2b:ff:5b:d0:66:86:3b:c2:c9:5c:37:db: 6d:88:d5:93:dd:2a:31:18:9d:1e:d5:fa:5d:71:69:ad:8c:4e: 6f:27:a1:ce:fc:02:af:1c:27:c4:0c:9b:fb:a8:1a:87:bd:c4: 6c:e1:83:4b:e2:cc:7f:dd:8e:b2:21:d9:0e:9b:24:8c:d5:3f: 4a:fc:84:88:62:07:85:bd:38:81:61:12:e2:72:a2:59:b7:1e: 3c:a3:2d:11:9a:25:30:f0:b4:59:dc:09:e0:f5:b6:71:39:c5: f0:64:27:0a:01:48:05:f0:44:c9:01:32:55:33:28:6f:af:46: b9:59:6c:e5:eb:06:85:b8:8e:52:47:20:42:cd:09:d9:51:06: 82:94:f8:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOCQno8dW+FYzE5XwHc/MEcf1YXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOEQyQzQ1RDgyMEMxRkM0MEJDRjAzQjlCMTA2OTk5 OTJEOEIyRjAeFw0yNjA5MjQyMDUxMjFaFw0yNjA5MjUyMTMwMjFaMDMxMTAvBgNV BAMTKEE1RjJDNTY2QTc5NkM2N0U3Nzg4MkY5OEEzMjBFMjVDOEE3MTk1RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVgTp17rEn844TYkIP8tPmHNsP Go9yJvG9QOOaOBknWG84U+AvN7HmHz/TmUWlSORR3rNZM/mIADo3vx/DxXaWm43S BH9J0yLtC73IkAb7+2/XS/m7saz17rWsUS/Eh9IG8UZkxuXFUbVSufeZe3kchNPJ sYIWz/R3crqpsVviD8CrAeFe1hS5TK4VJukUQ/Y8/8ZFphVMzyH/wvmwglc0CVP/ lrKFih1/Xq0AN8VbTgiEF4WpoYVv+LPDKAnwfhp9mUMAQ13vWvcjZhfOhIVVonpf 9RiJzE4inQAWgAWNSijinwcZN/ccNWHtr0u1KU33VOGQqFQFskeOEGYw7VFJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpfLFZqeWxn53iC+YoyDiXIpxleQwHwYDVR0j BBgwFoAUqejSxF2CDB/EC88DubEGmZktiy8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDgxZDU0Y2ItNTdhOS00YTE2LWE3MGUtYzVmNjAyNGUxMzlkLzAvQTlFOEQyQzQ1 RDgyMEMxRkM0MEJDRjAzQjlCMTA2OTk5OTJEOEIyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BOUU4RDJDNDVEODIwQzFGQzQwQkNGMDNCOUIxMDY5OTk5MkQ4 QjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQTlFOEQyQzQ1RDgyMEMxRkM0MEJDRjAzQjlCMTA2 OTk5OTJEOEIyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADhFbty6YK1EPpivd5j2sO7Ebr9/kS8D0lr 7nqeL9tzRJmfoVreoBOCT9F1jpPd2S1+1OA0+A4S4EjOpDs0RV/8mcZcWv7FhEei p91CoeC05+X6l+XTxmiizvZtnF8BeTL2j7nCAa8dqCIV1L0e4VtSwCv/W9BmhjvC yVw3222I1ZPdKjEYnR7V+l1xaa2MTm8noc78Aq8cJ8QMm/uoGoe9xGzhg0vizH/d jrIh2Q6bJIzVP0r8hIhiB4W9OIFhEuJyolm3HjyjLRGaJTDwtFncCeD1tnE5xfBk JwoBSAXwRMkBMlUzKG+vRrlZbOXrBoW4jlJHIELNCdlRBoKU+DI= -----END CERTIFICATE-----Generated at Fri Sep 25 09:02:13 2026 by rpki-client