$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft File: A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft (raw, json) Hash identifier: 1cTW1zSGiHZedJzXTXKzrrTcXJW07oP8mOFE1c/GR2s= Subject key identifier: 0F:E0:01:C9:82:98:65:A7:5C:00:C5:48:00:9C:8F:5C:A8:23:A4:1C Authority key identifier: A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3 Certificate issuer: /CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3 Certificate serial: 05154DEF83C14047442F5E6DBCD8F8402E727943 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 15:35:24 +0000 Manifest this update: Wed 23 Sep 2026 15:30:24 +0000 Manifest next update: Thu 24 Sep 2026 18:41:24 +0000 Files and hashes: 1: 3130332e33312e3235312e302f32342d3234203d3e203538343737.roa (hash: nNs3zCmZDfGYSq9FVm5Dz3ukk7qRss0F7cyqFrIdiUs=) 2: 3130332e32382e3134382e302f32342d3234203d3e203538343737.roa (hash: xw+egA02OX5uOYAGnedHg8tG8xIxYeukOfUcUDfNNIQ=) 3: 34352e36342e39382e302f32342d3234203d3e203538343737.roa (hash: /BLy7k3doovw3jQVTXaYTnBas7DL4Zfrgn7U9J4fWVA=) 4: 3130332e32382e3134392e302f32342d3234203d3e203538343737.roa (hash: qDJ/c5qWojiJYfc9eIqgLudqj78rlDzX+1L2SPWNYTQ=) 5: 323030313a6466303a3237333a3a2f34382d3438203d3e20313431393835.roa (hash: xS3CYv6HlOigS6V1ToXrtXoIA2pH/yBeJ3+U9/cCmQA=) 6: A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl (hash: 73NNH0EMR1r3lHo4fe+atNmEbA6ck2ifUWgNE255898=) 7: 34352e36342e39362e302f32342d3234203d3e203538343737.roa (hash: 5ev3rc/Wu45AIU9QKYFuF4qHEkUSlKkTnsZ3JdywnVM=) 8: 3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (hash: 2ZuwNGg62iU8raGM9TYM3A0jrh0UG5HDKyy6dwXOLS0=) 9: 34352e36342e39372e302f32342d3234203d3e20313335333630.roa (hash: eVL30F9FmWg9xfcbeGTmvP0LqqOdBiZkfgWJnF3c51k=) 10: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (hash: dyN12mfoRjXFlNHqIFEChK7+mIsDEFYombQgQudcekM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:15:4d:ef:83:c1:40:47:44:2f:5e:6d:bc:d8:f8:40:2e:72:79:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3 Validity Not Before: Sep 23 15:30:24 2026 GMT Not After : Sep 24 18:41:24 2026 GMT Subject: CN=0FE001C9829865A75C00C548009C8F5CA823A41C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6d:f2:f4:5b:79:70:23:3e:07:b1:8a:5b:f4: a0:99:a3:7c:83:c3:53:e6:30:2f:80:99:93:ba:16: 11:52:cd:1a:ee:26:c8:47:35:6f:8a:b7:f8:74:20: 3d:8b:b1:a5:5d:f5:91:68:6a:ef:6d:24:e2:c1:f4: 06:db:b2:d9:fc:5e:50:1d:e1:2a:4a:d9:f3:b1:cf: 56:c7:d4:6c:97:5e:7c:40:6b:fc:87:f4:5a:7b:98: 45:25:c2:75:eb:a0:70:5e:7a:c2:23:64:db:ce:f4: 18:34:0d:ff:c6:14:b4:46:af:14:b7:3b:40:da:77: 7a:1f:68:c4:9c:4f:5a:69:80:d5:a3:14:8a:a2:ae: 2e:f3:de:e6:34:13:13:ab:8a:2a:30:cd:cf:93:ae: 7f:fa:21:e0:8f:6e:59:5c:25:d1:f6:8f:32:2e:06: ec:e1:a2:26:63:ea:c5:79:31:d7:f9:2d:33:86:e6: 0e:d9:c2:8e:da:8e:63:61:1e:e0:8a:b0:ec:31:b2: b5:6f:5c:c1:1f:d4:44:51:b7:a0:3c:fb:68:a1:09: 3c:9c:fa:b4:a6:ad:2f:03:a0:55:3e:1b:b4:1c:48: 92:ff:a2:c1:46:52:6a:b8:a7:f3:1b:8d:b0:47:53: 87:75:93:93:b1:56:39:16:d0:4b:dc:3f:7a:e4:ab: 56:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E0:01:C9:82:98:65:A7:5C:00:C5:48:00:9C:8F:5C:A8:23:A4:1C X509v3 Authority Key Identifier: keyid:A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ce:23:ad:7e:6d:c9:e9:a8:e1:5b:9b:a8:36:5c:ff:fb:61: f6:ca:54:3e:37:0e:19:b8:b6:e9:1c:b5:1d:79:ad:34:3d:a3: 77:33:f7:97:e0:a8:6d:9d:3a:1e:65:28:67:7e:1b:17:b6:b0: 4f:3e:51:79:c1:52:97:f0:75:a3:8e:c6:39:0c:be:42:c2:71: f6:73:81:5b:4a:db:f8:df:b2:86:d0:2c:4e:ae:98:7c:5a:d1: e0:1c:25:a8:da:9f:0c:87:73:fe:ab:d7:3e:e9:2c:55:68:b9: da:e9:71:1b:ce:91:71:c7:4e:41:a2:64:65:58:ad:69:35:89: 0d:93:30:d4:24:b2:e7:a3:93:de:19:68:cd:e1:a5:ef:ff:2d: ba:59:05:66:8a:58:5a:79:28:06:e8:ab:23:aa:23:30:0e:9a: 83:8a:5c:32:d2:fd:07:03:cd:22:bd:f8:95:37:7e:27:a9:66: 87:ba:c3:46:61:b7:28:41:68:f0:48:05:2b:eb:83:ef:1f:9f: be:8f:2d:25:a3:a3:e9:7f:3f:98:d4:9f:b3:38:ad:2b:0a:72: 14:3e:ec:b1:ac:26:6c:34:46:61:d2:10:9b:f1:3b:ed:36:2a: fe:11:ac:a4:35:02:41:c6:6c:b6:2e:df:e1:24:e1:8b:42:70: 38:7d:35:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBRVN74PBQEdEL15tvNj4QC5yeUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QkFGMkQ4ODUxNEVDMDQxQTg3RjA5MkU2QjZBNTIx RjMzNDlGMzAeFw0yNjA5MjMxNTMwMjRaFw0yNjA5MjQxODQxMjRaMDMxMTAvBgNV BAMTKDBGRTAwMUM5ODI5ODY1QTc1QzAwQzU0ODAwOUM4RjVDQTgyM0E0MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCibfL0W3lwIz4HsYpb9KCZo3yD w1PmMC+AmZO6FhFSzRruJshHNW+Kt/h0ID2LsaVd9ZFoau9tJOLB9Abbstn8XlAd 4SpK2fOxz1bH1GyXXnxAa/yH9Fp7mEUlwnXroHBeesIjZNvO9Bg0Df/GFLRGrxS3 O0Dad3ofaMScT1ppgNWjFIqiri7z3uY0ExOriiowzc+Trn/6IeCPbllcJdH2jzIu BuzhoiZj6sV5Mdf5LTOG5g7Zwo7ajmNhHuCKsOwxsrVvXMEf1ERRt6A8+2ihCTyc +rSmrS8DoFU+G7QcSJL/osFGUmq4p/MbjbBHU4d1k5OxVjkW0EvcP3rkq1YzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD+AByYKYZadcAMVIAJyPXKgjpBwwHwYDVR0j BBgwFoAUoIuvLYhRTsBBqH8JLmtqUh8zSfMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJjNmFhMDMtMWI0ZC00MzhlLWE5ZjMtZWZlYWFlNmIwOTIxLzAvQTA4QkFGMkQ4 ODUxNEVDMDQxQTg3RjA5MkU2QjZBNTIxRjMzNDlGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDhCQUYyRDg4NTE0RUMwNDFBODdGMDkyRTZCNkE1MjFGMzM0 OUYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJjNmFhMDMtMWI0ZC00MzhlLWE5 ZjMtZWZlYWFlNmIwOTIxLzAvQTA4QkFGMkQ4ODUxNEVDMDQxQTg3RjA5MkU2QjZB NTIxRjMzNDlGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADOI61+bcnpqOFbm6g2XP/7YfbKVD43Dhm4 tukctR15rTQ9o3cz95fgqG2dOh5lKGd+Gxe2sE8+UXnBUpfwdaOOxjkMvkLCcfZz gVtK2/jfsobQLE6umHxa0eAcJajanwyHc/6r1z7pLFVoudrpcRvOkXHHTkGiZGVY rWk1iQ2TMNQksuejk94ZaM3hpe//LbpZBWaKWFp5KAboqyOqIzAOmoOKXDLS/QcD zSK9+JU3fiepZoe6w0ZhtyhBaPBIBSvrg+8fn76PLSWjo+l/P5jUn7M4rSsKchQ+ 7LGsJmw0RmHSEJvxO+02Kv4RrKQ1AkHGbLYu3+Ek4YtCcDh9NX0= -----END CERTIFICATE-----Generated at Thu Sep 24 01:03:03 2026 by rpki-client