$ rpki-client -vvvf rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft File: A655C14C173A3BE852B5A2C52C501937C4340242.mft (raw, json) Hash identifier: F9Wr8f5wU5FOjmNaqLm0I+yiXpwcaCllQdGJ+22XmAg= Subject key identifier: 50:AB:07:77:AF:35:74:95:C8:7A:D8:5F:6E:10:74:73:A1:1B:4D:15 Authority key identifier: A6:55:C1:4C:17:3A:3B:E8:52:B5:A2:C5:2C:50:19:37:C4:34:02:42 Certificate issuer: /CN=A655C14C173A3BE852B5A2C52C501937C4340242 Certificate serial: 09B149B4440328F5FB5442A0506C8B6DE0AA5EA9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 12:36:27 +0000 Manifest this update: Thu 24 Sep 2026 12:31:27 +0000 Manifest next update: Fri 25 Sep 2026 14:46:27 +0000 Files and hashes: 1: 3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa (hash: St+whbiWn8DuDZzEPL2qqiXyvmUfCd91hjaKC3vJifA=) 2: 3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa (hash: qkm6D0klaQyvN59pQnarOTQhutzEDT+u+1JdsHBl/VQ=) 3: 3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa (hash: VTw+tu3SsLrqMi7jJgKUunIG386oKhLKeizx0PYXC2g=) 4: A655C14C173A3BE852B5A2C52C501937C4340242.crl (hash: LzfpXYWdWu3XEkOPVkTk7P8Nb0lNjLqPeu8A4BucAgU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.crl rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 14:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b1:49:b4:44:03:28:f5:fb:54:42:a0:50:6c:8b:6d:e0:aa:5e:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A655C14C173A3BE852B5A2C52C501937C4340242 Validity Not Before: Sep 24 12:31:27 2026 GMT Not After : Sep 25 14:46:27 2026 GMT Subject: CN=50AB0777AF357495C87AD85F6E107473A11B4D15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:66:70:15:3d:7e:de:08:d1:d1:31:51:58:70: fd:2b:7b:8f:8f:8c:82:10:5c:80:b2:8c:a3:ee:ae: e8:08:b3:de:e2:30:ac:f3:f5:81:78:a5:a7:19:b4: 9f:07:23:1e:66:08:28:e7:c4:df:9c:8c:df:5a:a5: 43:bc:92:66:42:5c:ba:ff:28:42:54:51:15:4d:4d: fc:12:94:4e:fd:b1:8a:4c:ed:c7:c7:c6:58:60:ec: df:57:13:6b:9d:4c:06:e4:06:c9:36:28:09:6e:46: 4a:88:05:19:79:4a:c6:4b:75:f5:c1:c3:a5:98:f0: 36:8e:b4:49:75:06:93:d2:02:73:c5:de:7b:a5:8f: cc:d9:3b:1c:fa:14:02:b1:4f:ca:cf:e7:0a:7d:d9: c4:e3:49:70:63:83:41:2c:51:e2:d0:84:83:0e:8f: 33:0f:43:f4:b5:bc:2b:03:b8:aa:92:ef:fd:c4:4a: 2e:5c:59:cf:4f:10:b2:05:a7:0a:21:ad:d9:97:d4: 9c:cc:c8:2f:8f:1b:d9:2b:36:36:2e:ae:16:fc:b0: fe:3f:32:13:89:32:38:b4:9d:bf:4f:e9:61:0a:26: 83:7a:18:01:d6:71:62:56:4f:fc:e3:8c:bb:41:87: f5:0c:c3:92:b8:77:15:76:39:5d:19:5c:6d:2f:e7: 2f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AB:07:77:AF:35:74:95:C8:7A:D8:5F:6E:10:74:73:A1:1B:4D:15 X509v3 Authority Key Identifier: keyid:A6:55:C1:4C:17:3A:3B:E8:52:B5:A2:C5:2C:50:19:37:C4:34:02:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:97:16:3e:00:07:66:32:96:83:46:e6:8a:2b:3e:29:56:f3: e5:a4:70:fe:d8:29:63:75:99:d0:bb:62:2f:b0:03:08:6d:9b: 7d:bd:9c:9e:94:99:7a:0d:1e:ed:8e:64:24:d2:22:e2:63:77: ca:0f:32:0e:6f:85:37:f4:4c:4e:f2:92:28:5a:e1:21:7c:8d: bc:35:1a:e2:8a:66:2e:c3:ca:1a:a5:6a:1c:20:38:cf:18:0b: 8a:65:b3:d1:a8:25:29:ed:ea:3a:3b:84:95:f4:73:58:26:1e: 35:6a:1d:ab:25:cb:80:d5:f3:28:d6:d8:d0:da:3e:6b:9a:44: 6f:32:f3:8f:b4:7a:d3:70:75:b0:6f:f1:c0:43:d5:a5:86:88: e9:39:97:39:00:89:7a:fb:bc:91:48:61:56:54:f9:b8:8b:73: 2e:8b:38:8e:53:ff:80:b6:7a:a4:44:32:69:e3:59:4f:01:9d: a4:90:96:2d:40:2c:56:3e:28:31:70:d1:f5:2a:dc:90:cf:04: 8f:87:0b:43:56:f9:09:ff:b6:c4:da:a2:ad:dc:bd:30:8f:74: 7b:fd:2f:ab:86:03:4f:01:bb:ca:b8:22:59:dd:6e:69:9e:dc: 39:6a:83:ae:a0:15:28:0d:65:52:b3:6d:73:d6:8e:83:71:71: eb:fc:72:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCbFJtEQDKPX7VEKgUGyLbeCqXqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1NUMxNEMxNzNBM0JFODUyQjVBMkM1MkM1MDE5MzdD NDM0MDI0MjAeFw0yNjA5MjQxMjMxMjdaFw0yNjA5MjUxNDQ2MjdaMDMxMTAvBgNV BAMTKDUwQUIwNzc3QUYzNTc0OTVDODdBRDg1RjZFMTA3NDczQTExQjREMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ZnAVPX7eCNHRMVFYcP0re4+P jIIQXICyjKPurugIs97iMKzz9YF4pacZtJ8HIx5mCCjnxN+cjN9apUO8kmZCXLr/ KEJUURVNTfwSlE79sYpM7cfHxlhg7N9XE2udTAbkBsk2KAluRkqIBRl5SsZLdfXB w6WY8DaOtEl1BpPSAnPF3nulj8zZOxz6FAKxT8rP5wp92cTjSXBjg0EsUeLQhIMO jzMPQ/S1vCsDuKqS7/3ESi5cWc9PELIFpwohrdmX1JzMyC+PG9krNjYurhb8sP4/ MhOJMji0nb9P6WEKJoN6GAHWcWJWT/zjjLtBh/UMw5K4dxV2OV0ZXG0v5y+dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUKsHd681dJXIethfbhB0c6EbTRUwHwYDVR0j BBgwFoAUplXBTBc6O+hStaLFLFAZN8Q0AkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTgxMjc0YWYtN2NkMC00MGFmLWEzMjEtNjc2ODk4ZDU4ZGI4LzAvQTY1NUMxNEMx NzNBM0JFODUyQjVBMkM1MkM1MDE5MzdDNDM0MDI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNjU1QzE0QzE3M0EzQkU4NTJCNUEyQzUyQzUwMTkzN0M0MzQw MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTgxMjc0YWYtN2NkMC00MGFmLWEz MjEtNjc2ODk4ZDU4ZGI4LzAvQTY1NUMxNEMxNzNBM0JFODUyQjVBMkM1MkM1MDE5 MzdDNDM0MDI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqXFj4AB2YyloNG5oorPilW8+WkcP7YKWN1 mdC7Yi+wAwhtm329nJ6UmXoNHu2OZCTSIuJjd8oPMg5vhTf0TE7ykiha4SF8jbw1 GuKKZi7DyhqlahwgOM8YC4pls9GoJSnt6jo7hJX0c1gmHjVqHasly4DV8yjW2NDa PmuaRG8y84+0etNwdbBv8cBD1aWGiOk5lzkAiXr7vJFIYVZU+biLcy6LOI5T/4C2 eqREMmnjWU8BnaSQli1ALFY+KDFw0fUq3JDPBI+HC0NW+Qn/tsTaoq3cvTCPdHv9 L6uGA08Bu8q4Ilndbmme3Dlqg66gFSgNZVKzbXPWjoNxcev8chs= -----END CERTIFICATE-----Generated at Fri Sep 25 05:56:57 2026 by rpki-client