$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft File: A100A99332CE78931B9E02D4EFEE6712B81443A5.mft (raw, json) Hash identifier: O+dc+ID5Gn/Ptj6Pc5/sg3M43gvMTtOMttRd/c7LiFo= Subject key identifier: 7C:CF:29:54:C4:D3:2C:DF:A8:24:45:2C:6B:D3:86:3A:EB:6A:DF:63 Authority key identifier: A1:00:A9:93:32:CE:78:93:1B:9E:02:D4:EF:EE:67:12:B8:14:43:A5 Certificate issuer: /CN=A100A99332CE78931B9E02D4EFEE6712B81443A5 Certificate serial: 3753169E6F2CFB5D94E691BDFEC9EACDFB299A6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft Manifest number: C5 Signing time: Fri 25 Sep 2026 17:57:38 +0000 Manifest this update: Fri 25 Sep 2026 17:52:38 +0000 Manifest next update: Sat 26 Sep 2026 19:45:38 +0000 Files and hashes: 1: 3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (hash: DTmwpednkI6HsiidwVpKHLiGYfMBV1fbHQp1IFSmAn0=) 2: 3130332e32362e3139312e302f32342d3234203d3e20313530323639.roa (hash: ZcmU1/1tmDS14EVy1azjLSMcCXj3VjCECbts/S2roW8=) 3: A100A99332CE78931B9E02D4EFEE6712B81443A5.crl (hash: hnlXMLFf1WzeRjutFZ+rdXNDZVXAJpqJmvJDBzfJvog=) 4: 3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (hash: heQq7HcquDyrw94B2s2im1ZCA88nQvwu0Cy2cBDthxc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.crl rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:53:16:9e:6f:2c:fb:5d:94:e6:91:bd:fe:c9:ea:cd:fb:29:9a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A100A99332CE78931B9E02D4EFEE6712B81443A5 Validity Not Before: Sep 25 17:52:38 2026 GMT Not After : Sep 26 19:45:38 2026 GMT Subject: CN=7CCF2954C4D32CDFA824452C6BD3863AEB6ADF63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8c:93:8f:bb:c8:b4:6e:7f:8a:46:d5:01:ae: 7b:97:b9:97:ae:ab:4d:ed:b3:59:d9:d9:e5:73:20: f6:ff:0d:13:09:fc:2e:e2:4b:de:8b:80:0e:57:69: e3:0c:1a:04:de:eb:aa:08:df:ed:dd:de:74:4e:de: 6e:92:59:67:2a:d5:d7:56:f8:cd:7a:4f:57:4d:d3: 06:61:e8:e2:82:7f:84:a3:d1:c2:59:cd:77:57:0a: 46:9e:ad:4e:ba:ad:7d:5d:3b:e0:59:08:b3:28:d8: 56:77:09:bc:90:90:26:30:9d:6e:b6:2b:c4:d1:9d: 22:7f:56:27:9d:c4:bc:05:36:74:2b:b5:23:88:e5: e9:e3:60:d3:c1:0d:90:cf:8f:46:18:8f:d2:51:04: 0a:66:d9:49:20:99:fc:7e:36:6a:48:b5:20:11:de: a8:b1:67:49:aa:4c:66:1d:e1:62:79:e0:de:2b:de: 66:9d:0e:9b:21:7d:29:3b:bf:28:37:d8:28:a3:18: df:14:a9:e2:46:89:b2:a6:c0:f1:8a:b0:b8:c9:21: 08:a7:04:9d:02:b7:43:5b:58:ad:6c:5d:43:a7:b8: 93:bb:54:dd:e9:94:68:68:80:e6:a9:28:14:8e:19: bb:6e:8a:d6:95:8d:49:45:81:8e:bf:b3:2d:ea:7a: d4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CF:29:54:C4:D3:2C:DF:A8:24:45:2C:6B:D3:86:3A:EB:6A:DF:63 X509v3 Authority Key Identifier: keyid:A1:00:A9:93:32:CE:78:93:1B:9E:02:D4:EF:EE:67:12:B8:14:43:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:2d:68:68:53:74:c3:df:aa:74:d6:9e:28:44:6a:84:6b:d1: cf:76:4d:43:be:c9:a5:2a:58:ee:8e:64:22:00:85:4e:73:ca: da:d1:4c:55:df:c0:f3:bb:c3:6d:a4:79:49:64:2c:b3:ca:e0: 93:24:ac:ee:bb:65:6e:a5:4e:e0:24:33:ea:6a:04:d6:6e:0c: e4:8d:1c:0b:15:c2:6f:8c:23:9f:42:1b:82:79:a9:3c:a8:47: 43:76:ad:78:4c:2f:33:b4:63:7a:eb:59:93:3b:7d:01:e4:cd: 00:02:af:c4:0b:64:1c:50:26:ba:2c:85:89:44:87:9f:e6:f5: 21:2d:8f:91:50:e2:cf:5b:db:2a:f2:c2:49:2a:64:c1:f9:61: ef:47:4e:bf:b4:65:8e:ec:79:9c:05:ba:f1:e6:c4:7f:3b:df: 0d:ab:3a:b9:dd:6d:b7:8e:ed:3e:f3:c3:f7:69:e0:15:00:79: 8a:fc:af:49:71:72:07:28:d4:9e:07:31:ba:e0:3a:57:42:bc: ec:ae:14:a8:c6:28:85:4a:9a:4c:a5:c7:41:2f:51:5c:a7:59: 65:18:9d:73:4d:6b:db:14:bb:d0:b8:4a:58:da:b6:fa:88:06: c8:30:b1:8d:93:7d:82:e7:89:b8:8b:2a:e7:e4:b7:c1:53:d6: 90:cb:3f:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN1MWnm8s+12U5pG9/snqzfspmmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTEwMEE5OTMzMkNFNzg5MzFCOUUwMkQ0RUZFRTY3MTJC ODE0NDNBNTAeFw0yNjA5MjUxNzUyMzhaFw0yNjA5MjYxOTQ1MzhaMDMxMTAvBgNV BAMTKDdDQ0YyOTU0QzREMzJDREZBODI0NDUyQzZCRDM4NjNBRUI2QURGNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhjJOPu8i0bn+KRtUBrnuXuZeu q03ts1nZ2eVzIPb/DRMJ/C7iS96LgA5XaeMMGgTe66oI3+3d3nRO3m6SWWcq1ddW +M16T1dN0wZh6OKCf4Sj0cJZzXdXCkaerU66rX1dO+BZCLMo2FZ3CbyQkCYwnW62 K8TRnSJ/ViedxLwFNnQrtSOI5enjYNPBDZDPj0YYj9JRBApm2Ukgmfx+NmpItSAR 3qixZ0mqTGYd4WJ54N4r3madDpshfSk7vyg32CijGN8UqeJGibKmwPGKsLjJIQin BJ0Ct0NbWK1sXUOnuJO7VN3plGhogOapKBSOGbtuitaVjUlFgY6/sy3qetTxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfM8pVMTTLN+oJEUsa9OGOutq32MwHwYDVR0j BBgwFoAUoQCpkzLOeJMbngLU7+5nErgUQ6UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjY5MjZjODItYzhlNS00Zjk3LTg5OTQtMmM0MDY1MzgxN2NlLzAvQTEwMEE5OTMz MkNFNzg5MzFCOUUwMkQ0RUZFRTY3MTJCODE0NDNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTAwQTk5MzMyQ0U3ODkzMUI5RTAyRDRFRkVFNjcxMkI4MTQ0 M0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjY5MjZjODItYzhlNS00Zjk3LTg5 OTQtMmM0MDY1MzgxN2NlLzAvQTEwMEE5OTMzMkNFNzg5MzFCOUUwMkQ0RUZFRTY3 MTJCODE0NDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJstaGhTdMPfqnTWnihEaoRr0c92TUO+yaUq WO6OZCIAhU5zytrRTFXfwPO7w22keUlkLLPK4JMkrO67ZW6lTuAkM+pqBNZuDOSN HAsVwm+MI59CG4J5qTyoR0N2rXhMLzO0Y3rrWZM7fQHkzQACr8QLZBxQJroshYlE h5/m9SEtj5FQ4s9b2yrywkkqZMH5Ye9HTr+0ZY7seZwFuvHmxH873w2rOrndbbeO 7T7zw/dp4BUAeYr8r0lxcgco1J4HMbrgOldCvOyuFKjGKIVKmkylx0EvUVynWWUY nXNNa9sUu9C4SljatvqIBsgwsY2TfYLnibiLKufkt8FT1pDLPw8= -----END CERTIFICATE-----Generated at Sat Sep 26 07:57:12 2026 by rpki-client