$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft File: A100A99332CE78931B9E02D4EFEE6712B81443A5.mft (raw, json) Hash identifier: mSJNnGSf5PrpxAe90E+WWKh1X/JkJ0Iqrdis0W4nQqE= Subject key identifier: A6:BE:28:4A:DA:0F:59:68:AB:53:7C:61:C7:52:0E:42:73:D7:5F:0A Authority key identifier: A1:00:A9:93:32:CE:78:93:1B:9E:02:D4:EF:EE:67:12:B8:14:43:A5 Certificate issuer: /CN=A100A99332CE78931B9E02D4EFEE6712B81443A5 Certificate serial: 02EB6B1291E85A22F383B0CBE28887103C9C60A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 22:13:06 +0000 Manifest this update: Thu 24 Sep 2026 22:08:06 +0000 Manifest next update: Sat 26 Sep 2026 01:57:06 +0000 Files and hashes: 1: A100A99332CE78931B9E02D4EFEE6712B81443A5.crl (hash: Ow9AncPNuSRL8MFQD6irA7HMFXvojd6JZ9jUdvzETME=) 2: 3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (hash: DTmwpednkI6HsiidwVpKHLiGYfMBV1fbHQp1IFSmAn0=) 3: 3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (hash: heQq7HcquDyrw94B2s2im1ZCA88nQvwu0Cy2cBDthxc=) 4: 3130332e32362e3139312e302f32342d3234203d3e20313530323639.roa (hash: ZcmU1/1tmDS14EVy1azjLSMcCXj3VjCECbts/S2roW8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.crl rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 01:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:eb:6b:12:91:e8:5a:22:f3:83:b0:cb:e2:88:87:10:3c:9c:60:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A100A99332CE78931B9E02D4EFEE6712B81443A5 Validity Not Before: Sep 24 22:08:06 2026 GMT Not After : Sep 26 01:57:06 2026 GMT Subject: CN=A6BE284ADA0F5968AB537C61C7520E4273D75F0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:56:a8:7a:dd:da:36:73:2c:58:5b:0e:2d:e3: c4:55:e0:ae:06:2f:05:3e:c4:34:0b:11:f1:dd:da: 64:92:09:08:a1:27:10:08:64:e9:5e:a2:ce:39:c6: 01:65:f0:b6:41:3e:dd:c6:f0:74:6c:5b:05:ef:b5: 59:d4:40:1a:cc:3c:8a:b5:ff:8a:ac:2b:dd:f7:d6: 46:7c:9f:d0:8f:dd:b7:9f:9a:c5:f2:c9:0c:5e:02: 7d:35:8f:6e:57:9c:38:7b:4c:35:0c:93:4b:0c:16: 38:eb:c5:77:ed:15:86:9c:e9:67:79:7b:70:a6:76: 50:41:8b:38:28:f2:19:42:0b:96:af:dd:da:00:4d: f1:3d:45:c9:6b:8b:11:ba:11:11:11:9a:5d:bd:6c: c8:fb:f4:2b:54:d6:db:da:f2:06:29:55:c1:7f:a8: e2:13:08:0b:c5:c1:91:79:c5:42:6a:a4:0a:fa:44: c7:8b:5c:5c:7b:71:97:fc:4e:39:3a:96:e6:10:14: 06:18:d6:1a:29:fa:59:5c:37:88:6f:5f:4d:c6:52: d9:1e:f8:f5:f2:67:a8:56:66:1c:76:4d:39:86:9b: ee:d0:4a:77:36:a6:4f:36:df:80:c2:65:bc:5f:11: d1:aa:1e:26:ec:43:bc:89:d4:5b:3f:5f:8a:86:48: 14:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BE:28:4A:DA:0F:59:68:AB:53:7C:61:C7:52:0E:42:73:D7:5F:0A X509v3 Authority Key Identifier: keyid:A1:00:A9:93:32:CE:78:93:1B:9E:02:D4:EF:EE:67:12:B8:14:43:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:03:06:b9:16:b1:02:b9:74:ff:37:03:7d:2a:cd:bf:be:21: f2:76:40:9c:f0:96:7f:c5:a0:8a:a0:26:f5:33:bf:88:2a:73: c1:33:e0:30:fc:c7:76:a6:6a:dc:8a:b3:f5:6d:f6:dc:49:ac: e8:a7:60:fa:b0:43:42:b2:b6:ba:9b:df:90:96:6d:9d:e6:18: c5:c7:83:e5:e0:80:07:84:c1:cd:72:3b:87:2f:b9:1e:5b:42: e0:b8:7b:53:63:91:d4:76:53:e8:43:18:11:c2:5f:a5:03:c4: 67:ca:e5:0c:16:74:72:53:4c:e1:db:9b:c0:d6:53:76:23:10: 87:4b:e0:08:12:0e:57:7b:b6:4f:2d:ef:da:e3:58:e9:44:b6: 16:bf:5e:70:77:db:92:64:e8:1b:ac:89:06:e4:e9:bf:27:54: 7e:e4:1c:1b:5c:92:0a:49:9e:01:f9:49:55:e3:05:50:a5:17: 56:43:02:a3:77:0c:45:9f:de:a7:76:eb:88:76:67:fb:66:8a: 17:50:cd:3d:cc:9f:fc:fc:27:e8:be:ba:4f:0b:74:0c:6f:de: a4:cb:f8:21:72:1d:39:e4:98:c4:1b:8d:14:42:55:0f:bc:e5: 1f:f6:eb:a7:16:81:cd:d7:5c:34:c5:f0:cd:c3:9f:45:19:98: 08:eb:c0:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAutrEpHoWiLzg7DL4oiHEDycYKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTEwMEE5OTMzMkNFNzg5MzFCOUUwMkQ0RUZFRTY3MTJC ODE0NDNBNTAeFw0yNjA5MjQyMjA4MDZaFw0yNjA5MjYwMTU3MDZaMDMxMTAvBgNV BAMTKEE2QkUyODRBREEwRjU5NjhBQjUzN0M2MUM3NTIwRTQyNzNENzVGMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTVqh63do2cyxYWw4t48RV4K4G LwU+xDQLEfHd2mSSCQihJxAIZOleos45xgFl8LZBPt3G8HRsWwXvtVnUQBrMPIq1 /4qsK9331kZ8n9CP3befmsXyyQxeAn01j25XnDh7TDUMk0sMFjjrxXftFYac6Wd5 e3CmdlBBizgo8hlCC5av3doATfE9RclrixG6ERERml29bMj79CtU1tva8gYpVcF/ qOITCAvFwZF5xUJqpAr6RMeLXFx7cZf8Tjk6luYQFAYY1hop+llcN4hvX03GUtke +PXyZ6hWZhx2TTmGm+7QSnc2pk8234DCZbxfEdGqHibsQ7yJ1Fs/X4qGSBTjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpr4oStoPWWirU3xhx1IOQnPXXwowHwYDVR0j BBgwFoAUoQCpkzLOeJMbngLU7+5nErgUQ6UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjY5MjZjODItYzhlNS00Zjk3LTg5OTQtMmM0MDY1MzgxN2NlLzAvQTEwMEE5OTMz MkNFNzg5MzFCOUUwMkQ0RUZFRTY3MTJCODE0NDNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTAwQTk5MzMyQ0U3ODkzMUI5RTAyRDRFRkVFNjcxMkI4MTQ0 M0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjY5MjZjODItYzhlNS00Zjk3LTg5 OTQtMmM0MDY1MzgxN2NlLzAvQTEwMEE5OTMzMkNFNzg5MzFCOUUwMkQ0RUZFRTY3 MTJCODE0NDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL0DBrkWsQK5dP83A30qzb++IfJ2QJzwln/F oIqgJvUzv4gqc8Ez4DD8x3amatyKs/Vt9txJrOinYPqwQ0Kytrqb35CWbZ3mGMXH g+XggAeEwc1yO4cvuR5bQuC4e1NjkdR2U+hDGBHCX6UDxGfK5QwWdHJTTOHbm8DW U3YjEIdL4AgSDld7tk8t79rjWOlEtha/XnB325Jk6BusiQbk6b8nVH7kHBtckgpJ ngH5SVXjBVClF1ZDAqN3DEWf3qd264h2Z/tmihdQzT3Mn/z8J+i+uk8LdAxv3qTL +CFyHTnkmMQbjRRCVQ+85R/266cWgc3XXDTF8M3Dn0UZmAjrwJc= -----END CERTIFICATE-----Generated at Fri Sep 25 20:07:38 2026 by rpki-client