$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft File: A008821941A61F29770FC73A584B71178BCAE916.mft (raw, json) Hash identifier: YAw5Vz/P9/Q7kttf/tZnnUbt/y8mDO1IjK+pkF3fRW0= Subject key identifier: EC:4E:12:AA:BC:F3:16:C1:D3:E0:90:64:51:12:5D:8F:12:DF:5D:05 Authority key identifier: A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16 Certificate issuer: /CN=A008821941A61F29770FC73A584B71178BCAE916 Certificate serial: 135E3A69EC1CA7933160707C9A6C20E93E17EEDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 09:52:53 +0000 Manifest this update: Thu 24 Sep 2026 09:47:53 +0000 Manifest next update: Fri 25 Sep 2026 13:31:53 +0000 Files and hashes: 1: 3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (hash: MEn9rSCA+X2qT8GUKSJ4R7eRC44YahAnX3SQmIywZAg=) 2: 3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (hash: IsFb+2IB3+NAOmMQ4bANX3K12nM98beEkYNtdgmBcMk=) 3: A008821941A61F29770FC73A584B71178BCAE916.crl (hash: 0c8OkC0YIahU3BcaTli95+FQSAwFggdzOUz0ke0//Jc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 13:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5e:3a:69:ec:1c:a7:93:31:60:70:7c:9a:6c:20:e9:3e:17:ee:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A008821941A61F29770FC73A584B71178BCAE916 Validity Not Before: Sep 24 09:47:53 2026 GMT Not After : Sep 25 13:31:53 2026 GMT Subject: CN=EC4E12AABCF316C1D3E0906451125D8F12DF5D05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8a:b7:61:01:d7:4f:30:f6:56:12:24:0d:56: b8:25:db:c8:a4:7c:9f:37:3a:c2:e2:2b:c5:6d:7f: c1:ae:88:b7:24:ae:f5:c1:8e:f3:04:2c:1a:39:29: ab:0d:42:29:e7:70:96:e7:94:02:55:b9:fb:bc:26: 99:fd:ea:f6:75:4b:c8:b4:b6:d1:e7:71:95:86:b9: 3c:48:37:3e:5e:14:ba:ac:3b:ab:26:01:4d:20:ca: ae:f8:db:3f:ea:6e:66:85:d6:89:a2:14:eb:2d:a7: 95:42:1e:bf:97:e0:87:cb:47:c3:20:03:d9:a6:0c: 38:f2:8e:94:6e:45:93:62:e4:bb:b3:83:6a:1f:83: ba:05:ed:59:eb:3a:66:3d:20:7d:ef:9e:2e:e4:0a: 29:64:56:80:a5:ff:83:e1:1f:59:79:e6:f8:88:07: dd:39:f8:a8:bc:72:9c:0b:3d:bb:15:aa:e4:44:c0: 39:5d:f7:9b:fb:23:a1:3e:2b:58:66:2b:d6:d8:a2: 66:0e:8c:f8:63:51:bc:f6:1c:fa:26:81:01:2c:f9: ba:a4:71:95:bc:4e:ed:f3:bb:ea:9f:7e:36:74:67: 04:c5:d8:30:d5:d7:51:30:23:ae:3a:63:d0:bb:0a: 12:7a:6e:4f:a4:74:22:05:64:ab:fa:ce:36:fa:9f: 60:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4E:12:AA:BC:F3:16:C1:D3:E0:90:64:51:12:5D:8F:12:DF:5D:05 X509v3 Authority Key Identifier: keyid:A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:83:33:ab:d4:b0:4b:cb:d7:84:26:a9:3a:13:ab:2b:91:6e: 40:c2:a8:41:8a:2e:cc:38:26:76:98:50:c0:9f:fa:95:61:38: 41:b4:7c:25:00:05:62:9e:62:20:2a:47:59:c5:1d:cb:07:ad: 46:ed:c8:bd:fa:6a:ff:3c:0f:0a:5f:14:bc:55:56:13:e0:ec: 13:30:50:b3:fd:7e:c8:a8:39:af:9f:ea:4d:64:a0:e1:bf:c8: f7:29:cf:f1:8d:69:34:34:a5:d8:10:34:5a:f5:72:82:04:8b: 7d:38:c4:4d:ed:71:e8:ed:70:4b:cb:0b:5a:ac:43:2a:5c:ba: 01:e8:19:fa:43:69:dc:57:c6:f9:e6:71:82:b4:e7:a0:2d:62: 89:39:be:ac:36:90:12:6f:16:a0:49:0e:19:b7:8c:6f:a7:0e: a8:13:87:41:5b:a9:43:ec:4f:72:cb:18:8b:9e:a5:92:05:b8: e6:fc:92:4b:79:0a:67:b8:9c:9f:63:9a:8f:69:c9:c2:40:ea: f5:5a:cc:05:f7:fd:88:6d:44:6c:d4:09:b2:74:75:31:47:89: e8:93:c5:3a:3c:cd:0a:38:bf:d5:40:2b:26:d2:8c:51:04:44: 60:88:65:e1:62:f8:e7:74:cc:cb:76:0d:1b:a6:c9:3b:f4:ae: 60:55:ee:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE146aewcp5MxYHB8mmwg6T4X7t4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwODgyMTk0MUE2MUYyOTc3MEZDNzNBNTg0QjcxMTc4 QkNBRTkxNjAeFw0yNjA5MjQwOTQ3NTNaFw0yNjA5MjUxMzMxNTNaMDMxMTAvBgNV BAMTKEVDNEUxMkFBQkNGMzE2QzFEM0UwOTA2NDUxMTI1RDhGMTJERjVEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxirdhAddPMPZWEiQNVrgl28ik fJ83OsLiK8Vtf8GuiLckrvXBjvMELBo5KasNQinncJbnlAJVufu8Jpn96vZ1S8i0 ttHncZWGuTxINz5eFLqsO6smAU0gyq742z/qbmaF1omiFOstp5VCHr+X4IfLR8Mg A9mmDDjyjpRuRZNi5Luzg2ofg7oF7VnrOmY9IH3vni7kCilkVoCl/4PhH1l55viI B905+Ki8cpwLPbsVquREwDld95v7I6E+K1hmK9bYomYOjPhjUbz2HPomgQEs+bqk cZW8Tu3zu+qffjZ0ZwTF2DDV11EwI646Y9C7ChJ6bk+kdCIFZKv6zjb6n2AvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7E4SqrzzFsHT4JBkURJdjxLfXQUwHwYDVR0j BBgwFoAUoAiCGUGmHyl3D8c6WEtxF4vK6RYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmFhZDZhM2YtNmNhMC00NjY5LTk4ZjctNmYzNDgzN2ZhYTYyLzAvQTAwODgyMTk0 MUE2MUYyOTc3MEZDNzNBNTg0QjcxMTc4QkNBRTkxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDA4ODIxOTQxQTYxRjI5NzcwRkM3M0E1ODRCNzExNzhCQ0FF OTE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmFhZDZhM2YtNmNhMC00NjY5LTk4 ZjctNmYzNDgzN2ZhYTYyLzAvQTAwODgyMTk0MUE2MUYyOTc3MEZDNzNBNTg0Qjcx MTc4QkNBRTkxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqDM6vUsEvL14QmqToTqyuRbkDCqEGKLsw4 JnaYUMCf+pVhOEG0fCUABWKeYiAqR1nFHcsHrUbtyL36av88DwpfFLxVVhPg7BMw ULP9fsioOa+f6k1koOG/yPcpz/GNaTQ0pdgQNFr1coIEi304xE3tcejtcEvLC1qs QypcugHoGfpDadxXxvnmcYK056AtYok5vqw2kBJvFqBJDhm3jG+nDqgTh0FbqUPs T3LLGIuepZIFuOb8kkt5Cme4nJ9jmo9pycJA6vVazAX3/YhtRGzUCbJ0dTFHieiT xTo8zQo4v9VAKybSjFEERGCIZeFi+Od0zMt2DRumyTv0rmBV7go= -----END CERTIFICATE-----Generated at Fri Sep 25 06:47:47 2026 by rpki-client