$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft File: A795AFC3ACE68FD4EB18D45F48148F669260F261.mft (raw, json) Hash identifier: V1HKCWJSy891VYoeEfs6mn548JlSX3jSaa+kboy4CYw= Subject key identifier: 0B:FF:47:D3:01:16:E7:A3:87:9B:09:8F:02:AD:EC:F7:4F:C9:9E:A7 Authority key identifier: A7:95:AF:C3:AC:E6:8F:D4:EB:18:D4:5F:48:14:8F:66:92:60:F2:61 Certificate issuer: /CN=A795AFC3ACE68FD4EB18D45F48148F669260F261 Certificate serial: 0EE89C60322D2A1D3ADA3B4B943699001128802B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 10:03:04 +0000 Manifest this update: Thu 24 Sep 2026 09:58:04 +0000 Manifest next update: Fri 25 Sep 2026 13:24:04 +0000 Files and hashes: 1: 3130332e3234362e3138342e302f32342d3234203d3e203538333833.roa (hash: pmHLxMdkC8jCCynXCQwBWuDUZCyBP7BmUKKeGNQ6X6A=) 2: A795AFC3ACE68FD4EB18D45F48148F669260F261.crl (hash: ac1a9FK8jnww+5jpyOBunxZsKtcAZxvZPrKMRciNCuQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.crl rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e8:9c:60:32:2d:2a:1d:3a:da:3b:4b:94:36:99:00:11:28:80:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A795AFC3ACE68FD4EB18D45F48148F669260F261 Validity Not Before: Sep 24 09:58:04 2026 GMT Not After : Sep 25 13:24:04 2026 GMT Subject: CN=0BFF47D30116E7A3879B098F02ADECF74FC99EA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8d:53:dc:93:42:ca:7a:06:d4:2b:d4:46:ce: 8d:f2:69:2d:ce:c1:a3:98:ff:29:0b:70:66:ab:14: 55:17:28:49:bd:d3:c4:d4:b9:8d:2c:54:4d:b0:3f: 77:8d:d9:8e:1b:cf:d0:af:60:fd:a1:72:28:5a:03: 96:8e:53:2c:bc:78:88:f6:30:50:84:af:fa:d5:ac: 8e:91:9f:d8:ed:ce:ef:d6:4e:f5:bf:96:09:5f:78: e8:64:d8:57:21:2f:8c:e3:97:17:80:a2:de:6e:ab: e0:db:66:cf:19:06:da:99:67:37:78:f0:59:65:82: 11:6a:00:14:5a:62:50:df:08:9d:b2:cf:b1:64:77: a1:5f:af:f8:6b:54:e0:3f:5c:92:39:e1:e6:c7:6f: 79:d4:24:93:7d:59:fc:a1:96:fe:43:a5:8a:e1:70: f8:bd:fa:9d:b6:3e:b0:1b:34:a6:5d:db:f6:57:70: 93:0e:3f:0a:3c:c8:ae:12:67:39:1a:b6:af:7b:5f: 76:f2:3d:7b:35:6a:68:9d:70:06:b8:73:bb:11:d8: 26:f5:eb:2c:9d:a9:55:3a:3b:80:4a:8d:cc:32:94: ad:b9:3e:0f:dd:16:a5:2c:b6:dc:63:38:7b:db:2b: 44:20:a4:1e:78:1d:7e:61:46:a9:ff:75:d9:be:d0: a7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FF:47:D3:01:16:E7:A3:87:9B:09:8F:02:AD:EC:F7:4F:C9:9E:A7 X509v3 Authority Key Identifier: keyid:A7:95:AF:C3:AC:E6:8F:D4:EB:18:D4:5F:48:14:8F:66:92:60:F2:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:94:8b:73:44:38:02:bd:0d:3f:00:1e:7a:4e:18:77:6f:0c: 7c:44:5d:7f:7c:b5:17:3f:c6:28:d4:16:d3:e1:f1:f0:28:4e: 60:f8:a8:66:2c:71:7e:79:5b:12:06:54:a2:ba:88:24:1f:4c: 4e:af:2b:a9:7a:f5:e8:a9:b8:19:64:fe:46:13:b6:2f:f3:a3: ac:49:99:03:66:99:97:55:b3:f7:e6:42:cc:7c:b6:61:d3:53: 73:8a:b9:19:a0:0a:2d:b1:7e:9a:cf:4e:aa:db:61:47:f5:59: dc:f9:ff:9a:92:e1:83:71:cd:3f:2d:bf:76:8d:1b:e1:01:1c: 70:3e:8c:ec:e5:46:23:4d:a3:b6:85:29:38:56:0d:72:ed:da: 55:f9:54:46:19:7b:02:fd:63:60:4a:75:26:37:49:68:0a:66: 22:0b:51:6f:e2:86:ed:fa:2b:95:83:60:df:41:29:01:66:50: 09:8f:ee:8b:c9:24:8e:32:b2:d5:3d:b8:84:e5:f2:fd:3a:17: 72:d3:bd:0d:a1:6f:7f:0e:55:ba:e9:91:a3:2d:f2:60:18:66: 92:26:0b:80:22:78:97:61:99:94:c8:ba:12:a3:4a:bf:2d:d7: c3:ce:35:fd:fa:de:f4:3b:fe:b2:1f:a8:10:f1:58:b8:0a:52: d1:7a:bf:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDuicYDItKh062jtLlDaZABEogCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc5NUFGQzNBQ0U2OEZENEVCMThENDVGNDgxNDhGNjY5 MjYwRjI2MTAeFw0yNjA5MjQwOTU4MDRaFw0yNjA5MjUxMzI0MDRaMDMxMTAvBgNV BAMTKDBCRkY0N0QzMDExNkU3QTM4NzlCMDk4RjAyQURFQ0Y3NEZDOTlFQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVjVPck0LKegbUK9RGzo3yaS3O waOY/ykLcGarFFUXKEm908TUuY0sVE2wP3eN2Y4bz9CvYP2hcihaA5aOUyy8eIj2 MFCEr/rVrI6Rn9jtzu/WTvW/lglfeOhk2FchL4zjlxeAot5uq+DbZs8ZBtqZZzd4 8FllghFqABRaYlDfCJ2yz7Fkd6Ffr/hrVOA/XJI54ebHb3nUJJN9Wfyhlv5DpYrh cPi9+p22PrAbNKZd2/ZXcJMOPwo8yK4SZzkatq97X3byPXs1amidcAa4c7sR2Cb1 6yydqVU6O4BKjcwylK25Pg/dFqUsttxjOHvbK0QgpB54HX5hRqn/ddm+0KebAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC/9H0wEW56OHmwmPAq3s90/JnqcwHwYDVR0j BBgwFoAUp5Wvw6zmj9TrGNRfSBSPZpJg8mEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZhNWFiNTQtNzg0NC00NjAyLThhZWEtM2MyZTY0MWY2YTNjLzAvQTc5NUFGQzNB Q0U2OEZENEVCMThENDVGNDgxNDhGNjY5MjYwRjI2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzk1QUZDM0FDRTY4RkQ0RUIxOEQ0NUY0ODE0OEY2NjkyNjBG MjYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZhNWFiNTQtNzg0NC00NjAyLThh ZWEtM2MyZTY0MWY2YTNjLzAvQTc5NUFGQzNBQ0U2OEZENEVCMThENDVGNDgxNDhG NjY5MjYwRjI2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSUi3NEOAK9DT8AHnpOGHdvDHxEXX98tRc/ xijUFtPh8fAoTmD4qGYscX55WxIGVKK6iCQfTE6vK6l69eipuBlk/kYTti/zo6xJ mQNmmZdVs/fmQsx8tmHTU3OKuRmgCi2xfprPTqrbYUf1Wdz5/5qS4YNxzT8tv3aN G+EBHHA+jOzlRiNNo7aFKThWDXLt2lX5VEYZewL9Y2BKdSY3SWgKZiILUW/ihu36 K5WDYN9BKQFmUAmP7ovJJI4ystU9uITl8v06F3LTvQ2hb38OVbrpkaMt8mAYZpIm C4AieJdhmZTIuhKjSr8t18PONf363vQ7/rIfqBDxWLgKUtF6vwE= -----END CERTIFICATE-----Generated at Fri Sep 25 03:57:29 2026 by rpki-client