$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft File: A1AE56A4554AF816FB70C7D151B60B95E8688866.mft (raw, json) Hash identifier: mvElbqGF4KEjhgwMXv+ZcS2zCEnp604+9gnZzKo2Fcc= Subject key identifier: 87:24:D4:9D:18:F8:7D:87:33:25:C2:E8:FA:91:00:6D:F1:18:39:F7 Authority key identifier: A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66 Certificate issuer: /CN=A1AE56A4554AF816FB70C7D151B60B95E8688866 Certificate serial: 3602A29885D48CA28A5CCE950E0C56FA33547A21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft Manifest number: C6 Signing time: Sat 26 Sep 2026 22:48:08 +0000 Manifest this update: Sat 26 Sep 2026 22:43:08 +0000 Manifest next update: Mon 28 Sep 2026 02:46:08 +0000 Files and hashes: 1: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 9v0FNIRz7U0Do3bFO3VnUQP4Wx+ba0tNG1r1AH/OeqY=) 2: A1AE56A4554AF816FB70C7D151B60B95E8688866.crl (hash: tAXZnPBUlyuyu6i9DtCCDVkjxNHMRb0iTYwjqvKPCNk=) 3: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: He41ch40XucuK+aPHGiuSTFi+Lk7tn/MpsAXY1hRpGE=) 4: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: GHM2a/obSFnIX4sm3ZBeoTgx7NT/IcpWeeqALQWuCgk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:02:a2:98:85:d4:8c:a2:8a:5c:ce:95:0e:0c:56:fa:33:54:7a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1AE56A4554AF816FB70C7D151B60B95E8688866 Validity Not Before: Sep 26 22:43:08 2026 GMT Not After : Sep 28 02:46:08 2026 GMT Subject: CN=8724D49D18F87D873325C2E8FA91006DF11839F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:02:1a:34:5f:08:55:20:5f:c7:e0:09:c8:d0: a5:eb:dd:2a:18:79:8e:44:9f:09:12:39:6b:71:ec: 2e:74:cf:61:55:d8:1c:2c:cf:4e:c1:0a:1e:1f:fa: 87:6a:8a:9b:a4:57:c8:11:0e:b4:10:4c:fe:e7:d8: 41:0f:73:a2:99:a6:d1:34:a2:6b:d1:c9:60:82:6c: e1:ab:67:9b:ac:57:6a:7f:85:8d:14:bc:51:a3:2c: fd:da:53:c5:c8:31:cb:d0:48:6a:14:84:73:e8:ca: e1:7a:46:2b:9c:97:75:36:57:db:f1:7e:15:be:10: 38:fd:ef:34:e3:1f:70:05:e5:bf:f3:10:d5:b9:c9: f6:e9:98:f6:29:b8:c4:7a:68:d6:25:76:cf:90:7b: f0:ae:d2:e4:16:33:4c:b9:f2:e2:d7:3d:3d:8c:f5: c8:b3:4c:69:0f:85:56:1d:db:fe:a8:c3:bc:76:86: 0d:f7:cd:81:51:55:eb:a4:d1:2a:b6:f4:49:5b:e0: 41:5e:02:ec:dc:04:ad:dd:15:8e:03:03:1d:86:d8: e8:ae:2f:63:14:1e:fa:09:81:5a:0d:76:bd:50:8a: 21:92:85:21:34:22:39:fe:93:87:c1:d2:ab:84:0f: 39:07:68:bf:3f:5b:34:22:41:bb:ca:f6:ac:bd:26: a6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:24:D4:9D:18:F8:7D:87:33:25:C2:E8:FA:91:00:6D:F1:18:39:F7 X509v3 Authority Key Identifier: keyid:A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d4:92:9e:2c:2a:94:f9:17:c9:39:03:e3:db:5f:49:e3:1e: 72:4d:75:1d:3c:dc:6e:ab:89:52:e2:62:69:72:e9:bc:e5:d9: 7b:5f:ff:ff:57:e1:54:1a:df:83:25:d2:6a:90:2c:51:f0:34: 9c:f0:e5:1a:17:46:23:73:83:58:9a:13:2a:a2:24:33:23:0c: 54:9f:44:3e:36:a1:8f:51:5f:ea:03:8b:05:41:9a:c2:dc:26: b0:1b:37:08:22:d6:0c:29:fe:0c:cf:f0:67:28:df:5a:f3:5a: 96:e0:de:41:75:0b:81:7f:b9:72:5b:22:3d:fa:b3:ba:4e:a2: b4:64:33:b4:58:56:21:6a:59:ec:44:e8:15:df:60:63:62:a3: 6a:24:b0:0e:5b:a3:37:aa:b7:76:0d:50:d0:2f:39:32:42:89: 33:4c:0e:82:89:e2:8a:95:a4:45:e1:c0:38:b2:0d:5a:d0:81: 50:6a:6f:21:4a:47:18:20:5a:d9:08:19:01:27:d9:f4:83:31: 8b:43:46:0c:e5:58:e6:83:c3:df:a2:6c:d9:c2:be:c0:75:db: e5:a8:84:26:82:23:56:5e:3c:08:f1:c5:be:ee:5d:29:8e:55: 77:b7:a5:07:e8:f7:48:c6:ec:95:7a:bd:26:4b:98:5f:bd:b3: 2c:44:c5:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNgKimIXUjKKKXM6VDgxW+jNUeiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFBRTU2QTQ1NTRBRjgxNkZCNzBDN0QxNTFCNjBCOTVF ODY4ODg2NjAeFw0yNjA5MjYyMjQzMDhaFw0yNjA5MjgwMjQ2MDhaMDMxMTAvBgNV BAMTKDg3MjRENDlEMThGODdEODczMzI1QzJFOEZBOTEwMDZERjExODM5RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvAho0XwhVIF/H4AnI0KXr3SoY eY5EnwkSOWtx7C50z2FV2Bwsz07BCh4f+odqipukV8gRDrQQTP7n2EEPc6KZptE0 omvRyWCCbOGrZ5usV2p/hY0UvFGjLP3aU8XIMcvQSGoUhHPoyuF6Riucl3U2V9vx fhW+EDj97zTjH3AF5b/zENW5yfbpmPYpuMR6aNYlds+Qe/Cu0uQWM0y58uLXPT2M 9cizTGkPhVYd2/6ow7x2hg33zYFRVeuk0Sq29Elb4EFeAuzcBK3dFY4DAx2G2Oiu L2MUHvoJgVoNdr1QiiGShSE0Ijn+k4fB0quEDzkHaL8/WzQiQbvK9qy9JqYbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhyTUnRj4fYczJcLo+pEAbfEYOfcwHwYDVR0j BBgwFoAUoa5WpFVK+Bb7cMfRUbYLlehoiGYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I1ZDcyZjMtMmRiMi00YmNjLTlmNzctZDE0NDJiNjMyZDA0LzAvQTFBRTU2QTQ1 NTRBRjgxNkZCNzBDN0QxNTFCNjBCOTVFODY4ODg2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUFFNTZBNDU1NEFGODE2RkI3MEM3RDE1MUI2MEI5NUU4Njg4 ODY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvQTFBRTU2QTQ1NTRBRjgxNkZCNzBDN0QxNTFCNjBC OTVFODY4ODg2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTUkp4sKpT5F8k5A+PbX0njHnJNdR083G6r iVLiYmly6bzl2Xtf//9X4VQa34Ml0mqQLFHwNJzw5RoXRiNzg1iaEyqiJDMjDFSf RD42oY9RX+oDiwVBmsLcJrAbNwgi1gwp/gzP8Gco31rzWpbg3kF1C4F/uXJbIj36 s7pOorRkM7RYViFqWexE6BXfYGNio2oksA5bozeqt3YNUNAvOTJCiTNMDoKJ4oqV pEXhwDiyDVrQgVBqbyFKRxggWtkIGQEn2fSDMYtDRgzlWOaDw9+ibNnCvsB12+Wo hCaCI1ZePAjxxb7uXSmOVXe3pQfo90jG7JV6vSZLmF+9syxExZc= -----END CERTIFICATE-----Generated at Sun Sep 27 12:12:11 2026 by rpki-client