$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft File: A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft (raw, json) Hash identifier: FqFHgL+V5zV0SEgyJCz0UOCQ4tVrzgUOE3uF3NS2iTI= Subject key identifier: B1:4A:BD:AD:41:F3:35:34:70:24:51:02:33:DE:29:CF:7D:DC:78:F5 Authority key identifier: A9:D5:86:A8:2C:B1:66:90:2F:1D:1B:2C:AE:5E:B4:20:F0:8D:23:D0 Certificate issuer: /CN=A9D586A82CB166902F1D1B2CAE5EB420F08D23D0 Certificate serial: 3467EE8F49C88EAE6274F108411B55A51FE11084 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 09:06:57 +0000 Manifest this update: Thu 24 Sep 2026 09:01:57 +0000 Manifest next update: Fri 25 Sep 2026 09:38:57 +0000 Files and hashes: 1: 3130332e3135302e3135392e302f32342d3234203d3e20313430343331.roa (hash: hcBwS6YzikTq1s/P8jlWWii/vuvMdnJI6Od19w2iLTM=) 2: A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl (hash: 52hzUvXCqIIZxKyMflHEHXC0DAIvEDLC0Y8ZIGzmof4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:67:ee:8f:49:c8:8e:ae:62:74:f1:08:41:1b:55:a5:1f:e1:10:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D586A82CB166902F1D1B2CAE5EB420F08D23D0 Validity Not Before: Sep 24 09:01:57 2026 GMT Not After : Sep 25 09:38:57 2026 GMT Subject: CN=B14ABDAD41F335347024510233DE29CF7DDC78F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7c:ad:b6:c1:65:c8:59:6a:39:b7:15:0a:4b: 0c:4b:85:6c:13:61:1d:ce:30:b0:f3:06:61:6d:e7: 55:55:60:a4:aa:55:da:40:88:32:65:77:1a:3e:9e: bc:46:62:84:c7:19:94:13:17:b2:47:af:a7:45:b1: 1d:b6:40:76:a7:89:f1:ca:1f:fc:f9:59:c6:88:8b: 1a:de:68:e0:e7:17:b2:04:30:61:f3:11:26:f6:8b: 67:96:36:e3:69:9e:29:5a:c8:86:da:ce:de:73:10: 3d:fa:7f:04:2e:2d:a1:e9:cf:38:03:b0:9a:df:f1: 35:b8:15:1e:35:aa:ee:2e:ea:ce:7d:65:83:53:cc: 77:1a:7d:9b:20:3b:ba:53:9c:83:d9:9f:ca:17:a4: d3:0f:1f:86:6e:8a:0b:a4:3e:51:ba:2d:24:44:53: d5:cb:9f:0f:69:e3:8e:a5:41:19:61:55:10:f0:fc: 2f:f1:d6:53:2e:96:23:23:af:f3:67:a1:a7:78:2d: 50:4e:83:f2:68:dc:d0:08:9d:65:17:22:7a:07:83: 4a:b1:9e:1b:ab:a4:59:10:3d:fc:9b:e3:c6:5c:4b: d8:61:22:bb:c3:bd:47:02:cb:05:4f:60:6a:90:c2: 30:16:7f:87:b2:f1:f9:f3:7a:17:c2:57:44:28:1d: 05:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4A:BD:AD:41:F3:35:34:70:24:51:02:33:DE:29:CF:7D:DC:78:F5 X509v3 Authority Key Identifier: keyid:A9:D5:86:A8:2C:B1:66:90:2F:1D:1B:2C:AE:5E:B4:20:F0:8D:23:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:ac:11:60:54:3e:a7:2c:b9:fd:00:35:68:9c:89:0d:be:4d: 0a:b0:d9:68:38:43:02:b1:88:bd:1b:8e:23:d8:58:81:57:f9: d0:ec:85:0b:90:0d:d2:09:ee:2b:22:db:2e:ee:af:fd:52:1c: 92:a9:38:48:bf:e0:e4:a3:f3:9c:34:a7:5e:7c:dc:0c:4a:f2: a6:08:62:0d:53:b2:94:0b:1d:c3:01:3f:33:fa:fe:3b:ea:14: ec:5e:e4:39:60:d2:bf:34:5c:da:13:64:f8:92:e1:0f:ba:02: b8:45:ff:e2:46:1a:75:54:1b:68:7f:df:8b:84:bb:b3:c3:bc: 06:cc:67:f6:06:e6:8c:e1:70:f6:87:b2:ad:95:17:93:e2:4b: b5:1d:e3:6d:a7:4f:bd:64:4b:3a:7e:63:54:ae:bf:33:88:a2: e9:db:6a:9b:5e:9c:ef:05:fb:82:d2:72:16:23:1a:7d:54:a1: 7f:28:0d:49:56:88:83:1e:62:66:75:b0:47:f9:de:63:3b:72: d7:6b:5b:bd:23:0e:0e:a1:bc:06:bf:b1:b7:40:c5:91:a2:1e: 01:c9:40:34:6a:96:94:93:a4:14:4b:3e:58:07:36:d3:62:ea: ed:bb:98:a8:57:f0:9b:1a:9a:b5:eb:70:e7:9f:32:9c:fa:6e: dc:4b:8a:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNGfuj0nIjq5idPEIQRtVpR/hEIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENTg2QTgyQ0IxNjY5MDJGMUQxQjJDQUU1RUI0MjBG MDhEMjNEMDAeFw0yNjA5MjQwOTAxNTdaFw0yNjA5MjUwOTM4NTdaMDMxMTAvBgNV BAMTKEIxNEFCREFENDFGMzM1MzQ3MDI0NTEwMjMzREUyOUNGN0REQzc4RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhfK22wWXIWWo5txUKSwxLhWwT YR3OMLDzBmFt51VVYKSqVdpAiDJldxo+nrxGYoTHGZQTF7JHr6dFsR22QHanifHK H/z5WcaIixreaODnF7IEMGHzESb2i2eWNuNpnilayIbazt5zED36fwQuLaHpzzgD sJrf8TW4FR41qu4u6s59ZYNTzHcafZsgO7pTnIPZn8oXpNMPH4ZuigukPlG6LSRE U9XLnw9p446lQRlhVRDw/C/x1lMuliMjr/Nnoad4LVBOg/Jo3NAInWUXInoHg0qx nhurpFkQPfyb48ZcS9hhIrvDvUcCywVPYGqQwjAWf4ey8fnzehfCV0QoHQU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsUq9rUHzNTRwJFECM94pz33cePUwHwYDVR0j BBgwFoAUqdWGqCyxZpAvHRssrl60IPCNI9AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODE2NWU0ODEtNWE3OS00ODY4LWE0ZTQtZmFjZmQ5MjJkODEzLzAvQTlENTg2QTgy Q0IxNjY5MDJGMUQxQjJDQUU1RUI0MjBGMDhEMjNEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOUQ1ODZBODJDQjE2NjkwMkYxRDFCMkNBRTVFQjQyMEYwOEQy M0QwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODE2NWU0ODEtNWE3OS00ODY4LWE0 ZTQtZmFjZmQ5MjJkODEzLzAvQTlENTg2QTgyQ0IxNjY5MDJGMUQxQjJDQUU1RUI0 MjBGMDhEMjNEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmsEWBUPqcsuf0ANWiciQ2+TQqw2Wg4QwKx iL0bjiPYWIFX+dDshQuQDdIJ7isi2y7ur/1SHJKpOEi/4OSj85w0p1583AxK8qYI Yg1TspQLHcMBPzP6/jvqFOxe5Dlg0r80XNoTZPiS4Q+6ArhF/+JGGnVUG2h/34uE u7PDvAbMZ/YG5ozhcPaHsq2VF5PiS7Ud422nT71kSzp+Y1SuvzOIounbaptenO8F +4LSchYjGn1UoX8oDUlWiIMeYmZ1sEf53mM7ctdrW70jDg6hvAa/sbdAxZGiHgHJ QDRqlpSTpBRLPlgHNtNi6u27mKhX8JsamrXrcOefMpz6btxLitQ= -----END CERTIFICATE-----Generated at Thu Sep 24 23:32:15 2026 by rpki-client