$ rpki-client -vvvf rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft File: A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft (raw, json) Hash identifier: hB2tAAnaAkVkdF4tEmKvCI0w5izwkn2diPsNNUyi0Ak= Subject key identifier: D3:E4:59:01:CD:54:63:EB:4E:D0:D0:EF:5F:98:94:C4:0C:77:84:82 Authority key identifier: A8:D2:11:A5:40:A0:A5:7C:5D:6A:CB:50:32:09:1B:1A:80:BA:45:8A Certificate issuer: /CN=A8D211A540A0A57C5D6ACB5032091B1A80BA458A Certificate serial: 43A7311434AF892DE1633A6E3564C29C6F57E9FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 05:57:46 +0000 Manifest this update: Fri 25 Sep 2026 05:52:46 +0000 Manifest next update: Sat 26 Sep 2026 09:03:46 +0000 Files and hashes: 1: 3130332e37302e31392e302f32342d3234203d3e20313335343632.roa (hash: 7evCo+jZlUXwDGTBsCsQhDg2DWHBDqS4cWsJw91trY0=) 2: 3130332e37302e31362e302f32342d3234203d3e20313335343632.roa (hash: SJ+P4+oX8hijYzZ9qA/WaUDV4gideRVgm7o6icDoWoM=) 3: A8D211A540A0A57C5D6ACB5032091B1A80BA458A.crl (hash: tXZ81bV6pHu8Nku3Fc8bYudv3ODMwhRCSEqBo/sbIWM=) 4: 3130332e37302e31372e302f32342d3234203d3e20313335343632.roa (hash: lI29Pn9PS61mVywxJrefD11DZjjtEbyEF7MkqWi1LZ4=) 5: 3130332e37302e31362e302f32322d3232203d3e20313335343632.roa (hash: Tf1EVsRaCkdXitEPeo2GAGcjlLdYQ1D5kk2M9WCpy3U=) 6: 3130332e37302e31382e302f32342d3234203d3e20313335343632.roa (hash: m9ehKEyZKrnBxPUxglJU8vra1GpJJTUpkzpv7UpDmeA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.crl rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 09:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a7:31:14:34:af:89:2d:e1:63:3a:6e:35:64:c2:9c:6f:57:e9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8D211A540A0A57C5D6ACB5032091B1A80BA458A Validity Not Before: Sep 25 05:52:46 2026 GMT Not After : Sep 26 09:03:46 2026 GMT Subject: CN=D3E45901CD5463EB4ED0D0EF5F9894C40C778482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:13:07:4d:21:73:80:bf:66:53:0a:ba:6f:8a: 1c:85:dd:74:0b:4d:d5:7f:5b:71:94:76:ed:e5:d1: 82:68:59:12:04:9b:9e:1e:df:f9:a5:b0:68:16:41: 66:e1:d4:07:df:c4:4f:8b:01:08:dd:b8:16:00:c9: 24:65:6e:59:3e:38:14:69:b5:f4:05:29:12:57:21: 3a:77:23:f5:62:57:27:1d:18:3e:c2:0e:da:03:82: 81:c3:29:10:c6:fd:09:09:67:9b:c4:30:65:a2:cc: 6c:9c:ab:5d:a7:78:40:0f:bd:24:55:b8:9a:83:fe: ee:84:aa:d9:1b:61:e7:6c:db:15:76:ac:92:c4:da: d6:ae:d0:79:bd:f5:60:cd:84:d5:ce:bd:e8:92:d8: 78:8e:10:0a:58:ec:66:83:bd:fb:93:b1:7b:a2:2b: cd:5e:de:74:5d:fe:e5:cb:d0:52:c6:05:6e:c1:c4: 8b:be:ad:47:2a:f9:08:17:59:1a:8e:82:34:3e:51: bd:96:ef:df:f1:13:5b:1c:10:78:65:7b:f0:44:13: 85:92:72:41:72:90:83:61:73:b7:0c:6a:c6:a6:a3: dc:e7:63:ab:14:7a:c5:53:52:04:d3:2d:21:3e:46: 43:e5:e1:35:65:5f:20:d4:b8:fd:0b:76:f3:f9:e5: 48:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E4:59:01:CD:54:63:EB:4E:D0:D0:EF:5F:98:94:C4:0C:77:84:82 X509v3 Authority Key Identifier: keyid:A8:D2:11:A5:40:A0:A5:7C:5D:6A:CB:50:32:09:1B:1A:80:BA:45:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f6:77:f7:2f:d3:43:a4:67:a9:fc:6a:a5:89:b9:f3:58:c7: 05:12:07:a8:65:a3:4d:8b:7a:23:39:ae:fa:d2:d7:20:d2:37: a6:a4:e1:b5:46:c6:78:3a:80:0e:44:6f:15:1a:61:a8:41:9c: 28:8e:a8:27:6a:17:51:a2:c5:57:58:10:0d:55:ca:0b:12:4e: 7c:da:4a:bc:d8:d6:be:2c:71:34:71:2f:2c:b0:8c:53:01:0b: fc:05:b3:6f:1f:f9:00:cb:73:0b:15:71:64:0e:fa:ef:c9:87: 92:d4:29:cf:06:ce:ef:68:5d:ad:22:76:9f:36:50:6a:c0:de: 38:b8:e0:03:68:8a:79:cc:eb:02:d9:aa:b4:8b:4e:1a:e2:7f: 49:08:b7:c1:51:f5:9a:34:ca:84:42:0c:fa:7f:ad:f6:c6:7b: 00:d4:18:38:b4:4e:2f:d0:43:a6:b7:98:82:90:fd:68:7a:37: a6:9f:eb:06:ae:33:dc:e5:c6:32:fd:ae:d9:4c:45:8b:0e:08: 27:6b:96:94:68:2a:6c:fb:05:b3:c5:ec:d9:78:72:19:b7:6d: ea:89:e9:2d:c1:9a:41:d8:22:a7:2b:4f:3e:da:a4:6f:4e:20: 86:67:01:1a:f3:9a:b2:84:75:1f:ec:f7:e1:70:0b:84:79:f7: bc:aa:f1:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6cxFDSviS3hYzpuNWTCnG9X6f8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThEMjExQTU0MEEwQTU3QzVENkFDQjUwMzIwOTFCMUE4 MEJBNDU4QTAeFw0yNjA5MjUwNTUyNDZaFw0yNjA5MjYwOTAzNDZaMDMxMTAvBgNV BAMTKEQzRTQ1OTAxQ0Q1NDYzRUI0RUQwRDBFRjVGOTg5NEM0MEM3Nzg0ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsEwdNIXOAv2ZTCrpvihyF3XQL TdV/W3GUdu3l0YJoWRIEm54e3/mlsGgWQWbh1AffxE+LAQjduBYAySRlblk+OBRp tfQFKRJXITp3I/ViVycdGD7CDtoDgoHDKRDG/QkJZ5vEMGWizGycq12neEAPvSRV uJqD/u6EqtkbYeds2xV2rJLE2tau0Hm99WDNhNXOveiS2HiOEApY7GaDvfuTsXui K81e3nRd/uXL0FLGBW7BxIu+rUcq+QgXWRqOgjQ+Ub2W79/xE1scEHhle/BEE4WS ckFykINhc7cMasamo9znY6sUesVTUgTTLSE+RkPl4TVlXyDUuP0LdvP55UhJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0+RZAc1UY+tO0NDvX5iUxAx3hIIwHwYDVR0j BBgwFoAUqNIRpUCgpXxdastQMgkbGoC6RYowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZmNGQ0ZjEtYjM2Yy00YTQ2LTg4NDQtNGU2YzdhM2M5N2Q5LzAvQThEMjExQTU0 MEEwQTU3QzVENkFDQjUwMzIwOTFCMUE4MEJBNDU4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEQyMTFBNTQwQTBBNTdDNUQ2QUNCNTAzMjA5MUIxQTgwQkE0 NThBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZmNGQ0ZjEtYjM2Yy00YTQ2LTg4 NDQtNGU2YzdhM2M5N2Q5LzAvQThEMjExQTU0MEEwQTU3QzVENkFDQjUwMzIwOTFC MUE4MEJBNDU4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE72d/cv00OkZ6n8aqWJufNYxwUSB6hlo02L eiM5rvrS1yDSN6ak4bVGxng6gA5EbxUaYahBnCiOqCdqF1GixVdYEA1VygsSTnza SrzY1r4scTRxLyywjFMBC/wFs28f+QDLcwsVcWQO+u/Jh5LUKc8Gzu9oXa0idp82 UGrA3ji44ANoinnM6wLZqrSLThrif0kIt8FR9Zo0yoRCDPp/rfbGewDUGDi0Ti/Q Q6a3mIKQ/Wh6N6af6wauM9zlxjL9rtlMRYsOCCdrlpRoKmz7BbPF7Nl4chm3beqJ 6S3BmkHYIqcrTz7apG9OIIZnARrzmrKEdR/s9+FwC4R597yq8Rs= -----END CERTIFICATE-----Generated at Fri Sep 25 23:48:59 2026 by rpki-client