$ rpki-client -vvvf rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft File: A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft (raw, json) Hash identifier: rAm9VeWZGSlOnLvU6SGXoJw+6UkceVTp1lmMHCWlibk= Subject key identifier: E6:34:0B:65:8F:3E:1E:92:A4:5E:99:EF:6C:F9:F3:27:9E:83:1D:B3 Authority key identifier: A4:42:33:2E:47:ED:F9:51:21:F8:35:CB:9E:EE:89:CC:D0:FD:23:AB Certificate issuer: /CN=A442332E47EDF95121F835CB9EEE89CCD0FD23AB Certificate serial: 45FF1ADF7B45B2813C04A17B7E9E3BF7A32C3A27 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 11:55:53 +0000 Manifest this update: Wed 23 Sep 2026 11:50:53 +0000 Manifest next update: Thu 24 Sep 2026 13:59:53 +0000 Files and hashes: 1: A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl (hash: uj5OzX7FoWeFL2tf5hP0hdHmRZ720mH6A/R461y+KBI=) 2: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (hash: Cj0SZJARZifKQYTCMZbpWyS0hulziUW0qpiTLUY0MXw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ff:1a:df:7b:45:b2:81:3c:04:a1:7b:7e:9e:3b:f7:a3:2c:3a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A442332E47EDF95121F835CB9EEE89CCD0FD23AB Validity Not Before: Sep 23 11:50:53 2026 GMT Not After : Sep 24 13:59:53 2026 GMT Subject: CN=E6340B658F3E1E92A45E99EF6CF9F3279E831DB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f0:18:30:60:7b:3c:b0:5c:2c:14:c2:30:90: 8c:1d:36:c2:02:cb:7c:cd:74:cf:e7:7b:dd:ff:6f: 96:a6:a4:0c:aa:5f:fe:ad:db:a0:ee:08:88:b6:01: 86:46:66:63:47:f5:d6:b0:a2:4d:47:7b:10:08:5b: e8:3f:65:df:ed:41:52:05:97:25:ec:75:f9:2f:7d: 68:12:44:65:90:df:24:97:42:dd:d8:d1:01:08:e6: d8:84:cd:f0:0a:ba:3a:5e:2c:4c:c4:16:03:63:0a: f8:0d:b4:fb:e3:5f:3c:57:97:1e:d4:20:2e:c0:16: 0f:0d:bb:07:52:ab:23:a4:60:13:c1:31:24:23:a5: 5d:9c:f0:f0:79:af:fe:7e:e9:b7:08:75:0c:93:76: a5:68:b0:d0:49:fe:d5:3d:90:b8:68:49:9a:1d:93: 50:5e:30:82:47:bc:d8:5c:64:30:d2:d9:cc:db:e6: 98:17:83:4b:7c:32:42:17:c2:10:7d:3a:e0:09:a5: d0:2b:85:91:ef:c9:4c:f3:48:1c:2d:4e:99:69:75: c3:68:64:53:04:27:09:1d:ec:24:f2:73:59:e9:31: 4a:63:f2:11:2b:f6:57:d2:67:d7:83:40:50:51:f6: 34:eb:45:e4:06:38:5f:25:c1:c5:76:5b:bf:c3:6e: 0f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:34:0B:65:8F:3E:1E:92:A4:5E:99:EF:6C:F9:F3:27:9E:83:1D:B3 X509v3 Authority Key Identifier: keyid:A4:42:33:2E:47:ED:F9:51:21:F8:35:CB:9E:EE:89:CC:D0:FD:23:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:44:7c:34:12:65:0d:53:33:ec:93:e6:5c:6c:86:1c:54:7b: 45:9a:f2:54:44:8c:5a:aa:ba:c8:cd:81:50:ee:10:fc:03:51: b1:ab:9c:91:a0:a6:a8:1d:09:88:b4:30:c9:cf:9f:a0:f4:4f: d7:13:51:c1:b5:f0:af:0d:9a:ec:28:e2:8c:f1:2e:e8:1b:33: 11:2a:72:b4:d1:6f:00:55:ac:50:9e:e7:c4:ea:89:d0:bd:15: 04:6e:e9:4b:cf:36:6b:74:30:9a:a3:e6:a4:2b:4a:ef:4c:ce: c0:15:1a:31:31:69:9e:0f:4e:15:03:fe:76:64:19:7a:83:65: ca:ba:e5:74:2a:9d:c4:4b:ab:e0:72:46:d4:5e:2a:ca:af:1f: 3e:44:e6:85:fc:c1:bd:35:76:b5:3d:41:de:da:27:eb:d7:ce: 14:15:dd:51:a0:d9:b1:95:f0:7b:d1:58:8c:b7:36:ac:01:0a: a1:01:69:23:11:fa:ac:0d:22:15:6b:6b:60:70:b6:60:87:e3: 89:40:6a:dc:35:c2:94:a7:6a:71:8e:54:d0:1d:ba:68:f4:57: dc:a6:26:65:44:91:cd:93:1e:7c:90:bb:b8:23:e8:e9:55:7d: f3:35:38:e1:96:d5:a0:f8:38:99:af:21:7e:9a:fd:4a:ce:74: 2b:7b:a9:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURf8a33tFsoE8BKF7fp4796MsOicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ0MjMzMkU0N0VERjk1MTIxRjgzNUNCOUVFRTg5Q0NE MEZEMjNBQjAeFw0yNjA5MjMxMTUwNTNaFw0yNjA5MjQxMzU5NTNaMDMxMTAvBgNV BAMTKEU2MzQwQjY1OEYzRTFFOTJBNDVFOTlFRjZDRjlGMzI3OUU4MzFEQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK8BgwYHs8sFwsFMIwkIwdNsIC y3zNdM/ne93/b5ampAyqX/6t26DuCIi2AYZGZmNH9dawok1HexAIW+g/Zd/tQVIF lyXsdfkvfWgSRGWQ3ySXQt3Y0QEI5tiEzfAKujpeLEzEFgNjCvgNtPvjXzxXlx7U IC7AFg8NuwdSqyOkYBPBMSQjpV2c8PB5r/5+6bcIdQyTdqVosNBJ/tU9kLhoSZod k1BeMIJHvNhcZDDS2czb5pgXg0t8MkIXwhB9OuAJpdArhZHvyUzzSBwtTplpdcNo ZFMEJwkd7CTyc1npMUpj8hEr9lfSZ9eDQFBR9jTrReQGOF8lwcV2W7/Dbg9lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5jQLZY8+HpKkXpnvbPnzJ56DHbMwHwYDVR0j BBgwFoAUpEIzLkft+VEh+DXLnu6JzND9I6swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTYwZjg0NjEtYmIyYy00ZDNlLWE1YmUtNzAwOTM5NDI3YzhjLzAvQTQ0MjMzMkU0 N0VERjk1MTIxRjgzNUNCOUVFRTg5Q0NEMEZEMjNBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDQyMzMyRTQ3RURGOTUxMjFGODM1Q0I5RUVFODlDQ0QwRkQy M0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTYwZjg0NjEtYmIyYy00ZDNlLWE1 YmUtNzAwOTM5NDI3YzhjLzAvQTQ0MjMzMkU0N0VERjk1MTIxRjgzNUNCOUVFRTg5 Q0NEMEZEMjNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhEfDQSZQ1TM+yT5lxshhxUe0Wa8lREjFqq usjNgVDuEPwDUbGrnJGgpqgdCYi0MMnPn6D0T9cTUcG18K8Nmuwo4ozxLugbMxEq crTRbwBVrFCe58TqidC9FQRu6UvPNmt0MJqj5qQrSu9MzsAVGjExaZ4PThUD/nZk GXqDZcq65XQqncRLq+ByRtReKsqvHz5E5oX8wb01drU9Qd7aJ+vXzhQV3VGg2bGV 8HvRWIy3NqwBCqEBaSMR+qwNIhVra2BwtmCH44lAatw1wpSnanGOVNAdumj0V9ym JmVEkc2THnyQu7gj6OlVffM1OOGW1aD4OJmvIX6a/UrOdCt7qRY= -----END CERTIFICATE-----Generated at Wed Sep 23 21:38:38 2026 by rpki-client