$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft File: A4249B719E5F988286AD3B4164C4E77F434FF948.mft (raw, json) Hash identifier: i3cuVfLc2lKMTw2/NiaFiWKIWFZ21v7JCsk0oD9/1Rk= Subject key identifier: B8:2E:70:DD:0A:7F:C9:AF:E2:6D:22:9F:6B:06:E8:FB:3D:D6:E1:8D Authority key identifier: A4:24:9B:71:9E:5F:98:82:86:AD:3B:41:64:C4:E7:7F:43:4F:F9:48 Certificate issuer: /CN=A4249B719E5F988286AD3B4164C4E77F434FF948 Certificate serial: 7DFD9FD5DA6D72D593FE21CD2DB2DCD907FEE10A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 10:23:30 +0000 Manifest this update: Thu 24 Sep 2026 10:18:30 +0000 Manifest next update: Fri 25 Sep 2026 11:34:30 +0000 Files and hashes: 1: A4249B719E5F988286AD3B4164C4E77F434FF948.crl (hash: F889G8Nb1iXdkVTaPmZn4eugJFh+i1XsO2As4gq+mug=) 2: 3136302e3139312e3233342e302f32342d3234203d3e20313533343932.roa (hash: /8ZMrBAQoa3qQ8hBZzRb+TXTbN8qY8Wvj8VBQo+giW0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.crl rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:34:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:fd:9f:d5:da:6d:72:d5:93:fe:21:cd:2d:b2:dc:d9:07:fe:e1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4249B719E5F988286AD3B4164C4E77F434FF948 Validity Not Before: Sep 24 10:18:30 2026 GMT Not After : Sep 25 11:34:30 2026 GMT Subject: CN=B82E70DD0A7FC9AFE26D229F6B06E8FB3DD6E18D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d2:f7:ff:52:5d:5a:f2:b4:a8:c8:46:03:1e: 9b:8b:6e:fd:0d:bc:6a:4a:a1:d1:99:07:7c:ac:44: ef:3c:a1:b3:fd:b2:1a:4c:d8:7a:dd:09:94:13:6f: c5:bd:e2:8b:f4:03:34:43:8e:11:1e:a9:d9:6f:04: 1d:0d:51:ac:39:b4:23:73:21:98:72:c8:7b:a1:69: 49:73:b3:38:17:c9:40:9b:bb:25:0a:8b:1c:5f:5e: aa:0b:fd:77:4f:21:2a:8f:cc:72:f4:b2:bc:d0:62: 34:e1:b2:ef:e6:a8:78:2f:b1:b8:e6:20:a4:8e:d1: 38:36:54:ea:d0:fb:0b:bb:df:c7:81:44:13:5b:f1: 98:94:37:b2:16:8b:de:13:24:1b:e8:31:e8:11:d3: 79:1b:5e:d6:e4:4f:c2:ba:96:e2:b4:61:a5:ee:93: 13:dc:58:4c:de:09:1e:96:8f:fb:c5:68:c1:d6:cc: 37:ea:bf:1c:8a:59:1e:20:5c:46:36:3c:57:94:d0: 55:4b:d1:a1:c0:ea:f3:ff:89:ef:ea:60:73:1a:dc: 21:62:8b:5c:d5:b2:6e:4c:ea:c7:d4:44:e6:c9:fb: 8c:de:57:b7:4d:a4:41:90:74:fb:fe:0a:f9:b9:97: 45:47:9f:c1:7c:9f:5c:54:88:a1:8b:a3:1b:49:34: 9d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2E:70:DD:0A:7F:C9:AF:E2:6D:22:9F:6B:06:E8:FB:3D:D6:E1:8D X509v3 Authority Key Identifier: keyid:A4:24:9B:71:9E:5F:98:82:86:AD:3B:41:64:C4:E7:7F:43:4F:F9:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:a1:a5:18:d7:4a:ca:c3:a6:19:cc:ec:b9:a0:5d:cd:d2:02: 9d:20:70:b6:f8:f6:bc:48:21:e4:b1:70:97:7c:c5:db:2d:b5: c5:47:cd:e5:ab:79:d8:4b:ea:ab:47:f8:bc:9a:83:8c:82:a0: f0:d5:fa:d1:bd:2e:8f:3c:8e:82:68:1a:b0:d4:b7:78:fa:64: b3:84:36:08:52:cc:1b:9f:20:f6:1b:91:7f:46:d5:05:81:ee: 56:5e:84:98:bc:b8:d0:55:b4:47:f2:31:82:76:9d:53:e7:1f: 31:66:58:6b:2c:f9:f0:20:06:d1:55:bf:99:30:6e:f7:e5:bb: ab:bb:a9:60:bc:b6:a3:80:fd:72:ee:12:bf:3b:3a:0c:a0:21: f7:92:c0:46:d4:f2:98:df:eb:78:28:31:0e:08:1b:a9:1c:cf: f2:09:1e:cc:64:83:be:55:2f:cc:80:00:c5:17:78:3f:b8:a2: b7:a2:4a:4e:74:2b:05:bc:fc:74:63:fd:fc:a3:15:64:37:ff: d1:92:c4:fc:53:ba:e7:fc:46:62:d3:f0:52:da:3b:89:a2:e7: a6:a9:5a:58:97:39:59:1e:80:92:b0:44:54:50:77:36:e4:53: 8a:f6:47:1e:9b:85:26:1c:90:57:7b:1b:cd:69:c8:e3:1c:09: de:b8:10:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUff2f1dptctWT/iHNLbLc2Qf+4QowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyNDlCNzE5RTVGOTg4Mjg2QUQzQjQxNjRDNEU3N0Y0 MzRGRjk0ODAeFw0yNjA5MjQxMDE4MzBaFw0yNjA5MjUxMTM0MzBaMDMxMTAvBgNV BAMTKEI4MkU3MEREMEE3RkM5QUZFMjZEMjI5RjZCMDZFOEZCM0RENkUxOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx0vf/Ul1a8rSoyEYDHpuLbv0N vGpKodGZB3ysRO88obP9shpM2HrdCZQTb8W94ov0AzRDjhEeqdlvBB0NUaw5tCNz IZhyyHuhaUlzszgXyUCbuyUKixxfXqoL/XdPISqPzHL0srzQYjThsu/mqHgvsbjm IKSO0Tg2VOrQ+wu738eBRBNb8ZiUN7IWi94TJBvoMegR03kbXtbkT8K6luK0YaXu kxPcWEzeCR6Wj/vFaMHWzDfqvxyKWR4gXEY2PFeU0FVL0aHA6vP/ie/qYHMa3CFi i1zVsm5M6sfURObJ+4zeV7dNpEGQdPv+Cvm5l0VHn8F8n1xUiKGLoxtJNJ1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuC5w3Qp/ya/ibSKfawbo+z3W4Y0wHwYDVR0j BBgwFoAUpCSbcZ5fmIKGrTtBZMTnf0NP+UgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWJjYzYyYWUtMjBjOC00OTc0LWFhZTktYjEwOGRmOGUyZjU5LzAvQTQyNDlCNzE5 RTVGOTg4Mjg2QUQzQjQxNjRDNEU3N0Y0MzRGRjk0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNDI0OUI3MTlFNUY5ODgyODZBRDNCNDE2NEM0RTc3RjQzNEZG OTQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWJjYzYyYWUtMjBjOC00OTc0LWFh ZTktYjEwOGRmOGUyZjU5LzAvQTQyNDlCNzE5RTVGOTg4Mjg2QUQzQjQxNjRDNEU3 N0Y0MzRGRjk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABahpRjXSsrDphnM7LmgXc3SAp0gcLb49rxI IeSxcJd8xdsttcVHzeWredhL6qtH+Lyag4yCoPDV+tG9Lo88joJoGrDUt3j6ZLOE NghSzBufIPYbkX9G1QWB7lZehJi8uNBVtEfyMYJ2nVPnHzFmWGss+fAgBtFVv5kw bvflu6u7qWC8tqOA/XLuEr87OgygIfeSwEbU8pjf63goMQ4IG6kcz/IJHsxkg75V L8yAAMUXeD+4oreiSk50KwW8/HRj/fyjFWQ3/9GSxPxTuuf8RmLT8FLaO4mi56ap WliXOVkegJKwRFRQdzbkU4r2Rx6bhSYckFd7G81pyOMcCd64ELg= -----END CERTIFICATE-----Generated at Thu Sep 24 20:42:22 2026 by rpki-client