$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft File: A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft (raw, json) Hash identifier: vjW9ibK03mlNh57ORpgrpLSN77HAVsoW90L8ExhLinM= Subject key identifier: EF:B1:2A:77:D0:76:18:F9:28:8F:CC:0F:27:71:0A:C4:BC:E7:F7:A9 Authority key identifier: A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C Certificate issuer: /CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C Certificate serial: 5A1F2C312814961EBB2D14251358DDB80C6D4427 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 14:08:24 +0000 Manifest this update: Thu 24 Sep 2026 14:03:24 +0000 Manifest next update: Fri 25 Sep 2026 15:14:24 +0000 Files and hashes: 1: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: Xz4v16/PuWF3xc6NRQS+cFH5cfyFs8wYPFxR2GtXMDw=) 2: A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl (hash: 4wBf2slk6uixYjs7+MNHtHYuvqaAwyIB+2xKf/d1sfs=) 3: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: oVthfsHvJfZFfAfPgVnP6RK4i2YXuHXT4TJi3carfJc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 15:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1f:2c:31:28:14:96:1e:bb:2d:14:25:13:58:dd:b8:0c:6d:44:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C Validity Not Before: Sep 24 14:03:24 2026 GMT Not After : Sep 25 15:14:24 2026 GMT Subject: CN=EFB12A77D07618F9288FCC0F27710AC4BCE7F7A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5e:42:ec:ca:4d:a6:21:2d:0c:81:10:ac:5f: 0c:4e:59:9f:04:6b:66:ff:37:e6:6c:98:f0:6e:35: 06:2f:2e:ea:97:7f:cc:c0:d4:8a:67:9e:8a:da:ed: db:8c:cd:12:18:e8:99:ee:84:a3:ea:d0:63:d4:2c: 22:3b:9f:e7:a5:e2:86:a5:b3:d5:2f:30:3e:d3:7d: 82:92:56:c6:0a:11:5f:d0:17:32:92:23:14:03:58: 77:bd:35:c9:37:e4:b6:1e:df:c0:a0:2d:df:93:20: 32:e0:8b:5a:45:b0:83:15:af:8f:43:46:29:b6:32: 4e:cf:1c:1d:4e:9f:f2:af:36:8f:ee:c9:b5:33:af: 9c:ff:30:8c:80:10:12:00:b5:1b:ed:4b:c9:33:28: 4d:a7:5c:be:7f:80:0d:a0:18:fd:51:96:67:5e:10: bd:fa:0b:ca:07:a4:6d:64:c0:08:23:cd:6f:69:65: 91:84:82:38:f5:d4:ec:0c:ca:19:8b:f2:a6:81:43: 2d:42:07:c8:b8:f3:1e:be:cb:80:56:f3:ec:2b:a0: a7:40:02:b4:d2:f7:fa:3a:d8:d8:56:8f:c4:57:1d: d7:d5:0b:bd:ae:84:77:55:61:de:10:7d:9f:f6:0d: 40:7d:db:57:ff:ac:e8:ae:43:83:bd:40:f6:7c:0c: 5a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B1:2A:77:D0:76:18:F9:28:8F:CC:0F:27:71:0A:C4:BC:E7:F7:A9 X509v3 Authority Key Identifier: keyid:A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5d:d6:b9:fd:76:85:f4:87:2b:57:5c:eb:3b:3e:a8:69:30: a7:ee:83:ac:60:d7:72:b6:75:10:5f:d1:37:d0:20:c5:87:00: 82:db:f2:0f:f9:b2:48:e0:98:44:e1:b7:32:41:89:3e:ae:5d: 88:59:eb:6d:12:58:03:e0:f2:76:cf:64:e1:bc:67:70:01:04: a2:ca:90:8c:37:97:90:25:50:e9:72:ce:50:a7:18:0d:10:26: 6e:c2:0a:9e:66:a7:dc:de:04:5d:f4:4b:35:59:4f:08:e9:a0: 10:e5:b9:67:52:03:8c:44:49:da:aa:32:0a:a6:f4:3e:78:35: 30:63:8e:92:75:42:e9:82:87:65:9f:63:7d:60:2b:99:bd:f7: 4c:f7:4a:88:a7:33:70:f7:4d:84:17:93:32:a8:a6:c7:99:aa: 3d:3a:9c:5b:16:9d:8a:39:3f:eb:ec:02:1d:35:e7:98:eb:3f: a0:cc:78:f0:55:5c:29:35:e2:7b:be:a8:f6:3f:71:de:18:32: 61:11:af:ad:da:9e:d9:99:42:f3:5d:36:ed:e9:37:9a:db:0b: c4:eb:bd:a5:08:80:ce:77:bf:5c:64:91:d9:8b:14:9e:11:ad: d8:6e:fb:50:8c:fc:80:93:7d:3f:e7:26:4a:0f:3d:20:0a:0e: 80:52:47:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWh8sMSgUlh67LRQlE1jduAxtRCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBNUE1QzI2MDM5QUNGMjE2REYzRTVCMjg0MzQ1Njkz RUU4RjM0QzAeFw0yNjA5MjQxNDAzMjRaFw0yNjA5MjUxNTE0MjRaMDMxMTAvBgNV BAMTKEVGQjEyQTc3RDA3NjE4RjkyODhGQ0MwRjI3NzEwQUM0QkNFN0Y3QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUXkLsyk2mIS0MgRCsXwxOWZ8E a2b/N+ZsmPBuNQYvLuqXf8zA1Ipnnora7duMzRIY6JnuhKPq0GPULCI7n+el4oal s9UvMD7TfYKSVsYKEV/QFzKSIxQDWHe9Nck35LYe38CgLd+TIDLgi1pFsIMVr49D Rim2Mk7PHB1On/KvNo/uybUzr5z/MIyAEBIAtRvtS8kzKE2nXL5/gA2gGP1Rlmde EL36C8oHpG1kwAgjzW9pZZGEgjj11OwMyhmL8qaBQy1CB8i48x6+y4BW8+wroKdA ArTS9/o62NhWj8RXHdfVC72uhHdVYd4QfZ/2DUB921f/rOiuQ4O9QPZ8DFo3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU77Eqd9B2GPkoj8wPJ3EKxLzn96kwHwYDVR0j BBgwFoAUpKWlwmA5rPIW3z5bKENFaT7o80wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWQyZmE1MWUtM2ZkNC00NTIwLWIzNzUtMDllZWY1ZTBlNTEwLzAvQTRBNUE1QzI2 MDM5QUNGMjE2REYzRTVCMjg0MzQ1NjkzRUU4RjM0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNEE1QTVDMjYwMzlBQ0YyMTZERjNFNUIyODQzNDU2OTNFRThG MzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz NzUtMDllZWY1ZTBlNTEwLzAvQTRBNUE1QzI2MDM5QUNGMjE2REYzRTVCMjg0MzQ1 NjkzRUU4RjM0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1d1rn9doX0hytXXOs7PqhpMKfug6xg13K2 dRBf0TfQIMWHAILb8g/5skjgmEThtzJBiT6uXYhZ620SWAPg8nbPZOG8Z3ABBKLK kIw3l5AlUOlyzlCnGA0QJm7CCp5mp9zeBF30SzVZTwjpoBDluWdSA4xESdqqMgqm 9D54NTBjjpJ1QumCh2WfY31gK5m990z3SoinM3D3TYQXkzKopseZqj06nFsWnYo5 P+vsAh0155jrP6DMePBVXCk14nu+qPY/cd4YMmERr63antmZQvNdNu3pN5rbC8Tr vaUIgM53v1xkkdmLFJ4Rrdhu+1CM/ICTfT/nJkoPPSAKDoBSR8E= -----END CERTIFICATE-----Generated at Fri Sep 25 08:36:06 2026 by rpki-client