$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8C779B92C9D8335C1CB86712683DFD8390906AB.mft File: A8C779B92C9D8335C1CB86712683DFD8390906AB.mft (raw, json) Hash identifier: HGp5i2qZQ8px4mSySim7mhagED+rdicjusU0J8fTuig= Subject key identifier: DD:19:0C:45:C9:EA:B5:5A:DC:98:08:25:24:42:9D:74:21:B5:22:32 Authority key identifier: A8:C7:79:B9:2C:9D:83:35:C1:CB:86:71:26:83:DF:D8:39:09:06:AB Certificate issuer: /CN=A8C779B92C9D8335C1CB86712683DFD8390906AB Certificate serial: 248FE0A6E6890135679BD08DBCAE83D266C06555 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8C779B92C9D8335C1CB86712683DFD8390906AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8C779B92C9D8335C1CB86712683DFD8390906AB.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 15:20:02 +0000 Manifest this update: Wed 23 Sep 2026 15:15:02 +0000 Manifest next update: Thu 24 Sep 2026 17:46:02 +0000 Files and hashes: 1: 3130332e3139312e3231362e302f32332d3234203d3e20313439393239.roa (hash: Ew25t7Vik7jMjlVkWIAnLNDeMqYedtzpiyuVVLSeeF8=) 2: A8C779B92C9D8335C1CB86712683DFD8390906AB.crl (hash: 6qy6WVwu3gI4VluNRXc7KooosiH6zIi+D/21TWFujOc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8C779B92C9D8335C1CB86712683DFD8390906AB.crl rsync://rpki-rsync.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8C779B92C9D8335C1CB86712683DFD8390906AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8C779B92C9D8335C1CB86712683DFD8390906AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8f:e0:a6:e6:89:01:35:67:9b:d0:8d:bc:ae:83:d2:66:c0:65:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8C779B92C9D8335C1CB86712683DFD8390906AB Validity Not Before: Sep 23 15:15:02 2026 GMT Not After : Sep 24 17:46:02 2026 GMT Subject: CN=DD190C45C9EAB55ADC98082524429D7421B52232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:10:b0:9f:f9:63:c1:8b:12:12:90:aa:d0:d9: 8d:50:35:27:a9:d2:d7:47:aa:cc:0c:02:a4:6b:09: 41:02:1d:e6:b3:c7:5f:1a:c9:b7:c6:09:db:40:f3: 17:10:e8:de:18:5e:aa:dd:e1:2f:aa:24:7c:19:72: cd:20:c2:79:fb:3b:ef:5e:55:d5:0e:a6:4c:d2:c2: ee:a4:16:0a:87:86:2d:51:68:12:b1:da:b3:3c:f9: bf:b5:12:33:80:de:ea:3e:ec:22:76:1b:d1:a7:61: 48:32:62:5d:f6:45:41:99:a0:22:89:5c:8a:ac:4b: e9:50:bf:25:29:3a:f0:15:e6:f6:ef:74:8d:52:c7: 62:60:fd:30:0b:ee:46:ce:ea:62:8c:9b:49:db:7e: cf:b2:a3:77:7e:6e:cc:ec:7b:32:23:5c:8d:62:f8: 48:c5:b5:38:c4:54:26:be:f4:3c:4f:ad:53:e7:fc: ca:20:7f:25:89:61:fb:dd:6f:00:36:14:b5:dc:62: 4b:c2:f5:eb:6f:02:e5:f2:25:0e:8c:53:c2:2f:1e: f6:d7:65:42:57:f1:c6:35:1a:bb:61:4f:b2:bc:3e: 0d:40:83:2b:4a:b6:28:a5:d9:df:70:0e:63:64:32: 1f:73:73:49:85:8b:e6:65:8a:31:df:85:88:c8:7d: 7d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:19:0C:45:C9:EA:B5:5A:DC:98:08:25:24:42:9D:74:21:B5:22:32 X509v3 Authority Key Identifier: keyid:A8:C7:79:B9:2C:9D:83:35:C1:CB:86:71:26:83:DF:D8:39:09:06:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8C779B92C9D8335C1CB86712683DFD8390906AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8C779B92C9D8335C1CB86712683DFD8390906AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8C779B92C9D8335C1CB86712683DFD8390906AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:9c:b6:67:61:73:e7:78:ef:46:d3:b0:3b:a7:40:f5:c6:0b: d4:1a:c9:0e:a5:f2:d8:b8:3d:d6:08:fd:e1:8a:fe:0e:31:70: 12:74:09:b7:5e:09:ce:ff:73:52:70:51:19:20:34:8e:99:84: f1:c9:3f:1f:c1:53:cc:a5:7c:0a:f2:94:ae:89:e0:83:44:ec: 40:23:96:36:52:79:be:c1:c4:c6:ba:28:cc:04:d5:34:58:a1: f1:9a:b0:bb:12:c6:9c:7e:d6:ab:99:15:6f:f4:5b:cb:b7:ce: 39:56:61:78:ef:33:5e:0a:92:14:49:98:01:76:b6:4d:58:c4: 0c:77:de:c8:17:0c:10:5b:36:b2:b5:87:4a:59:35:9c:f9:6a: 2d:12:58:d8:d0:e9:a4:c9:61:b9:34:e6:cf:71:a6:f1:17:5f: ef:0a:a0:4e:00:fd:62:98:ad:0b:81:f0:1c:97:a3:af:29:be: 9a:68:9a:0e:0d:df:d0:9a:52:57:84:66:71:1b:b3:5a:46:86: 9e:3c:e8:0d:75:85:3f:da:20:d2:f9:2e:00:e1:3d:79:04:67: 01:6c:70:10:9e:c0:57:d4:8e:7d:a5:ac:62:de:f3:a9:9c:0d: ca:a8:be:09:a3:44:0e:b6:c1:8c:aa:be:b1:0b:a7:45:9e:d9: 08:f9:a0:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJI/gpuaJATVnm9CNvK6D0mbAZVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThDNzc5QjkyQzlEODMzNUMxQ0I4NjcxMjY4M0RGRDgz OTA5MDZBQjAeFw0yNjA5MjMxNTE1MDJaFw0yNjA5MjQxNzQ2MDJaMDMxMTAvBgNV BAMTKEREMTkwQzQ1QzlFQUI1NUFEQzk4MDgyNTI0NDI5RDc0MjFCNTIyMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRELCf+WPBixISkKrQ2Y1QNSep 0tdHqswMAqRrCUECHeazx18aybfGCdtA8xcQ6N4YXqrd4S+qJHwZcs0gwnn7O+9e VdUOpkzSwu6kFgqHhi1RaBKx2rM8+b+1EjOA3uo+7CJ2G9GnYUgyYl32RUGZoCKJ XIqsS+lQvyUpOvAV5vbvdI1Sx2Jg/TAL7kbO6mKMm0nbfs+yo3d+bszsezIjXI1i +EjFtTjEVCa+9DxPrVPn/MogfyWJYfvdbwA2FLXcYkvC9etvAuXyJQ6MU8IvHvbX ZUJX8cY1GrthT7K8Pg1AgytKtiil2d9wDmNkMh9zc0mFi+ZlijHfhYjIfX3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3RkMRcnqtVrcmAglJEKddCG1IjIwHwYDVR0j BBgwFoAUqMd5uSydgzXBy4ZxJoPf2DkJBqswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWU0Nzg0N2MtYmMyYy00MGRhLWIyYWEtOTE1OTUxNDI4YWFkLzAvQThDNzc5Qjky QzlEODMzNUMxQ0I4NjcxMjY4M0RGRDgzOTA5MDZBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEM3NzlCOTJDOUQ4MzM1QzFDQjg2NzEyNjgzREZEODM5MDkw NkFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWU0Nzg0N2MtYmMyYy00MGRhLWIy YWEtOTE1OTUxNDI4YWFkLzAvQThDNzc5QjkyQzlEODMzNUMxQ0I4NjcxMjY4M0RG RDgzOTA5MDZBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAictmdhc+d470bTsDunQPXGC9QayQ6l8ti4 PdYI/eGK/g4xcBJ0CbdeCc7/c1JwURkgNI6ZhPHJPx/BU8ylfArylK6J4INE7EAj ljZSeb7BxMa6KMwE1TRYofGasLsSxpx+1quZFW/0W8u3zjlWYXjvM14KkhRJmAF2 tk1YxAx33sgXDBBbNrK1h0pZNZz5ai0SWNjQ6aTJYbk05s9xpvEXX+8KoE4A/WKY rQuB8ByXo68pvppomg4N39CaUleEZnEbs1pGhp486A11hT/aINL5LgDhPXkEZwFs cBCewFfUjn2lrGLe86mcDcqovgmjRA62wYyqvrELp0We2Qj5oMg= -----END CERTIFICATE-----Generated at Thu Sep 24 08:43:43 2026 by rpki-client