$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft File: A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft (raw, json) Hash identifier: mYQmHiinkN5KM8Ye6HU6CTEmnWuWm5vSg5hhK28ntxk= Subject key identifier: 21:81:FA:FA:31:CE:DA:9C:B5:41:0D:49:68:30:9F:3B:CF:67:00:BE Authority key identifier: A7:85:B4:C8:90:C9:E2:6C:FC:E6:84:9F:EF:00:9B:04:1D:31:D5:F2 Certificate issuer: /CN=A785B4C890C9E26CFCE6849FEF009B041D31D5F2 Certificate serial: 636B31D3C58CC341E4F5566B26DB89421E901513 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 11:19:35 +0000 Manifest this update: Thu 24 Sep 2026 11:14:35 +0000 Manifest next update: Fri 25 Sep 2026 11:23:35 +0000 Files and hashes: 1: A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl (hash: 5BzDN6uJ8g6cjyoOXjMl4R6ytijqL5Ll0mqcbtId120=) 2: 3130332e35392e39342e302f32332d3234203d3e20313336303532.roa (hash: C+h1+9cN0GpUOXDh90MHekCqY6uk6Swn27VB4kNaByQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:6b:31:d3:c5:8c:c3:41:e4:f5:56:6b:26:db:89:42:1e:90:15:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A785B4C890C9E26CFCE6849FEF009B041D31D5F2 Validity Not Before: Sep 24 11:14:35 2026 GMT Not After : Sep 25 11:23:35 2026 GMT Subject: CN=2181FAFA31CEDA9CB5410D4968309F3BCF6700BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2b:68:86:a5:c1:f9:c6:65:fc:26:1a:23:88: 3a:eb:2e:32:70:9c:54:9c:a7:39:1c:94:b5:ce:f2: 7d:a7:09:5e:36:ca:87:60:c0:c1:c4:fa:1c:f4:86: 03:40:6e:e0:34:a8:68:a2:d0:26:d8:8a:e5:64:a2: aa:f8:28:cf:dd:bc:d6:b6:80:bf:39:66:14:40:5d: 95:89:cb:ea:eb:8a:39:2a:45:4c:27:09:bf:00:af: 72:d4:91:61:0f:45:5d:52:f1:ca:58:5c:30:c5:e9: 92:d8:59:f6:81:b9:91:0c:4f:91:09:a1:8d:18:29: 50:06:c8:80:07:77:07:92:65:4b:83:f7:e9:71:ef: 07:c0:4b:d3:18:ed:49:fd:ae:a9:58:f1:66:f3:9a: ea:0a:60:c8:58:2f:02:66:4a:96:84:c9:28:9c:31: e4:ad:f7:bf:4d:ea:8a:76:80:1b:96:0d:eb:27:8b: d3:4f:a3:e5:8c:2d:20:0f:5c:55:df:a7:d5:90:0a: 1f:ca:ce:4c:0a:94:bc:8c:89:0b:77:99:54:b2:cd: aa:6c:52:17:6b:64:af:da:05:20:82:9e:c3:e5:07: cf:15:79:b3:53:7f:c0:b9:87:12:78:c1:09:55:f7: 81:17:1f:76:41:fb:0d:5b:41:f7:08:b5:fb:fc:d0: fe:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:81:FA:FA:31:CE:DA:9C:B5:41:0D:49:68:30:9F:3B:CF:67:00:BE X509v3 Authority Key Identifier: keyid:A7:85:B4:C8:90:C9:E2:6C:FC:E6:84:9F:EF:00:9B:04:1D:31:D5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:27:4d:53:71:2b:f6:3d:80:46:f1:32:46:5c:d1:0a:c4:7c: 60:40:c1:c8:b0:76:a5:22:0a:64:16:dd:80:7e:ca:5c:86:8f: 72:e7:49:1a:c2:f6:57:29:fd:6b:17:bd:8f:a6:26:7e:9b:6a: 07:25:15:4f:ef:33:3b:f2:d3:a5:87:78:7b:78:0f:a0:36:b9: b4:30:7e:ea:44:af:f6:f9:ef:c4:e4:c1:90:c1:f1:b0:69:ad: b6:6c:0f:f0:32:9b:01:fa:fc:9e:1c:e1:cf:38:c4:4f:a9:51: fc:99:dc:af:c9:47:9b:fb:bb:0e:40:ac:f9:5f:6b:52:ed:3a: 2a:00:b9:87:04:d9:ea:4d:7d:51:c1:ae:4c:08:d3:ed:4e:db: d3:7e:23:e0:b8:e5:09:0c:84:19:8f:08:d2:dc:8b:df:43:26: fa:37:06:de:3e:6e:f3:fa:55:a9:41:a3:73:2b:a4:38:23:ce: 7b:2c:95:28:de:b1:8c:79:f0:15:b2:59:ba:b0:47:37:9d:f8: c2:19:13:f3:56:b7:1c:62:d0:0d:50:7e:d2:58:62:ae:18:ff: 2c:7d:fe:71:1a:d9:b1:fb:84:11:b2:b0:09:f0:e6:e6:47:6a: 46:24:c2:06:3f:fd:c6:fd:66:c7:76:1c:52:58:16:98:69:18: 42:ee:94:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY2sx08WMw0Hk9VZrJtuJQh6QFRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4NUI0Qzg5MEM5RTI2Q0ZDRTY4NDlGRUYwMDlCMDQx RDMxRDVGMjAeFw0yNjA5MjQxMTE0MzVaFw0yNjA5MjUxMTIzMzVaMDMxMTAvBgNV BAMTKDIxODFGQUZBMzFDRURBOUNCNTQxMEQ0OTY4MzA5RjNCQ0Y2NzAwQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxK2iGpcH5xmX8JhojiDrrLjJw nFScpzkclLXO8n2nCV42yodgwMHE+hz0hgNAbuA0qGii0CbYiuVkoqr4KM/dvNa2 gL85ZhRAXZWJy+rrijkqRUwnCb8Ar3LUkWEPRV1S8cpYXDDF6ZLYWfaBuZEMT5EJ oY0YKVAGyIAHdweSZUuD9+lx7wfAS9MY7Un9rqlY8WbzmuoKYMhYLwJmSpaEySic MeSt979N6op2gBuWDesni9NPo+WMLSAPXFXfp9WQCh/KzkwKlLyMiQt3mVSyzaps UhdrZK/aBSCCnsPlB88VebNTf8C5hxJ4wQlV94EXH3ZB+w1bQfcItfv80P4NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIYH6+jHO2py1QQ1JaDCfO89nAL4wHwYDVR0j BBgwFoAUp4W0yJDJ4mz85oSf7wCbBB0x1fIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY2YThmMjgtOWEwMy00Mzc2LWI2MTItMzFmNWFkMWMxZWQ2LzAvQTc4NUI0Qzg5 MEM5RTI2Q0ZDRTY4NDlGRUYwMDlCMDQxRDMxRDVGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzg1QjRDODkwQzlFMjZDRkNFNjg0OUZFRjAwOUIwNDFEMzFE NUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY2YThmMjgtOWEwMy00Mzc2LWI2 MTItMzFmNWFkMWMxZWQ2LzAvQTc4NUI0Qzg5MEM5RTI2Q0ZDRTY4NDlGRUYwMDlC MDQxRDMxRDVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYnTVNxK/Y9gEbxMkZc0QrEfGBAwciwdqUi CmQW3YB+ylyGj3LnSRrC9lcp/WsXvY+mJn6bagclFU/vMzvy06WHeHt4D6A2ubQw fupEr/b578TkwZDB8bBprbZsD/AymwH6/J4c4c84xE+pUfyZ3K/JR5v7uw5ArPlf a1LtOioAuYcE2epNfVHBrkwI0+1O29N+I+C45QkMhBmPCNLci99DJvo3Bt4+bvP6 ValBo3MrpDgjznsslSjesYx58BWyWbqwRzed+MIZE/NWtxxi0A1QftJYYq4Y/yx9 /nEa2bH7hBGysAnw5uZHakYkwgY//cb9Zsd2HFJYFphpGELulEg= -----END CERTIFICATE-----Generated at Thu Sep 24 22:30:10 2026 by rpki-client