$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft File: 26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft (raw, json) Hash identifier: FD1Y1Mt3Kb069yvqobOkAaExxpFt/Bb/qo+jwDoN0Yg= Subject key identifier: 52:B3:6D:C6:9F:00:D7:E7:F6:19:F4:EF:FD:9A:60:AD:D0:1C:93:B6 Authority key identifier: 26:AC:84:7A:FE:F1:BA:DA:17:32:A8:A2:24:9B:AE:EC:2F:2D:61:5A Certificate issuer: /CN=26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A Certificate serial: 5C8872BF0227CE1F67B6F6A71E43B59A255FF109 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 09:12:27 +0000 Manifest this update: Wed 23 Sep 2026 09:07:27 +0000 Manifest next update: Thu 24 Sep 2026 10:34:27 +0000 Files and hashes: 1: 26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.crl (hash: sHi3TjZJzLfYxw1XaWwSgvzhKBfCm/xnXsiyTb0Yrpg=) 2: 3130332e3233392e32312e302f32342d3234203d3e20313531353139.roa (hash: xuo20faVsDcaxZ95BSzWiVO7mQjYOYEJpwuA8scBHdE=) 3: 3130332e3233392e32302e302f32342d3234203d3e20313531353139.roa (hash: WHmkkfpIM8Fej10LNvo4eMoAmMSgE4SOk4GXSFe9Ky8=) 4: 3130332e3233392e32302e302f32332d3234203d3e20313531353139.roa (hash: diFLhr4fVvfR6ElD2+x6FyfBVBmvWMODzaZCy9XdQ10=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.crl rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:88:72:bf:02:27:ce:1f:67:b6:f6:a7:1e:43:b5:9a:25:5f:f1:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A Validity Not Before: Sep 23 09:07:27 2026 GMT Not After : Sep 24 10:34:27 2026 GMT Subject: CN=52B36DC69F00D7E7F619F4EFFD9A60ADD01C93B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ba:60:4b:27:ea:c7:a0:62:05:7a:ac:19:5e: 9b:6d:1e:e6:42:6a:72:fb:1c:1d:4c:b8:f5:14:15: 46:cc:1c:04:18:c6:c0:0f:5f:7f:07:a5:04:bc:05: eb:58:6a:9d:19:66:bf:55:16:48:ce:ec:0c:cc:32: 9b:29:74:05:f5:d0:25:5f:5d:93:5f:70:fd:93:d8: 52:39:e7:44:c8:0e:ae:7b:d2:14:29:49:2a:f0:c4: ac:62:0e:fb:d8:55:26:b1:9a:5e:7f:d5:d9:21:53: f6:3a:44:7b:a5:8c:c0:c5:e9:3a:1e:50:ce:be:c9: 8b:b1:53:bb:c8:2b:29:84:ea:34:ef:f7:c5:53:2a: 5d:ab:aa:07:e6:94:96:37:07:fa:10:be:ee:1a:5f: 15:8f:94:54:80:f9:78:58:3a:b9:e5:51:b5:a5:7b: b3:b5:1e:ac:b3:e7:13:14:b5:ef:8e:fe:c2:0b:47: 60:30:3c:87:f6:09:bd:84:a7:ab:23:a1:ad:0a:ee: 52:c9:c1:84:fc:1e:76:f6:f0:c7:dd:ee:68:84:d7: 4c:5c:76:5b:92:4e:78:26:83:cd:a5:9c:45:9b:f7: 21:a2:18:12:f2:91:85:1f:50:11:5d:16:90:a6:0f: d7:bf:16:41:3a:83:b0:74:33:ff:7f:1f:a3:6c:ab: e1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B3:6D:C6:9F:00:D7:E7:F6:19:F4:EF:FD:9A:60:AD:D0:1C:93:B6 X509v3 Authority Key Identifier: keyid:26:AC:84:7A:FE:F1:BA:DA:17:32:A8:A2:24:9B:AE:EC:2F:2D:61:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ed:5e:71:5d:c1:e2:55:35:cc:65:d1:84:96:7b:ca:24:05: 30:1f:8d:9e:82:5a:f6:2e:ac:37:a5:9e:c4:45:68:c4:ef:a7: 15:3c:4a:28:e9:8f:7f:75:6f:ab:c0:90:e5:90:86:e0:a6:af: 6f:de:21:c3:c5:fa:e9:e0:64:ab:d5:6c:c6:85:66:0c:45:f6: cf:c2:9b:03:11:ea:65:9e:fe:21:84:d1:25:89:72:8e:06:ff: c9:de:c9:5a:bc:44:76:07:24:e9:db:38:4f:79:9b:02:5e:d9: ea:76:8f:44:f6:91:4a:62:dd:5c:9d:3a:d4:6d:a8:2c:25:04: 47:f0:16:41:fa:95:13:93:56:4f:1a:89:a6:5c:3c:93:fe:b3: 0d:3d:cb:98:36:b3:67:42:cf:f3:8d:49:e7:53:e8:4b:d2:13: d4:d2:d1:c5:71:3d:f9:30:a7:ed:06:2b:c4:4f:44:ae:32:5a: 10:61:33:84:2a:a4:61:25:24:69:74:73:04:20:97:24:35:85: 81:73:01:c2:1d:66:8a:ba:d5:12:04:0b:41:d0:4f:9f:da:ad: 38:b0:e5:bb:b3:20:10:b2:f7:0d:10:06:02:15:79:34:b4:04: 9a:a8:c9:18:ed:37:7b:9d:24:3c:4a:1f:28:3b:a4:66:9a:38: 57:e5:0e:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXIhyvwInzh9ntvanHkO1miVf8QkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZBQzg0N0FGRUYxQkFEQTE3MzJBOEEyMjQ5QkFFRUMy RjJENjE1QTAeFw0yNjA5MjMwOTA3MjdaFw0yNjA5MjQxMDM0MjdaMDMxMTAvBgNV BAMTKDUyQjM2REM2OUYwMEQ3RTdGNjE5RjRFRkZEOUE2MEFERDAxQzkzQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnumBLJ+rHoGIFeqwZXpttHuZC anL7HB1MuPUUFUbMHAQYxsAPX38HpQS8BetYap0ZZr9VFkjO7AzMMpspdAX10CVf XZNfcP2T2FI550TIDq570hQpSSrwxKxiDvvYVSaxml5/1dkhU/Y6RHuljMDF6Toe UM6+yYuxU7vIKymE6jTv98VTKl2rqgfmlJY3B/oQvu4aXxWPlFSA+XhYOrnlUbWl e7O1Hqyz5xMUte+O/sILR2AwPIf2Cb2Ep6sjoa0K7lLJwYT8Hnb28Mfd7miE10xc dluSTngmg82lnEWb9yGiGBLykYUfUBFdFpCmD9e/FkE6g7B0M/9/H6Nsq+H/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUrNtxp8A1+f2GfTv/ZpgrdAck7YwHwYDVR0j BBgwFoAUJqyEev7xutoXMqiiJJuu7C8tYVowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTdhZmQ1N2EtZTZkZS00YTVmLWI1YzYtMTA4NjVkNWE4Yzk4LzAvMjZBQzg0N0FG RUYxQkFEQTE3MzJBOEEyMjQ5QkFFRUMyRjJENjE1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNkFDODQ3QUZFRjFCQURBMTczMkE4QTIyNDlCQUVFQzJGMkQ2 MTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTdhZmQ1N2EtZTZkZS00YTVmLWI1 YzYtMTA4NjVkNWE4Yzk4LzAvMjZBQzg0N0FGRUYxQkFEQTE3MzJBOEEyMjQ5QkFF RUMyRjJENjE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXtXnFdweJVNcxl0YSWe8okBTAfjZ6CWvYu rDelnsRFaMTvpxU8Sijpj391b6vAkOWQhuCmr2/eIcPF+ungZKvVbMaFZgxF9s/C mwMR6mWe/iGE0SWJco4G/8neyVq8RHYHJOnbOE95mwJe2ep2j0T2kUpi3VydOtRt qCwlBEfwFkH6lROTVk8aiaZcPJP+sw09y5g2s2dCz/ONSedT6EvSE9TS0cVxPfkw p+0GK8RPRK4yWhBhM4QqpGElJGl0cwQglyQ1hYFzAcIdZoq61RIEC0HQT5/arTiw 5buzIBCy9w0QBgIVeTS0BJqoyRjtN3udJDxKHyg7pGaaOFflDns= -----END CERTIFICATE-----Generated at Thu Sep 24 03:42:35 2026 by rpki-client