$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft File: A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft (raw, json) Hash identifier: VAHAyR08q8Y3Kulo+RW2MHUVmJf2WxpmgBEIc6bWG8c= Subject key identifier: 2D:2A:F4:81:F9:15:91:78:0D:8D:AF:92:BA:23:CD:CB:09:CD:19:D9 Authority key identifier: A9:2D:7A:2C:E9:CB:AA:FD:76:3A:38:0C:28:FA:DD:D1:A3:C7:EA:81 Certificate issuer: /CN=A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81 Certificate serial: 642404D1DDA647B61C56B05006EFCE49BEB8916C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 15:50:43 +0000 Manifest this update: Wed 23 Sep 2026 15:45:43 +0000 Manifest next update: Thu 24 Sep 2026 17:05:43 +0000 Files and hashes: 1: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: WV8Z97xrGgFHwypp6SwSp1IloS8eHHkMOVgWyPQX300=) 2: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: gM1AjlPJEA8ARwiEjxXZ/XYQjY805lBo3kfjSVH4yf0=) 3: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: VuUTV6DF0NO0ScLbFc6eylw+nle2kUmBZXnxVkFv7U0=) 4: A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl (hash: QKi9Tru82Z9z0TVj2J8sMMrNitq8oEb8D5OodjcwumE=) 5: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: 3KrJ0+AfMCOxSs3J3yun9Ot0fuEZmxiN3y8DZjfYS7Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:24:04:d1:dd:a6:47:b6:1c:56:b0:50:06:ef:ce:49:be:b8:91:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81 Validity Not Before: Sep 23 15:45:43 2026 GMT Not After : Sep 24 17:05:43 2026 GMT Subject: CN=2D2AF481F91591780D8DAF92BA23CDCB09CD19D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:22:84:02:c2:04:07:e3:f9:18:45:3e:eb:7c: eb:8e:9e:6a:46:e8:5b:19:d0:7c:63:75:a7:ed:b2: ef:6f:c8:4d:c2:01:94:c9:c0:f1:aa:52:cf:ea:54: 76:8d:92:56:41:62:da:07:47:c9:fc:8b:42:a5:f5: 00:ac:72:c4:33:39:cd:3f:c2:82:22:29:1e:77:26: 86:c9:f3:d8:fd:b0:2b:57:a1:5d:2f:82:4f:ce:a1: ad:d7:6e:66:57:87:cb:42:fc:4a:01:b0:04:f1:2e: eb:31:a9:39:cc:e2:63:2b:31:7d:7c:12:a2:cf:97: 5c:37:a6:cb:a5:32:f9:a7:af:d6:4c:71:0b:67:4d: 19:9d:b3:24:00:43:34:5e:50:e7:61:78:f6:04:11: 86:2a:fa:cf:e7:fd:3b:17:36:37:01:44:56:44:28: 28:d2:3b:43:f5:9f:20:76:49:aa:c2:be:a8:6a:44: 5b:b1:fa:cf:26:3a:8d:21:1a:d7:b1:a0:56:00:c1: ee:f9:26:f3:be:17:dc:00:31:75:6f:c3:75:d3:c6: fe:a6:f4:ae:2b:1d:b0:ba:44:5f:fe:66:9e:34:48: 4a:df:ef:3e:aa:e1:9f:ac:0a:37:15:36:b9:e2:34: 22:96:65:54:82:4d:0b:f7:5a:db:4e:0e:1b:ba:50: cb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2A:F4:81:F9:15:91:78:0D:8D:AF:92:BA:23:CD:CB:09:CD:19:D9 X509v3 Authority Key Identifier: keyid:A9:2D:7A:2C:E9:CB:AA:FD:76:3A:38:0C:28:FA:DD:D1:A3:C7:EA:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:94:f8:fa:0c:95:c5:a1:8d:7c:7e:b7:55:d8:21:fd:63:bb: 5d:b7:bb:a4:a3:8b:bf:2f:aa:24:c4:04:d8:34:96:b7:9b:8d: 5f:f1:71:03:b1:65:0d:7e:5e:a0:fa:0f:bd:31:6b:f6:f2:53: cd:c9:55:b9:c4:27:ea:ea:e7:eb:fe:e3:66:c7:11:40:d4:50: 44:25:e4:a6:06:e3:57:5b:71:da:80:65:9d:2c:e5:7c:76:8b: b8:0c:9e:af:93:ae:0e:bf:cf:df:fd:a0:ec:38:03:71:df:00: ce:fb:96:bd:5f:ef:aa:e8:91:6d:7b:a8:2d:71:8f:55:f4:ff: 6b:d4:f5:05:f9:ca:2f:78:1d:14:7f:90:67:22:8f:79:83:ad: b2:57:a6:40:99:ba:f7:d8:ce:c1:86:0f:5f:b8:27:4e:53:ce: 32:bb:7f:28:b4:d8:2d:aa:c3:a9:d5:be:71:33:0f:be:b9:d0: c3:b4:56:11:35:ef:39:3a:2a:da:ad:d5:93:59:d5:d3:d6:95: c2:08:ab:e0:6d:72:a8:8c:d2:9a:39:1d:da:48:03:e4:4a:06: b6:0d:9d:07:8e:0d:7b:7a:c6:69:2d:50:74:28:4c:57:48:50: 26:33:65:a3:87:dd:2c:e4:09:b2:5a:dc:8b:b0:48:6a:af:bb: 7a:2e:ac:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZCQE0d2mR7YcVrBQBu/OSb64kWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkyRDdBMkNFOUNCQUFGRDc2M0EzODBDMjhGQURERDFB M0M3RUE4MTAeFw0yNjA5MjMxNTQ1NDNaFw0yNjA5MjQxNzA1NDNaMDMxMTAvBgNV BAMTKDJEMkFGNDgxRjkxNTkxNzgwRDhEQUY5MkJBMjNDRENCMDlDRDE5RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7IoQCwgQH4/kYRT7rfOuOnmpG 6FsZ0Hxjdaftsu9vyE3CAZTJwPGqUs/qVHaNklZBYtoHR8n8i0Kl9QCscsQzOc0/ woIiKR53JobJ89j9sCtXoV0vgk/Ooa3XbmZXh8tC/EoBsATxLusxqTnM4mMrMX18 EqLPl1w3psulMvmnr9ZMcQtnTRmdsyQAQzReUOdhePYEEYYq+s/n/TsXNjcBRFZE KCjSO0P1nyB2SarCvqhqRFux+s8mOo0hGtexoFYAwe75JvO+F9wAMXVvw3XTxv6m 9K4rHbC6RF/+Zp40SErf7z6q4Z+sCjcVNrniNCKWZVSCTQv3WttODhu6UMsJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULSr0gfkVkXgNja+SuiPNywnNGdkwHwYDVR0j BBgwFoAUqS16LOnLqv12OjgMKPrd0aPH6oEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE5MTRhZGEtYTlhYS00ZDdmLTllNDctNTk0YmNiN2E3MGFiLzAvQTkyRDdBMkNF OUNCQUFGRDc2M0EzODBDMjhGQURERDFBM0M3RUE4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTJEN0EyQ0U5Q0JBQUZENzYzQTM4MEMyOEZBREREMUEzQzdF QTgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvQTkyRDdBMkNFOUNCQUFGRDc2M0EzODBDMjhGQURE RDFBM0M3RUE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFiU+PoMlcWhjXx+t1XYIf1ju123u6Sji78v qiTEBNg0lrebjV/xcQOxZQ1+XqD6D70xa/byU83JVbnEJ+rq5+v+42bHEUDUUEQl 5KYG41dbcdqAZZ0s5Xx2i7gMnq+Trg6/z9/9oOw4A3HfAM77lr1f76rokW17qC1x j1X0/2vU9QX5yi94HRR/kGcij3mDrbJXpkCZuvfYzsGGD1+4J05TzjK7fyi02C2q w6nVvnEzD7650MO0VhE17zk6Ktqt1ZNZ1dPWlcIIq+BtcqiM0po5HdpIA+RKBrYN nQeODXt6xmktUHQoTFdIUCYzZaOH3SzkCbJa3IuwSGqvu3ourP4= -----END CERTIFICATE-----Generated at Thu Sep 24 05:01:59 2026 by rpki-client