$ rpki-client -vvvf rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft File: A337D214F1B15825AC6178574C28712521D64B38.mft (raw, json) Hash identifier: tgYjzZ4J7lp/aloCg6XhmBStqMldsdYC/5rFzLuaxPk= Subject key identifier: 9A:0B:F2:EC:2D:2B:65:8B:33:41:38:AE:5B:0C:F7:F2:17:D7:9D:2E Authority key identifier: A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38 Certificate issuer: /CN=A337D214F1B15825AC6178574C28712521D64B38 Certificate serial: 7D8D80075A01EBC977A0B2C3A4E9309BF25F280F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 15:45:18 +0000 Manifest this update: Thu 24 Sep 2026 15:40:18 +0000 Manifest next update: Fri 25 Sep 2026 16:37:18 +0000 Files and hashes: 1: A337D214F1B15825AC6178574C28712521D64B38.crl (hash: nZ3M1S0Kgtpi/nENmuPCgolMWLCI5omW25YpAtQrCs8=) 2: 3130332e32302e3130382e302f32332d3233203d3e20313530323338.roa (hash: eSjZGWM1OyV1yhzjQEoayB2vN+fO3mEGbT4lUzAsfwU=) 3: 3130332e32302e3130392e302f32342d3234203d3e20313430343233.roa (hash: m7moeEEKoa7tBNsWW1/WiFxPUHqVNruJHZKBpwqbqkc=) 4: 3130332e32302e3130382e302f32342d3234203d3e20313534323137.roa (hash: 6ANd8eDpGDry4TmWd8klyvoxo3+q5EgqhgVj7CcAyKQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:8d:80:07:5a:01:eb:c9:77:a0:b2:c3:a4:e9:30:9b:f2:5f:28:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A337D214F1B15825AC6178574C28712521D64B38 Validity Not Before: Sep 24 15:40:18 2026 GMT Not After : Sep 25 16:37:18 2026 GMT Subject: CN=9A0BF2EC2D2B658B334138AE5B0CF7F217D79D2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:7f:a5:ef:cc:3d:57:0a:43:7e:27:da:c2: 67:b1:fd:eb:94:40:4a:1d:97:14:45:a7:cf:5b:23: b6:3c:4e:e4:9c:de:35:b8:0d:b8:dd:44:98:15:6a: 49:2c:3f:3f:0c:f9:70:9f:b4:00:4b:af:6e:17:b7: e0:25:86:00:26:08:9d:1e:98:1b:14:30:dd:7c:d5: 1d:86:cb:51:7c:05:7a:3b:26:b7:6a:b0:03:7e:b6: a9:ea:ec:8c:0d:fa:36:06:d6:54:d8:b6:4e:61:5d: 88:36:83:1e:41:b5:ee:31:4d:2a:9a:8d:92:91:88: 8c:10:4a:9f:90:57:e7:e7:41:80:d3:bc:e0:4b:d8: cf:67:9b:4d:62:59:08:fb:dd:8a:68:49:ce:d4:b3: 1d:52:0d:fa:9a:ea:fc:ca:59:5c:1b:63:26:62:b3: 3d:b9:38:b4:73:c4:a5:e5:9d:01:99:a7:88:1a:7b: fb:26:b1:f1:4f:ec:33:7f:f2:18:a7:be:11:3f:39: 46:48:d9:55:32:06:31:ba:3d:6f:19:60:1e:a7:80: 0b:33:dd:3e:07:59:37:82:9b:3c:db:64:4a:a2:e7: fd:45:18:00:10:c9:eb:e2:bc:a0:3d:8b:5f:9d:f7: f2:aa:6f:b1:3b:5a:ba:db:b6:d0:97:da:c4:34:be: 31:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0B:F2:EC:2D:2B:65:8B:33:41:38:AE:5B:0C:F7:F2:17:D7:9D:2E X509v3 Authority Key Identifier: keyid:A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:8f:56:75:5f:8a:0b:b3:89:3c:6e:ef:70:ec:aa:34:d4:42: 6f:37:3e:c0:8f:af:b0:73:c3:cf:1a:41:63:7c:4b:32:11:0c: 42:00:1b:95:f2:b2:1d:6d:0a:0a:db:45:0b:8a:b5:17:17:16: 0d:0d:6e:b7:80:4a:90:df:cf:0c:34:f2:d6:4b:70:36:31:f5: d3:90:6c:17:89:71:66:81:f1:6c:7c:1c:2b:23:35:cd:ce:47: 07:18:2c:18:10:c2:e9:51:b2:fc:fb:cb:e6:89:f5:e1:e0:43: ad:f9:e7:e7:de:1d:3a:5a:3d:2f:fb:4d:f8:ac:d8:6d:17:31: d7:aa:62:04:e4:36:50:5a:38:34:09:71:61:df:ed:d3:a1:cf: 78:77:f7:c3:4c:5d:25:90:b2:0e:f1:4f:2c:66:db:52:2f:32: 58:dc:13:66:83:6b:36:2b:a9:9e:37:30:99:7c:16:6b:89:8d: 78:6a:21:c5:be:17:d8:62:27:fd:31:dd:0b:8e:e9:35:5a:61: 3b:fc:3b:58:fd:48:b8:fe:da:20:cf:a1:73:04:ee:9b:ed:66: d2:7b:26:cc:6a:9d:31:f7:e9:4a:8a:c8:21:27:67:2b:4e:d1: 08:e3:07:e1:48:34:ce:9c:1d:32:9b:4d:44:5c:e7:c2:20:99: 16:c9:06:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfY2AB1oB68l3oLLDpOkwm/JfKA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzN0QyMTRGMUIxNTgyNUFDNjE3ODU3NEMyODcxMjUy MUQ2NEIzODAeFw0yNjA5MjQxNTQwMThaFw0yNjA5MjUxNjM3MThaMDMxMTAvBgNV BAMTKDlBMEJGMkVDMkQyQjY1OEIzMzQxMzhBRTVCMENGN0YyMTdENzlEMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34n+l78w9VwpDfifawmex/euU QEodlxRFp89bI7Y8TuSc3jW4DbjdRJgVakksPz8M+XCftABLr24Xt+AlhgAmCJ0e mBsUMN181R2Gy1F8BXo7JrdqsAN+tqnq7IwN+jYG1lTYtk5hXYg2gx5Bte4xTSqa jZKRiIwQSp+QV+fnQYDTvOBL2M9nm01iWQj73YpoSc7Usx1SDfqa6vzKWVwbYyZi sz25OLRzxKXlnQGZp4gae/smsfFP7DN/8hinvhE/OUZI2VUyBjG6PW8ZYB6ngAsz 3T4HWTeCmzzbZEqi5/1FGAAQyevivKA9i1+d9/Kqb7E7WrrbttCX2sQ0vjEzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmgvy7C0rZYszQTiuWwz38hfXnS4wHwYDVR0j BBgwFoAUozfSFPGxWCWsYXhXTChxJSHWSzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWNjNmJkNzMtZjliZC00ZjVhLTljNTktZmJlYTFiZDgzNDczLzAvQTMzN0QyMTRG MUIxNTgyNUFDNjE3ODU3NEMyODcxMjUyMUQ2NEIzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzM3RDIxNEYxQjE1ODI1QUM2MTc4NTc0QzI4NzEyNTIxRDY0 QjM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWNjNmJkNzMtZjliZC00ZjVhLTlj NTktZmJlYTFiZDgzNDczLzAvQTMzN0QyMTRGMUIxNTgyNUFDNjE3ODU3NEMyODcx MjUyMUQ2NEIzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOPVnVfiguziTxu73DsqjTUQm83PsCPr7Bz w88aQWN8SzIRDEIAG5Xysh1tCgrbRQuKtRcXFg0NbreASpDfzww08tZLcDYx9dOQ bBeJcWaB8Wx8HCsjNc3ORwcYLBgQwulRsvz7y+aJ9eHgQ6355+feHTpaPS/7Tfis 2G0XMdeqYgTkNlBaODQJcWHf7dOhz3h398NMXSWQsg7xTyxm21IvMljcE2aDazYr qZ43MJl8FmuJjXhqIcW+F9hiJ/0x3QuO6TVaYTv8O1j9SLj+2iDPoXME7pvtZtJ7 JsxqnTH36UqKyCEnZytO0QjjB+FINM6cHTKbTURc58IgmRbJBr0= -----END CERTIFICATE-----Generated at Thu Sep 24 17:41:03 2026 by rpki-client