$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft File: A5251C27E1AF09AE2F28618250807EA4D573694B.mft (raw, json) Hash identifier: brhhUPWnp5WtehIcj1q+5FFtybN2h2dRZeueUWLgLWc= Subject key identifier: 2F:2B:71:A8:EB:69:83:6C:A2:80:AD:D5:E4:1D:39:78:F4:93:55:7A Authority key identifier: A5:25:1C:27:E1:AF:09:AE:2F:28:61:82:50:80:7E:A4:D5:73:69:4B Certificate issuer: /CN=A5251C27E1AF09AE2F28618250807EA4D573694B Certificate serial: 073296A5C858FF9850EA608767C5C54228150A27 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 17:07:12 +0000 Manifest this update: Wed 23 Sep 2026 17:02:12 +0000 Manifest next update: Thu 24 Sep 2026 17:38:12 +0000 Files and hashes: 1: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: 8PPdaCX6mIjApYArjunSo3wNOsnTma7JcAZ0c6t+SzU=) 2: A5251C27E1AF09AE2F28618250807EA4D573694B.crl (hash: 7q+xr80OakTLrrrgg0UJnRd9hDwABUFbrYDub19J7Ls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.crl rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:32:96:a5:c8:58:ff:98:50:ea:60:87:67:c5:c5:42:28:15:0a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5251C27E1AF09AE2F28618250807EA4D573694B Validity Not Before: Sep 23 17:02:12 2026 GMT Not After : Sep 24 17:38:12 2026 GMT Subject: CN=2F2B71A8EB69836CA280ADD5E41D3978F493557A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:83:d2:b1:4c:85:96:29:cf:7f:81:59:f3:12: ff:28:e4:d1:dc:f5:8b:08:ea:e0:76:0f:4c:5a:24: 8a:e5:4d:de:2e:46:dc:f1:e3:e4:95:88:a7:8f:26: 1f:97:6b:f1:50:05:66:05:4c:69:67:df:27:d8:de: 2b:20:38:b7:70:2c:32:84:75:83:86:4e:0e:97:9e: 7f:44:ec:81:35:4e:fa:70:5e:36:60:50:fb:c3:7b: 76:a9:93:46:da:52:66:06:01:0a:33:7c:fa:40:77: cc:72:58:9f:01:f8:32:30:a6:76:2e:f7:af:11:14: fd:67:d9:4b:bf:e7:3e:fd:72:2b:e0:77:4d:b6:d4: 06:2f:20:58:cb:8a:b6:ba:21:de:8a:4e:5e:9c:79: d0:1d:d9:95:2f:1a:bf:fb:23:be:03:4d:0e:33:77: da:d6:50:43:47:a6:15:e4:2d:3a:04:1d:81:e3:cf: 02:ab:a4:76:1a:a7:1d:19:97:2c:fa:9c:19:26:5e: 02:e7:ec:b0:57:d3:68:d5:c2:1b:89:4d:ef:1f:ab: 97:f0:ba:ed:bc:0d:a5:a5:a4:ee:fb:fd:4a:80:fd: 11:0f:82:70:cc:26:38:17:91:79:68:54:4b:21:2b: db:3e:c4:1e:ec:81:98:ab:8a:32:75:b8:b1:07:a8: 61:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2B:71:A8:EB:69:83:6C:A2:80:AD:D5:E4:1D:39:78:F4:93:55:7A X509v3 Authority Key Identifier: keyid:A5:25:1C:27:E1:AF:09:AE:2F:28:61:82:50:80:7E:A4:D5:73:69:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d6:ca:2c:fe:21:90:6a:5d:47:7b:50:bb:05:36:0d:17:ed: 74:b5:c6:19:c9:fb:a3:68:77:31:f0:76:05:2d:e6:9b:6d:35: 44:89:75:05:44:98:07:e7:06:d8:d1:42:51:ad:a0:82:80:75: 54:d4:60:34:78:1b:34:87:46:e2:d0:94:9e:52:3b:96:8b:bb: b7:ae:d8:ae:71:82:dd:ef:71:58:ab:51:3b:1f:46:66:b9:18: fb:ca:07:f7:a8:f1:20:0c:dc:d0:d0:b9:be:95:ad:90:0c:1c: 84:87:e0:fa:00:07:a7:3c:63:93:1c:fa:2f:f0:19:11:e0:18: 56:1e:2b:09:77:fd:d7:f6:31:d5:26:a6:d1:49:b2:c6:41:4a: a4:4c:56:e4:66:17:7c:ac:9c:11:5e:0a:e4:96:0c:a8:4e:f3: ff:7b:12:04:8c:7c:a9:e5:ed:fc:18:16:94:3f:17:a5:43:94: a4:b7:d1:24:74:d2:3d:80:97:87:56:63:4c:bf:fd:6f:0f:dd: eb:55:0e:3d:9b:ba:2b:06:9f:10:b9:48:69:f5:e0:61:fc:f0: 99:68:d9:da:49:d5:3d:88:43:16:20:47:18:bb:03:c1:74:54: dd:7b:2e:88:05:09:1c:4f:1c:92:1e:98:3c:3c:a4:e8:a5:78: 84:f6:9c:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBzKWpchY/5hQ6mCHZ8XFQigVCicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUyNTFDMjdFMUFGMDlBRTJGMjg2MTgyNTA4MDdFQTRE NTczNjk0QjAeFw0yNjA5MjMxNzAyMTJaFw0yNjA5MjQxNzM4MTJaMDMxMTAvBgNV BAMTKDJGMkI3MUE4RUI2OTgzNkNBMjgwQURENUU0MUQzOTc4RjQ5MzU1N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9g9KxTIWWKc9/gVnzEv8o5NHc 9YsI6uB2D0xaJIrlTd4uRtzx4+SViKePJh+Xa/FQBWYFTGln3yfY3isgOLdwLDKE dYOGTg6Xnn9E7IE1TvpwXjZgUPvDe3apk0baUmYGAQozfPpAd8xyWJ8B+DIwpnYu 968RFP1n2Uu/5z79civgd0221AYvIFjLira6Id6KTl6cedAd2ZUvGr/7I74DTQ4z d9rWUENHphXkLToEHYHjzwKrpHYapx0Zlyz6nBkmXgLn7LBX02jVwhuJTe8fq5fw uu28DaWlpO77/UqA/REPgnDMJjgXkXloVEshK9s+xB7sgZirijJ1uLEHqGH7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULytxqOtpg2yigK3V5B05ePSTVXowHwYDVR0j BBgwFoAUpSUcJ+GvCa4vKGGCUIB+pNVzaUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ3ZjZjZjYtZGQyYi00ODIzLWIyNjQtZTJiZjRmMzBhYmZlLzAvQTUyNTFDMjdF MUFGMDlBRTJGMjg2MTgyNTA4MDdFQTRENTczNjk0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNTI1MUMyN0UxQUYwOUFFMkYyODYxODI1MDgwN0VBNEQ1NzM2 OTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy NjQtZTJiZjRmMzBhYmZlLzAvQTUyNTFDMjdFMUFGMDlBRTJGMjg2MTgyNTA4MDdF QTRENTczNjk0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLWyiz+IZBqXUd7ULsFNg0X7XS1xhnJ+6No dzHwdgUt5pttNUSJdQVEmAfnBtjRQlGtoIKAdVTUYDR4GzSHRuLQlJ5SO5aLu7eu 2K5xgt3vcVirUTsfRma5GPvKB/eo8SAM3NDQub6VrZAMHISH4PoAB6c8Y5Mc+i/w GRHgGFYeKwl3/df2MdUmptFJssZBSqRMVuRmF3ysnBFeCuSWDKhO8/97EgSMfKnl 7fwYFpQ/F6VDlKS30SR00j2Al4dWY0y//W8P3etVDj2buisGnxC5SGn14GH88Jlo 2dpJ1T2IQxYgRxi7A8F0VN17LogFCRxPHJIemDw8pOileIT2nCE= -----END CERTIFICATE-----Generated at Wed Sep 23 21:39:22 2026 by rpki-client