$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft File: A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft (raw, json) Hash identifier: Gy2K4w7SkJYif9WnunHMY2FtpjMxuBf9YQgtBBzqCoU= Subject key identifier: E8:18:80:C2:CB:22:8B:FF:1C:13:E9:9B:5F:08:B5:AF:63:8D:B7:E2 Authority key identifier: A8:4B:BD:78:BD:AD:07:C8:55:4B:D7:0C:A6:3D:BD:C8:4A:37:D6:3A Certificate issuer: /CN=A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A Certificate serial: 7BB223BBD4F323AFCFAAD777CD3E1F35C93C1DDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 00:21:05 +0000 Manifest this update: Thu 24 Sep 2026 00:16:05 +0000 Manifest next update: Fri 25 Sep 2026 03:51:05 +0000 Files and hashes: 1: 3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (hash: 0vj1+ur+imczmOrtruw1pJmka20ZQffLE5EcHd3zqlo=) 2: A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl (hash: O834K24GBZzgLdWJWQazrU0lHgA81yGM/YvZfv9Sh3A=) 3: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (hash: UXHn8bg4Zb9U+P+TCueeNhsm/n24BjvW6TOuDV9tWgQ=) 4: 3130332e3136372e3130362e302f32332d3233203d3e203538333639.roa (hash: g3SYguF2gjNopDU5fkgr7wfvMxsOOXZGBV4A3PJx+Es=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b2:23:bb:d4:f3:23:af:cf:aa:d7:77:cd:3e:1f:35:c9:3c:1d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A Validity Not Before: Sep 24 00:16:05 2026 GMT Not After : Sep 25 03:51:05 2026 GMT Subject: CN=E81880C2CB228BFF1C13E99B5F08B5AF638DB7E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:67:38:a3:be:eb:8c:bc:c1:56:98:1b:f1: cb:e0:b4:6e:0a:0d:1c:9c:4f:0c:57:ca:47:25:6f: 1d:c5:12:3d:c0:b0:5d:38:45:79:1d:97:7a:65:db: 1c:e1:e5:40:17:cf:77:9a:76:a4:2b:3c:ec:16:5e: 3f:91:43:c3:d0:f2:57:49:90:a9:94:67:7f:b1:fb: 2e:ae:9b:92:dd:0e:45:0c:c7:94:57:ce:97:9d:ec: 39:29:e3:30:9b:f4:b9:f2:a3:9e:c7:ea:5f:fc:95: 85:c8:77:81:e6:04:b2:74:7f:b1:5b:4a:8a:27:62: 62:d8:a0:84:4a:7f:59:03:da:89:c6:47:79:ad:6d: 88:a0:76:35:87:07:0e:d1:2f:7a:34:ea:af:99:72: 58:d9:da:c2:8b:b3:8e:b4:cb:0d:0d:9f:ba:33:59: f9:b4:b2:3e:51:df:1a:6f:c1:e3:74:aa:d1:c5:0d: 15:ec:ae:a4:2b:7e:59:12:62:ad:c3:5c:73:fb:66: 70:70:40:2a:f8:81:4a:c2:dc:58:a8:82:b4:86:2c: ca:5e:51:1a:a0:f9:92:68:7d:1d:c0:24:3a:e3:0b: 09:4a:c5:14:93:bb:39:9b:2f:b4:c8:23:6b:b2:3a: bc:57:ff:41:ca:cb:67:c0:00:1d:20:45:a4:ed:81: 3f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:18:80:C2:CB:22:8B:FF:1C:13:E9:9B:5F:08:B5:AF:63:8D:B7:E2 X509v3 Authority Key Identifier: keyid:A8:4B:BD:78:BD:AD:07:C8:55:4B:D7:0C:A6:3D:BD:C8:4A:37:D6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:96:e3:36:69:02:fe:16:ac:a8:ed:2d:21:68:26:40:f6:85: 1a:3c:15:17:ec:d3:d8:68:2d:a9:b0:67:f0:f9:59:c7:cb:f5: bd:5c:56:19:ec:fc:7f:2d:1d:19:bd:4c:57:0d:59:40:69:df: 11:f8:5d:ae:3f:6e:91:87:55:62:f1:fa:d9:93:8d:8b:db:da: 36:90:84:b4:b3:cf:52:db:af:67:08:3d:0a:f3:b3:d9:f1:6b: 7f:6c:5d:0b:69:37:23:cc:bc:c8:ae:12:33:94:7d:fd:7f:37: a3:e2:20:73:77:be:d9:6c:ea:68:5e:3b:7d:67:f9:3d:8d:5b: 55:5b:8f:01:f5:ef:fb:9b:f6:f0:fa:47:45:13:32:b8:ef:d4: 60:d4:a2:e6:61:ac:0d:08:70:1d:98:ea:f2:98:f9:5d:7d:ab: 4a:26:eb:44:98:9c:db:42:af:78:92:3b:7e:7c:aa:7e:08:06: 40:19:ae:62:ee:df:6b:55:d6:34:42:b9:05:2c:3a:09:22:45: 12:e6:a8:47:68:40:5a:6f:a9:8f:d5:f9:a8:3c:d3:6d:4b:79: 3d:43:6d:bb:53:8a:85:81:bc:42:ca:9d:a7:55:1a:e8:ea:2f: 5f:6d:15:74:48:31:43:3b:52:f3:d4:2e:ae:32:16:6b:90:69: f6:ee:b7:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe7Iju9TzI6/Pqtd3zT4fNck8Hd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg0QkJENzhCREFEMDdDODU1NEJENzBDQTYzREJEQzg0 QTM3RDYzQTAeFw0yNjA5MjQwMDE2MDVaFw0yNjA5MjUwMzUxMDVaMDMxMTAvBgNV BAMTKEU4MTg4MEMyQ0IyMjhCRkYxQzEzRTk5QjVGMDhCNUFGNjM4REI3RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4uGc4o77rjLzBVpgb8cvgtG4K DRycTwxXykclbx3FEj3AsF04RXkdl3pl2xzh5UAXz3eadqQrPOwWXj+RQ8PQ8ldJ kKmUZ3+x+y6um5LdDkUMx5RXzped7Dkp4zCb9Lnyo57H6l/8lYXId4HmBLJ0f7Fb SoonYmLYoIRKf1kD2onGR3mtbYigdjWHBw7RL3o06q+ZcljZ2sKLs460yw0Nn7oz Wfm0sj5R3xpvweN0qtHFDRXsrqQrflkSYq3DXHP7ZnBwQCr4gUrC3FiogrSGLMpe URqg+ZJofR3AJDrjCwlKxRSTuzmbL7TII2uyOrxX/0HKy2fAAB0gRaTtgT8pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6BiAwssii/8cE+mbXwi1r2ONt+IwHwYDVR0j BBgwFoAUqEu9eL2tB8hVS9cMpj29yEo31jowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgxZTkyMzgtNDI2Ny00OGVmLWIwMmUtMWQ3ZDA0NDAwOTQxLzAvQTg0QkJENzhC REFEMDdDODU1NEJENzBDQTYzREJEQzg0QTM3RDYzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODRCQkQ3OEJEQUQwN0M4NTU0QkQ3MENBNjNEQkRDODRBMzdE NjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgxZTkyMzgtNDI2Ny00OGVmLWIw MmUtMWQ3ZDA0NDAwOTQxLzAvQTg0QkJENzhCREFEMDdDODU1NEJENzBDQTYzREJE Qzg0QTM3RDYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWW4zZpAv4WrKjtLSFoJkD2hRo8FRfs09ho LamwZ/D5WcfL9b1cVhns/H8tHRm9TFcNWUBp3xH4Xa4/bpGHVWLx+tmTjYvb2jaQ hLSzz1Lbr2cIPQrzs9nxa39sXQtpNyPMvMiuEjOUff1/N6PiIHN3vtls6mheO31n +T2NW1VbjwH17/ub9vD6R0UTMrjv1GDUouZhrA0IcB2Y6vKY+V19q0om60SYnNtC r3iSO358qn4IBkAZrmLu32tV1jRCuQUsOgkiRRLmqEdoQFpvqY/V+ag8021LeT1D bbtTioWBvELKnadVGujqL19tFXRIMUM7UvPULq4yFmuQafbutwQ= -----END CERTIFICATE-----Generated at Thu Sep 24 20:39:43 2026 by rpki-client