$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft File: A0255156E104D661F25134DFEF8EF05BD73E8C04.mft (raw, json) Hash identifier: uUg9TnrRFyXrqR2ZtmjwpwLuOOg7IpxSVjsD7QShyxY= Subject key identifier: 2F:AB:1A:2E:71:09:CB:28:66:D2:B2:AB:E7:33:FE:BE:B1:BF:68:68 Authority key identifier: A0:25:51:56:E1:04:D6:61:F2:51:34:DF:EF:8E:F0:5B:D7:3E:8C:04 Certificate issuer: /CN=A0255156E104D661F25134DFEF8EF05BD73E8C04 Certificate serial: 1DDD491947FB9C0AFEBC99840EA9AFAB0FEC6E20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 17:12:14 +0000 Manifest this update: Wed 23 Sep 2026 17:07:14 +0000 Manifest next update: Thu 24 Sep 2026 20:32:14 +0000 Files and hashes: 1: 3130332e3136312e3139342e302f32342d3234203d3e20313431363232.roa (hash: OwiazASeDIe+vC4nWyzCtb4oqvt1RTV99SuTJlMtud4=) 2: 3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa (hash: 00GZwg/Y9T0ZdKSWulyuB3JLDZ01RudXgy9Ju+lMmEg=) 3: A0255156E104D661F25134DFEF8EF05BD73E8C04.crl (hash: /7eAl7m7ZGo+ygnwhehc1hDlNRGo6PqZxGDCKZ8XJ78=) 4: 3130332e3136312e3139342e302f32332d3233203d3e20313431363232.roa (hash: mPG/zuyU/XUm9QM+7MhLY4PXMJXJc11dpd+ekiFfezo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.crl rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:dd:49:19:47:fb:9c:0a:fe:bc:99:84:0e:a9:af:ab:0f:ec:6e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0255156E104D661F25134DFEF8EF05BD73E8C04 Validity Not Before: Sep 23 17:07:14 2026 GMT Not After : Sep 24 20:32:14 2026 GMT Subject: CN=2FAB1A2E7109CB2866D2B2ABE733FEBEB1BF6868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5d:55:8f:58:1c:13:a6:ee:dd:fd:e0:c1:f4: 14:66:15:1f:27:32:b2:e4:4e:80:64:1c:b4:e0:2b: 74:61:f8:d5:5c:ab:b5:11:ae:e1:23:5a:e6:1f:86: db:3d:63:fb:f4:b8:fd:be:a4:26:91:e2:a3:19:39: 8d:e2:17:81:31:c8:9b:f8:01:50:48:7e:59:69:94: 50:d3:f9:aa:a6:d4:3a:01:b0:20:02:69:be:62:9f: 22:99:45:84:7c:6d:eb:cf:07:7f:f4:ef:bc:57:5c: 0c:b7:12:17:b6:48:71:ee:83:1d:fb:e5:83:ac:ec: 30:a1:fa:46:6f:12:27:07:03:32:8d:e7:d6:e6:db: 5f:d8:01:13:a8:20:51:12:0d:b1:5e:13:32:06:43: e8:b1:1b:26:8e:84:9e:5f:58:fc:ee:10:48:be:15: f4:fd:0a:80:0b:ee:1c:9d:bc:d0:2c:a8:2d:be:ef: 5f:4e:0e:c3:93:39:60:8b:7e:9f:05:7d:a3:b6:9a: da:42:1a:06:4c:f1:3e:1c:4c:54:51:b1:ce:d5:1f: ff:f8:5a:b7:a5:27:24:ab:d5:e8:05:06:3c:10:33: 04:27:ee:cb:5f:51:3d:43:86:3e:b8:db:ad:2b:6c: 35:5b:b6:e4:ac:36:59:e8:94:6b:b8:64:26:f3:13: ce:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AB:1A:2E:71:09:CB:28:66:D2:B2:AB:E7:33:FE:BE:B1:BF:68:68 X509v3 Authority Key Identifier: keyid:A0:25:51:56:E1:04:D6:61:F2:51:34:DF:EF:8E:F0:5B:D7:3E:8C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:56:9a:3f:5f:2d:1b:47:dc:ba:7f:ee:5d:f1:56:2a:c2:e1: eb:35:33:13:a3:fc:19:8c:2d:33:83:08:02:b4:4c:fe:b6:9c: 2e:6a:a2:df:3b:0c:2d:d3:a3:db:28:0c:d3:fe:03:06:5c:85: 04:71:76:16:8f:fa:13:8b:d4:c4:0d:15:70:27:d8:1e:5e:d7: 19:17:20:7c:b0:eb:1a:41:e7:a5:61:5a:87:7e:0c:33:69:c1: df:65:47:e0:28:6a:db:63:85:b8:75:0a:d3:48:8e:03:98:48: a8:ce:5c:b6:fa:81:9b:e2:01:d0:41:da:26:38:fe:84:15:98: e7:8d:69:8b:95:c9:dc:61:bb:43:ce:86:5a:fc:e3:a4:d6:6c: 4c:13:ef:ad:0b:be:d1:47:97:45:da:4b:61:88:f6:74:f1:67: 06:0f:fe:b8:e9:40:c6:ad:2e:87:c8:f6:97:41:d6:11:e0:2c: 67:aa:9f:2d:05:b2:89:f1:04:6b:dc:1b:ba:5e:6d:82:d6:c3: 6d:c9:a1:31:5c:88:ba:02:56:dc:5b:35:cb:57:30:b0:7c:60: ee:e9:06:a6:54:77:63:b4:5b:3d:2c:06:d0:95:6e:0a:37:b0: ad:73:a1:4f:67:3f:57:8a:45:04:95:fd:ed:3c:94:7a:2a:cc: 8d:56:da:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHd1JGUf7nAr+vJmEDqmvqw/sbiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAyNTUxNTZFMTA0RDY2MUYyNTEzNERGRUY4RUYwNUJE NzNFOEMwNDAeFw0yNjA5MjMxNzA3MTRaFw0yNjA5MjQyMDMyMTRaMDMxMTAvBgNV BAMTKDJGQUIxQTJFNzEwOUNCMjg2NkQyQjJBQkU3MzNGRUJFQjFCRjY4NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEXVWPWBwTpu7d/eDB9BRmFR8n MrLkToBkHLTgK3Rh+NVcq7URruEjWuYfhts9Y/v0uP2+pCaR4qMZOY3iF4ExyJv4 AVBIfllplFDT+aqm1DoBsCACab5inyKZRYR8bevPB3/077xXXAy3Ehe2SHHugx37 5YOs7DCh+kZvEicHAzKN59bm21/YAROoIFESDbFeEzIGQ+ixGyaOhJ5fWPzuEEi+ FfT9CoAL7hydvNAsqC2+719ODsOTOWCLfp8FfaO2mtpCGgZM8T4cTFRRsc7VH//4 WrelJySr1egFBjwQMwQn7stfUT1Dhj64260rbDVbtuSsNlnolGu4ZCbzE84LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL6saLnEJyyhm0rKr5zP+vrG/aGgwHwYDVR0j BBgwFoAUoCVRVuEE1mHyUTTf747wW9c+jAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NiZmIyMjgtZmQwNS00YWZkLTg3YmQtZWQ1ODBiNTUwMzZmLzAvQTAyNTUxNTZF MTA0RDY2MUYyNTEzNERGRUY4RUYwNUJENzNFOEMwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDI1NTE1NkUxMDRENjYxRjI1MTM0REZFRjhFRjA1QkQ3M0U4 QzA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NiZmIyMjgtZmQwNS00YWZkLTg3 YmQtZWQ1ODBiNTUwMzZmLzAvQTAyNTUxNTZFMTA0RDY2MUYyNTEzNERGRUY4RUYw NUJENzNFOEMwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhWmj9fLRtH3Lp/7l3xVirC4es1MxOj/BmM LTODCAK0TP62nC5qot87DC3To9soDNP+AwZchQRxdhaP+hOL1MQNFXAn2B5e1xkX IHyw6xpB56VhWod+DDNpwd9lR+Aoattjhbh1CtNIjgOYSKjOXLb6gZviAdBB2iY4 /oQVmOeNaYuVydxhu0POhlr846TWbEwT760LvtFHl0XaS2GI9nTxZwYP/rjpQMat LofI9pdB1hHgLGeqny0FsonxBGvcG7pebYLWw23JoTFciLoCVtxbNctXMLB8YO7p BqZUd2O0Wz0sBtCVbgo3sK1zoU9nP1eKRQSV/e08lHoqzI1W2pY= -----END CERTIFICATE-----Generated at Thu Sep 24 11:10:57 2026 by rpki-client