$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft File: A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft (raw, json) Hash identifier: tbZxEBVnjwO5q0K2vM252wtM9PxDA28NUjs0bjoTMAE= Subject key identifier: F5:21:76:68:26:F3:8B:34:B9:D5:B9:1A:AE:49:B9:71:32:16:35:AD Authority key identifier: A8:31:4E:43:A1:B6:F8:AF:DA:8D:95:E8:77:9C:65:41:69:11:D3:10 Certificate issuer: /CN=A8314E43A1B6F8AFDA8D95E8779C65416911D310 Certificate serial: 41B65C19A07E10F0FF0ADF82BD675B7D8BC72486 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 16:46:30 +0000 Manifest this update: Thu 24 Sep 2026 16:41:30 +0000 Manifest next update: Fri 25 Sep 2026 17:29:30 +0000 Files and hashes: 1: A8314E43A1B6F8AFDA8D95E8779C65416911D310.crl (hash: bQexcT4HVG/6+GqWsTQP9oyboRjFTdfhwP2DFqJHtxQ=) 2: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (hash: rj0eAc/Fx3ZnJOzSIDlZ7SEqTTGwaOV3Drw183dIjT4=) 3: 3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa (hash: GuNiUOOoy6zPyANA8gj8CAZ6aJ70gefpTuHjvXAYLoc=) 4: 3130332e3131312e3231392e302f32342d3234203d3e20313337333233.roa (hash: 9Ri7gQA5FImbPHcWZvwCuT4KIhatc00BK6BTGVhP2a0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.crl rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b6:5c:19:a0:7e:10:f0:ff:0a:df:82:bd:67:5b:7d:8b:c7:24:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8314E43A1B6F8AFDA8D95E8779C65416911D310 Validity Not Before: Sep 24 16:41:30 2026 GMT Not After : Sep 25 17:29:30 2026 GMT Subject: CN=F521766826F38B34B9D5B91AAE49B971321635AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f6:1a:3c:68:bf:06:bc:0e:0f:82:c4:f0:bf: b8:14:ac:1f:06:59:08:5a:5e:7a:fd:3f:82:7d:ef: 8f:d1:82:cc:c7:23:33:6b:92:6a:0d:db:85:ac:f4: c0:63:80:2f:20:0f:fe:8f:e9:35:be:b5:cf:a6:ce: 38:5f:6a:13:c7:08:0d:6c:77:a0:ea:3a:31:4c:08: 45:7f:24:4e:ac:5b:04:51:d2:33:10:f4:05:82:2d: 6c:31:d2:cd:8b:ec:a0:ba:3e:cd:6c:c7:9b:a3:fa: 83:ba:b5:36:6a:5f:dd:97:ab:69:f8:75:1d:b3:0d: 90:ac:6d:f1:34:fd:23:52:a1:18:33:b1:45:3e:b4: 76:85:d0:44:11:75:4d:94:6f:3d:f8:06:af:f0:e3: df:27:56:22:c6:28:b7:27:05:c6:d3:b8:fd:62:24: f6:da:84:47:34:f9:c7:cc:94:1c:29:56:75:b8:ee: dd:13:00:ff:4f:5e:f4:15:56:ff:10:cd:f5:30:51: 0f:6b:13:38:97:0d:e9:fc:43:3d:4a:16:d9:61:30: e7:e4:85:49:d3:40:6d:5a:61:7b:de:d4:83:93:52: fc:5c:6b:99:87:18:ae:72:47:76:90:f3:42:62:77: fa:13:3c:51:06:3a:c7:ed:dd:6c:df:eb:b3:46:70: 01:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:21:76:68:26:F3:8B:34:B9:D5:B9:1A:AE:49:B9:71:32:16:35:AD X509v3 Authority Key Identifier: keyid:A8:31:4E:43:A1:B6:F8:AF:DA:8D:95:E8:77:9C:65:41:69:11:D3:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:64:08:9a:3e:51:4a:7c:62:1a:13:d4:c8:49:5c:55:07:d8: e6:29:03:48:59:2a:c5:c4:d9:50:60:92:fd:cd:4b:03:11:d5: 9e:75:bb:15:fe:6b:15:28:d1:75:c1:ae:dd:e4:0d:f2:2e:a5: 40:ed:3d:f5:83:93:6d:00:e1:54:b8:a1:6e:95:c9:43:4a:89: 67:17:3a:6b:14:34:fe:0a:ca:3f:b3:30:cd:cc:fc:67:ae:a4: b6:79:cb:55:cb:5d:32:22:43:04:44:7e:c0:6e:16:c4:6d:1e: 57:8a:80:63:13:39:df:8c:1a:43:17:a4:57:ec:df:c8:c7:d2: f0:48:1a:8f:84:d7:cd:70:02:00:5a:cc:33:e3:37:09:6b:f6: 75:f5:47:a2:b6:2e:8e:e0:4f:8e:ca:15:c8:b8:03:ed:d3:2f: 2c:d2:c3:41:14:a9:3e:98:bc:ae:ab:2b:39:4c:9e:87:15:c1: 0f:58:cc:77:a7:92:f4:e3:c5:e0:ec:43:35:86:90:dc:79:b0: f5:62:2c:83:27:9b:ca:c1:6b:5e:2e:01:c3:ee:19:8d:c7:bf: d9:1d:c0:25:36:89:28:c0:1b:66:f6:f8:24:ef:b2:66:3d:43: be:7d:00:df:f2:d6:09:90:fc:fc:d2:11:a7:5a:6e:56:3f:bc: f2:27:80:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQbZcGaB+EPD/Ct+CvWdbfYvHJIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgzMTRFNDNBMUI2RjhBRkRBOEQ5NUU4Nzc5QzY1NDE2 OTExRDMxMDAeFw0yNjA5MjQxNjQxMzBaFw0yNjA5MjUxNzI5MzBaMDMxMTAvBgNV BAMTKEY1MjE3NjY4MjZGMzhCMzRCOUQ1QjkxQUFFNDlCOTcxMzIxNjM1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR9ho8aL8GvA4PgsTwv7gUrB8G WQhaXnr9P4J974/RgszHIzNrkmoN24Ws9MBjgC8gD/6P6TW+tc+mzjhfahPHCA1s d6DqOjFMCEV/JE6sWwRR0jMQ9AWCLWwx0s2L7KC6Ps1sx5uj+oO6tTZqX92Xq2n4 dR2zDZCsbfE0/SNSoRgzsUU+tHaF0EQRdU2Ubz34Bq/w498nViLGKLcnBcbTuP1i JPbahEc0+cfMlBwpVnW47t0TAP9PXvQVVv8QzfUwUQ9rEziXDen8Qz1KFtlhMOfk hUnTQG1aYXve1IOTUvxca5mHGK5yR3aQ80Jid/oTPFEGOsft3Wzf67NGcAGrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9SF2aCbzizS51bkarkm5cTIWNa0wHwYDVR0j BBgwFoAUqDFOQ6G2+K/ajZXod5xlQWkR0xAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTFhZjE0NGItYjkyZS00ZmZmLWI2NDEtZTQ2ZmRkZThjNmRmLzAvQTgzMTRFNDNB MUI2RjhBRkRBOEQ5NUU4Nzc5QzY1NDE2OTExRDMxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODMxNEU0M0ExQjZGOEFGREE4RDk1RTg3NzlDNjU0MTY5MTFE MzEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTFhZjE0NGItYjkyZS00ZmZmLWI2 NDEtZTQ2ZmRkZThjNmRmLzAvQTgzMTRFNDNBMUI2RjhBRkRBOEQ5NUU4Nzc5QzY1 NDE2OTExRDMxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANkCJo+UUp8YhoT1MhJXFUH2OYpA0hZKsXE 2VBgkv3NSwMR1Z51uxX+axUo0XXBrt3kDfIupUDtPfWDk20A4VS4oW6VyUNKiWcX OmsUNP4Kyj+zMM3M/GeupLZ5y1XLXTIiQwREfsBuFsRtHleKgGMTOd+MGkMXpFfs 38jH0vBIGo+E181wAgBazDPjNwlr9nX1R6K2Lo7gT47KFci4A+3TLyzSw0EUqT6Y vK6rKzlMnocVwQ9YzHenkvTjxeDsQzWGkNx5sPViLIMnm8rBa14uAcPuGY3Hv9kd wCU2iSjAG2b2+CTvsmY9Q759AN/y1gmQ/PzSEadablY/vPIngC4= -----END CERTIFICATE-----Generated at Fri Sep 25 03:59:57 2026 by rpki-client