$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft File: A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft (raw, json) Hash identifier: dMZuJQXGk/zV3cYo2cB7/wkpoVa2XZlo4iGOBSXrB1M= Subject key identifier: 1C:7F:90:9D:A1:42:62:9E:6D:98:13:1A:74:96:F9:47:DF:B3:9B:5D Authority key identifier: A8:B7:FD:04:F9:C2:A7:D6:EF:8E:53:27:92:F9:C8:03:D1:2F:A1:AA Certificate issuer: /CN=A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA Certificate serial: 7ABF67AE2463A3474E0AA989C09EEEDC31B55A54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 00:47:08 +0000 Manifest this update: Wed 23 Sep 2026 00:42:08 +0000 Manifest next update: Thu 24 Sep 2026 01:13:08 +0000 Files and hashes: 1: A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.crl (hash: z0h0L6tkRMrrXJsimPv3CB94K30pnkb5dB4Zm9kA3EM=) 2: 3130332e3138362e3230342e302f32342d3234203d3e20313439373233.roa (hash: 6SPqfWofEqX1QD5UAEMH2hqU1phhUwtiErMkzEVth0s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.crl rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 01:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:bf:67:ae:24:63:a3:47:4e:0a:a9:89:c0:9e:ee:dc:31:b5:5a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA Validity Not Before: Sep 23 00:42:08 2026 GMT Not After : Sep 24 01:13:08 2026 GMT Subject: CN=1C7F909DA142629E6D98131A7496F947DFB39B5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:71:df:c6:52:8d:d3:20:e5:11:40:66:2e: e8:2a:ec:11:e2:4f:cc:2b:2d:31:ff:6b:cb:2f:f5: 08:26:1d:3f:6a:59:20:71:0d:ae:db:91:6e:19:b1: 2f:20:cc:f5:f8:3d:15:31:56:70:9b:22:6d:06:70: 84:97:41:ed:67:33:85:32:25:ce:b0:86:f7:9f:6e: 93:4f:77:47:3d:0f:90:f1:63:e3:69:e2:e2:71:33: 9e:6d:10:5d:dc:e9:df:80:26:24:85:77:63:66:be: be:12:b3:e6:d3:76:d7:22:e5:5c:56:a6:a8:bd:76: 89:08:26:17:4c:ae:9a:42:bf:3b:a0:cb:32:ec:70: 03:24:5c:c6:fe:3f:5c:63:56:d8:aa:df:c8:17:17: e4:e1:3b:e9:2d:b4:ac:40:78:6a:b9:0b:a7:24:31: e7:e9:59:47:5a:76:a7:40:45:3d:12:5f:d4:a6:12: 37:32:20:d5:a3:ac:00:d4:86:f6:5e:7f:16:02:15: 68:0b:2e:ff:be:d8:89:0d:6d:f3:64:bc:f2:de:aa: 31:bd:06:da:31:8b:19:fd:fc:27:a4:36:b7:e9:4c: f2:92:dd:5b:2f:b3:29:cd:ad:8a:4b:00:3a:03:62: 56:25:fe:bd:1b:88:ff:6d:7d:a6:2b:82:26:3d:e4: 6c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7F:90:9D:A1:42:62:9E:6D:98:13:1A:74:96:F9:47:DF:B3:9B:5D X509v3 Authority Key Identifier: keyid:A8:B7:FD:04:F9:C2:A7:D6:EF:8E:53:27:92:F9:C8:03:D1:2F:A1:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:42:d3:db:41:f0:80:48:8f:3b:11:71:6f:fb:1d:3c:f8:97: cb:eb:e9:9b:ff:c0:74:56:55:4f:30:7c:46:b0:54:f1:3e:47: b0:20:5c:59:32:8e:b6:cf:67:4b:05:e3:e3:b4:4c:df:34:d3: 3f:54:dc:5d:58:58:ae:a6:09:50:0d:03:3d:94:b0:36:5c:16: c0:ac:15:cf:49:0a:0e:a4:dd:27:3b:3f:77:8c:de:4a:7c:bd: b4:d8:bd:ab:8b:88:40:f0:93:a7:a2:7f:17:ba:18:d3:c0:a0: 30:55:92:54:b6:35:8e:c0:cf:db:98:24:b4:de:ff:97:ba:2d: bb:1d:bf:59:37:60:39:da:c5:c7:9f:ca:15:14:64:55:85:67: 2a:dc:66:7d:be:d6:a5:33:e6:13:6a:8c:9a:23:b6:57:72:a0: 76:f6:18:ae:7b:88:e5:e5:da:f0:6a:2e:4c:65:0f:7b:cc:2b: ae:fc:7c:ef:69:3d:4e:da:8f:87:c3:61:0b:95:ef:48:95:9c: 1d:4a:09:3e:87:45:b4:d8:53:c8:9f:14:b7:26:17:82:a3:06: 0b:ee:08:ab:71:10:a1:75:48:81:95:dc:ff:55:24:fa:12:1b: 44:4c:7c:95:0e:16:89:f7:94:0c:8f:55:37:d1:c0:c9:89:8f: 3c:6f:10:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUer9nriRjo0dOCqmJwJ7u3DG1WlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThCN0ZEMDRGOUMyQTdENkVGOEU1MzI3OTJGOUM4MDNE MTJGQTFBQTAeFw0yNjA5MjMwMDQyMDhaFw0yNjA5MjQwMTEzMDhaMDMxMTAvBgNV BAMTKDFDN0Y5MDlEQTE0MjYyOUU2RDk4MTMxQTc0OTZGOTQ3REZCMzlCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoTnHfxlKN0yDlEUBmLugq7BHi T8wrLTH/a8sv9QgmHT9qWSBxDa7bkW4ZsS8gzPX4PRUxVnCbIm0GcISXQe1nM4Uy Jc6whvefbpNPd0c9D5DxY+Np4uJxM55tEF3c6d+AJiSFd2Nmvr4Ss+bTdtci5VxW pqi9dokIJhdMrppCvzugyzLscAMkXMb+P1xjVtiq38gXF+ThO+kttKxAeGq5C6ck MefpWUdadqdART0SX9SmEjcyINWjrADUhvZefxYCFWgLLv++2IkNbfNkvPLeqjG9 Btoxixn9/CekNrfpTPKS3VsvsynNrYpLADoDYlYl/r0biP9tfaYrgiY95Gy/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHH+QnaFCYp5tmBMadJb5R9+zm10wHwYDVR0j BBgwFoAUqLf9BPnCp9bvjlMnkvnIA9EvoaowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDc2ODBkMGQtZTI0MC00YWFmLWJjMjMtMjgyMzU5MzczMjg5LzAvQThCN0ZEMDRG OUMyQTdENkVGOEU1MzI3OTJGOUM4MDNEMTJGQTFBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEI3RkQwNEY5QzJBN0Q2RUY4RTUzMjc5MkY5QzgwM0QxMkZB MUFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDc2ODBkMGQtZTI0MC00YWFmLWJj MjMtMjgyMzU5MzczMjg5LzAvQThCN0ZEMDRGOUMyQTdENkVGOEU1MzI3OTJGOUM4 MDNEMTJGQTFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlC09tB8IBIjzsRcW/7HTz4l8vr6Zv/wHRW VU8wfEawVPE+R7AgXFkyjrbPZ0sF4+O0TN800z9U3F1YWK6mCVANAz2UsDZcFsCs Fc9JCg6k3Sc7P3eM3kp8vbTYvauLiEDwk6eifxe6GNPAoDBVklS2NY7Az9uYJLTe /5e6Lbsdv1k3YDnaxcefyhUUZFWFZyrcZn2+1qUz5hNqjJojtldyoHb2GK57iOXl 2vBqLkxlD3vMK678fO9pPU7aj4fDYQuV70iVnB1KCT6HRbTYU8ifFLcmF4KjBgvu CKtxEKF1SIGV3P9VJPoSG0RMfJUOFon3lAyPVTfRwMmJjzxvEDE= -----END CERTIFICATE-----Generated at Wed Sep 23 08:40:19 2026 by rpki-client