$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft File: A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft (raw, json) Hash identifier: 8jDGZLoXVWEen/tWUyCTYPOJqcHMgJYx3rJvCU0vOnY= Subject key identifier: 99:CC:0D:83:86:CD:B8:DF:01:48:21:0D:66:EE:80:C8:22:CC:37:E6 Authority key identifier: A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF Certificate issuer: /CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Certificate serial: 6946EDD784AFD56AF4B018EF60DDEF941E136DEA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 14:34:36 +0000 Manifest this update: Mon 21 Sep 2026 14:29:36 +0000 Manifest next update: Tue 22 Sep 2026 16:51:36 +0000 Files and hashes: 1: 3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa (hash: /KfC4nr32tMCkBy7+tyxmf0Ms+3hn6LQNee4YzYVhVM=) 2: A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl (hash: 0Z1pJSVir4Nw9wbXtpzRlqhPmzcH34iWpAnJHGLgfsE=) 3: 3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (hash: h1TE3m56WQ+gTVyqOOSf1UTeQzb1azE9LGSpzK549vA=) 4: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (hash: pahHbmXTulV++MGHGhEL8jSNz3xJ/1KdhQdlxBhfIw4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 16:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:46:ed:d7:84:af:d5:6a:f4:b0:18:ef:60:dd:ef:94:1e:13:6d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Validity Not Before: Sep 21 14:29:36 2026 GMT Not After : Sep 22 16:51:36 2026 GMT Subject: CN=99CC0D8386CDB8DF0148210D66EE80C822CC37E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:09:aa:8e:47:12:96:fd:b2:c6:65:84:04:c9: 8e:25:5a:3f:db:db:f2:8d:88:a3:25:9b:42:f1:b0: 0d:82:bd:a1:cd:1a:50:d9:c0:e8:ed:95:fd:c4:b7: c3:00:9f:7c:69:53:16:e8:59:3c:92:65:21:10:a2: 82:aa:7e:85:9e:0b:e8:0c:7f:35:73:a1:2d:a6:05: 3e:b6:4f:6a:32:4c:8d:3f:69:ae:8c:bc:56:b1:be: 50:c1:fc:b2:09:b0:27:ce:ac:69:13:86:9b:cd:83: 77:98:b5:02:f8:4b:3e:9f:9f:b7:cd:70:6e:04:b3: 53:d5:7d:c8:98:ba:60:9e:30:ef:39:37:39:80:bc: fa:08:dc:25:16:bc:c6:98:4a:30:d4:92:8c:a6:ce: be:33:0f:00:2b:21:ae:e1:60:62:cb:f3:db:21:f1: 1c:bf:20:4d:65:ea:40:bf:54:06:ef:48:16:b7:8e: df:18:af:b9:a8:55:24:69:53:b9:d8:5c:95:23:a6: 6b:cc:1f:1a:50:2e:34:36:6f:3c:f4:94:19:09:af: 42:e6:34:44:1d:1d:36:a9:f6:46:43:bd:51:ea:16: 57:34:03:bd:fc:17:72:51:6a:60:37:ef:b6:43:a5: b7:ec:8d:a7:b1:46:83:41:65:d3:5d:f9:02:7d:bb: 1e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CC:0D:83:86:CD:B8:DF:01:48:21:0D:66:EE:80:C8:22:CC:37:E6 X509v3 Authority Key Identifier: keyid:A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:46:ab:9e:d8:ed:9b:98:07:17:05:92:69:84:58:54:0b:c7: f0:88:8c:e2:bf:7c:69:70:23:e6:de:38:f0:b5:84:f4:f9:e3: 78:71:6a:61:59:e6:79:7a:68:16:e1:3e:a4:0b:98:be:09:f7: 0a:66:59:87:29:3a:df:89:02:bb:93:56:27:ca:db:87:85:14: aa:c5:c5:73:41:7a:ab:20:5f:d3:c7:76:b0:ac:1b:99:c3:e2: 2c:99:80:a3:65:a8:28:46:bb:00:4b:fc:eb:88:71:8e:e9:dd: 96:3e:4f:13:dd:9b:ba:a5:88:9d:c6:5f:71:e5:a1:0b:61:52: e8:9e:d1:e1:e3:6d:fb:48:0d:9e:ad:38:92:d6:30:0e:23:ee: d0:00:6a:a4:2e:be:3e:eb:b4:c0:36:b0:c7:5e:e5:31:89:df: 92:c0:76:b4:63:d6:29:6e:65:e6:cf:6c:57:e0:0f:16:6d:ae: 44:79:23:72:cb:85:2c:e8:58:4c:d9:a3:1b:bd:87:7d:b2:d9: 64:25:eb:e0:fc:c3:32:0e:74:46:4f:00:ad:f7:cd:5c:62:e4: 2a:b0:4f:1e:c3:ed:0f:5e:8d:46:41:6a:77:c5:b2:4d:f9:c6: cc:39:10:a6:b5:60:57:2d:4f:1a:6d:ec:92:43:d9:a6:4e:c9: 58:2c:35:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaUbt14Sv1Wr0sBjvYN3vlB4TbeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFFREYx MUQ0NzhDRjAeFw0yNjA5MjExNDI5MzZaFw0yNjA5MjIxNjUxMzZaMDMxMTAvBgNV BAMTKDk5Q0MwRDgzODZDREI4REYwMTQ4MjEwRDY2RUU4MEM4MjJDQzM3RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3CaqORxKW/bLGZYQEyY4lWj/b 2/KNiKMlm0LxsA2CvaHNGlDZwOjtlf3Et8MAn3xpUxboWTySZSEQooKqfoWeC+gM fzVzoS2mBT62T2oyTI0/aa6MvFaxvlDB/LIJsCfOrGkThpvNg3eYtQL4Sz6fn7fN cG4Es1PVfciYumCeMO85NzmAvPoI3CUWvMaYSjDUkoymzr4zDwArIa7hYGLL89sh 8Ry/IE1l6kC/VAbvSBa3jt8Yr7moVSRpU7nYXJUjpmvMHxpQLjQ2bzz0lBkJr0Lm NEQdHTap9kZDvVHqFlc0A738F3JRamA377ZDpbfsjaexRoNBZdNd+QJ9ux71AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmcwNg4bNuN8BSCENZu6AyCLMN+YwHwYDVR0j BBgwFoAUqLQpDbHVABFykYWNrxse3xHUeM8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGMxZTQ5YWItNTBjYS00YjNlLTgyM2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERC MUQ1MDAxMTcyOTE4NThEQUYxQjFFREYxMUQ0NzhDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEI0MjkwREIxRDUwMDExNzI5MTg1OERBRjFCMUVERjExRDQ3 OENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGMxZTQ5YWItNTBjYS00YjNlLTgy M2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFF REYxMUQ0NzhDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpGq57Y7ZuYBxcFkmmEWFQLx/CIjOK/fGlw I+beOPC1hPT543hxamFZ5nl6aBbhPqQLmL4J9wpmWYcpOt+JAruTVifK24eFFKrF xXNBeqsgX9PHdrCsG5nD4iyZgKNlqChGuwBL/OuIcY7p3ZY+TxPdm7qliJ3GX3Hl oQthUuie0eHjbftIDZ6tOJLWMA4j7tAAaqQuvj7rtMA2sMde5TGJ35LAdrRj1ilu ZebPbFfgDxZtrkR5I3LLhSzoWEzZoxu9h32y2WQl6+D8wzIOdEZPAK33zVxi5Cqw Tx7D7Q9ejUZBanfFsk35xsw5EKa1YFctTxpt7JJD2aZOyVgsNW0= -----END CERTIFICATE-----Generated at Tue Sep 22 02:11:58 2026 by rpki-client