$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft File: A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft (raw, json) Hash identifier: XE+lC5oMGVsZLdnzkb8JwK3mMud85DN3ZvXHrDwv2lM= Subject key identifier: DE:3A:6B:51:FC:A4:29:FE:32:26:7C:FC:D4:B3:9C:22:2C:13:3F:1A Authority key identifier: A2:76:B0:8D:AE:7F:A2:5D:E1:A0:3F:B7:12:F5:78:21:EA:FE:F1:20 Certificate issuer: /CN=A276B08DAE7FA25DE1A03FB712F57821EAFEF120 Certificate serial: 6AC5B1750370EB25E3C0C203250771AF98C4665A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 02:23:37 +0000 Manifest this update: Thu 24 Sep 2026 02:18:37 +0000 Manifest next update: Fri 25 Sep 2026 02:41:37 +0000 Files and hashes: 1: A276B08DAE7FA25DE1A03FB712F57821EAFEF120.crl (hash: nM32qjDqEaasIgmVm7Sl5FvxZkw0b45kB4FAHcVWUaU=) 2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: 3r/oL3v96CsKMiLkeLyMHXAfkZUhV+Od6ORlJoNOIZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.crl rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:41:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c5:b1:75:03:70:eb:25:e3:c0:c2:03:25:07:71:af:98:c4:66:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A276B08DAE7FA25DE1A03FB712F57821EAFEF120 Validity Not Before: Sep 24 02:18:37 2026 GMT Not After : Sep 25 02:41:37 2026 GMT Subject: CN=DE3A6B51FCA429FE32267CFCD4B39C222C133F1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e5:05:f5:fa:99:2b:29:c3:e2:8c:e5:af:15: 4a:d1:0e:7e:74:29:d9:ab:55:09:46:26:b3:aa:f7: 9f:6a:4f:2c:b1:84:0e:e9:6b:71:aa:66:12:ea:bb: dc:df:5e:c3:a3:5e:5f:c7:98:3c:e7:46:6c:7e:b1: 55:0e:e3:df:b0:cd:8f:d7:b7:31:1d:d8:7a:46:4c: bb:67:f0:db:a0:ba:66:9f:7d:b2:aa:73:19:ae:64: b8:50:1b:f4:ce:5e:39:3e:48:0a:a9:cf:21:db:11: e6:16:86:3e:92:b2:78:70:26:c8:47:2d:ee:75:0a: 5a:67:89:9e:e0:b9:ff:8b:ed:17:51:6c:7f:e8:0d: 9e:f9:bd:02:3b:0a:73:03:0f:e0:26:bc:8c:35:0d: 8a:be:43:98:d5:d7:72:fd:c2:c0:3f:23:c9:4c:8f: 26:00:04:46:54:5b:0e:12:ac:2f:37:c8:f9:eb:3e: c0:af:d9:9d:64:27:f9:b1:bd:55:35:5a:b6:43:be: 20:d1:0c:17:db:56:c8:3f:8e:88:fc:55:68:36:e5: 8a:5e:07:d3:e3:41:c7:17:f6:aa:a4:22:2d:51:7e: 6e:73:22:ed:a2:8f:92:fa:47:7c:9e:ba:5c:dd:a8: 35:1c:cc:d1:07:71:c9:1e:4b:ad:b9:3f:dd:5b:31: 85:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3A:6B:51:FC:A4:29:FE:32:26:7C:FC:D4:B3:9C:22:2C:13:3F:1A X509v3 Authority Key Identifier: keyid:A2:76:B0:8D:AE:7F:A2:5D:E1:A0:3F:B7:12:F5:78:21:EA:FE:F1:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:aa:4a:a4:5c:df:48:40:54:38:91:e5:fd:a5:84:b6:43:aa: cd:26:48:92:35:35:25:84:b4:73:b7:2e:c5:43:3a:e7:24:a9: 3e:c6:14:9a:14:93:28:67:0a:cf:2c:44:00:3d:98:a9:b8:01: fa:37:1a:df:60:ff:d8:34:0b:40:07:ed:15:f6:54:18:49:f7: c2:68:b0:19:a3:9d:51:37:f5:6d:90:68:1b:c1:25:82:9b:5c: a0:75:ba:9d:d6:07:84:0c:77:90:22:58:dc:c6:d3:ef:56:20: 6f:ce:76:68:41:9b:6d:2b:fa:3b:46:12:c5:34:e3:9a:d4:36: d4:03:d4:3d:8a:39:fd:c9:f6:1b:28:03:11:8b:98:e7:95:2a: 55:e6:e2:2b:11:02:75:57:1c:57:7e:02:12:16:19:48:59:e8: 32:e2:b0:e8:89:72:39:66:f5:35:81:ec:e7:09:3c:d2:1a:b4: c9:79:fa:ec:12:03:02:0c:18:1e:9b:a3:e5:4b:f0:7c:b3:55: d7:9c:b5:6e:7e:55:ff:0f:ac:24:99:6d:b9:68:c0:d7:90:af: e7:b4:ff:30:65:fb:1f:a5:eb:85:95:1f:b7:66:1c:44:ae:dc: 76:0c:00:f5:d4:44:8f:1c:22:0b:61:e8:aa:01:d6:83:22:f2: e6:26:10:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUasWxdQNw6yXjwMIDJQdxr5jEZlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI3NkIwOERBRTdGQTI1REUxQTAzRkI3MTJGNTc4MjFF QUZFRjEyMDAeFw0yNjA5MjQwMjE4MzdaFw0yNjA5MjUwMjQxMzdaMDMxMTAvBgNV BAMTKERFM0E2QjUxRkNBNDI5RkUzMjI2N0NGQ0Q0QjM5QzIyMkMxMzNGMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb5QX1+pkrKcPijOWvFUrRDn50 KdmrVQlGJrOq959qTyyxhA7pa3GqZhLqu9zfXsOjXl/HmDznRmx+sVUO49+wzY/X tzEd2HpGTLtn8NugumaffbKqcxmuZLhQG/TOXjk+SAqpzyHbEeYWhj6SsnhwJshH Le51ClpniZ7guf+L7RdRbH/oDZ75vQI7CnMDD+AmvIw1DYq+Q5jV13L9wsA/I8lM jyYABEZUWw4SrC83yPnrPsCv2Z1kJ/mxvVU1WrZDviDRDBfbVsg/joj8VWg25Ype B9PjQccX9qqkIi1Rfm5zIu2ij5L6R3yeulzdqDUczNEHcckeS625P91bMYW5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3jprUfykKf4yJnz81LOcIiwTPxowHwYDVR0j BBgwFoAUonawja5/ol3hoD+3EvV4Ier+8SAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGZhODFlNmUtNGIxNi00YjYyLThmMTgtNTI4OTJlNTRiOTBkLzAvQTI3NkIwOERB RTdGQTI1REUxQTAzRkI3MTJGNTc4MjFFQUZFRjEyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMjc2QjA4REFFN0ZBMjVERTFBMDNGQjcxMkY1NzgyMUVBRkVG MTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZhODFlNmUtNGIxNi00YjYyLThm MTgtNTI4OTJlNTRiOTBkLzAvQTI3NkIwOERBRTdGQTI1REUxQTAzRkI3MTJGNTc4 MjFFQUZFRjEyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaqSqRc30hAVDiR5f2lhLZDqs0mSJI1NSWE tHO3LsVDOuckqT7GFJoUkyhnCs8sRAA9mKm4Afo3Gt9g/9g0C0AH7RX2VBhJ98Jo sBmjnVE39W2QaBvBJYKbXKB1up3WB4QMd5AiWNzG0+9WIG/OdmhBm20r+jtGEsU0 45rUNtQD1D2KOf3J9hsoAxGLmOeVKlXm4isRAnVXHFd+AhIWGUhZ6DLisOiJcjlm 9TWB7OcJPNIatMl5+uwSAwIMGB6bo+VL8HyzVdectW5+Vf8PrCSZbblowNeQr+e0 /zBl+x+l64WVH7dmHESu3HYMAPXURI8cIgth6KoB1oMi8uYmECs= -----END CERTIFICATE-----Generated at Thu Sep 24 11:10:37 2026 by rpki-client