$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft File: A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft (raw, json) Hash identifier: rYwOIZnrTTy2g4UjoV//3wTpwsENMFEe/b60HnZm5JM= Subject key identifier: 3E:BD:C3:5A:86:59:4F:C3:9C:1F:9B:0E:5F:91:67:C9:AC:0D:D1:09 Authority key identifier: A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE Certificate issuer: /CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE Certificate serial: 417657C96084A5C1BE37A190197433E7C5316683 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft Manifest number: BC Signing time: Sun 20 Sep 2026 10:09:40 +0000 Manifest this update: Sun 20 Sep 2026 10:04:40 +0000 Manifest next update: Mon 21 Sep 2026 11:17:40 +0000 Files and hashes: 1: 3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (hash: XjEh4h/m9O4zav0oJbGUt3KwmUOKS7DwqIAy5aQ35aY=) 2: 3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (hash: ICLSFvgSRRkmlVey9F0aZzpRAm3MpVToF57RNv3826o=) 3: A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl (hash: JeCMxNgMV7RoZwGJuLGt9bhhEhHZGuyS/iA115rCDOQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 11:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:76:57:c9:60:84:a5:c1:be:37:a1:90:19:74:33:e7:c5:31:66:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE Validity Not Before: Sep 20 10:04:40 2026 GMT Not After : Sep 21 11:17:40 2026 GMT Subject: CN=3EBDC35A86594FC39C1F9B0E5F9167C9AC0DD109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:d3:3e:19:20:2e:b2:0e:13:dc:c7:00:8f: db:19:ea:91:49:b6:5c:51:98:f9:c7:9d:16:43:9f: a8:40:ca:41:58:b7:47:38:34:b2:2e:00:eb:c6:1a: 2c:9b:3e:1a:2b:4e:79:f6:22:7c:a5:7b:2c:35:38: c1:05:33:61:d7:f2:73:18:41:10:d5:52:f3:4e:c2: 8b:1d:76:af:c1:2e:b5:73:b3:53:ab:8d:69:ee:96: 00:9e:ce:5e:7d:22:e1:83:ad:08:24:a6:0c:ff:8e: 42:32:65:65:04:1f:5a:b3:cd:fd:46:a0:17:f5:1e: 9f:ed:16:b5:e8:10:80:27:34:87:5f:46:fd:2e:1c: a9:b3:c1:57:f6:c3:c3:9f:a6:e3:dc:02:26:61:b2: a4:c5:55:11:77:c2:50:98:c0:2c:c9:f3:10:41:4b: 22:0f:1c:41:7f:9a:a5:f6:2e:ed:86:25:c5:36:15: 12:d3:cb:c5:90:43:dd:2d:6e:92:d8:53:b5:7f:6b: 72:57:34:49:1d:45:a8:ab:6a:0b:ac:30:85:f4:62: 30:c4:1e:ce:45:56:f5:5c:b7:49:12:5b:86:64:0a: 21:be:e3:59:b3:50:b3:6b:5e:9f:c5:f4:11:c2:96: e3:d3:59:2f:34:40:4b:e5:48:ec:82:da:16:77:f2: da:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BD:C3:5A:86:59:4F:C3:9C:1F:9B:0E:5F:91:67:C9:AC:0D:D1:09 X509v3 Authority Key Identifier: keyid:A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e1:4a:65:d2:f7:cd:da:6a:c0:b1:ac:d8:1a:63:25:41:0a: b4:c2:7f:6c:ab:d1:c1:5f:c3:7f:28:62:46:b5:89:7e:3b:b0: c2:5c:8d:6d:00:3e:0e:58:c7:ad:11:a2:52:08:05:b4:76:b9: 54:51:04:9f:fa:a0:69:71:bf:33:94:5c:2b:10:01:b9:06:a9: 8a:92:0f:00:c1:eb:68:09:c4:de:be:5c:42:f0:0c:4c:3d:80: 8c:4e:1e:6e:26:34:2e:9d:af:a8:d0:d9:44:a1:79:27:d0:32: d4:43:6c:40:ab:16:e1:52:02:8f:47:32:4c:68:23:c1:63:8b: 43:81:0a:5e:ce:49:22:0a:cb:5f:ae:fb:1a:e5:11:ef:a8:60: 52:f5:b3:20:e2:da:cd:24:1a:e1:8f:f1:2e:9e:d9:4b:50:23: 96:41:0c:af:3d:e9:49:c4:2d:61:74:4f:3c:45:64:f6:b4:77: 3c:ce:db:bc:b6:f0:e9:b9:22:cb:80:86:84:f5:1f:3c:89:63: b6:75:6d:0d:32:c9:c3:49:3d:de:46:45:74:6b:1a:05:82:28: d4:bb:8a:b1:29:1b:c6:a1:c5:af:9d:3e:1b:67:0c:90:31:b4: 87:0d:75:02:10:1d:39:8c:c2:d6:dc:45:53:4e:cb:2a:18:b0: 30:f6:46:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQXZXyWCEpcG+N6GQGXQz58UxZoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFOTdDOERDNTNFRDRCOTRGMDYyMDdEQUUyQjNCMjFC QTA4RDNGRTAeFw0yNjA5MjAxMDA0NDBaFw0yNjA5MjExMTE3NDBaMDMxMTAvBgNV BAMTKDNFQkRDMzVBODY1OTRGQzM5QzFGOUIwRTVGOTE2N0M5QUMwREQxMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPAtM+GSAusg4T3McAj9sZ6pFJ tlxRmPnHnRZDn6hAykFYt0c4NLIuAOvGGiybPhorTnn2Inyleyw1OMEFM2HX8nMY QRDVUvNOwosddq/BLrVzs1OrjWnulgCezl59IuGDrQgkpgz/jkIyZWUEH1qzzf1G oBf1Hp/tFrXoEIAnNIdfRv0uHKmzwVf2w8OfpuPcAiZhsqTFVRF3wlCYwCzJ8xBB SyIPHEF/mqX2Lu2GJcU2FRLTy8WQQ90tbpLYU7V/a3JXNEkdRairagusMIX0YjDE Hs5FVvVct0kSW4ZkCiG+41mzULNrXp/F9BHCluPTWS80QEvlSOyC2hZ38tovAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPr3DWoZZT8OcH5sOX5FnyawN0QkwHwYDVR0j BBgwFoAUoel8jcU+1LlPBiB9ris7IboI0/4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA1MGRjYzMtODRkZC00NTk1LWJhMmMtYmM2OTk4OTY5MmYxLzAvQTFFOTdDOERD NTNFRDRCOTRGMDYyMDdEQUUyQjNCMjFCQTA4RDNGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUU5N0M4REM1M0VENEI5NEYwNjIwN0RBRTJCM0IyMUJBMDhE M0ZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvQTFFOTdDOERDNTNFRDRCOTRGMDYyMDdEQUUyQjNC MjFCQTA4RDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvhSmXS983aasCxrNgaYyVBCrTCf2yr0cFf w38oYka1iX47sMJcjW0APg5Yx60RolIIBbR2uVRRBJ/6oGlxvzOUXCsQAbkGqYqS DwDB62gJxN6+XELwDEw9gIxOHm4mNC6dr6jQ2USheSfQMtRDbECrFuFSAo9HMkxo I8Fji0OBCl7OSSIKy1+u+xrlEe+oYFL1syDi2s0kGuGP8S6e2UtQI5ZBDK896UnE LWF0TzxFZPa0dzzO27y28Om5IsuAhoT1HzyJY7Z1bQ0yycNJPd5GRXRrGgWCKNS7 irEpG8ahxa+dPhtnDJAxtIcNdQIQHTmMwtbcRVNOyyoYsDD2RmU= -----END CERTIFICATE-----Generated at Mon Sep 21 03:25:39 2026 by rpki-client