$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft File: A65A7370A28DA71B1C11B89E09D51753C498246D.mft (raw, json) Hash identifier: 7gjFoVztLLNdMtlCMYoTb5Ck7vn5GJzaeRWU6NbeLJk= Subject key identifier: A2:A7:F0:CD:5B:2C:5C:C7:B6:D5:95:62:59:5A:3E:DD:3C:CF:7F:2A Authority key identifier: A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D Certificate issuer: /CN=A65A7370A28DA71B1C11B89E09D51753C498246D Certificate serial: 45DE72F8F2B776BFFABB805B7CD29E8B334A4D0F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft Manifest number: BF Signing time: Tue 22 Sep 2026 14:49:45 +0000 Manifest this update: Tue 22 Sep 2026 14:44:45 +0000 Manifest next update: Wed 23 Sep 2026 15:15:45 +0000 Files and hashes: 1: 3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa (hash: yLjPOFhKt4noRbzRL2MIGaluRq2L7M9f6uyh5pKU9Ec=) 2: A65A7370A28DA71B1C11B89E09D51753C498246D.crl (hash: lIoqhYUZs0Q9NAYsu8wZ9VNYFmDcJQLAn+Uem/Af4O8=) 3: 3135312e3135382e37352e302f32342d3234203d3e20313331343534.roa (hash: Ho6tdl1he9FR1/62MiqnACr306KYnR/YSxoabj/m7M4=) 4: 3135312e3135382e37342e302f32332d3233203d3e20313331343534.roa (hash: kTQiZ7hK+M7BbCy/GwseyxlIaws4BXvafRAJzzRJxhc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:de:72:f8:f2:b7:76:bf:fa:bb:80:5b:7c:d2:9e:8b:33:4a:4d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65A7370A28DA71B1C11B89E09D51753C498246D Validity Not Before: Sep 22 14:44:45 2026 GMT Not After : Sep 23 15:15:45 2026 GMT Subject: CN=A2A7F0CD5B2C5CC7B6D59562595A3EDD3CCF7F2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:16:17:43:f6:8f:c4:4b:64:96:d9:f4:c4: 74:8b:7d:8c:14:7d:84:64:94:2d:31:34:43:5c:e5: b2:97:94:e6:16:84:2b:6a:4c:d2:f8:d2:a3:fb:e7: 35:0e:48:42:7b:d2:fc:cd:7c:42:cb:4e:16:88:c8: ed:dc:6b:f2:4f:fe:b8:37:dc:76:9d:93:70:97:8e: 45:5c:55:ad:5e:e2:30:6f:fd:10:05:45:b7:31:5c: fc:31:86:fe:33:65:25:5b:b5:15:e5:0a:4c:de:1f: 7c:a7:1d:97:99:ea:63:60:b4:06:22:63:d8:d9:1c: da:52:f9:ec:a2:8b:b6:51:82:ac:98:e6:e3:12:9e: e7:ea:d5:bc:2b:c8:96:90:ec:4a:51:75:d0:15:da: fe:bf:d6:96:1e:99:ef:54:fa:36:3d:73:8f:d3:12: 40:a7:72:e1:5b:ab:e5:3d:c5:0d:33:5e:d6:1b:3e: 97:54:9e:a2:f4:17:90:98:1a:a8:84:a1:73:de:3c: 66:7b:a3:20:5e:94:13:d9:be:b0:19:6e:c1:b5:e0: 5f:81:66:ce:d6:42:be:2c:56:2f:8b:7f:9e:cc:6a: 2b:98:b0:e2:6e:ae:47:54:de:25:6f:57:bd:5c:92: 51:6c:59:c0:e5:6b:e0:bf:8b:3d:35:6c:ea:d8:32: 06:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A7:F0:CD:5B:2C:5C:C7:B6:D5:95:62:59:5A:3E:DD:3C:CF:7F:2A X509v3 Authority Key Identifier: keyid:A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2d:a5:7a:ff:b8:e8:32:af:81:17:04:c8:a1:4f:bd:92:7d: bf:a8:25:b3:99:21:fa:0f:7e:df:4a:a7:0e:16:a8:54:51:85: 9d:e9:ee:09:fc:d8:3b:49:47:85:4f:e7:54:0d:37:c6:0c:13: d3:7f:7a:eb:02:d0:f4:9c:13:6a:b0:b0:3d:e8:dd:81:82:1d: 28:9c:63:05:6c:9a:5f:97:88:69:32:00:b6:80:df:ff:13:81: b0:a6:1c:ec:8b:79:fe:ec:27:70:08:61:bd:b2:68:79:55:43: 36:c6:ac:2c:42:a1:5f:5b:0e:bd:7f:7e:f7:1c:b6:a8:af:30: 80:4c:9d:92:78:77:77:87:97:e3:4d:95:79:a6:f3:69:31:4c: 35:d9:6e:87:66:d9:56:fe:00:b0:5e:1e:27:48:f9:5d:1d:c9: d6:3e:95:33:66:29:9a:6f:c9:f7:23:96:5e:30:d5:ee:37:99: d1:ee:c0:b9:46:db:e1:3f:a5:f2:d9:1d:00:5b:fe:b5:04:ed: 61:87:62:73:db:05:cd:2a:c9:dc:80:1d:fe:bb:9c:44:21:8e: 72:84:e1:4b:6c:37:b1:4f:bf:ad:1a:51:bf:e6:45:88:58:6f: 1e:3d:69:48:78:ce:25:57:03:7b:9c:4b:42:2d:be:01:00:67: cf:4f:c4:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURd5y+PK3dr/6u4BbfNKeizNKTQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3NTND NDk4MjQ2RDAeFw0yNjA5MjIxNDQ0NDVaFw0yNjA5MjMxNTE1NDVaMDMxMTAvBgNV BAMTKEEyQTdGMENENUIyQzVDQzdCNkQ1OTU2MjU5NUEzRUREM0NDRjdGMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8iBYXQ/aPxEtkltn0xHSLfYwU fYRklC0xNENc5bKXlOYWhCtqTNL40qP75zUOSEJ70vzNfELLThaIyO3ca/JP/rg3 3Hadk3CXjkVcVa1e4jBv/RAFRbcxXPwxhv4zZSVbtRXlCkzeH3ynHZeZ6mNgtAYi Y9jZHNpS+eyii7ZRgqyY5uMSnufq1bwryJaQ7EpRddAV2v6/1pYeme9U+jY9c4/T EkCncuFbq+U9xQ0zXtYbPpdUnqL0F5CYGqiEoXPePGZ7oyBelBPZvrAZbsG14F+B Zs7WQr4sVi+Lf57MaiuYsOJurkdU3iVvV71cklFsWcDla+C/iz01bOrYMgaZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoqfwzVssXMe21ZViWVo+3TzPfyowHwYDVR0j BBgwFoAUplpzcKKNpxscEbieCdUXU8SYJG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmVmMTZmMzEtNjBjZS00N2E3LWFlOGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBB MjhEQTcxQjFDMTFCODlFMDlENTE3NTNDNDk4MjQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy9BNjVBNzM3MEEyOERBNzFCMUMxMUI4OUUwOUQ1MTc1M0M0OTgy NDZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3 NTNDNDk4MjQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGwtpXr/uOgyr4EXBMihT72Sfb+oJbOZIfoP ft9Kpw4WqFRRhZ3p7gn82DtJR4VP51QNN8YME9N/eusC0PScE2qwsD3o3YGCHSic YwVsml+XiGkyALaA3/8TgbCmHOyLef7sJ3AIYb2yaHlVQzbGrCxCoV9bDr1/fvcc tqivMIBMnZJ4d3eHl+NNlXmm82kxTDXZbodm2Vb+ALBeHidI+V0dydY+lTNmKZpv yfcjll4w1e43mdHuwLlG2+E/pfLZHQBb/rUE7WGHYnPbBc0qydyAHf67nEQhjnKE 4UtsN7FPv60aUb/mRYhYbx49aUh4ziVXA3ucS0ItvgEAZ89PxPI= -----END CERTIFICATE-----Generated at Wed Sep 23 07:47:59 2026 by rpki-client