$ rpki-client -vvvf rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft File: A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft (raw, json) Hash identifier: b7EfAojLa6SpDmI+wOtT2BZnQzJUw6AhMWguncxqv14= Subject key identifier: 7B:35:DC:5E:CD:9D:8D:F0:28:B8:82:55:9F:E8:F1:C8:2A:02:F4:A0 Authority key identifier: A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F Certificate issuer: /CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F Certificate serial: 5734C3B50958F97C2C0BFF446624A5463DA267EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft Manifest number: BD Signing time: Sun 20 Sep 2026 22:44:56 +0000 Manifest this update: Sun 20 Sep 2026 22:39:56 +0000 Manifest next update: Tue 22 Sep 2026 02:29:56 +0000 Files and hashes: 1: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: Il2995+O34HRt5QUYak7wmOSE/xt1UwsadzXH7aEOYo=) 2: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: mTSHlFZAxZWWAKZzsiMuSqeFq/VKg23JR+BpuxRfCT8=) 3: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: lknjz+xGrn74yDQTZoQhv/KjNKL2zVYWd4Swco59gWA=) 4: A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl (hash: FD6CdHbaYcf1ZO4kKv05s0u0N/c+gwpee0z8a1MOqx4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:34:c3:b5:09:58:f9:7c:2c:0b:ff:44:66:24:a5:46:3d:a2:67:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F Validity Not Before: Sep 20 22:39:56 2026 GMT Not After : Sep 22 02:29:56 2026 GMT Subject: CN=7B35DC5ECD9D8DF028B882559FE8F1C82A02F4A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:fb:ac:ae:7d:48:11:62:9b:94:ed:bc:79: e6:64:50:a8:88:72:f3:9e:e0:06:44:82:0a:88:91: 44:10:7a:86:17:5d:e1:2e:a0:e3:ab:f5:2f:d9:5c: 1a:6c:dd:b9:36:6b:8f:a5:6f:48:96:d3:fa:de:57: 0b:b2:85:ce:c0:72:1c:4f:6d:09:f3:a3:19:bd:e1: 2e:b2:5b:ed:15:88:80:03:95:d0:46:ec:05:40:ee: a1:82:c2:d4:6b:87:53:50:57:39:da:a0:d5:b3:12: 93:95:f6:de:42:03:9f:84:b1:93:75:71:70:51:17: 69:4f:b6:77:60:d7:1e:c2:8c:6a:e7:87:ec:a9:a5: cf:52:8a:1d:36:d9:fb:0b:08:16:77:73:f5:bd:7a: 14:07:3e:ad:93:0c:2c:ed:ef:86:49:f8:1a:e3:f4: d9:77:0b:d7:e3:af:53:94:bd:e4:5d:a1:67:f8:2c: a8:28:18:f7:26:13:00:d9:17:3d:25:41:85:c9:ed: db:a6:01:5c:5c:fa:df:d5:74:15:3e:35:1c:fb:20: 0c:22:28:2f:16:d2:22:1d:31:51:fe:2b:ed:e2:18: 0f:cc:60:aa:c9:31:58:7e:83:75:9e:4e:31:26:f7: ce:91:d9:2a:34:f0:b1:1e:e6:92:b5:fc:42:14:91: 66:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:35:DC:5E:CD:9D:8D:F0:28:B8:82:55:9F:E8:F1:C8:2A:02:F4:A0 X509v3 Authority Key Identifier: keyid:A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:15:ad:09:fd:b0:2c:95:43:5d:0c:54:82:86:c3:85:e7:52: ec:3c:33:20:31:7a:87:db:98:94:3a:ce:31:f9:95:0c:26:a2: 81:69:e9:75:a0:12:c6:ca:b7:ac:94:b8:ff:d5:b0:74:d2:0d: 9c:28:3b:80:fb:e7:73:c2:5e:80:14:0c:5e:ae:a1:2a:e5:31: ac:64:50:16:08:46:ac:e6:e0:67:ff:3a:7a:6f:8c:fb:a6:45: 9f:af:d3:3b:2a:6e:b2:a6:a2:2f:f7:fe:d2:a2:6f:a0:9a:5f: fe:72:a7:d5:26:56:11:1d:e4:f6:5d:e1:8f:2f:06:b5:fa:ca: cc:ac:e9:c1:4c:cc:dd:7e:ca:98:a8:97:aa:5c:e3:98:f4:5c: 0c:d9:b7:92:e0:55:e7:b9:24:b7:e1:59:2c:a7:44:af:f8:6a: 50:a2:8f:11:99:00:61:08:17:2a:88:62:6f:65:e3:18:0b:04: 18:3f:74:6a:55:e0:ab:28:b4:a9:ed:67:d9:5f:24:b2:3d:3d: a6:56:28:99:2d:7b:9f:11:ef:51:19:9d:dc:e0:f5:05:b8:29: 19:c7:45:e4:d6:f6:f8:66:74:02:06:2e:57:87:17:d8:35:f0: e3:4d:9e:c0:bb:13:9b:0f:62:27:1c:a0:63:73:dc:50:42:cf: 22:5a:92:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVzTDtQlY+XwsC/9EZiSlRj2iZ+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOEQyQzQ1RDgyMEMxRkM0MEJDRjAzQjlCMTA2OTk5 OTJEOEIyRjAeFw0yNjA5MjAyMjM5NTZaFw0yNjA5MjIwMjI5NTZaMDMxMTAvBgNV BAMTKDdCMzVEQzVFQ0Q5RDhERjAyOEI4ODI1NTlGRThGMUM4MkEwMkY0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqq/usrn1IEWKblO28eeZkUKiI cvOe4AZEggqIkUQQeoYXXeEuoOOr9S/ZXBps3bk2a4+lb0iW0/reVwuyhc7AchxP bQnzoxm94S6yW+0ViIADldBG7AVA7qGCwtRrh1NQVznaoNWzEpOV9t5CA5+EsZN1 cXBRF2lPtndg1x7CjGrnh+yppc9Sih022fsLCBZ3c/W9ehQHPq2TDCzt74ZJ+Brj 9Nl3C9fjr1OUveRdoWf4LKgoGPcmEwDZFz0lQYXJ7dumAVxc+t/VdBU+NRz7IAwi KC8W0iIdMVH+K+3iGA/MYKrJMVh+g3WeTjEm986R2So08LEe5pK1/EIUkWZfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUezXcXs2djfAouIJVn+jxyCoC9KAwHwYDVR0j BBgwFoAUqejSxF2CDB/EC88DubEGmZktiy8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDgxZDU0Y2ItNTdhOS00YTE2LWE3MGUtYzVmNjAyNGUxMzlkLzAvQTlFOEQyQzQ1 RDgyMEMxRkM0MEJDRjAzQjlCMTA2OTk5OTJEOEIyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BOUU4RDJDNDVEODIwQzFGQzQwQkNGMDNCOUIxMDY5OTk5MkQ4 QjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQTlFOEQyQzQ1RDgyMEMxRkM0MEJDRjAzQjlCMTA2 OTk5OTJEOEIyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoVrQn9sCyVQ10MVIKGw4XnUuw8MyAxeofb mJQ6zjH5lQwmooFp6XWgEsbKt6yUuP/VsHTSDZwoO4D753PCXoAUDF6uoSrlMaxk UBYIRqzm4Gf/OnpvjPumRZ+v0zsqbrKmoi/3/tKib6CaX/5yp9UmVhEd5PZd4Y8v BrX6ysys6cFMzN1+ypiol6pc45j0XAzZt5LgVee5JLfhWSynRK/4alCijxGZAGEI FyqIYm9l4xgLBBg/dGpV4KsotKntZ9lfJLI9PaZWKJkte58R71EZndzg9QW4KRnH ReTW9vhmdAIGLleHF9g18ONNnsC7E5sPYiccoGNz3FBCzyJakhs= -----END CERTIFICATE-----Generated at Mon Sep 21 19:56:29 2026 by rpki-client