$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft File: A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft (raw, json) Hash identifier: WOd115JeSWAukR6GjJ/Zp3eHA+/+hkU3/mqCtu5Nvqg= Subject key identifier: 2E:49:9A:1B:43:B9:71:B7:82:E0:CD:DC:B3:C0:D1:1E:22:04:6E:EC Authority key identifier: A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3 Certificate issuer: /CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3 Certificate serial: 648EF04AD76EBC467C150FE0FC3DC6A0A5D64732 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft Manifest number: BE Signing time: Sun 20 Sep 2026 17:08:07 +0000 Manifest this update: Sun 20 Sep 2026 17:03:07 +0000 Manifest next update: Mon 21 Sep 2026 17:35:07 +0000 Files and hashes: 1: 34352e36342e39362e302f32342d3234203d3e203538343737.roa (hash: 5ev3rc/Wu45AIU9QKYFuF4qHEkUSlKkTnsZ3JdywnVM=) 2: 3130332e32382e3134382e302f32342d3234203d3e203538343737.roa (hash: xw+egA02OX5uOYAGnedHg8tG8xIxYeukOfUcUDfNNIQ=) 3: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (hash: dyN12mfoRjXFlNHqIFEChK7+mIsDEFYombQgQudcekM=) 4: 3130332e33312e3235312e302f32342d3234203d3e203538343737.roa (hash: nNs3zCmZDfGYSq9FVm5Dz3ukk7qRss0F7cyqFrIdiUs=) 5: 323030313a6466303a3237333a3a2f34382d3438203d3e20313431393835.roa (hash: xS3CYv6HlOigS6V1ToXrtXoIA2pH/yBeJ3+U9/cCmQA=) 6: 34352e36342e39382e302f32342d3234203d3e203538343737.roa (hash: /BLy7k3doovw3jQVTXaYTnBas7DL4Zfrgn7U9J4fWVA=) 7: 34352e36342e39372e302f32342d3234203d3e20313335333630.roa (hash: eVL30F9FmWg9xfcbeGTmvP0LqqOdBiZkfgWJnF3c51k=) 8: 3130332e32382e3134392e302f32342d3234203d3e203538343737.roa (hash: qDJ/c5qWojiJYfc9eIqgLudqj78rlDzX+1L2SPWNYTQ=) 9: 3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (hash: 2ZuwNGg62iU8raGM9TYM3A0jrh0UG5HDKyy6dwXOLS0=) 10: A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl (hash: HCP47szQTYE8DXn0JBaqGebZNgcNCLmab+gjvG1AYak=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8e:f0:4a:d7:6e:bc:46:7c:15:0f:e0:fc:3d:c6:a0:a5:d6:47:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3 Validity Not Before: Sep 20 17:03:07 2026 GMT Not After : Sep 21 17:35:07 2026 GMT Subject: CN=2E499A1B43B971B782E0CDDCB3C0D11E22046EEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7f:95:b9:3c:d0:ff:c0:bd:a9:1d:af:3c:9b: 58:a7:dd:de:0c:9d:f0:15:09:e0:a7:25:01:c7:0c: 88:1b:16:b8:5b:2d:54:66:16:10:be:96:2f:78:13: d9:4c:89:6c:e4:f7:44:b8:81:1d:ac:f4:d8:9e:d9: a1:5b:94:4f:df:46:d0:8f:ea:c0:9e:89:15:d3:76: 80:52:94:40:23:39:e0:78:21:18:98:49:b4:73:3f: 34:49:1b:54:d1:c2:42:4f:c6:37:23:d6:c9:f6:a0: 72:3a:35:4f:59:0d:5d:b1:5d:78:5c:cd:fc:ce:1a: 52:6c:ec:dc:14:e8:b5:a5:08:84:e7:ad:a5:74:1f: 0a:69:3d:e8:7c:92:6e:ee:73:6e:3b:ef:fe:f6:c1: 5c:eb:2d:ba:f1:3f:a2:e6:31:0b:4d:03:f6:96:4b: 65:0a:4b:df:6f:cc:f2:61:8c:e9:67:6d:6f:88:65: 1a:a2:8e:c6:d5:c7:2f:a8:f4:52:78:c0:9e:c4:d7: bf:f4:1a:a6:45:62:19:5f:52:c7:cd:9b:26:26:85: 2c:48:2f:13:06:2d:64:2b:5d:51:c2:6c:1b:ac:94: e1:dd:f1:f8:75:06:ab:f8:a2:27:87:ef:14:70:4d: 53:98:4d:78:64:c3:24:72:2d:6e:25:7a:c6:aa:e0: 31:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:49:9A:1B:43:B9:71:B7:82:E0:CD:DC:B3:C0:D1:1E:22:04:6E:EC X509v3 Authority Key Identifier: keyid:A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:46:6a:be:3b:90:23:99:4c:e3:c6:65:33:45:84:65:82:3f: 48:37:5f:e8:1d:f9:c5:3a:7a:83:8d:5a:75:be:a5:ef:cf:2e: 86:72:8b:72:af:d0:6e:3f:e6:0d:b6:b1:5f:f5:e3:1f:cc:f2: 3d:6f:cd:ce:c3:65:ca:ba:ce:c0:40:95:eb:0f:ad:05:9d:af: 8e:56:4a:b3:9e:c0:ef:84:e5:75:b2:a9:4e:9c:06:84:19:6f: e4:79:8c:82:5d:3a:9d:b3:59:a9:ba:f4:b1:28:fe:1e:90:d9: 2f:7b:79:94:4d:64:a8:6a:22:58:8b:cf:03:51:db:93:97:05: 3a:37:c2:13:7a:ea:64:75:7a:4c:39:1f:5e:db:2d:51:05:e0: 49:4a:1b:3f:71:4e:b9:59:b3:6b:1d:d5:f3:91:03:70:81:d4: 0d:98:cb:c6:6e:a7:7b:f1:bb:ff:aa:50:4d:e2:00:1d:7b:36: d4:f9:98:aa:f1:2b:f6:c8:05:05:aa:d2:95:7b:40:6b:b2:ff: f5:5f:59:17:1d:0d:a2:21:17:06:6c:b4:3c:9d:e1:04:69:78: c2:c8:61:a9:4a:c0:5b:ea:d4:03:f2:76:29:98:49:a6:ec:88: 60:4b:14:30:ab:1f:a3:91:f4:bb:e2:c6:9a:78:73:d6:80:04: 8e:82:cf:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZI7wStduvEZ8FQ/g/D3GoKXWRzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QkFGMkQ4ODUxNEVDMDQxQTg3RjA5MkU2QjZBNTIx RjMzNDlGMzAeFw0yNjA5MjAxNzAzMDdaFw0yNjA5MjExNzM1MDdaMDMxMTAvBgNV BAMTKDJFNDk5QTFCNDNCOTcxQjc4MkUwQ0REQ0IzQzBEMTFFMjIwNDZFRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWf5W5PND/wL2pHa88m1in3d4M nfAVCeCnJQHHDIgbFrhbLVRmFhC+li94E9lMiWzk90S4gR2s9Nie2aFblE/fRtCP 6sCeiRXTdoBSlEAjOeB4IRiYSbRzPzRJG1TRwkJPxjcj1sn2oHI6NU9ZDV2xXXhc zfzOGlJs7NwU6LWlCITnraV0HwppPeh8km7uc2477/72wVzrLbrxP6LmMQtNA/aW S2UKS99vzPJhjOlnbW+IZRqijsbVxy+o9FJ4wJ7E17/0GqZFYhlfUsfNmyYmhSxI LxMGLWQrXVHCbBuslOHd8fh1Bqv4oieH7xRwTVOYTXhkwyRyLW4lesaq4DEPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULkmaG0O5cbeC4M3cs8DRHiIEbuwwHwYDVR0j BBgwFoAUoIuvLYhRTsBBqH8JLmtqUh8zSfMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJjNmFhMDMtMWI0ZC00MzhlLWE5ZjMtZWZlYWFlNmIwOTIxLzAvQTA4QkFGMkQ4 ODUxNEVDMDQxQTg3RjA5MkU2QjZBNTIxRjMzNDlGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDhCQUYyRDg4NTE0RUMwNDFBODdGMDkyRTZCNkE1MjFGMzM0 OUYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJjNmFhMDMtMWI0ZC00MzhlLWE5 ZjMtZWZlYWFlNmIwOTIxLzAvQTA4QkFGMkQ4ODUxNEVDMDQxQTg3RjA5MkU2QjZB NTIxRjMzNDlGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFGar47kCOZTOPGZTNFhGWCP0g3X+gd+cU6 eoONWnW+pe/PLoZyi3Kv0G4/5g22sV/14x/M8j1vzc7DZcq6zsBAlesPrQWdr45W SrOewO+E5XWyqU6cBoQZb+R5jIJdOp2zWam69LEo/h6Q2S97eZRNZKhqIliLzwNR 25OXBTo3whN66mR1ekw5H17bLVEF4ElKGz9xTrlZs2sd1fORA3CB1A2Yy8Zup3vx u/+qUE3iAB17NtT5mKrxK/bIBQWq0pV7QGuy//VfWRcdDaIhFwZstDyd4QRpeMLI YalKwFvq1APydimYSabsiGBLFDCrH6OR9Lvixpp4c9aABI6Cz1U= -----END CERTIFICATE-----Generated at Mon Sep 21 01:28:51 2026 by rpki-client