$ rpki-client -vvvf rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft File: A9E3887289ED85663942126250F7D66CD58FE1F5.mft (raw, json) Hash identifier: KyQIi/DBjiv4K4MZWjAbL6eR44d5pxZtBoNC1wgLkU0= Subject key identifier: E2:57:93:EA:06:D4:73:3F:D5:64:4C:17:1A:17:50:60:3A:E9:51:01 Authority key identifier: A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5 Certificate issuer: /CN=A9E3887289ED85663942126250F7D66CD58FE1F5 Certificate serial: 57EA9EB14CA84AC3213FA4E00F540C89B91924BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft Manifest number: BE Signing time: Mon 21 Sep 2026 14:03:58 +0000 Manifest this update: Mon 21 Sep 2026 13:58:58 +0000 Manifest next update: Tue 22 Sep 2026 16:58:58 +0000 Files and hashes: 1: A9E3887289ED85663942126250F7D66CD58FE1F5.crl (hash: dx83MQdW0Xjdt7wI5nRR2yC0LAHHTpqISbJWM+JbhlU=) 2: 3130332e3136362e3132322e302f32332d3233203d3e20313431393435.roa (hash: JytxgR9jZstQPJBZYCIpgiXASID1MDjbIa5qz0t9YDc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.crl rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ea:9e:b1:4c:a8:4a:c3:21:3f:a4:e0:0f:54:0c:89:b9:19:24:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E3887289ED85663942126250F7D66CD58FE1F5 Validity Not Before: Sep 21 13:58:58 2026 GMT Not After : Sep 22 16:58:58 2026 GMT Subject: CN=E25793EA06D4733FD5644C171A1750603AE95101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:be:52:ed:21:d2:a5:51:6d:a4:5b:bb:a3: 02:10:7d:05:75:2f:d6:4f:26:13:df:3a:98:9d:a2: 8f:d3:84:80:c7:dd:6a:82:ce:8a:dd:bf:04:e5:10: ce:62:8c:2a:52:aa:47:59:c1:22:b1:77:03:ac:48: fd:8b:b2:e6:ce:9f:ec:07:a8:31:34:1a:2e:08:88: 9f:f7:0e:ed:54:38:20:25:4a:d4:f7:43:b2:4e:b8: d2:e8:e7:de:49:f1:69:22:f4:c6:17:22:88:9e:10: 47:05:c4:4e:e8:a7:19:86:cd:b6:7b:92:9f:bb:07: 4e:ad:0b:97:4e:86:c4:7f:ec:1e:c3:0c:b7:a6:c4: 12:d0:ca:d1:14:69:4d:dd:1a:50:ec:e8:ce:91:1f: c2:c3:89:ca:03:60:0f:17:12:d2:df:14:37:3f:ce: 5c:f7:c4:47:76:45:02:51:3f:8f:6d:e9:e8:9d:99: 38:68:8a:56:20:0f:dd:02:d5:de:ba:a8:40:b7:55: a6:7d:06:7d:3f:ce:8f:1c:80:47:81:f4:d5:03:8a: 49:62:8a:d1:9e:d3:5c:e4:31:8e:33:d2:53:e3:13: e9:5a:b5:bb:0d:10:f4:c2:62:02:28:b7:9f:ac:97: ef:13:5c:4c:b1:df:db:43:ac:65:92:ed:76:cf:71: fb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:57:93:EA:06:D4:73:3F:D5:64:4C:17:1A:17:50:60:3A:E9:51:01 X509v3 Authority Key Identifier: keyid:A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:85:53:be:c9:c5:df:2d:5f:56:25:20:9c:a9:1b:01:53:2f: 33:94:2c:49:f3:e2:09:77:c2:b7:59:44:00:7e:10:5c:75:a5: 3d:be:7b:7e:53:a9:12:b4:7e:6a:0b:0b:03:d0:76:54:91:53: 4f:c6:e9:a8:44:8b:51:f5:cb:d8:e9:ef:31:65:ee:fe:29:11: 0b:f6:35:4c:f5:80:ab:50:f1:7d:36:99:c2:2f:0d:a9:82:4b: 15:8e:93:96:a7:80:df:5a:1d:03:82:8e:4f:1f:4c:41:93:80: 61:67:78:25:d3:98:d3:47:b8:e8:f8:ad:f0:c3:18:29:33:34: 3b:94:f1:81:a8:54:ce:69:a1:e9:79:a8:9f:86:c1:da:e8:ef: e2:fd:b7:f9:bd:a2:23:0b:00:19:0c:6b:e6:aa:75:d2:5b:89: 6f:93:fa:a9:48:70:3d:04:00:75:ba:6f:d6:91:3c:48:3c:6b: da:4e:89:c4:1a:92:2f:67:af:04:87:aa:38:03:dd:ac:5e:55: ab:c6:b0:c5:68:ed:00:83:14:e2:20:3b:f4:c0:51:4e:f2:ea: 0c:2d:29:77:38:37:12:b0:b3:79:9d:74:1e:60:88:01:5d:7e: fd:a1:0c:f8:3a:dd:fb:47:4d:84:12:d3:b0:87:d4:31:ed:a7: e9:61:c3:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV+qesUyoSsMhP6TgD1QMibkZJL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFMzg4NzI4OUVEODU2NjM5NDIxMjYyNTBGN0Q2NkNE NThGRTFGNTAeFw0yNjA5MjExMzU4NThaFw0yNjA5MjIxNjU4NThaMDMxMTAvBgNV BAMTKEUyNTc5M0VBMDZENDczM0ZENTY0NEMxNzFBMTc1MDYwM0FFOTUxMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfFL5S7SHSpVFtpFu7owIQfQV1 L9ZPJhPfOpidoo/ThIDH3WqCzordvwTlEM5ijCpSqkdZwSKxdwOsSP2LsubOn+wH qDE0Gi4IiJ/3Du1UOCAlStT3Q7JOuNLo595J8Wki9MYXIoieEEcFxE7opxmGzbZ7 kp+7B06tC5dOhsR/7B7DDLemxBLQytEUaU3dGlDs6M6RH8LDicoDYA8XEtLfFDc/ zlz3xEd2RQJRP49t6eidmThoilYgD90C1d66qEC3VaZ9Bn0/zo8cgEeB9NUDikli itGe01zkMY4z0lPjE+latbsNEPTCYgIot5+sl+8TXEyx39tDrGWS7XbPcfvpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4leT6gbUcz/VZEwXGhdQYDrpUQEwHwYDVR0j BBgwFoAUqeOIconthWY5QhJiUPfWbNWP4fUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTQzY2M2YTgtZTdhYS00ZjM3LWJkMDgtZjJlYjU3ZTg4NzM2LzAvQTlFMzg4NzI4 OUVEODU2NjM5NDIxMjYyNTBGN0Q2NkNENThGRTFGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOUUzODg3Mjg5RUQ4NTY2Mzk0MjEyNjI1MEY3RDY2Q0Q1OEZF MUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTQzY2M2YTgtZTdhYS00ZjM3LWJk MDgtZjJlYjU3ZTg4NzM2LzAvQTlFMzg4NzI4OUVEODU2NjM5NDIxMjYyNTBGN0Q2 NkNENThGRTFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiFU77Jxd8tX1YlIJypGwFTLzOULEnz4gl3 wrdZRAB+EFx1pT2+e35TqRK0fmoLCwPQdlSRU0/G6ahEi1H1y9jp7zFl7v4pEQv2 NUz1gKtQ8X02mcIvDamCSxWOk5angN9aHQOCjk8fTEGTgGFneCXTmNNHuOj4rfDD GCkzNDuU8YGoVM5poel5qJ+Gwdro7+L9t/m9oiMLABkMa+aqddJbiW+T+qlIcD0E AHW6b9aRPEg8a9pOicQaki9nrwSHqjgD3axeVavGsMVo7QCDFOIgO/TAUU7y6gwt KXc4NxKws3mddB5giAFdfv2hDPg63ftHTYQS07CH1DHtp+lhw8I= -----END CERTIFICATE-----Generated at Mon Sep 21 17:55:47 2026 by rpki-client