$ rpki-client -vvvf rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft File: A655C14C173A3BE852B5A2C52C501937C4340242.mft (raw, json) Hash identifier: Q3ocTL57XT/26AteddsJZCJVgNYP5ETEaUYeG2FG0dk= Subject key identifier: BD:6B:C5:3A:6A:C5:6A:5A:54:48:25:91:8B:1F:08:97:9A:8B:A3:0E Authority key identifier: A6:55:C1:4C:17:3A:3B:E8:52:B5:A2:C5:2C:50:19:37:C4:34:02:42 Certificate issuer: /CN=A655C14C173A3BE852B5A2C52C501937C4340242 Certificate serial: 79BAD0CD26F11FD0740BEC5D9424C1C970A31035 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft Manifest number: BF Signing time: Tue 22 Sep 2026 06:55:07 +0000 Manifest this update: Tue 22 Sep 2026 06:50:07 +0000 Manifest next update: Wed 23 Sep 2026 09:04:07 +0000 Files and hashes: 1: 3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa (hash: St+whbiWn8DuDZzEPL2qqiXyvmUfCd91hjaKC3vJifA=) 2: A655C14C173A3BE852B5A2C52C501937C4340242.crl (hash: iEwSaCeCVXDV7rBYpebgthIggt3zZ+FTKFFjoKMf0Bw=) 3: 3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa (hash: qkm6D0klaQyvN59pQnarOTQhutzEDT+u+1JdsHBl/VQ=) 4: 3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa (hash: VTw+tu3SsLrqMi7jJgKUunIG386oKhLKeizx0PYXC2g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.crl rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ba:d0:cd:26:f1:1f:d0:74:0b:ec:5d:94:24:c1:c9:70:a3:10:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A655C14C173A3BE852B5A2C52C501937C4340242 Validity Not Before: Sep 22 06:50:07 2026 GMT Not After : Sep 23 09:04:07 2026 GMT Subject: CN=BD6BC53A6AC56A5A544825918B1F08979A8BA30E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d8:41:53:5e:29:ac:63:2b:da:62:34:c0:29: 53:3c:55:4b:cb:21:31:cb:4f:ba:b0:d4:d3:0b:52: 77:7d:ed:99:3a:77:9a:22:62:a3:d8:e3:94:73:31: 70:de:ba:a5:4b:48:2f:05:90:d3:84:82:59:27:d7: 27:20:e0:3a:09:1d:4e:3a:da:9d:20:63:ec:44:4f: 1d:c5:c1:4d:b6:4e:83:85:c4:9a:6d:7c:d0:2d:70: e3:f2:8a:f8:ea:6b:ef:c9:9c:8b:7f:0c:d7:c0:04: 53:31:f0:c9:d5:ac:05:68:9f:82:8a:77:b5:4f:af: 62:39:96:8c:27:79:7f:9a:63:5b:aa:6b:dd:97:19: 95:bb:36:e2:29:f1:01:5c:aa:d0:37:a8:aa:e2:7b: e0:aa:07:4b:37:87:17:87:8d:26:e7:4b:90:fb:c3: 3e:4c:98:fe:b4:e6:f8:8f:fa:29:71:c9:e9:cb:9f: aa:72:7d:9f:bb:9f:0d:72:20:9f:82:e7:84:d0:9c: 43:c7:49:e6:44:29:3d:58:17:e6:8f:95:20:cf:4c: 3a:a8:4b:1b:2b:80:03:8a:b0:78:da:c7:30:0c:f7: 10:68:b6:35:a6:1a:a6:25:29:e0:4f:c8:6a:28:7a: 0c:ba:7b:95:d2:6a:93:93:0b:09:64:b7:91:6e:28: f5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6B:C5:3A:6A:C5:6A:5A:54:48:25:91:8B:1F:08:97:9A:8B:A3:0E X509v3 Authority Key Identifier: keyid:A6:55:C1:4C:17:3A:3B:E8:52:B5:A2:C5:2C:50:19:37:C4:34:02:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:63:bf:43:79:d7:74:ac:67:56:55:e3:be:af:e0:16:c2:73: 8a:ad:f4:b0:af:4e:b7:fd:00:3f:5e:99:46:dd:6e:23:f5:5d: b9:0a:04:c1:f0:34:b6:24:0e:3e:69:2f:01:63:36:39:ec:22: 21:06:86:c9:aa:7e:ff:b3:a9:de:0b:cb:ab:5b:86:ab:b4:11: dd:71:3e:32:82:36:60:3a:a7:c0:2f:d2:6e:63:e2:57:99:66: 09:63:58:66:9e:cb:4b:13:60:16:74:73:7f:a5:d6:7a:5f:df: 3b:61:31:8a:4d:3e:75:9d:78:6e:49:07:cf:b1:ef:94:3c:70: 88:54:6e:2d:f9:e4:06:4c:65:33:15:56:94:ae:c0:88:06:b9: 7f:91:1e:c6:d1:d0:90:37:ec:5f:89:a0:5f:e1:ec:bf:05:92: 5b:7b:bc:c9:09:25:95:12:dc:53:60:50:ed:75:b2:26:84:1e: 60:1b:7a:a5:82:72:2d:c6:3d:2e:ca:06:ed:81:c4:e4:3c:8a: e3:e2:f6:11:dd:11:49:a4:4b:76:8e:13:c3:65:cb:51:cb:36: 15:9d:ce:15:e3:b3:0a:57:be:dc:44:79:32:05:a4:57:54:48: 7b:67:1e:25:7d:6b:a5:ed:05:f4:f6:38:0f:e4:35:aa:1a:b2: 55:1c:88:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUebrQzSbxH9B0C+xdlCTByXCjEDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1NUMxNEMxNzNBM0JFODUyQjVBMkM1MkM1MDE5MzdD NDM0MDI0MjAeFw0yNjA5MjIwNjUwMDdaFw0yNjA5MjMwOTA0MDdaMDMxMTAvBgNV BAMTKEJENkJDNTNBNkFDNTZBNUE1NDQ4MjU5MThCMUYwODk3OUE4QkEzMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl2EFTXimsYyvaYjTAKVM8VUvL ITHLT7qw1NMLUnd97Zk6d5oiYqPY45RzMXDeuqVLSC8FkNOEglkn1ycg4DoJHU46 2p0gY+xETx3FwU22ToOFxJptfNAtcOPyivjqa+/JnIt/DNfABFMx8MnVrAVon4KK d7VPr2I5lowneX+aY1uqa92XGZW7NuIp8QFcqtA3qKrie+CqB0s3hxeHjSbnS5D7 wz5MmP605viP+ilxyenLn6pyfZ+7nw1yIJ+C54TQnEPHSeZEKT1YF+aPlSDPTDqo SxsrgAOKsHjaxzAM9xBotjWmGqYlKeBPyGooegy6e5XSapOTCwlkt5FuKPVJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvWvFOmrFalpUSCWRix8Il5qLow4wHwYDVR0j BBgwFoAUplXBTBc6O+hStaLFLFAZN8Q0AkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTgxMjc0YWYtN2NkMC00MGFmLWEzMjEtNjc2ODk4ZDU4ZGI4LzAvQTY1NUMxNEMx NzNBM0JFODUyQjVBMkM1MkM1MDE5MzdDNDM0MDI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNjU1QzE0QzE3M0EzQkU4NTJCNUEyQzUyQzUwMTkzN0M0MzQw MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTgxMjc0YWYtN2NkMC00MGFmLWEz MjEtNjc2ODk4ZDU4ZGI4LzAvQTY1NUMxNEMxNzNBM0JFODUyQjVBMkM1MkM1MDE5 MzdDNDM0MDI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1jv0N513SsZ1ZV476v4BbCc4qt9LCvTrf9 AD9emUbdbiP1XbkKBMHwNLYkDj5pLwFjNjnsIiEGhsmqfv+zqd4Ly6tbhqu0Ed1x PjKCNmA6p8Av0m5j4leZZgljWGaey0sTYBZ0c3+l1npf3zthMYpNPnWdeG5JB8+x 75Q8cIhUbi355AZMZTMVVpSuwIgGuX+RHsbR0JA37F+JoF/h7L8Fklt7vMkJJZUS 3FNgUO11siaEHmAbeqWCci3GPS7KBu2BxOQ8iuPi9hHdEUmkS3aOE8Nly1HLNhWd zhXjswpXvtxEeTIFpFdUSHtnHiV9a6XtBfT2OA/kNaoaslUciCQ= -----END CERTIFICATE-----Generated at Tue Sep 22 20:44:44 2026 by rpki-client