$ rpki-client -vvvf rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft File: A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft (raw, json) Hash identifier: EQ46Q9HQ7BYGUtY6ACdbV5Xvm/9nBQj/yb7dgc3qyBY= Subject key identifier: 3F:84:9C:63:A3:68:AB:3C:E2:22:0B:13:DF:C3:81:C5:C7:59:F1:39 Authority key identifier: A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62 Certificate issuer: /CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462 Certificate serial: 5A32A8F075E4F01A4D8040499500C639A4294EAC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft Manifest number: BE Signing time: Mon 21 Sep 2026 20:42:16 +0000 Manifest this update: Mon 21 Sep 2026 20:37:16 +0000 Manifest next update: Tue 22 Sep 2026 23:51:16 +0000 Files and hashes: 1: 3130332e31302e38302e302f32342d3234203d3e203536323435.roa (hash: QcsJg3qfqnd65tjMyauj31CLylmqEJ9JmPfIivInN4s=) 2: 3130332e31302e38312e302f32342d3234203d3e203536323435.roa (hash: 8t40pL4fQo3N87VVWTTwLCjvAxbdAzsDM6MoI8rvfOU=) 3: 3130332e36312e3131382e302f32342d3234203d3e203536323435.roa (hash: fq37ZHBu24pHeLdJZjOVOOPOX99zj7waBTPuiWqsdHw=) 4: 3130332e36312e3131392e302f32342d3234203d3e203536323435.roa (hash: qPSkhr1Hfd95Nteo2ukz+NrVtlkjXkiSW+VId9eRa8U=) 5: A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl (hash: KEkUkv2buugtiUL/oJ+CC0CPvWn/VbNvBkFiYqse6ng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:51:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:32:a8:f0:75:e4:f0:1a:4d:80:40:49:95:00:c6:39:a4:29:4e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462 Validity Not Before: Sep 21 20:37:16 2026 GMT Not After : Sep 22 23:51:16 2026 GMT Subject: CN=3F849C63A368AB3CE2220B13DFC381C5C759F139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:6a:5d:34:a1:f3:e7:32:1b:d1:68:71:47: dc:3a:b8:51:b7:88:a8:33:88:f7:e1:70:cd:6f:71: 5f:f3:76:2f:83:aa:4a:b6:7a:50:79:7b:7a:30:d6: 3b:a1:e3:ac:91:19:0f:0f:bb:8d:cd:43:5e:df:e5: 62:ff:c1:bd:b2:b2:d0:f1:5e:2d:d5:c9:17:8a:8e: b7:bf:da:3c:da:16:da:1d:09:5a:16:a8:9c:3e:7d: 82:54:90:75:38:7b:9d:a2:2c:7d:2c:a8:09:31:26: cc:90:8a:c9:60:c6:c3:cb:c3:14:82:83:aa:84:b1: 1d:e8:2e:9f:ec:fa:91:18:61:f7:7d:d4:8d:b7:7c: f2:86:67:c5:e5:c6:32:b0:c3:73:bd:6d:25:17:fa: 36:c1:4c:a4:39:0b:1c:39:67:88:39:81:13:eb:e0: 3c:d8:6e:34:ad:e8:4d:6c:c3:8a:46:04:3b:27:d2: b1:c3:19:85:db:71:8d:ae:84:3a:20:58:59:cc:ab: 90:b8:1f:e7:c4:6b:8b:6f:b1:2d:3b:01:88:fe:e4: 47:0f:7b:ab:e4:07:ff:2c:a6:04:a9:5c:cb:c6:4a: 5d:0c:8e:50:80:72:b9:1e:c5:f6:b1:3c:06:b3:21: 39:4c:a3:63:99:7f:91:74:b7:9e:e5:cc:3f:3f:89: e3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:84:9C:63:A3:68:AB:3C:E2:22:0B:13:DF:C3:81:C5:C7:59:F1:39 X509v3 Authority Key Identifier: keyid:A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:66:80:f6:3d:17:d7:4b:60:fb:c4:b2:00:a5:38:b4:de:bb: 7e:e5:cc:3f:61:28:fc:67:10:45:08:e5:42:f2:1d:39:90:f6: e7:60:85:b7:2a:50:01:ad:92:76:97:be:f2:0a:3f:5f:7f:b3: ab:ec:30:ee:f3:46:19:ba:12:5f:01:74:6f:28:1f:ac:9a:dc: be:4c:ed:c5:c3:fd:53:e0:de:50:63:39:ea:0f:62:8a:3f:7f: c9:86:1f:12:c8:e4:16:09:5b:e4:6d:5e:40:e4:3a:d3:9e:1c: 81:25:e6:d5:ee:08:b7:6c:a2:1d:ed:32:bd:83:ab:76:8a:78: 89:0c:d9:28:61:b1:bf:86:9b:d5:53:d3:ca:e0:92:3e:42:80: e4:d3:b0:d0:f0:e5:4a:90:08:36:78:f6:c9:47:5a:8e:d2:35: 8d:10:82:5b:71:15:80:7a:b5:ea:38:fd:cb:e7:43:51:ed:54: 24:f6:32:8e:cd:09:f6:2d:c1:75:a4:19:6a:ec:57:7f:bf:30: 89:c8:dd:84:f1:13:81:42:dd:8e:2d:4c:6c:0c:7f:45:40:55: ac:4c:c6:84:31:06:e2:e5:49:10:49:89:c3:71:ee:ca:d3:29: b7:02:25:90:f5:2f:21:56:d8:71:23:74:1f:8f:9d:5b:39:bd: 9f:b3:d3:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWjKo8HXk8BpNgEBJlQDGOaQpTqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZBRkQ2NUFDNjZENEVCNzAyN0FFRDVGODk4RThFQ0Q4 MDc5RjQ2MjAeFw0yNjA5MjEyMDM3MTZaFw0yNjA5MjIyMzUxMTZaMDMxMTAvBgNV BAMTKDNGODQ5QzYzQTM2OEFCM0NFMjIyMEIxM0RGQzM4MUM1Qzc1OUYxMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/kGpdNKHz5zIb0WhxR9w6uFG3 iKgziPfhcM1vcV/zdi+Dqkq2elB5e3ow1juh46yRGQ8Pu43NQ17f5WL/wb2ystDx Xi3VyReKjre/2jzaFtodCVoWqJw+fYJUkHU4e52iLH0sqAkxJsyQislgxsPLwxSC g6qEsR3oLp/s+pEYYfd91I23fPKGZ8XlxjKww3O9bSUX+jbBTKQ5Cxw5Z4g5gRPr 4DzYbjSt6E1sw4pGBDsn0rHDGYXbcY2uhDogWFnMq5C4H+fEa4tvsS07AYj+5EcP e6vkB/8spgSpXMvGSl0MjlCAcrkexfaxPAazITlMo2OZf5F0t57lzD8/ieMzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP4ScY6NoqzziIgsT38OBxcdZ8TkwHwYDVR0j BBgwFoAUpq/WWsZtTrcCeu1fiY6OzYB59GIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA4ODY4MDUtM2I4NS00YzViLTliNmEtZDYyYWQ1NmE2NmFjLzAvQTZBRkQ2NUFD NjZENEVCNzAyN0FFRDVGODk4RThFQ0Q4MDc5RjQ2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNkFGRDY1QUM2NkQ0RUI3MDI3QUVENUY4OThFOEVDRDgwNzlG NDYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA4ODY4MDUtM2I4NS00YzViLTli NmEtZDYyYWQ1NmE2NmFjLzAvQTZBRkQ2NUFDNjZENEVCNzAyN0FFRDVGODk4RThF Q0Q4MDc5RjQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxmgPY9F9dLYPvEsgClOLTeu37lzD9hKPxn EEUI5ULyHTmQ9udghbcqUAGtknaXvvIKP19/s6vsMO7zRhm6El8BdG8oH6ya3L5M 7cXD/VPg3lBjOeoPYoo/f8mGHxLI5BYJW+RtXkDkOtOeHIEl5tXuCLdsoh3tMr2D q3aKeIkM2Shhsb+Gm9VT08rgkj5CgOTTsNDw5UqQCDZ49slHWo7SNY0QgltxFYB6 teo4/cvnQ1HtVCT2Mo7NCfYtwXWkGWrsV3+/MInI3YTxE4FC3Y4tTGwMf0VAVaxM xoQxBuLlSRBJicNx7srTKbcCJZD1LyFW2HEjdB+PnVs5vZ+z0+E= -----END CERTIFICATE-----Generated at Tue Sep 22 08:46:36 2026 by rpki-client