$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft File: A100A99332CE78931B9E02D4EFEE6712B81443A5.mft (raw, json) Hash identifier: HfN0EwE6/M878gVdPXfCDsUF8PPT8P2VZ631k7pptY8= Subject key identifier: D3:28:3A:08:EB:E0:74:FF:71:21:93:92:28:09:95:5F:6E:C4:BC:15 Authority key identifier: A1:00:A9:93:32:CE:78:93:1B:9E:02:D4:EF:EE:67:12:B8:14:43:A5 Certificate issuer: /CN=A100A99332CE78931B9E02D4EFEE6712B81443A5 Certificate serial: 6B0EE36CD8DB9A2EF42662A1FE37C10398DB35D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft Manifest number: C6 Signing time: Sat 26 Sep 2026 11:49:21 +0000 Manifest this update: Sat 26 Sep 2026 11:44:21 +0000 Manifest next update: Sun 27 Sep 2026 11:49:21 +0000 Files and hashes: 1: 3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (hash: heQq7HcquDyrw94B2s2im1ZCA88nQvwu0Cy2cBDthxc=) 2: 3130332e32362e3139312e302f32342d3234203d3e20313530323639.roa (hash: ZcmU1/1tmDS14EVy1azjLSMcCXj3VjCECbts/S2roW8=) 3: 3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (hash: DTmwpednkI6HsiidwVpKHLiGYfMBV1fbHQp1IFSmAn0=) 4: A100A99332CE78931B9E02D4EFEE6712B81443A5.crl (hash: 8C3Ng0akGwBpcHsEEEgXseNvRLxt6Hhaq0RPNnktP54=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.crl rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 11:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:0e:e3:6c:d8:db:9a:2e:f4:26:62:a1:fe:37:c1:03:98:db:35:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A100A99332CE78931B9E02D4EFEE6712B81443A5 Validity Not Before: Sep 26 11:44:21 2026 GMT Not After : Sep 27 11:49:21 2026 GMT Subject: CN=D3283A08EBE074FF712193922809955F6EC4BC15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:01:c4:1f:dc:20:aa:23:09:9c:a9:ec:0c:d6: c8:2c:b9:65:d1:48:be:ce:9e:05:47:3d:9e:d1:6f: d4:c0:da:80:1d:07:de:02:82:ea:50:55:a9:ea:3b: 31:cc:ad:28:eb:cf:1a:9b:0b:72:f7:6c:9e:d1:87: 33:09:2b:1e:53:ff:79:4c:36:0f:b7:f3:74:04:f3: 35:08:8a:0e:b3:03:04:a8:87:77:d1:6a:3a:8f:93: 95:ca:39:be:49:f8:ef:00:37:0b:5b:7e:89:5a:46: ca:d5:d5:ab:14:d4:69:17:b6:89:a7:28:36:3c:bc: 3f:aa:eb:8d:1f:9d:bb:3c:c5:c1:2f:a4:c6:de:ca: 3f:2d:69:28:e4:86:9f:bf:b6:84:89:5f:ae:7c:7a: 7d:b1:f0:98:cf:e7:33:7f:4b:65:01:d6:c9:c5:9f: 56:96:b8:15:44:6a:17:11:41:6f:05:8d:cc:0c:e4: 5a:42:a7:ad:00:83:4b:a8:a2:da:5d:10:23:0d:ee: 80:d1:0b:7f:bc:a7:e2:db:c4:96:c2:d8:14:f0:fb: 59:a8:c9:45:d5:09:41:19:54:e6:f2:b6:b1:1c:34: cf:2f:73:f8:ca:52:5b:5d:a4:19:ee:19:2e:5b:3e: 23:63:4a:b3:45:d2:b7:aa:99:70:77:db:23:89:96: 67:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:28:3A:08:EB:E0:74:FF:71:21:93:92:28:09:95:5F:6E:C4:BC:15 X509v3 Authority Key Identifier: keyid:A1:00:A9:93:32:CE:78:93:1B:9E:02:D4:EF:EE:67:12:B8:14:43:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:10:86:cd:ca:03:9c:9b:52:bc:ba:c6:a7:cf:c8:ef:c0:40: 99:1f:91:8e:81:a6:55:1f:7d:b6:0a:3a:02:3a:f6:91:a2:ae: 0c:40:1b:70:34:e4:5d:ef:7b:73:c7:86:ff:69:df:70:fc:29: d9:a3:d6:98:b3:79:a7:12:04:bc:0a:22:4a:83:94:06:50:73: ec:79:ae:7a:b5:bb:30:2b:c5:a6:b0:ac:af:cc:c2:37:db:9e: 9c:ce:d0:1f:7b:2f:8b:cd:55:1d:2b:73:fc:f5:d6:eb:b7:b0: 84:aa:7c:f7:b2:98:13:d1:44:63:74:0e:3b:eb:b0:de:63:36: 5d:0c:07:6b:7b:14:81:52:1f:f9:4a:a5:35:00:8a:6a:ae:10: eb:6c:fe:7e:97:e2:12:52:c3:f4:b8:2c:8e:bf:3b:f2:4e:df: 42:f6:bb:8d:47:e0:d7:b6:b7:07:3c:02:32:d5:e6:b5:d8:d7: e0:f8:42:62:bf:54:f4:23:fd:93:9b:45:59:40:33:0d:ee:db: c5:d9:7f:48:8c:44:49:20:fd:a7:38:a9:9e:b6:7c:d9:4b:81: 59:d8:6e:44:1f:e9:8b:09:d3:9b:64:4c:82:3c:4f:2a:5e:c7: ad:a0:65:af:59:8b:b6:0a:d9:12:a2:ed:30:3a:65:65:27:c1: 8e:3c:4c:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaw7jbNjbmi70JmKh/jfBA5jbNdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTEwMEE5OTMzMkNFNzg5MzFCOUUwMkQ0RUZFRTY3MTJC ODE0NDNBNTAeFw0yNjA5MjYxMTQ0MjFaFw0yNjA5MjcxMTQ5MjFaMDMxMTAvBgNV BAMTKEQzMjgzQTA4RUJFMDc0RkY3MTIxOTM5MjI4MDk5NTVGNkVDNEJDMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/AcQf3CCqIwmcqewM1sgsuWXR SL7OngVHPZ7Rb9TA2oAdB94CgupQVanqOzHMrSjrzxqbC3L3bJ7RhzMJKx5T/3lM Ng+383QE8zUIig6zAwSoh3fRajqPk5XKOb5J+O8ANwtbfolaRsrV1asU1GkXtomn KDY8vD+q640fnbs8xcEvpMbeyj8taSjkhp+/toSJX658en2x8JjP5zN/S2UB1snF n1aWuBVEahcRQW8FjcwM5FpCp60Ag0uootpdECMN7oDRC3+8p+LbxJbC2BTw+1mo yUXVCUEZVObytrEcNM8vc/jKUltdpBnuGS5bPiNjSrNF0reqmXB32yOJlmcBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0yg6COvgdP9xIZOSKAmVX27EvBUwHwYDVR0j BBgwFoAUoQCpkzLOeJMbngLU7+5nErgUQ6UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjY5MjZjODItYzhlNS00Zjk3LTg5OTQtMmM0MDY1MzgxN2NlLzAvQTEwMEE5OTMz MkNFNzg5MzFCOUUwMkQ0RUZFRTY3MTJCODE0NDNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTAwQTk5MzMyQ0U3ODkzMUI5RTAyRDRFRkVFNjcxMkI4MTQ0 M0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjY5MjZjODItYzhlNS00Zjk3LTg5 OTQtMmM0MDY1MzgxN2NlLzAvQTEwMEE5OTMzMkNFNzg5MzFCOUUwMkQ0RUZFRTY3 MTJCODE0NDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkQhs3KA5ybUry6xqfPyO/AQJkfkY6BplUf fbYKOgI69pGirgxAG3A05F3ve3PHhv9p33D8Kdmj1pizeacSBLwKIkqDlAZQc+x5 rnq1uzArxaawrK/MwjfbnpzO0B97L4vNVR0rc/z11uu3sISqfPeymBPRRGN0Djvr sN5jNl0MB2t7FIFSH/lKpTUAimquEOts/n6X4hJSw/S4LI6/O/JO30L2u41H4Ne2 twc8AjLV5rXY1+D4QmK/VPQj/ZObRVlAMw3u28XZf0iMREkg/ac4qZ62fNlLgVnY bkQf6YsJ05tkTII8Typex62gZa9Zi7YK2RKi7TA6ZWUnwY48TM0= -----END CERTIFICATE-----Generated at Sat Sep 26 14:11:10 2026 by rpki-client