$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft File: A1AE56A4554AF816FB70C7D151B60B95E8688866.mft (raw, json) Hash identifier: xvVrc5CuiEk2/Iuxd8UeQ2Ayeql609g9rC4wneJAwFg= Subject key identifier: BB:5F:8F:7A:BE:4A:CC:F0:FA:A6:A5:28:54:A0:5F:E3:FB:6F:5A:B1 Authority key identifier: A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66 Certificate issuer: /CN=A1AE56A4554AF816FB70C7D151B60B95E8688866 Certificate serial: 327C5E6AFF8A01B6939A98002208A7F32B699A46 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 09:43:31 +0000 Manifest this update: Tue 22 Sep 2026 09:38:31 +0000 Manifest next update: Wed 23 Sep 2026 11:24:31 +0000 Files and hashes: 1: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: He41ch40XucuK+aPHGiuSTFi+Lk7tn/MpsAXY1hRpGE=) 2: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 9v0FNIRz7U0Do3bFO3VnUQP4Wx+ba0tNG1r1AH/OeqY=) 3: A1AE56A4554AF816FB70C7D151B60B95E8688866.crl (hash: pTDlgCqTVSmUsK3rwhpikoygz8wj7QzaP3ZvQQXKIvI=) 4: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: GHM2a/obSFnIX4sm3ZBeoTgx7NT/IcpWeeqALQWuCgk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 11:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:7c:5e:6a:ff:8a:01:b6:93:9a:98:00:22:08:a7:f3:2b:69:9a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1AE56A4554AF816FB70C7D151B60B95E8688866 Validity Not Before: Sep 22 09:38:31 2026 GMT Not After : Sep 23 11:24:31 2026 GMT Subject: CN=BB5F8F7ABE4ACCF0FAA6A52854A05FE3FB6F5AB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ea:66:2f:00:11:80:c0:53:25:9a:89:65:46: 84:43:10:92:7f:01:b6:65:47:a1:13:ab:22:8c:84: 2f:07:28:93:b5:e9:57:40:2d:9e:51:c7:7e:7a:a1: 87:a4:47:45:02:f8:cf:b4:3e:b8:b5:da:c7:1a:10: 96:8c:b9:cb:9d:9f:9d:0b:ef:78:64:ed:db:93:b7: 86:ad:f4:37:69:94:5b:e4:35:f8:0a:4c:9b:61:06: 1e:2b:15:4f:45:2f:12:e8:ef:8b:e2:8c:3c:cc:6c: a9:86:3b:50:7f:c9:a6:1b:93:5d:2f:26:1f:57:de: 6a:7d:7b:f3:45:23:92:1b:7f:36:5f:f6:0e:43:8d: c9:4c:5a:03:e3:2f:ac:30:21:6a:fb:98:97:72:9c: 69:d4:0b:cf:c4:fa:10:87:7a:34:3f:ae:2e:05:d0: 28:a0:6d:ad:54:b3:96:71:4c:c3:51:d5:12:f0:1a: 86:16:58:73:23:50:ea:36:9d:31:cb:1c:06:16:79: d3:7d:60:16:cb:55:1e:5b:9c:46:15:66:21:67:ba: 20:70:c7:bf:76:18:76:48:22:63:24:0b:31:12:3f: 15:c6:88:b2:34:20:2a:16:5a:12:52:60:6f:13:69: bd:29:9a:6d:4b:9d:f7:a6:2f:24:5f:9d:4b:aa:d3: b1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5F:8F:7A:BE:4A:CC:F0:FA:A6:A5:28:54:A0:5F:E3:FB:6F:5A:B1 X509v3 Authority Key Identifier: keyid:A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:9f:99:be:8f:c1:d3:32:97:60:88:16:11:80:f3:6c:e2:82: 8c:9e:3f:64:07:33:d6:aa:9a:0a:c6:ee:e1:3b:41:2e:ff:b5: 67:07:99:be:2b:a1:06:3a:a3:c9:a6:5f:4d:57:d4:b2:5c:fa: fd:d6:b6:d4:4a:5b:e5:aa:b1:a2:43:cc:32:40:89:8f:49:e7: 9c:34:61:08:07:aa:be:b3:b1:ca:1c:04:bb:df:c9:4b:84:95: 8f:e1:71:93:66:b1:06:a1:fd:d7:09:ba:42:06:50:0d:c4:3e: e1:5b:19:49:48:3a:b8:fa:b0:c3:41:6e:ac:25:69:b1:0b:bb: 48:fd:ab:c6:5a:52:29:af:8c:a4:24:b6:64:d0:90:21:fd:97: 23:cf:ca:c1:7c:80:06:af:49:95:b9:09:c8:2c:94:8e:37:c5: 3d:67:38:eb:58:f7:be:a3:e7:18:88:34:5b:d1:06:43:ed:71: 86:2b:37:51:a1:61:59:de:2b:1c:ca:29:d7:99:39:22:6e:46: 8b:d5:45:d0:5b:46:82:5f:70:0a:f7:23:46:71:f1:d2:33:de: 24:bf:94:67:fe:2f:04:40:b7:b9:89:e6:c2:db:00:de:ba:d6: 4a:32:d0:be:40:d1:10:c5:49:c6:47:73:cf:0d:e7:a9:d8:5b: dd:3b:e3:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMnxeav+KAbaTmpgAIgin8ytpmkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFBRTU2QTQ1NTRBRjgxNkZCNzBDN0QxNTFCNjBCOTVF ODY4ODg2NjAeFw0yNjA5MjIwOTM4MzFaFw0yNjA5MjMxMTI0MzFaMDMxMTAvBgNV BAMTKEJCNUY4RjdBQkU0QUNDRjBGQUE2QTUyODU0QTA1RkUzRkI2RjVBQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD36mYvABGAwFMlmollRoRDEJJ/ AbZlR6ETqyKMhC8HKJO16VdALZ5Rx356oYekR0UC+M+0Pri12scaEJaMucudn50L 73hk7duTt4at9DdplFvkNfgKTJthBh4rFU9FLxLo74vijDzMbKmGO1B/yaYbk10v Jh9X3mp9e/NFI5IbfzZf9g5DjclMWgPjL6wwIWr7mJdynGnUC8/E+hCHejQ/ri4F 0Cigba1Us5ZxTMNR1RLwGoYWWHMjUOo2nTHLHAYWedN9YBbLVR5bnEYVZiFnuiBw x792GHZIImMkCzESPxXGiLI0ICoWWhJSYG8Tab0pmm1LnfemLyRfnUuq07GXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu1+Per5KzPD6pqUoVKBf4/tvWrEwHwYDVR0j BBgwFoAUoa5WpFVK+Bb7cMfRUbYLlehoiGYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I1ZDcyZjMtMmRiMi00YmNjLTlmNzctZDE0NDJiNjMyZDA0LzAvQTFBRTU2QTQ1 NTRBRjgxNkZCNzBDN0QxNTFCNjBCOTVFODY4ODg2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUFFNTZBNDU1NEFGODE2RkI3MEM3RDE1MUI2MEI5NUU4Njg4 ODY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvQTFBRTU2QTQ1NTRBRjgxNkZCNzBDN0QxNTFCNjBC OTVFODY4ODg2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACfmb6PwdMyl2CIFhGA82zigoyeP2QHM9aq mgrG7uE7QS7/tWcHmb4roQY6o8mmX01X1LJc+v3WttRKW+WqsaJDzDJAiY9J55w0 YQgHqr6zscocBLvfyUuElY/hcZNmsQah/dcJukIGUA3EPuFbGUlIOrj6sMNBbqwl abELu0j9q8ZaUimvjKQktmTQkCH9lyPPysF8gAavSZW5CcgslI43xT1nOOtY976j 5xiINFvRBkPtcYYrN1GhYVneKxzKKdeZOSJuRovVRdBbRoJfcAr3I0Zx8dIz3iS/ lGf+LwRAt7mJ5sLbAN661koy0L5A0RDFScZHc88N56nYW90743k= -----END CERTIFICATE-----Generated at Tue Sep 22 22:24:31 2026 by rpki-client