$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft File: A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft (raw, json) Hash identifier: CeZYI16qFUzfL8BGANl2CMPX0AlDMBQTNandZdyAEuY= Subject key identifier: F2:A3:59:D2:EC:0A:4F:F9:E2:71:B7:E5:81:AB:85:4B:C3:FB:18:62 Authority key identifier: A9:D5:86:A8:2C:B1:66:90:2F:1D:1B:2C:AE:5E:B4:20:F0:8D:23:D0 Certificate issuer: /CN=A9D586A82CB166902F1D1B2CAE5EB420F08D23D0 Certificate serial: 2DE9B8D20F0184257B1DB9DA602A9AFC685DBF84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft Manifest number: BE Signing time: Mon 21 Sep 2026 23:10:21 +0000 Manifest this update: Mon 21 Sep 2026 23:05:21 +0000 Manifest next update: Wed 23 Sep 2026 02:56:21 +0000 Files and hashes: 1: A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl (hash: lhzQvzBye3kqyC2qOSZfc8tDv9ltK/eJOqlxQFlZaEY=) 2: 3130332e3135302e3135392e302f32342d3234203d3e20313430343331.roa (hash: hcBwS6YzikTq1s/P8jlWWii/vuvMdnJI6Od19w2iLTM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e9:b8:d2:0f:01:84:25:7b:1d:b9:da:60:2a:9a:fc:68:5d:bf:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D586A82CB166902F1D1B2CAE5EB420F08D23D0 Validity Not Before: Sep 21 23:05:21 2026 GMT Not After : Sep 23 02:56:21 2026 GMT Subject: CN=F2A359D2EC0A4FF9E271B7E581AB854BC3FB1862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d6:1c:99:c9:39:a7:b4:94:b6:8d:fe:ca:86: 8e:60:65:cd:77:e1:fc:91:d7:bc:74:28:0f:64:e4: 92:17:5f:23:26:88:cf:83:57:d0:25:26:94:f7:e4: 42:52:60:62:3f:04:28:0d:8e:95:76:02:75:71:2a: 7d:6a:b0:98:03:9e:7f:61:17:fc:ef:60:82:a7:75: 6a:38:ca:ba:c7:41:dd:47:fb:7e:b2:69:41:f7:75: 12:eb:28:dc:1a:09:7d:29:cc:39:a7:8f:5f:50:77: 96:b4:2d:87:eb:08:3b:76:10:87:93:84:03:b1:a2: d6:86:26:78:b5:97:08:f2:1d:b9:ed:2f:d6:20:39: 0a:31:e5:d4:a9:b6:24:bf:32:a5:1b:bf:6b:d5:9a: 08:5d:7d:2f:79:30:e2:80:45:ed:23:80:d9:25:e6: 80:da:cb:0c:a4:76:20:53:b1:bf:ea:ff:42:fa:d4: 7b:76:a2:84:c5:07:02:0b:1a:f1:73:54:46:4b:30: 41:ad:bb:fb:8a:79:d4:15:82:86:48:82:d3:64:92: df:d2:5c:d9:b0:75:67:30:e9:00:11:71:b2:70:26: aa:1c:76:8c:79:ff:f8:0b:c7:34:39:e7:77:0f:7f: 80:67:25:c9:0e:37:7b:a3:a9:fc:61:e7:2d:06:f8: 84:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A3:59:D2:EC:0A:4F:F9:E2:71:B7:E5:81:AB:85:4B:C3:FB:18:62 X509v3 Authority Key Identifier: keyid:A9:D5:86:A8:2C:B1:66:90:2F:1D:1B:2C:AE:5E:B4:20:F0:8D:23:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c8:35:b5:9d:c5:70:6e:36:6d:29:78:04:b4:ae:9f:09:1b: 40:d7:45:14:5c:06:4c:77:f3:f3:9e:87:3c:56:2c:d1:62:7f: 4b:b8:9c:03:fe:f7:ba:c3:d0:6c:55:07:70:f3:15:48:e2:a1: ed:95:d5:93:d0:f2:97:02:72:a3:39:38:1f:47:a6:e2:64:16: cc:42:d1:61:f7:28:d7:b3:ea:94:1e:a5:c8:77:a5:6a:5f:17: 42:b9:07:ad:44:51:b1:6e:ae:43:b1:ec:ed:7b:f7:c3:56:f8: 83:60:0c:44:07:e2:3a:d4:f5:72:f1:a5:0a:64:b1:4a:12:0f: a1:3b:b6:9d:1c:ae:04:68:b5:9b:12:44:8a:27:93:87:e9:80: 7d:d4:88:a4:f3:67:46:cf:44:77:cd:d1:69:e8:4f:72:4b:64: ea:7c:97:b0:a1:d9:d0:91:71:ff:ca:52:74:5b:80:34:b6:36: 7e:17:37:04:37:4e:ff:f4:b9:6f:29:51:b1:9e:44:3d:b4:6c: f9:6b:17:9c:c9:50:e0:5d:cd:56:04:c5:ae:3e:3b:7a:35:26: da:be:05:19:20:42:30:17:ee:dd:02:ee:03:7b:ea:65:b7:06: b5:a0:32:16:86:93:2b:52:33:6d:8d:6b:a2:92:c2:00:d3:ab: dd:66:a8:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULem40g8BhCV7HbnaYCqa/Ghdv4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENTg2QTgyQ0IxNjY5MDJGMUQxQjJDQUU1RUI0MjBG MDhEMjNEMDAeFw0yNjA5MjEyMzA1MjFaFw0yNjA5MjMwMjU2MjFaMDMxMTAvBgNV BAMTKEYyQTM1OUQyRUMwQTRGRjlFMjcxQjdFNTgxQUI4NTRCQzNGQjE4NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC31hyZyTmntJS2jf7Kho5gZc13 4fyR17x0KA9k5JIXXyMmiM+DV9AlJpT35EJSYGI/BCgNjpV2AnVxKn1qsJgDnn9h F/zvYIKndWo4yrrHQd1H+36yaUH3dRLrKNwaCX0pzDmnj19Qd5a0LYfrCDt2EIeT hAOxotaGJni1lwjyHbntL9YgOQox5dSptiS/MqUbv2vVmghdfS95MOKARe0jgNkl 5oDaywykdiBTsb/q/0L61Ht2ooTFBwILGvFzVEZLMEGtu/uKedQVgoZIgtNkkt/S XNmwdWcw6QARcbJwJqocdox5//gLxzQ553cPf4BnJckON3ujqfxh5y0G+IRNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8qNZ0uwKT/nicbflgauFS8P7GGIwHwYDVR0j BBgwFoAUqdWGqCyxZpAvHRssrl60IPCNI9AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODE2NWU0ODEtNWE3OS00ODY4LWE0ZTQtZmFjZmQ5MjJkODEzLzAvQTlENTg2QTgy Q0IxNjY5MDJGMUQxQjJDQUU1RUI0MjBGMDhEMjNEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOUQ1ODZBODJDQjE2NjkwMkYxRDFCMkNBRTVFQjQyMEYwOEQy M0QwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODE2NWU0ODEtNWE3OS00ODY4LWE0 ZTQtZmFjZmQ5MjJkODEzLzAvQTlENTg2QTgyQ0IxNjY5MDJGMUQxQjJDQUU1RUI0 MjBGMDhEMjNEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/INbWdxXBuNm0peAS0rp8JG0DXRRRcBkx3 8/OehzxWLNFif0u4nAP+97rD0GxVB3DzFUjioe2V1ZPQ8pcCcqM5OB9HpuJkFsxC 0WH3KNez6pQepch3pWpfF0K5B61EUbFurkOx7O1798NW+INgDEQH4jrU9XLxpQpk sUoSD6E7tp0crgRotZsSRIonk4fpgH3UiKTzZ0bPRHfN0WnoT3JLZOp8l7Ch2dCR cf/KUnRbgDS2Nn4XNwQ3Tv/0uW8pUbGeRD20bPlrF5zJUOBdzVYExa4+O3o1Jtq+ BRkgQjAX7t0C7gN76mW3BrWgMhaGkytSM22Na6KSwgDTq91mqAc= -----END CERTIFICATE-----Generated at Tue Sep 22 20:58:26 2026 by rpki-client