$ rpki-client -vvvf rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft File: A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft (raw, json) Hash identifier: R0132+x6phRQLCXMaJp/h9EKKacNAeQ+YwU0yBQ06ko= Subject key identifier: 15:5B:65:20:F5:BE:3C:BD:D6:9C:8E:CB:0E:79:88:13:43:48:0A:06 Authority key identifier: A8:D2:11:A5:40:A0:A5:7C:5D:6A:CB:50:32:09:1B:1A:80:BA:45:8A Certificate issuer: /CN=A8D211A540A0A57C5D6ACB5032091B1A80BA458A Certificate serial: 03D05521E4262201899F7278DF6C2CB4D7A6C03B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft Manifest number: BD Signing time: Sun 20 Sep 2026 18:44:57 +0000 Manifest this update: Sun 20 Sep 2026 18:39:57 +0000 Manifest next update: Mon 21 Sep 2026 22:22:57 +0000 Files and hashes: 1: 3130332e37302e31382e302f32342d3234203d3e20313335343632.roa (hash: m9ehKEyZKrnBxPUxglJU8vra1GpJJTUpkzpv7UpDmeA=) 2: 3130332e37302e31372e302f32342d3234203d3e20313335343632.roa (hash: lI29Pn9PS61mVywxJrefD11DZjjtEbyEF7MkqWi1LZ4=) 3: 3130332e37302e31392e302f32342d3234203d3e20313335343632.roa (hash: 7evCo+jZlUXwDGTBsCsQhDg2DWHBDqS4cWsJw91trY0=) 4: 3130332e37302e31362e302f32342d3234203d3e20313335343632.roa (hash: SJ+P4+oX8hijYzZ9qA/WaUDV4gideRVgm7o6icDoWoM=) 5: A8D211A540A0A57C5D6ACB5032091B1A80BA458A.crl (hash: wplno3Yn6LsCuK716DnZEiLcBCGO7oMI1j4kKCsvXQI=) 6: 3130332e37302e31362e302f32322d3232203d3e20313335343632.roa (hash: Tf1EVsRaCkdXitEPeo2GAGcjlLdYQ1D5kk2M9WCpy3U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.crl rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d0:55:21:e4:26:22:01:89:9f:72:78:df:6c:2c:b4:d7:a6:c0:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8D211A540A0A57C5D6ACB5032091B1A80BA458A Validity Not Before: Sep 20 18:39:57 2026 GMT Not After : Sep 21 22:22:57 2026 GMT Subject: CN=155B6520F5BE3CBDD69C8ECB0E79881343480A06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c7:a9:bf:1b:ac:31:ba:18:15:86:15:7a:65: 86:38:21:5f:3c:c7:02:b3:43:0d:6a:21:ad:88:69: 19:ce:d9:85:26:41:01:81:e9:be:66:6d:57:f6:a5: 5f:9d:7c:3c:a2:d2:b0:36:fc:56:9b:79:d8:59:93: fb:58:12:fe:2c:eb:ee:06:1c:0f:db:04:ae:ac:f2: 4d:9f:83:a8:f1:b6:02:99:05:50:4d:3b:0e:58:ab: 0a:be:3e:11:91:b0:3f:c6:ba:c2:a6:15:00:dc:61: c7:4a:a3:7b:62:38:f8:a8:cb:b2:93:75:89:19:0f: db:de:b1:f4:96:8d:2b:23:31:b5:3b:be:c2:72:9d: a6:78:41:00:6e:2e:fd:30:2c:54:55:12:0a:0e:69: 64:7c:31:44:6d:10:df:f7:2e:a8:72:e4:3f:4a:07: a8:10:1e:cb:46:ee:88:e4:04:34:b9:57:d2:6e:82: a1:fc:57:92:57:58:01:b5:89:99:c0:f6:52:88:6c: 25:6e:ba:ae:96:80:a4:ce:0e:b1:8a:48:ff:a3:ab: 13:50:86:52:2b:9d:e9:e1:fa:5f:c8:d8:d9:2b:5d: 9a:ec:d7:72:81:49:3b:f4:4b:21:1f:f4:50:fe:3a: f3:6b:f1:09:d0:22:9c:0b:16:3b:c8:22:26:d2:aa: e9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5B:65:20:F5:BE:3C:BD:D6:9C:8E:CB:0E:79:88:13:43:48:0A:06 X509v3 Authority Key Identifier: keyid:A8:D2:11:A5:40:A0:A5:7C:5D:6A:CB:50:32:09:1B:1A:80:BA:45:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:2d:21:5d:65:7c:0b:2c:8a:2a:41:29:29:e4:3e:17:cb:19: bf:04:77:2e:23:f3:fa:e4:8e:42:68:04:3f:97:6b:ba:f3:47: 9d:74:b9:70:ed:f3:92:31:a3:dc:bc:69:25:f4:81:05:32:da: c2:f5:c4:44:0f:fb:d6:00:ca:df:08:fa:b2:ff:86:64:ad:75: a4:ce:83:38:0f:7e:c6:83:d9:80:e0:d6:ef:d9:5e:25:4d:7e: 30:ed:8f:a5:6d:df:78:1a:84:4d:e7:1f:02:11:42:78:8d:8c: 20:c0:c3:1b:10:18:d8:2f:6d:b5:a5:bd:45:6c:a1:39:d5:ce: ec:99:80:6d:aa:87:26:a1:9e:4c:9e:fc:d7:62:b3:cb:25:48: e5:78:cf:5e:fa:c7:7c:f7:60:60:eb:6a:a9:12:dc:1d:8f:f1: b8:ca:d7:00:23:66:cc:e4:db:14:78:53:c8:59:c8:07:f4:82: 34:1b:1b:46:93:a6:2e:58:77:e3:0d:08:9e:1c:35:ec:06:5a: 79:2c:b0:b6:ce:fe:8d:e8:1a:5d:3b:89:c1:2e:52:1c:bf:94: 8e:86:dd:18:61:fc:55:e1:96:75:58:44:5d:c8:36:34:c3:c1: ac:2e:c7:6f:91:cb:b1:3d:7c:45:8d:65:47:16:6e:52:9f:71: be:e4:03:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA9BVIeQmIgGJn3J432wstNemwDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThEMjExQTU0MEEwQTU3QzVENkFDQjUwMzIwOTFCMUE4 MEJBNDU4QTAeFw0yNjA5MjAxODM5NTdaFw0yNjA5MjEyMjIyNTdaMDMxMTAvBgNV BAMTKDE1NUI2NTIwRjVCRTNDQkRENjlDOEVDQjBFNzk4ODEzNDM0ODBBMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCax6m/G6wxuhgVhhV6ZYY4IV88 xwKzQw1qIa2IaRnO2YUmQQGB6b5mbVf2pV+dfDyi0rA2/FabedhZk/tYEv4s6+4G HA/bBK6s8k2fg6jxtgKZBVBNOw5Yqwq+PhGRsD/GusKmFQDcYcdKo3tiOPioy7KT dYkZD9vesfSWjSsjMbU7vsJynaZ4QQBuLv0wLFRVEgoOaWR8MURtEN/3Lqhy5D9K B6gQHstG7ojkBDS5V9JugqH8V5JXWAG1iZnA9lKIbCVuuq6WgKTODrGKSP+jqxNQ hlIrnenh+l/I2NkrXZrs13KBSTv0SyEf9FD+OvNr8QnQIpwLFjvIIibSqulnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFVtlIPW+PL3WnI7LDnmIE0NICgYwHwYDVR0j BBgwFoAUqNIRpUCgpXxdastQMgkbGoC6RYowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZmNGQ0ZjEtYjM2Yy00YTQ2LTg4NDQtNGU2YzdhM2M5N2Q5LzAvQThEMjExQTU0 MEEwQTU3QzVENkFDQjUwMzIwOTFCMUE4MEJBNDU4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEQyMTFBNTQwQTBBNTdDNUQ2QUNCNTAzMjA5MUIxQTgwQkE0 NThBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZmNGQ0ZjEtYjM2Yy00YTQ2LTg4 NDQtNGU2YzdhM2M5N2Q5LzAvQThEMjExQTU0MEEwQTU3QzVENkFDQjUwMzIwOTFC MUE4MEJBNDU4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUtIV1lfAssiipBKSnkPhfLGb8Edy4j8/rk jkJoBD+Xa7rzR510uXDt85Ixo9y8aSX0gQUy2sL1xEQP+9YAyt8I+rL/hmStdaTO gzgPfsaD2YDg1u/ZXiVNfjDtj6Vt33gahE3nHwIRQniNjCDAwxsQGNgvbbWlvUVs oTnVzuyZgG2qhyahnkye/Ndis8slSOV4z176x3z3YGDraqkS3B2P8bjK1wAjZszk 2xR4U8hZyAf0gjQbG0aTpi5Yd+MNCJ4cNewGWnkssLbO/o3oGl07icEuUhy/lI6G 3Rhh/FXhlnVYRF3INjTDwawux2+Ry7E9fEWNZUcWblKfcb7kAx0= -----END CERTIFICATE-----Generated at Mon Sep 21 03:33:27 2026 by rpki-client