$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft File: A4249B719E5F988286AD3B4164C4E77F434FF948.mft (raw, json) Hash identifier: andIXu2T/uZRZ3lFGmzsOghwUtd3k35nkDVrSLRiEDM= Subject key identifier: 9B:9C:2B:F5:C5:BA:04:6A:15:81:02:0A:E6:92:4B:02:56:AE:F4:34 Authority key identifier: A4:24:9B:71:9E:5F:98:82:86:AD:3B:41:64:C4:E7:7F:43:4F:F9:48 Certificate issuer: /CN=A4249B719E5F988286AD3B4164C4E77F434FF948 Certificate serial: 047EAE5BA37B707CB6F3ACE3E357933DFC93E52C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft Manifest number: BF Signing time: Tue 22 Sep 2026 03:30:55 +0000 Manifest this update: Tue 22 Sep 2026 03:25:55 +0000 Manifest next update: Wed 23 Sep 2026 06:40:55 +0000 Files and hashes: 1: A4249B719E5F988286AD3B4164C4E77F434FF948.crl (hash: uS2JpY7Uy1GALuRGWq+WCF8s0FhiPBNJ9cQPbOeNQVU=) 2: 3136302e3139312e3233342e302f32342d3234203d3e20313533343932.roa (hash: /8ZMrBAQoa3qQ8hBZzRb+TXTbN8qY8Wvj8VBQo+giW0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.crl rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 06:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:7e:ae:5b:a3:7b:70:7c:b6:f3:ac:e3:e3:57:93:3d:fc:93:e5:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4249B719E5F988286AD3B4164C4E77F434FF948 Validity Not Before: Sep 22 03:25:55 2026 GMT Not After : Sep 23 06:40:55 2026 GMT Subject: CN=9B9C2BF5C5BA046A1581020AE6924B0256AEF434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:fb:f6:8a:07:ca:ef:9c:d4:69:af:ad:99:61: 0c:24:4f:dd:5b:73:99:61:14:3f:97:6b:bf:c4:30: e7:bc:8f:22:07:ed:7e:ec:07:46:0d:50:7e:03:37: a0:72:9e:9f:ff:a1:de:c0:11:8b:5d:81:4f:28:23: 30:9e:ab:97:d9:85:44:18:f1:52:78:a1:ec:4b:82: 5f:54:2c:55:70:0c:a9:79:bc:b2:4e:11:79:b6:e2: 32:c0:26:4b:16:df:d8:35:fb:e7:37:c3:94:e3:fd: 06:d5:f7:a0:5a:e3:ab:b9:60:6a:35:f1:e6:84:ba: 3c:e1:46:4c:96:7c:cf:7a:cd:89:06:d3:a5:f0:56: d8:8e:ae:f7:1b:25:cf:44:8d:68:54:5d:77:8c:4c: 6e:80:42:11:32:de:a5:b2:a4:12:67:02:1f:ed:8a: 65:ce:46:55:8e:29:e9:21:69:ff:60:ef:03:88:e7: 03:88:f5:7a:61:20:ca:24:f6:24:bc:10:ac:2a:c6: c1:8d:ac:37:4e:e1:51:16:e5:29:70:5d:64:65:b9: 6d:91:3d:1f:53:08:89:00:b4:df:e0:d6:81:a5:12: ba:1e:17:d5:7f:5d:76:97:54:14:5f:ba:5a:e5:b3: 98:78:9d:fa:fd:4f:69:b2:31:d4:bd:af:d6:81:b1: a9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9C:2B:F5:C5:BA:04:6A:15:81:02:0A:E6:92:4B:02:56:AE:F4:34 X509v3 Authority Key Identifier: keyid:A4:24:9B:71:9E:5F:98:82:86:AD:3B:41:64:C4:E7:7F:43:4F:F9:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:9e:d9:11:34:33:b7:a1:59:32:b6:73:d2:4d:51:c4:aa:5a: 27:e1:26:51:b4:5c:01:b8:b9:15:18:60:cc:39:0c:26:a0:53: ab:f1:98:b2:e6:15:83:68:0e:a9:d2:d5:cc:40:d9:77:d0:79: 44:7a:7e:af:d3:25:64:6b:ee:65:34:1e:23:23:a4:67:00:a9: dc:35:5f:27:89:b6:f5:72:70:12:fb:07:d7:69:06:09:4a:c9: c9:22:8b:e1:08:eb:ba:4e:da:d1:ec:61:17:d8:b0:3f:7b:db: b6:df:c9:d4:c6:a8:7c:ba:4a:a8:ce:19:b8:86:48:83:fb:3c: c4:e9:0b:a3:fd:4f:3f:79:ee:c5:97:4c:64:7c:bd:5d:d1:88: 59:00:45:c4:cb:55:51:b0:f5:8c:3c:a6:66:db:d7:57:aa:7e: 06:b2:33:27:df:09:54:11:d9:89:5e:26:d0:95:78:34:98:68: 30:4d:29:27:be:ba:31:b5:44:a7:9b:5d:e4:03:58:e3:87:85: f9:e3:2d:47:f3:87:53:91:8f:50:35:d6:b9:c1:fc:fd:08:a7: 31:15:4d:2a:99:b2:91:57:50:31:95:45:73:5f:fa:3c:a1:60: 3a:c5:48:11:f5:fe:5c:1b:e4:14:7b:62:02:37:fa:36:31:8b: ff:2c:4a:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBH6uW6N7cHy286zj41eTPfyT5SwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyNDlCNzE5RTVGOTg4Mjg2QUQzQjQxNjRDNEU3N0Y0 MzRGRjk0ODAeFw0yNjA5MjIwMzI1NTVaFw0yNjA5MjMwNjQwNTVaMDMxMTAvBgNV BAMTKDlCOUMyQkY1QzVCQTA0NkExNTgxMDIwQUU2OTI0QjAyNTZBRUY0MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4+/aKB8rvnNRpr62ZYQwkT91b c5lhFD+Xa7/EMOe8jyIH7X7sB0YNUH4DN6Bynp//od7AEYtdgU8oIzCeq5fZhUQY 8VJ4oexLgl9ULFVwDKl5vLJOEXm24jLAJksW39g1++c3w5Tj/QbV96Ba46u5YGo1 8eaEujzhRkyWfM96zYkG06XwVtiOrvcbJc9EjWhUXXeMTG6AQhEy3qWypBJnAh/t imXORlWOKekhaf9g7wOI5wOI9XphIMok9iS8EKwqxsGNrDdO4VEW5SlwXWRluW2R PR9TCIkAtN/g1oGlEroeF9V/XXaXVBRfulrls5h4nfr9T2myMdS9r9aBsannAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm5wr9cW6BGoVgQIK5pJLAlau9DQwHwYDVR0j BBgwFoAUpCSbcZ5fmIKGrTtBZMTnf0NP+UgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWJjYzYyYWUtMjBjOC00OTc0LWFhZTktYjEwOGRmOGUyZjU5LzAvQTQyNDlCNzE5 RTVGOTg4Mjg2QUQzQjQxNjRDNEU3N0Y0MzRGRjk0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNDI0OUI3MTlFNUY5ODgyODZBRDNCNDE2NEM0RTc3RjQzNEZG OTQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWJjYzYyYWUtMjBjOC00OTc0LWFh ZTktYjEwOGRmOGUyZjU5LzAvQTQyNDlCNzE5RTVGOTg4Mjg2QUQzQjQxNjRDNEU3 N0Y0MzRGRjk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACe2RE0M7ehWTK2c9JNUcSqWifhJlG0XAG4 uRUYYMw5DCagU6vxmLLmFYNoDqnS1cxA2XfQeUR6fq/TJWRr7mU0HiMjpGcAqdw1 XyeJtvVycBL7B9dpBglKyckii+EI67pO2tHsYRfYsD9727bfydTGqHy6SqjOGbiG SIP7PMTpC6P9Tz957sWXTGR8vV3RiFkARcTLVVGw9Yw8pmbb11eqfgayMyffCVQR 2YleJtCVeDSYaDBNKSe+ujG1RKebXeQDWOOHhfnjLUfzh1ORj1A11rnB/P0IpzEV TSqZspFXUDGVRXNf+jyhYDrFSBH1/lwb5BR7YgI3+jYxi/8sSk0= -----END CERTIFICATE-----Generated at Tue Sep 22 06:49:52 2026 by rpki-client