$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft File: A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft (raw, json) Hash identifier: LStMkhxH2N98CwJpJJDsyxCWMolyNfZxv4EagxRSOO0= Subject key identifier: A2:E5:FC:FA:D8:D3:18:4F:E4:B0:70:64:0B:7C:2D:1C:3D:EB:5F:65 Authority key identifier: A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C Certificate issuer: /CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C Certificate serial: 351A170361B1336D6A47063395E37B26C34B24AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft Manifest number: BE Signing time: Sun 20 Sep 2026 17:08:03 +0000 Manifest this update: Sun 20 Sep 2026 17:03:03 +0000 Manifest next update: Mon 21 Sep 2026 20:22:03 +0000 Files and hashes: 1: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: oVthfsHvJfZFfAfPgVnP6RK4i2YXuHXT4TJi3carfJc=) 2: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: Xz4v16/PuWF3xc6NRQS+cFH5cfyFs8wYPFxR2GtXMDw=) 3: A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl (hash: 2Skte2uF94FKe4/KGzrAJbR/2Te7x337WRqQI468cm0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 20:22:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:1a:17:03:61:b1:33:6d:6a:47:06:33:95:e3:7b:26:c3:4b:24:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C Validity Not Before: Sep 20 17:03:03 2026 GMT Not After : Sep 21 20:22:03 2026 GMT Subject: CN=A2E5FCFAD8D3184FE4B070640B7C2D1C3DEB5F65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:39:50:76:49:1b:45:88:bf:ca:5c:c4:c0:52: 60:43:63:cd:a8:f2:89:11:69:91:14:94:1c:aa:1e: 95:2c:ce:a4:ad:e4:04:82:4e:e8:d4:47:7a:ac:4d: 96:41:b9:4a:62:7a:84:70:ce:cb:98:8f:f1:7a:48: 04:17:49:cf:85:3c:2f:ea:e1:d8:08:84:33:e9:d0: 5d:3c:28:5d:7b:57:e5:99:7b:a9:60:13:d5:c8:10: db:78:b1:3c:d8:ee:0e:56:63:05:ad:5a:62:70:c6: 02:ef:19:8a:8f:fe:ea:02:fc:20:3c:c0:69:f5:3f: 3b:eb:e4:ff:c3:a7:3b:d1:69:c5:49:c5:5f:4c:ea: 8e:e6:41:4c:98:56:be:cf:61:b8:66:e2:0c:0c:58: be:e2:b5:0b:07:04:23:64:11:74:b3:f6:0a:7a:fb: 81:d4:81:4e:7c:d5:e7:49:74:fa:7d:c7:1c:0f:4f: c6:ea:87:ed:f3:8d:c1:2a:79:a3:e4:30:4a:fd:10: 00:b9:73:08:84:51:7e:b0:84:f7:00:95:d0:05:4f: 32:dc:0e:87:c0:9d:77:46:76:54:39:aa:78:ff:91: 28:72:41:bc:63:09:56:9d:b5:36:7e:5b:7c:77:9b: 87:a4:49:ff:47:09:4a:bc:d3:49:f1:7e:13:9a:03: 73:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E5:FC:FA:D8:D3:18:4F:E4:B0:70:64:0B:7C:2D:1C:3D:EB:5F:65 X509v3 Authority Key Identifier: keyid:A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:5a:b2:ef:28:d2:77:b2:7e:cf:18:72:e4:b3:3c:6f:8c:cf: 5a:b3:f1:b0:df:c3:84:74:b1:f9:04:4a:11:8d:be:ae:91:74: 32:62:0b:57:e2:7c:bb:bc:0d:b6:34:88:83:97:9a:c2:17:7e: a4:12:6a:d1:8d:ca:55:c6:4e:58:ff:fa:01:97:e4:d4:de:9c: 1b:db:a7:9a:85:08:40:57:4e:ba:0b:80:d1:c7:11:40:e9:6a: 70:a0:40:01:fb:bc:08:79:6b:99:19:6c:0e:f8:d8:17:0e:e7: 05:e1:90:dd:a2:e2:20:3f:55:1a:fc:fb:20:d3:c7:c8:9b:34: 11:c7:13:04:e9:37:3d:63:9a:dc:75:9c:31:53:fb:2e:9c:c3: 86:b5:8c:e4:6a:92:0f:16:39:66:23:b6:a6:4c:e0:96:b9:41: 6d:eb:21:30:78:3b:b5:92:6e:21:e8:b7:5d:bb:b1:22:2d:56: 19:0d:b1:ad:85:5c:b2:2a:64:98:0c:a9:fa:58:af:f8:06:2a: c6:be:c8:86:81:bd:22:94:bd:85:65:ff:27:79:48:57:1f:40: 99:c5:ef:56:d8:92:c0:33:bf:b6:88:a4:4a:86:f8:48:3d:51: 31:35:77:cf:5a:09:0c:a2:b0:7a:cf:95:67:94:7e:a9:b9:92: fe:9a:bd:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNRoXA2GxM21qRwYzleN7JsNLJK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBNUE1QzI2MDM5QUNGMjE2REYzRTVCMjg0MzQ1Njkz RUU4RjM0QzAeFw0yNjA5MjAxNzAzMDNaFw0yNjA5MjEyMDIyMDNaMDMxMTAvBgNV BAMTKEEyRTVGQ0ZBRDhEMzE4NEZFNEIwNzA2NDBCN0MyRDFDM0RFQjVGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTOVB2SRtFiL/KXMTAUmBDY82o 8okRaZEUlByqHpUszqSt5ASCTujUR3qsTZZBuUpieoRwzsuYj/F6SAQXSc+FPC/q 4dgIhDPp0F08KF17V+WZe6lgE9XIENt4sTzY7g5WYwWtWmJwxgLvGYqP/uoC/CA8 wGn1Pzvr5P/DpzvRacVJxV9M6o7mQUyYVr7PYbhm4gwMWL7itQsHBCNkEXSz9gp6 +4HUgU581edJdPp9xxwPT8bqh+3zjcEqeaPkMEr9EAC5cwiEUX6whPcAldAFTzLc DofAnXdGdlQ5qnj/kShyQbxjCVadtTZ+W3x3m4ekSf9HCUq800nxfhOaA3MrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUouX8+tjTGE/ksHBkC3wtHD3rX2UwHwYDVR0j BBgwFoAUpKWlwmA5rPIW3z5bKENFaT7o80wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWQyZmE1MWUtM2ZkNC00NTIwLWIzNzUtMDllZWY1ZTBlNTEwLzAvQTRBNUE1QzI2 MDM5QUNGMjE2REYzRTVCMjg0MzQ1NjkzRUU4RjM0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNEE1QTVDMjYwMzlBQ0YyMTZERjNFNUIyODQzNDU2OTNFRThG MzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz NzUtMDllZWY1ZTBlNTEwLzAvQTRBNUE1QzI2MDM5QUNGMjE2REYzRTVCMjg0MzQ1 NjkzRUU4RjM0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZasu8o0neyfs8YcuSzPG+Mz1qz8bDfw4R0 sfkEShGNvq6RdDJiC1fifLu8DbY0iIOXmsIXfqQSatGNylXGTlj/+gGX5NTenBvb p5qFCEBXTroLgNHHEUDpanCgQAH7vAh5a5kZbA742BcO5wXhkN2i4iA/VRr8+yDT x8ibNBHHEwTpNz1jmtx1nDFT+y6cw4a1jORqkg8WOWYjtqZM4Ja5QW3rITB4O7WS biHot127sSItVhkNsa2FXLIqZJgMqfpYr/gGKsa+yIaBvSKUvYVl/yd5SFcfQJnF 71bYksAzv7aIpEqG+Eg9UTE1d89aCQyisHrPlWeUfqm5kv6avas= -----END CERTIFICATE-----Generated at Mon Sep 21 09:07:31 2026 by rpki-client