$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.mft File: A20182F9E8910D783A73A086F2AE72D89BE78C37.mft (raw, json) Hash identifier: 5vkfq8biTMGYI+/hPBoPuAPywIEJeyWkhPInBhctALw= Subject key identifier: 5F:9E:1B:E1:21:F3:51:0E:2A:F0:69:A8:4A:54:65:00:B5:A3:47:37 Authority key identifier: A2:01:82:F9:E8:91:0D:78:3A:73:A0:86:F2:AE:72:D8:9B:E7:8C:37 Certificate issuer: /CN=A20182F9E8910D783A73A086F2AE72D89BE78C37 Certificate serial: 5950D6C5AD5160102D54CA054CF5FCF991140314 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A20182F9E8910D783A73A086F2AE72D89BE78C37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 04:16:49 +0000 Manifest this update: Tue 22 Sep 2026 04:11:49 +0000 Manifest next update: Wed 23 Sep 2026 07:41:49 +0000 Files and hashes: 1: A20182F9E8910D783A73A086F2AE72D89BE78C37.crl (hash: mGRBEt7nX5O059TaYedt2wcicpG8fD7UdQRdJiQZGOs=) 2: 3130332e3132302e3233332e302f32342d3234203d3e20313338303435.roa (hash: LhYIbVJJA5dJnxEypyUmNgz7cp+p/g+/mtBrk7YH2hI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.crl rsync://rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A20182F9E8910D783A73A086F2AE72D89BE78C37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 07:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:50:d6:c5:ad:51:60:10:2d:54:ca:05:4c:f5:fc:f9:91:14:03:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A20182F9E8910D783A73A086F2AE72D89BE78C37 Validity Not Before: Sep 22 04:11:49 2026 GMT Not After : Sep 23 07:41:49 2026 GMT Subject: CN=5F9E1BE121F3510E2AF069A84A546500B5A34737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:5d:e9:f5:3b:4a:fa:c9:67:e0:46:b4:60: 22:54:49:0f:22:d4:23:70:1b:99:85:c8:31:d1:47: 7f:c8:21:ff:fa:62:41:a2:1d:18:d7:46:e8:38:af: 5f:5c:19:66:7d:2f:51:71:ce:06:ad:ee:4b:47:8a: fc:81:4b:89:4a:2c:53:35:81:18:cb:91:13:5b:b7: d3:77:a4:0b:13:6d:46:5b:47:e8:64:21:36:95:51: 24:9e:8b:df:4a:30:96:d8:da:11:31:74:bf:ed:37: 5e:aa:6e:64:76:4e:52:60:d2:d4:c7:45:f8:e6:7c: af:25:a8:43:04:d4:63:db:ea:4e:a6:52:f8:cc:59: fd:7a:9e:5d:f7:f2:a6:2e:55:fa:11:5c:fc:bb:8c: 81:0b:0f:97:92:ea:17:42:ab:75:f7:a8:1b:de:a4: f1:74:86:f1:99:46:f6:bf:28:c2:9e:c9:5b:63:9d: c0:77:56:b8:57:a9:f8:20:f7:48:35:5a:82:d0:16: 41:be:7f:3c:85:85:7f:3b:72:de:64:07:78:2c:64: f8:18:63:fb:0f:bb:e5:8e:cf:4e:9a:34:16:aa:ab: d4:64:61:b8:36:a8:e1:b3:93:c5:f6:c6:60:6d:0e: 41:68:7b:f8:dd:c0:2e:c6:da:1b:9c:13:38:46:bc: 93:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9E:1B:E1:21:F3:51:0E:2A:F0:69:A8:4A:54:65:00:B5:A3:47:37 X509v3 Authority Key Identifier: keyid:A2:01:82:F9:E8:91:0D:78:3A:73:A0:86:F2:AE:72:D8:9B:E7:8C:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A20182F9E8910D783A73A086F2AE72D89BE78C37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e8:72:07:a5:09:30:4c:88:3d:bf:39:74:f6:26:5f:e8:6a: 0d:f4:22:5d:a3:d1:9d:09:db:7d:14:0e:27:d4:2e:85:c3:91: a7:fb:d2:8e:95:be:f0:21:bb:38:fe:71:2a:e6:18:c3:98:54: f4:82:2e:d4:d8:99:5d:e8:43:1f:d4:d0:56:2c:75:76:61:e9: 3a:04:30:c5:62:b7:d1:d9:44:a4:ff:75:d6:f7:73:d9:24:19: ef:95:f2:07:dc:bc:d8:6b:a5:5a:9b:52:3f:fd:f0:9f:33:b5: dd:cf:22:09:16:9d:26:2c:05:ad:40:bc:d0:ba:52:4a:1f:b4: 60:76:26:9e:9a:b4:ab:26:54:24:ac:3b:c9:a2:1e:cf:bf:b8: 14:70:0f:b6:8e:1b:3b:80:ec:e0:61:d5:08:38:ff:c3:a0:b7: 36:fa:cb:aa:7a:da:2b:7e:be:cb:a3:b7:7f:a1:ab:d9:7d:46: 15:db:9b:9b:8f:7f:1c:b1:f8:a9:ef:aa:3f:6a:87:a6:42:15: 58:2e:ca:8c:9c:2d:13:54:4e:eb:84:b0:44:1a:99:9c:25:04: 8f:e9:b4:57:85:91:f0:75:7e:89:27:df:bd:2e:6f:76:7a:78: 79:69:41:7d:3c:a3:74:34:9a:63:c0:43:2f:05:f1:7c:31:8b: ce:b8:5c:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWVDWxa1RYBAtVMoFTPX8+ZEUAxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIwMTgyRjlFODkxMEQ3ODNBNzNBMDg2RjJBRTcyRDg5 QkU3OEMzNzAeFw0yNjA5MjIwNDExNDlaFw0yNjA5MjMwNzQxNDlaMDMxMTAvBgNV BAMTKDVGOUUxQkUxMjFGMzUxMEUyQUYwNjlBODRBNTQ2NTAwQjVBMzQ3MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwD13p9TtK+sln4Ea0YCJUSQ8i 1CNwG5mFyDHRR3/IIf/6YkGiHRjXRug4r19cGWZ9L1Fxzgat7ktHivyBS4lKLFM1 gRjLkRNbt9N3pAsTbUZbR+hkITaVUSSei99KMJbY2hExdL/tN16qbmR2TlJg0tTH RfjmfK8lqEME1GPb6k6mUvjMWf16nl338qYuVfoRXPy7jIELD5eS6hdCq3X3qBve pPF0hvGZRva/KMKeyVtjncB3VrhXqfgg90g1WoLQFkG+fzyFhX87ct5kB3gsZPgY Y/sPu+WOz06aNBaqq9RkYbg2qOGzk8X2xmBtDkFoe/jdwC7G2hucEzhGvJNJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX54b4SHzUQ4q8GmoSlRlALWjRzcwHwYDVR0j BBgwFoAUogGC+eiRDXg6c6CG8q5y2JvnjDcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTNhMjZiZmItNjc1Zi00NDRmLTkwYzktNWQzYTliMThjMzRjLzAvQTIwMTgyRjlF ODkxMEQ3ODNBNzNBMDg2RjJBRTcyRDg5QkU3OEMzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMjAxODJGOUU4OTEwRDc4M0E3M0EwODZGMkFFNzJEODlCRTc4 QzM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTNhMjZiZmItNjc1Zi00NDRmLTkw YzktNWQzYTliMThjMzRjLzAvQTIwMTgyRjlFODkxMEQ3ODNBNzNBMDg2RjJBRTcy RDg5QkU3OEMzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvocgelCTBMiD2/OXT2Jl/oag30Il2j0Z0J 230UDifULoXDkaf70o6VvvAhuzj+cSrmGMOYVPSCLtTYmV3oQx/U0FYsdXZh6ToE MMVit9HZRKT/ddb3c9kkGe+V8gfcvNhrpVqbUj/98J8ztd3PIgkWnSYsBa1AvNC6 UkoftGB2Jp6atKsmVCSsO8miHs+/uBRwD7aOGzuA7OBh1Qg4/8Ogtzb6y6p62it+ vsujt3+hq9l9RhXbm5uPfxyx+Knvqj9qh6ZCFVguyoycLRNUTuuEsEQamZwlBI/p tFeFkfB1fokn370ub3Z6eHlpQX08o3Q0mmPAQy8F8Xwxi864XN0= -----END CERTIFICATE-----Generated at Tue Sep 22 17:21:46 2026 by rpki-client