$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft File: A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft (raw, json) Hash identifier: Q0Xnr5n8EjPrjDXu1o4/IuSa9EF0hU0qLZ5wCklBbhg= Subject key identifier: 5A:B4:5A:E6:09:2E:E5:09:27:87:88:9D:5D:D5:87:4A:59:07:3E:86 Authority key identifier: A7:85:B4:C8:90:C9:E2:6C:FC:E6:84:9F:EF:00:9B:04:1D:31:D5:F2 Certificate issuer: /CN=A785B4C890C9E26CFCE6849FEF009B041D31D5F2 Certificate serial: 594261E50B8B15BE7C1C643F5C6A8CC8CC8D69D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft Manifest number: BE Signing time: Mon 21 Sep 2026 12:11:22 +0000 Manifest this update: Mon 21 Sep 2026 12:06:22 +0000 Manifest next update: Tue 22 Sep 2026 15:12:22 +0000 Files and hashes: 1: A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl (hash: 4SIT4x1DZKtF/OfLzz5ppnRZcnTUNSr6+w5I04q3o3c=) 2: 3130332e35392e39342e302f32332d3234203d3e20313336303532.roa (hash: C+h1+9cN0GpUOXDh90MHekCqY6uk6Swn27VB4kNaByQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 15:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:42:61:e5:0b:8b:15:be:7c:1c:64:3f:5c:6a:8c:c8:cc:8d:69:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A785B4C890C9E26CFCE6849FEF009B041D31D5F2 Validity Not Before: Sep 21 12:06:22 2026 GMT Not After : Sep 22 15:12:22 2026 GMT Subject: CN=5AB45AE6092EE5092787889D5DD5874A59073E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:aa:a5:96:45:5a:62:0b:09:a3:87:e6:33:20: ba:e5:44:30:cf:1b:06:07:33:fa:52:f3:44:0e:16: 5a:82:41:c1:00:3d:ac:52:94:46:d5:dc:b4:73:c4: 3d:72:5c:e5:d1:7a:7f:b3:43:c2:92:5d:89:bd:e5: 5c:58:a9:0f:f0:70:d2:74:b4:5d:a1:bd:6c:27:71: b5:51:27:7b:42:b9:95:5c:89:ef:4e:3e:f3:09:17: ec:17:99:37:1d:c4:a8:e7:5e:7a:2b:d4:d1:56:fa: cb:1c:d6:be:ce:4f:4d:2d:0b:30:32:0f:c1:d0:b1: ae:a2:23:ce:64:f8:86:d6:72:93:d2:9d:df:05:2b: 88:a1:4c:34:86:da:11:ca:69:89:84:0b:f5:ee:7d: 10:9e:0d:01:21:be:57:96:b9:d9:a3:fb:73:0b:df: 73:80:10:2c:5d:15:83:5e:ca:8e:6c:7b:52:9c:98: 02:9f:37:83:f7:d4:34:34:cc:67:a7:b6:fa:cc:10: 5c:05:d4:41:3a:d7:fa:17:f3:e4:75:bd:83:d5:45: e1:9b:95:9f:06:4c:4a:b6:3e:83:6d:a3:54:44:b4: 03:2c:9d:28:77:05:1f:14:bc:a2:2b:50:5f:41:dc: 9e:07:26:91:7b:89:67:b9:0a:23:78:2a:9d:e0:7f: ed:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B4:5A:E6:09:2E:E5:09:27:87:88:9D:5D:D5:87:4A:59:07:3E:86 X509v3 Authority Key Identifier: keyid:A7:85:B4:C8:90:C9:E2:6C:FC:E6:84:9F:EF:00:9B:04:1D:31:D5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:29:9b:b8:62:b4:b9:66:18:61:51:62:b4:3f:a5:67:a8:92: 3c:60:4f:79:db:7e:28:8a:96:b2:a7:a7:6f:86:67:c2:8c:af: 3a:b5:4a:22:36:34:86:78:ef:25:ad:bc:a5:a7:b6:17:2c:c9: 02:03:4f:02:bc:ef:f7:07:00:20:87:2e:84:b0:b7:15:1c:40: 92:e4:39:b5:f2:2d:2d:ab:45:45:5c:8f:15:da:83:4a:45:8b: c0:c3:86:ad:f4:ec:b3:29:fc:c4:de:39:94:da:af:b5:96:f6: 6e:9b:c7:44:f4:ab:1b:5a:c0:98:cf:c1:30:12:f2:50:70:60: 87:fa:83:fc:17:77:f4:c7:42:28:3b:86:ef:ed:d4:88:1c:63: fd:72:97:fb:50:3a:91:33:95:7e:0e:3c:13:06:f1:63:77:90: 55:5f:7a:e2:4d:94:61:57:ba:91:56:68:fe:d0:b3:07:26:d6: 8b:e5:db:88:ac:c8:45:95:0e:f5:2f:60:18:ba:2c:c1:07:f8: a6:c7:cb:8d:14:f2:85:cb:35:81:84:16:23:5a:20:b5:09:e4: 8d:f9:ab:5b:ce:74:0d:8f:b0:18:55:08:e1:a3:51:ae:ca:f7: 2e:cd:fa:e3:27:b5:9b:e5:03:cf:d9:2e:6a:91:64:12:6f:27: 29:87:74:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWUJh5QuLFb58HGQ/XGqMyMyNadUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4NUI0Qzg5MEM5RTI2Q0ZDRTY4NDlGRUYwMDlCMDQx RDMxRDVGMjAeFw0yNjA5MjExMjA2MjJaFw0yNjA5MjIxNTEyMjJaMDMxMTAvBgNV BAMTKDVBQjQ1QUU2MDkyRUU1MDkyNzg3ODg5RDVERDU4NzRBNTkwNzNFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaqqWWRVpiCwmjh+YzILrlRDDP GwYHM/pS80QOFlqCQcEAPaxSlEbV3LRzxD1yXOXRen+zQ8KSXYm95VxYqQ/wcNJ0 tF2hvWwncbVRJ3tCuZVcie9OPvMJF+wXmTcdxKjnXnor1NFW+ssc1r7OT00tCzAy D8HQsa6iI85k+IbWcpPSnd8FK4ihTDSG2hHKaYmEC/XufRCeDQEhvleWudmj+3ML 33OAECxdFYNeyo5se1KcmAKfN4P31DQ0zGentvrMEFwF1EE61/oX8+R1vYPVReGb lZ8GTEq2PoNto1REtAMsnSh3BR8UvKIrUF9B3J4HJpF7iWe5CiN4Kp3gf+01AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWrRa5gku5Qknh4idXdWHSlkHPoYwHwYDVR0j BBgwFoAUp4W0yJDJ4mz85oSf7wCbBB0x1fIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY2YThmMjgtOWEwMy00Mzc2LWI2MTItMzFmNWFkMWMxZWQ2LzAvQTc4NUI0Qzg5 MEM5RTI2Q0ZDRTY4NDlGRUYwMDlCMDQxRDMxRDVGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzg1QjRDODkwQzlFMjZDRkNFNjg0OUZFRjAwOUIwNDFEMzFE NUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY2YThmMjgtOWEwMy00Mzc2LWI2 MTItMzFmNWFkMWMxZWQ2LzAvQTc4NUI0Qzg5MEM5RTI2Q0ZDRTY4NDlGRUYwMDlC MDQxRDMxRDVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0pm7hitLlmGGFRYrQ/pWeokjxgT3nbfiiK lrKnp2+GZ8KMrzq1SiI2NIZ47yWtvKWnthcsyQIDTwK87/cHACCHLoSwtxUcQJLk ObXyLS2rRUVcjxXag0pFi8DDhq307LMp/MTeOZTar7WW9m6bx0T0qxtawJjPwTAS 8lBwYIf6g/wXd/THQig7hu/t1IgcY/1yl/tQOpEzlX4OPBMG8WN3kFVfeuJNlGFX upFWaP7Qswcm1ovl24isyEWVDvUvYBi6LMEH+KbHy40U8oXLNYGEFiNaILUJ5I35 q1vOdA2PsBhVCOGjUa7K9y7N+uMntZvlA8/ZLmqRZBJvJymHdF8= -----END CERTIFICATE-----Generated at Tue Sep 22 07:23:47 2026 by rpki-client