$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft File: 26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft (raw, json) Hash identifier: jFfLByatSclQHZh0PN+0FXLOZKrUJO/gcSi7VyYeFAQ= Subject key identifier: DB:8D:1B:21:B4:0A:3F:7D:95:4D:A0:B1:3B:9C:17:A6:3B:41:20:16 Authority key identifier: 26:AC:84:7A:FE:F1:BA:DA:17:32:A8:A2:24:9B:AE:EC:2F:2D:61:5A Certificate issuer: /CN=26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A Certificate serial: 352B54424A2388EC2E0AD5D51025044CDECFA142 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft Manifest number: BD Signing time: Sun 20 Sep 2026 09:49:18 +0000 Manifest this update: Sun 20 Sep 2026 09:44:18 +0000 Manifest next update: Mon 21 Sep 2026 12:26:18 +0000 Files and hashes: 1: 3130332e3233392e32302e302f32332d3234203d3e20313531353139.roa (hash: diFLhr4fVvfR6ElD2+x6FyfBVBmvWMODzaZCy9XdQ10=) 2: 26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.crl (hash: vJu2Zy2IEhpzoQjf+oJFtv0+r4NA0hqMPSCbDlOfvwA=) 3: 3130332e3233392e32312e302f32342d3234203d3e20313531353139.roa (hash: xuo20faVsDcaxZ95BSzWiVO7mQjYOYEJpwuA8scBHdE=) 4: 3130332e3233392e32302e302f32342d3234203d3e20313531353139.roa (hash: WHmkkfpIM8Fej10LNvo4eMoAmMSgE4SOk4GXSFe9Ky8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.crl rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 12:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:2b:54:42:4a:23:88:ec:2e:0a:d5:d5:10:25:04:4c:de:cf:a1:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A Validity Not Before: Sep 20 09:44:18 2026 GMT Not After : Sep 21 12:26:18 2026 GMT Subject: CN=DB8D1B21B40A3F7D954DA0B13B9C17A63B412016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2b:92:ee:ed:4a:b0:c1:4f:e9:88:c0:e8:28: 01:07:02:72:38:ba:12:38:2f:cf:cb:90:67:00:8a: 9f:89:3b:c7:6b:5d:f7:b3:d0:ff:23:e1:e3:ca:68: 0c:84:3d:fb:8e:58:07:1f:ac:43:9f:32:37:0c:fa: e5:2d:6d:0d:77:81:8a:f7:f3:4d:88:64:8c:d6:fe: f8:7b:af:4b:1a:df:a8:0b:fe:44:54:68:1d:ba:42: 3f:cf:ed:d5:51:a8:3c:f3:11:a8:32:77:bd:4b:31: 85:03:18:43:44:c9:f7:5b:84:1d:41:72:b3:9b:f2: e2:a8:60:de:50:82:75:8d:82:61:58:2a:de:e4:f4: e9:ca:7c:94:2b:de:1e:d5:5c:fd:36:3d:8d:61:80: 97:48:dd:65:74:ae:14:16:cb:0e:b2:f2:9e:47:5a: 3b:09:70:9b:17:43:dc:ca:fc:b1:a4:84:3d:7c:79: 93:c0:95:9c:aa:95:68:34:a9:75:2b:1f:54:02:7e: 4e:ae:09:d8:dd:64:89:e4:f3:ae:8e:51:e2:ea:6c: 09:0a:73:da:49:8a:d0:44:90:07:6d:9a:94:8f:24: 2d:b6:8a:1a:50:0e:b6:51:67:fb:c3:55:51:b9:66: 18:43:0a:6b:f7:3f:43:a2:27:0f:29:7e:ac:f8:e5: f4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8D:1B:21:B4:0A:3F:7D:95:4D:A0:B1:3B:9C:17:A6:3B:41:20:16 X509v3 Authority Key Identifier: keyid:26:AC:84:7A:FE:F1:BA:DA:17:32:A8:A2:24:9B:AE:EC:2F:2D:61:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:53:51:53:3a:0b:4c:73:6d:bd:f3:07:b0:82:e0:6e:7c:40: bc:e8:76:72:6e:51:8a:3c:c8:b0:ba:4b:c8:cb:25:61:1f:aa: c5:3f:3e:76:e9:15:d9:4c:bd:84:63:60:67:67:38:06:8f:31: d7:3f:e8:9d:80:97:0f:54:d3:b5:03:78:6f:6b:09:5f:08:cd: b3:e1:5f:fe:08:63:4b:be:51:bc:b7:b5:08:eb:ef:de:6d:17: 0c:e4:39:1a:db:b0:0d:0b:59:f8:38:f1:ff:7b:2c:aa:b2:af: 4d:fa:dc:8f:b1:49:97:f5:37:e4:b7:3c:64:e0:16:8a:f2:8c: 2e:16:35:6e:1b:e9:9b:f9:bf:20:b5:62:6b:02:af:a3:2d:f3: 6a:7c:f7:35:80:0d:7b:9e:c9:4d:a3:fc:ed:fe:80:59:fe:60: f2:69:f4:ab:33:ad:ad:0d:09:3c:f8:92:2a:a5:80:44:6e:7c: 3f:7c:65:29:c4:6b:f1:92:d0:2c:e6:07:eb:df:58:51:d9:cd: 07:a8:db:af:52:7d:d8:c6:1c:67:19:5c:18:3e:1b:f9:b8:98: 19:84:65:7a:f4:29:c2:53:e9:4d:bf:5e:3d:10:e9:00:e3:6b: f0:03:e7:7d:c6:04:b5:42:69:84:26:c0:f2:d6:cb:31:b2:c0: bb:31:c8:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNStUQkojiOwuCtXVECUETN7PoUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZBQzg0N0FGRUYxQkFEQTE3MzJBOEEyMjQ5QkFFRUMy RjJENjE1QTAeFw0yNjA5MjAwOTQ0MThaFw0yNjA5MjExMjI2MThaMDMxMTAvBgNV BAMTKERCOEQxQjIxQjQwQTNGN0Q5NTREQTBCMTNCOUMxN0E2M0I0MTIwMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPK5Lu7UqwwU/piMDoKAEHAnI4 uhI4L8/LkGcAip+JO8drXfez0P8j4ePKaAyEPfuOWAcfrEOfMjcM+uUtbQ13gYr3 802IZIzW/vh7r0sa36gL/kRUaB26Qj/P7dVRqDzzEagyd71LMYUDGENEyfdbhB1B crOb8uKoYN5QgnWNgmFYKt7k9OnKfJQr3h7VXP02PY1hgJdI3WV0rhQWyw6y8p5H WjsJcJsXQ9zK/LGkhD18eZPAlZyqlWg0qXUrH1QCfk6uCdjdZInk866OUeLqbAkK c9pJitBEkAdtmpSPJC22ihpQDrZRZ/vDVVG5ZhhDCmv3P0OiJw8pfqz45fRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU240bIbQKP32VTaCxO5wXpjtBIBYwHwYDVR0j BBgwFoAUJqyEev7xutoXMqiiJJuu7C8tYVowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTdhZmQ1N2EtZTZkZS00YTVmLWI1YzYtMTA4NjVkNWE4Yzk4LzAvMjZBQzg0N0FG RUYxQkFEQTE3MzJBOEEyMjQ5QkFFRUMyRjJENjE1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNkFDODQ3QUZFRjFCQURBMTczMkE4QTIyNDlCQUVFQzJGMkQ2 MTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTdhZmQ1N2EtZTZkZS00YTVmLWI1 YzYtMTA4NjVkNWE4Yzk4LzAvMjZBQzg0N0FGRUYxQkFEQTE3MzJBOEEyMjQ5QkFF RUMyRjJENjE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJTUVM6C0xzbb3zB7CC4G58QLzodnJuUYo8 yLC6S8jLJWEfqsU/PnbpFdlMvYRjYGdnOAaPMdc/6J2Alw9U07UDeG9rCV8IzbPh X/4IY0u+Uby3tQjr795tFwzkORrbsA0LWfg48f97LKqyr0363I+xSZf1N+S3PGTg ForyjC4WNW4b6Zv5vyC1YmsCr6Mt82p89zWADXueyU2j/O3+gFn+YPJp9Kszra0N CTz4kiqlgERufD98ZSnEa/GS0CzmB+vfWFHZzQeo269SfdjGHGcZXBg+G/m4mBmE ZXr0KcJT6U2/Xj0Q6QDja/AD533GBLVCaYQmwPLWyzGywLsxyIg= -----END CERTIFICATE-----Generated at Mon Sep 21 03:15:47 2026 by rpki-client