$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft File: A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft (raw, json) Hash identifier: 7KE0OElFpFZ+zKm0V3jTrYK0/10v2aN0bw3yI98TEbk= Subject key identifier: 3A:11:0B:44:FE:75:D7:EE:B8:14:74:EF:9E:87:B4:1D:CE:6F:1E:0E Authority key identifier: A9:2D:7A:2C:E9:CB:AA:FD:76:3A:38:0C:28:FA:DD:D1:A3:C7:EA:81 Certificate issuer: /CN=A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81 Certificate serial: 42086CB841D5DF1D875AEB71976D70ECC271528E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft Manifest number: BE Signing time: Mon 21 Sep 2026 10:14:17 +0000 Manifest this update: Mon 21 Sep 2026 10:09:17 +0000 Manifest next update: Tue 22 Sep 2026 10:36:17 +0000 Files and hashes: 1: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: gM1AjlPJEA8ARwiEjxXZ/XYQjY805lBo3kfjSVH4yf0=) 2: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: 3KrJ0+AfMCOxSs3J3yun9Ot0fuEZmxiN3y8DZjfYS7Q=) 3: A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl (hash: emE8VaWrbTat0sOTQkRSFt/ZafAXqGyb60ntfkHD3eo=) 4: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: VuUTV6DF0NO0ScLbFc6eylw+nle2kUmBZXnxVkFv7U0=) 5: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: WV8Z97xrGgFHwypp6SwSp1IloS8eHHkMOVgWyPQX300=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:08:6c:b8:41:d5:df:1d:87:5a:eb:71:97:6d:70:ec:c2:71:52:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81 Validity Not Before: Sep 21 10:09:17 2026 GMT Not After : Sep 22 10:36:17 2026 GMT Subject: CN=3A110B44FE75D7EEB81474EF9E87B41DCE6F1E0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:52:96:5c:7f:26:a9:9b:f3:03:b5:ea:df:b9: 28:a5:6e:a9:c5:4e:13:a7:7b:60:b0:d1:bb:e6:78: 2a:c9:a2:cf:66:87:80:35:c1:7c:aa:e8:a9:69:e9: 06:d0:5e:ec:20:0c:ce:ac:a0:a3:3a:bb:05:46:77: 94:e2:f0:b8:00:f6:87:dd:46:39:38:b6:d5:c7:a5: f0:e2:69:27:1d:d5:25:0a:64:eb:e5:34:df:c5:6c: b5:ff:30:8b:15:b3:d8:82:e3:90:c6:93:b1:4f:fb: 33:2e:8a:1a:69:e2:9e:0a:2d:16:3a:78:35:fc:77: e5:e2:0c:db:4d:bd:b9:79:1c:30:f6:4d:8f:af:19: 69:5d:ac:6c:32:70:b1:b5:7f:ac:aa:48:54:fe:b8: 55:53:40:c2:69:bc:5c:9c:8b:a7:b7:ee:b4:75:21: ff:b8:1a:92:da:d0:13:ce:92:cb:10:4f:33:8a:23: cf:80:2e:65:c0:6d:b7:13:a4:bb:91:4e:02:2d:9a: b5:29:20:f0:65:2c:9f:d6:4d:fd:18:b8:6b:cf:2f: b2:b4:e2:55:ff:64:52:94:5e:96:36:df:b4:4b:b4: af:ce:24:9a:db:f4:21:fb:94:1b:3f:c3:74:bf:9d: f3:60:11:31:73:5b:1f:a5:b4:87:e3:ec:b6:6c:b5: cc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:11:0B:44:FE:75:D7:EE:B8:14:74:EF:9E:87:B4:1D:CE:6F:1E:0E X509v3 Authority Key Identifier: keyid:A9:2D:7A:2C:E9:CB:AA:FD:76:3A:38:0C:28:FA:DD:D1:A3:C7:EA:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:34:76:e9:c0:c8:9a:de:ac:af:c1:c6:69:58:a7:dd:40:53: 38:1d:45:d3:78:b2:9f:a3:45:0a:58:5a:3c:63:2d:18:fc:82: 16:74:56:6c:13:bd:8a:da:5a:04:8d:7c:43:fb:1b:dd:89:f5: cc:67:99:88:bc:bc:2c:4e:fa:db:5a:f8:ac:b3:0d:d5:1f:9c: 24:0f:8c:ee:5e:cd:f2:eb:14:cb:69:5a:ce:e2:bb:03:d9:31: f9:0c:8b:1f:51:56:d9:3b:98:07:29:07:12:a4:ee:d0:37:d9: 01:74:52:ca:b8:7f:7d:9d:83:df:a3:c4:fc:06:ad:a8:ce:fa: b9:ea:23:a1:06:51:85:b5:57:59:a0:cb:26:6a:5f:96:a9:0a: 95:98:e0:cd:72:11:05:59:d0:7e:ff:a7:bb:14:93:30:8f:aa: dc:1b:ce:09:36:63:a4:ee:0e:4d:53:2d:99:bb:af:bb:ab:e9: 07:c2:47:d4:71:f1:cd:33:30:81:dd:fd:04:2b:c5:91:e2:46: 0a:22:d1:bd:ab:7a:04:14:c0:03:cb:c3:46:00:48:2e:5a:26: 57:30:8d:51:11:13:b4:50:4c:50:50:86:fc:d7:14:fd:02:b4: 8d:fc:7f:be:4d:7a:0c:bf:db:ed:d0:04:0d:38:c3:48:93:fb: be:e7:e7:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQghsuEHV3x2HWutxl21w7MJxUo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkyRDdBMkNFOUNCQUFGRDc2M0EzODBDMjhGQURERDFB M0M3RUE4MTAeFw0yNjA5MjExMDA5MTdaFw0yNjA5MjIxMDM2MTdaMDMxMTAvBgNV BAMTKDNBMTEwQjQ0RkU3NUQ3RUVCODE0NzRFRjlFODdCNDFEQ0U2RjFFMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfUpZcfyapm/MDterfuSilbqnF ThOne2Cw0bvmeCrJos9mh4A1wXyq6Klp6QbQXuwgDM6soKM6uwVGd5Ti8LgA9ofd Rjk4ttXHpfDiaScd1SUKZOvlNN/FbLX/MIsVs9iC45DGk7FP+zMuihpp4p4KLRY6 eDX8d+XiDNtNvbl5HDD2TY+vGWldrGwycLG1f6yqSFT+uFVTQMJpvFyci6e37rR1 If+4GpLa0BPOkssQTzOKI8+ALmXAbbcTpLuRTgItmrUpIPBlLJ/WTf0YuGvPL7K0 4lX/ZFKUXpY237RLtK/OJJrb9CH7lBs/w3S/nfNgETFzWx+ltIfj7LZstcxpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOhELRP511+64FHTvnoe0Hc5vHg4wHwYDVR0j BBgwFoAUqS16LOnLqv12OjgMKPrd0aPH6oEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE5MTRhZGEtYTlhYS00ZDdmLTllNDctNTk0YmNiN2E3MGFiLzAvQTkyRDdBMkNF OUNCQUFGRDc2M0EzODBDMjhGQURERDFBM0M3RUE4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTJEN0EyQ0U5Q0JBQUZENzYzQTM4MEMyOEZBREREMUEzQzdF QTgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvQTkyRDdBMkNFOUNCQUFGRDc2M0EzODBDMjhGQURE RDFBM0M3RUE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFc0dunAyJrerK/BxmlYp91AUzgdRdN4sp+j RQpYWjxjLRj8ghZ0VmwTvYraWgSNfEP7G92J9cxnmYi8vCxO+tta+KyzDdUfnCQP jO5ezfLrFMtpWs7iuwPZMfkMix9RVtk7mAcpBxKk7tA32QF0Usq4f32dg9+jxPwG rajO+rnqI6EGUYW1V1mgyyZqX5apCpWY4M1yEQVZ0H7/p7sUkzCPqtwbzgk2Y6Tu Dk1TLZm7r7ur6QfCR9Rx8c0zMIHd/QQrxZHiRgoi0b2regQUwAPLw0YASC5aJlcw jVERE7RQTFBQhvzXFP0CtI38f75Negy/2+3QBA04w0iT+77n5+c= -----END CERTIFICATE-----Generated at Mon Sep 21 16:34:30 2026 by rpki-client