$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft File: A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft (raw, json) Hash identifier: ypIA4As/TfgtHpkwTVcX5+gEPrAov6hzzeqFfojOf/I= Subject key identifier: F2:38:18:16:13:CD:FB:68:40:F1:FF:FB:2D:CC:B5:21:C4:2B:60:A1 Authority key identifier: A5:88:74:84:00:B3:5D:B8:27:1F:7C:5C:42:E4:B0:26:C9:6E:7B:0D Certificate issuer: /CN=A588748400B35DB8271F7C5C42E4B026C96E7B0D Certificate serial: 70C8C919AC41548F8FDF1B08AED7CB59A0CBC790 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft Manifest number: BD Signing time: Tue 22 Sep 2026 04:52:25 +0000 Manifest this update: Tue 22 Sep 2026 04:47:25 +0000 Manifest next update: Wed 23 Sep 2026 06:10:25 +0000 Files and hashes: 1: A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl (hash: mwgKKqAHZR9kEZggpeW8EmNtgpM9C1xM9tPFV53uT7Q=) 2: 3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa (hash: 8eEz6hzQ+vunwmpuzCRDL78SRiuZLqQtnLKEvllRxT8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c8:c9:19:ac:41:54:8f:8f:df:1b:08:ae:d7:cb:59:a0:cb:c7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A588748400B35DB8271F7C5C42E4B026C96E7B0D Validity Not Before: Sep 22 04:47:25 2026 GMT Not After : Sep 23 06:10:25 2026 GMT Subject: CN=F238181613CDFB6840F1FFFB2DCCB521C42B60A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:15:55:e9:43:92:86:36:ca:76:e3:97:f0:b8: 86:05:5e:30:55:22:32:ab:53:4a:b7:73:04:84:a1: 0f:ca:36:47:ec:81:4f:90:47:b4:9b:7d:a0:f0:bd: 9c:91:6e:7a:49:18:0e:70:2d:c8:b7:00:64:25:0a: b3:bd:83:4c:90:5c:b6:9d:0f:b3:18:50:12:6b:f4: 47:fc:fe:00:46:e2:7d:39:b4:94:9a:7a:c2:ed:38: 52:a3:f8:e9:de:07:a4:b9:50:2d:d2:4b:76:12:e3: 9d:dd:82:ed:5d:94:aa:87:6e:c2:ec:50:f9:f6:37: 1d:47:d0:e0:24:5e:10:0f:f7:b9:00:5d:f5:86:36: e7:f7:17:68:63:8d:5a:25:00:bc:3d:ab:fa:2c:79: 74:20:61:fb:8e:82:7e:cb:18:b3:2e:b8:87:ea:2a: ac:ec:1c:d9:fe:66:a4:43:8c:49:47:0c:c5:20:86: 99:78:9c:bf:ba:a5:5c:39:c6:53:cb:f1:b1:25:4d: b8:88:61:6f:0a:a8:b2:19:39:af:43:49:01:26:01: 65:6b:7a:12:f5:d8:dc:48:2b:ff:14:6e:bd:71:f5: 90:4c:f0:a0:5e:8c:21:c6:48:93:30:0a:67:3d:b5: 46:3e:9c:80:97:41:45:13:14:f2:3b:9b:89:e3:e7: 16:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:38:18:16:13:CD:FB:68:40:F1:FF:FB:2D:CC:B5:21:C4:2B:60:A1 X509v3 Authority Key Identifier: keyid:A5:88:74:84:00:B3:5D:B8:27:1F:7C:5C:42:E4:B0:26:C9:6E:7B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:82:7c:dc:f6:1a:e9:eb:33:52:9e:f9:31:04:b8:54:51:da: 99:f5:a4:0f:78:0b:83:61:17:a1:e6:cc:58:6c:79:d6:e4:38: 05:c7:3d:77:3c:e4:10:16:7c:00:62:46:bc:bb:5e:e8:e6:c9: f9:57:85:43:5b:1e:5b:79:58:9f:a3:d9:cc:8f:ea:a1:fe:70: 3f:70:b6:33:b2:cf:57:60:06:d5:74:e4:95:09:4c:df:cc:2e: 6b:64:55:44:3e:b5:2b:7b:b2:e2:70:37:58:b1:2f:83:0a:4b: ff:1e:d5:a5:57:dd:90:63:53:57:1c:19:ad:77:0e:f3:a5:8d: 3a:30:2e:80:b1:de:c4:29:58:5c:87:24:19:3d:bd:f9:48:c2: cb:83:43:98:9d:1f:ca:0f:e4:fb:a2:0e:3f:e9:6c:49:0a:78: 93:7f:97:55:30:e9:9a:46:06:b9:5c:cc:3c:8c:5d:92:2b:cf: 6a:4c:7b:d0:ca:9a:14:bd:c1:4e:4e:de:52:84:38:6b:da:60: 4b:7a:2f:75:9a:a7:a0:3c:fa:e0:1e:1c:1e:bb:ed:61:92:8e: 9b:6b:0b:d4:d5:0c:40:c2:14:61:d9:48:6f:38:50:41:0a:97: dc:e1:d0:d0:8c:a8:2f:fd:51:6e:2f:4f:b0:ba:ce:e9:cf:10: 84:47:91:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcMjJGaxBVI+P3xsIrtfLWaDLx5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU4ODc0ODQwMEIzNURCODI3MUY3QzVDNDJFNEIwMjZD OTZFN0IwRDAeFw0yNjA5MjIwNDQ3MjVaFw0yNjA5MjMwNjEwMjVaMDMxMTAvBgNV BAMTKEYyMzgxODE2MTNDREZCNjg0MEYxRkZGQjJEQ0NCNTIxQzQyQjYwQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoFVXpQ5KGNsp245fwuIYFXjBV IjKrU0q3cwSEoQ/KNkfsgU+QR7SbfaDwvZyRbnpJGA5wLci3AGQlCrO9g0yQXLad D7MYUBJr9Ef8/gBG4n05tJSaesLtOFKj+OneB6S5UC3SS3YS453dgu1dlKqHbsLs UPn2Nx1H0OAkXhAP97kAXfWGNuf3F2hjjVolALw9q/oseXQgYfuOgn7LGLMuuIfq KqzsHNn+ZqRDjElHDMUghpl4nL+6pVw5xlPL8bElTbiIYW8KqLIZOa9DSQEmAWVr ehL12NxIK/8Ubr1x9ZBM8KBejCHGSJMwCmc9tUY+nICXQUUTFPI7m4nj5xZ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8jgYFhPN+2hA8f/7Lcy1IcQrYKEwHwYDVR0j BBgwFoAUpYh0hACzXbgnH3xcQuSwJsluew0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWMwYjM5ZTItNjg3Yi00NjE0LTgwOWYtNzM2NzJlYTIxMmNmLzAvQTU4ODc0ODQw MEIzNURCODI3MUY3QzVDNDJFNEIwMjZDOTZFN0IwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNTg4NzQ4NDAwQjM1REI4MjcxRjdDNUM0MkU0QjAyNkM5NkU3 QjBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWMwYjM5ZTItNjg3Yi00NjE0LTgw OWYtNzM2NzJlYTIxMmNmLzAvQTU4ODc0ODQwMEIzNURCODI3MUY3QzVDNDJFNEIw MjZDOTZFN0IwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+CfNz2GunrM1Ke+TEEuFRR2pn1pA94C4Nh F6HmzFhsedbkOAXHPXc85BAWfABiRry7XujmyflXhUNbHlt5WJ+j2cyP6qH+cD9w tjOyz1dgBtV05JUJTN/MLmtkVUQ+tSt7suJwN1ixL4MKS/8e1aVX3ZBjU1ccGa13 DvOljTowLoCx3sQpWFyHJBk9vflIwsuDQ5idH8oP5PuiDj/pbEkKeJN/l1Uw6ZpG BrlczDyMXZIrz2pMe9DKmhS9wU5O3lKEOGvaYEt6L3Wap6A8+uAeHB677WGSjptr C9TVDEDCFGHZSG84UEEKl9zh0NCMqC/9UW4vT7C6zunPEIRHkTU= -----END CERTIFICATE-----Generated at Tue Sep 22 08:38:51 2026 by rpki-client