$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.mft File: A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.mft (raw, json) Hash identifier: yec2PahNqhrTNdb4TJOfIAOcSz2s63jUGsQkSvwiAis= Subject key identifier: 61:0D:B4:98:DE:01:68:12:17:E9:92:E0:FC:F1:A9:9B:06:0C:E1:04 Authority key identifier: A1:DF:67:76:AD:2D:FE:35:EE:13:69:E0:2E:52:4F:DE:56:AE:EB:36 Certificate issuer: /CN=A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36 Certificate serial: 72F963FB77F38B327C2DBBD01C51E80675DE37C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.mft Manifest number: BF Signing time: Tue 22 Sep 2026 00:47:28 +0000 Manifest this update: Tue 22 Sep 2026 00:42:28 +0000 Manifest next update: Wed 23 Sep 2026 02:32:28 +0000 Files and hashes: 1: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: 9jew+9sCaLR4uEzM2fOlDSLlwcDUwMl5EIbO/d6WI20=) 2: A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.crl (hash: DZ9yPwnoUHHmy64+smA3TjCUyT64IwUARtve7mfSNDU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.crl rsync://rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f9:63:fb:77:f3:8b:32:7c:2d:bb:d0:1c:51:e8:06:75:de:37:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36 Validity Not Before: Sep 22 00:42:28 2026 GMT Not After : Sep 23 02:32:28 2026 GMT Subject: CN=610DB498DE01681217E992E0FCF1A99B060CE104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:10:90:71:9c:3c:a3:9c:b1:aa:ca:76:94:47: 66:62:33:16:b3:64:a6:b7:04:47:3d:8b:cb:39:97: 78:a5:c5:60:98:1a:fa:25:69:32:78:6d:d4:5c:a8: 20:95:9a:c6:ac:4d:a9:08:89:c7:99:2f:ad:36:a4: 62:78:b4:8a:65:7b:37:a1:bf:81:0a:73:72:ef:aa: d9:c7:03:cc:9b:3c:25:e5:d2:67:20:70:e7:04:c9: cc:6c:e0:38:d9:65:c4:a9:98:d4:06:19:80:90:41: b2:9b:ec:77:03:89:cd:fb:b9:6d:cf:8b:5b:cb:81: fc:72:5c:7c:37:33:f7:aa:e4:15:e8:08:e7:99:f6: 28:5f:d7:1c:af:88:0d:5d:b7:45:61:42:7d:e0:04: e9:df:36:24:9f:a3:80:e1:ba:83:63:8e:b2:8b:31: b8:1e:09:e5:39:c0:e8:4c:df:12:39:b2:94:68:61: 24:64:a1:bd:7b:f1:00:ac:15:fa:64:7d:0b:06:25: 5c:db:65:b0:2c:a2:59:ac:0b:b1:27:b4:5c:de:d2: f6:41:de:5a:fa:e0:9a:80:f9:c9:a7:a8:4e:5d:b9: 50:3d:03:ce:61:24:bd:a7:5e:ac:cc:75:cc:69:2a: 78:85:c8:aa:42:a3:ee:eb:69:34:b2:c3:33:49:29: bf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0D:B4:98:DE:01:68:12:17:E9:92:E0:FC:F1:A9:9B:06:0C:E1:04 X509v3 Authority Key Identifier: keyid:A1:DF:67:76:AD:2D:FE:35:EE:13:69:E0:2E:52:4F:DE:56:AE:EB:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ff:b7:57:86:5f:9c:89:82:e9:62:1a:87:f6:b9:96:a4:ce: db:ef:d9:09:79:a2:68:c5:b4:00:b8:b0:26:39:01:af:47:d6: e8:28:b0:65:8f:7e:6b:a5:b0:d2:fc:c0:43:4a:58:38:f5:69: 45:f1:7e:02:5f:fb:4f:19:ca:e9:8e:5c:76:3b:f3:2b:99:4a: a9:41:0a:96:63:2e:df:d0:12:92:5a:8c:1f:25:04:7a:11:9c: c8:45:44:f6:0a:2d:30:e8:87:5d:3c:eb:e0:14:b8:a8:ce:fe: c9:1a:27:31:c0:6a:32:24:7b:3f:ad:af:86:2a:8e:e1:5b:c1: 5c:e6:44:40:24:49:6a:e2:9c:65:1d:4f:c3:6e:78:3f:60:e4: a8:54:d1:2e:fc:ea:7c:f8:47:26:53:05:e5:12:3d:80:1d:de: c2:30:4f:b0:77:f4:7b:8d:65:2f:7e:b2:42:90:54:bf:eb:82: 89:45:4f:e4:bd:ab:25:e7:e9:4a:fe:b2:81:93:e6:a9:48:4e: 3b:ee:ac:b5:01:68:f2:b8:06:21:bf:59:da:64:c3:3c:7a:d0: 26:c2:3d:8d:a2:98:13:c3:2c:53:aa:97:77:e9:98:f9:c1:81: 3b:5b:be:57:a7:db:45:53:6a:a2:aa:ab:b8:27:28:7a:4a:35: c8:3c:fc:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcvlj+3fzizJ8LbvQHFHoBnXeN8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFERjY3NzZBRDJERkUzNUVFMTM2OUUwMkU1MjRGREU1 NkFFRUIzNjAeFw0yNjA5MjIwMDQyMjhaFw0yNjA5MjMwMjMyMjhaMDMxMTAvBgNV BAMTKDYxMERCNDk4REUwMTY4MTIxN0U5OTJFMEZDRjFBOTlCMDYwQ0UxMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPEJBxnDyjnLGqynaUR2ZiMxaz ZKa3BEc9i8s5l3ilxWCYGvolaTJ4bdRcqCCVmsasTakIiceZL602pGJ4tIplezeh v4EKc3LvqtnHA8ybPCXl0mcgcOcEycxs4DjZZcSpmNQGGYCQQbKb7HcDic37uW3P i1vLgfxyXHw3M/eq5BXoCOeZ9ihf1xyviA1dt0VhQn3gBOnfNiSfo4DhuoNjjrKL MbgeCeU5wOhM3xI5spRoYSRkob178QCsFfpkfQsGJVzbZbAsolmsC7EntFze0vZB 3lr64JqA+cmnqE5duVA9A85hJL2nXqzMdcxpKniFyKpCo+7raTSywzNJKb9/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYQ20mN4BaBIX6ZLg/PGpmwYM4QQwHwYDVR0j BBgwFoAUod9ndq0t/jXuE2ngLlJP3lau6zYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjlmNjA5MjctMWYzNC00YzU0LTk2NzQtZjlkZWFmNzVjMmZjLzAvQTFERjY3NzZB RDJERkUzNUVFMTM2OUUwMkU1MjRGREU1NkFFRUIzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMURGNjc3NkFEMkRGRTM1RUUxMzY5RTAyRTUyNEZERTU2QUVF QjM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjlmNjA5MjctMWYzNC00YzU0LTk2 NzQtZjlkZWFmNzVjMmZjLzAvQTFERjY3NzZBRDJERkUzNUVFMTM2OUUwMkU1MjRG REU1NkFFRUIzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAD/t1eGX5yJguliGof2uZakztvv2Ql5omjF tAC4sCY5Aa9H1ugosGWPfmulsNL8wENKWDj1aUXxfgJf+08ZyumOXHY78yuZSqlB CpZjLt/QEpJajB8lBHoRnMhFRPYKLTDoh1086+AUuKjO/skaJzHAajIkez+tr4Yq juFbwVzmREAkSWrinGUdT8NueD9g5KhU0S786nz4RyZTBeUSPYAd3sIwT7B39HuN ZS9+skKQVL/rgolFT+S9qyXn6Ur+soGT5qlITjvurLUBaPK4BiG/Wdpkwzx60CbC PY2imBPDLFOql3fpmPnBgTtbvlen20VTaqKqq7gnKHpKNcg8/AU= -----END CERTIFICATE-----Generated at Tue Sep 22 03:42:44 2026 by rpki-client