$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft File: A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft (raw, json) Hash identifier: /Cz+rv/B/qU7dn1beDOdG29PtcX0x2ScBFvmKcC7VWk= Subject key identifier: 70:39:64:AA:7D:37:5A:13:12:FE:AD:34:5E:B4:82:93:08:C0:FB:FA Authority key identifier: A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC Certificate issuer: /CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC Certificate serial: 091DAB58802E9F6B79D0F67ABBDAF9696CF6A9CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft Manifest number: BE Signing time: Sun 20 Sep 2026 14:45:20 +0000 Manifest this update: Sun 20 Sep 2026 14:40:20 +0000 Manifest next update: Mon 21 Sep 2026 15:56:20 +0000 Files and hashes: 1: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: UJ/To0XTouVSFOn7NWj23fxNZAouQWAqvBpnkIJXRFM=) 2: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: Zeaoa8MH2HdVHd5TglLIUEl41Yo/QcdVaZotZEH8Cts=) 3: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: Avv7/9ccLlQ1aIPCfbfxFrVouBultgrgCwZuIM827ow=) 4: A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl (hash: CV8DcRz18mn2n8xD2HJiZJzMszc9JCpuCPZJUP1JSB8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 15:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:1d:ab:58:80:2e:9f:6b:79:d0:f6:7a:bb:da:f9:69:6c:f6:a9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC Validity Not Before: Sep 20 14:40:20 2026 GMT Not After : Sep 21 15:56:20 2026 GMT Subject: CN=703964AA7D375A1312FEAD345EB4829308C0FBFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0e:fd:c4:3a:63:82:32:d1:24:04:26:2e:8c: 51:7d:ee:ff:6d:a4:8b:4e:cb:6a:3f:e8:fc:fd:22: 4d:5f:b2:40:77:e9:fc:c8:91:3c:01:87:51:a0:79: 0c:9e:a1:b4:ed:59:9b:0f:73:31:f3:6d:0c:11:7f: ca:79:b5:10:98:b7:00:39:ab:11:fc:88:0f:b7:20: 65:fe:58:0d:75:38:d5:de:51:9f:c6:16:d8:20:a2: 71:3a:88:33:aa:8c:53:36:87:6f:82:fb:ec:ad:c0: 16:5e:f9:92:f9:61:16:83:14:b5:30:29:f9:e9:60: a5:83:80:58:e5:c0:e1:ec:c7:33:32:14:67:a0:9c: c1:7f:2b:b2:6d:70:9e:f8:fc:da:67:cc:ea:76:00: 54:1f:ac:59:bf:c1:3f:06:51:86:a3:a0:9b:03:7b: 37:2c:e2:a4:46:79:f1:41:1a:ed:4c:f8:a9:72:b4: 9f:54:c5:7e:e2:92:03:45:06:d6:df:26:6b:4e:bc: b6:de:6c:59:96:37:e5:37:0e:19:3b:2d:4b:ae:0b: 1a:a1:4c:95:46:2a:55:ef:2b:30:d2:c8:05:6d:cc: 83:89:5a:b7:ae:0a:58:02:80:b7:3c:36:2f:c5:da: 56:31:7a:e3:c4:b3:ef:af:e9:03:18:30:5a:6c:47: aa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:39:64:AA:7D:37:5A:13:12:FE:AD:34:5E:B4:82:93:08:C0:FB:FA X509v3 Authority Key Identifier: keyid:A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:77:0b:80:fa:d8:49:31:b5:60:4e:ef:dd:60:ef:21:6c:2d: 57:7c:fc:b0:a0:d1:a9:cc:fe:9e:87:5f:d8:93:10:20:08:27: 5d:fb:e5:92:cb:71:c5:66:d1:b1:95:9a:0c:03:51:88:51:e5: 6a:3f:e0:52:43:dc:a3:0c:26:0f:8f:07:bf:60:ae:7e:fd:9e: 64:d3:2a:45:24:ec:7a:ae:18:30:99:a9:aa:2c:58:5d:19:41: 18:c9:a1:08:e0:97:12:6f:e9:f4:3e:93:34:ae:d4:76:01:50: 8d:ff:23:ae:0d:d3:4d:aa:df:c9:d8:81:06:92:98:9c:29:6c: fe:12:97:81:54:b4:6a:c4:a4:94:e7:26:97:b0:61:40:0f:3f: e3:be:ea:0a:ae:ea:8a:67:da:40:69:11:22:d3:3a:2c:8d:80: 19:15:6e:62:88:17:26:22:ba:3c:5c:97:74:a5:ef:02:c6:8f: dd:67:bb:4f:38:55:33:72:10:8f:e4:df:07:43:00:6d:bf:64: da:dd:6a:9b:e1:9e:94:54:3b:5c:7f:58:d9:6c:9d:36:99:fb: c9:6f:47:70:14:55:bf:1d:4c:41:ba:31:d1:17:88:45:ff:a6: 53:74:bf:05:5e:3a:4d:bd:06:bc:2a:74:40:bf:63:16:5a:ce: 01:e2:ec:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCR2rWIAun2t50PZ6u9r5aWz2qc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThENjAyMTczODhEQ0VFNjg5N0JEQTVCQzZENTE5MDMx N0NFQzBFQzAeFw0yNjA5MjAxNDQwMjBaFw0yNjA5MjExNTU2MjBaMDMxMTAvBgNV BAMTKDcwMzk2NEFBN0QzNzVBMTMxMkZFQUQzNDVFQjQ4MjkzMDhDMEZCRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDv3EOmOCMtEkBCYujFF97v9t pItOy2o/6Pz9Ik1fskB36fzIkTwBh1GgeQyeobTtWZsPczHzbQwRf8p5tRCYtwA5 qxH8iA+3IGX+WA11ONXeUZ/GFtggonE6iDOqjFM2h2+C++ytwBZe+ZL5YRaDFLUw KfnpYKWDgFjlwOHsxzMyFGegnMF/K7JtcJ74/NpnzOp2AFQfrFm/wT8GUYajoJsD ezcs4qRGefFBGu1M+KlytJ9UxX7ikgNFBtbfJmtOvLbebFmWN+U3Dhk7LUuuCxqh TJVGKlXvKzDSyAVtzIOJWreuClgCgLc8Ni/F2lYxeuPEs++v6QMYMFpsR6rVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcDlkqn03WhMS/q00XrSCkwjA+/owHwYDVR0j BBgwFoAUqNYCFziNzuaJe9pbxtUZAxfOwOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk1NzdjM2MtNjZjZC00MGE0LWFmYzUtNmM2ZjhiNjY0YTUxLzAvQThENjAyMTcz ODhEQ0VFNjg5N0JEQTVCQzZENTE5MDMxN0NFQzBFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEQ2MDIxNzM4OERDRUU2ODk3QkRBNUJDNkQ1MTkwMzE3Q0VD MEVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQThENjAyMTczODhEQ0VFNjg5N0JEQTVCQzZENTE5 MDMxN0NFQzBFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZ3C4D62EkxtWBO791g7yFsLVd8/LCg0anM /p6HX9iTECAIJ1375ZLLccVm0bGVmgwDUYhR5Wo/4FJD3KMMJg+PB79grn79nmTT KkUk7HquGDCZqaosWF0ZQRjJoQjglxJv6fQ+kzSu1HYBUI3/I64N002q38nYgQaS mJwpbP4Sl4FUtGrEpJTnJpewYUAPP+O+6gqu6opn2kBpESLTOiyNgBkVbmKIFyYi ujxcl3Sl7wLGj91nu084VTNyEI/k3wdDAG2/ZNrdapvhnpRUO1x/WNlsnTaZ+8lv R3AUVb8dTEG6MdEXiEX/plN0vwVeOk29BrwqdEC/YxZazgHi7DY= -----END CERTIFICATE-----Generated at Mon Sep 21 03:31:46 2026 by rpki-client