$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft File: A0255156E104D661F25134DFEF8EF05BD73E8C04.mft (raw, json) Hash identifier: 9nJAhAZipof64vQFDRoaQ2R43+vWlh20tPmM6yF4UWA= Subject key identifier: A3:DD:D7:CB:12:61:9A:D6:0E:4C:C4:7C:D6:25:DE:F7:A1:4C:37:CF Authority key identifier: A0:25:51:56:E1:04:D6:61:F2:51:34:DF:EF:8E:F0:5B:D7:3E:8C:04 Certificate issuer: /CN=A0255156E104D661F25134DFEF8EF05BD73E8C04 Certificate serial: 31DE5871E1C4F6BA6D972E63A6C0A346BA92DEEA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft Manifest number: BE Signing time: Mon 21 Sep 2026 06:49:58 +0000 Manifest this update: Mon 21 Sep 2026 06:44:58 +0000 Manifest next update: Tue 22 Sep 2026 09:46:58 +0000 Files and hashes: 1: 3130332e3136312e3139342e302f32332d3233203d3e20313431363232.roa (hash: mPG/zuyU/XUm9QM+7MhLY4PXMJXJc11dpd+ekiFfezo=) 2: 3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa (hash: 00GZwg/Y9T0ZdKSWulyuB3JLDZ01RudXgy9Ju+lMmEg=) 3: 3130332e3136312e3139342e302f32342d3234203d3e20313431363232.roa (hash: OwiazASeDIe+vC4nWyzCtb4oqvt1RTV99SuTJlMtud4=) 4: A0255156E104D661F25134DFEF8EF05BD73E8C04.crl (hash: Oj40Q5rl7pzG4l/xbFdRGwH/EPo6LHpra6UazU1pZyM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.crl rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:de:58:71:e1:c4:f6:ba:6d:97:2e:63:a6:c0:a3:46:ba:92:de:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0255156E104D661F25134DFEF8EF05BD73E8C04 Validity Not Before: Sep 21 06:44:58 2026 GMT Not After : Sep 22 09:46:58 2026 GMT Subject: CN=A3DDD7CB12619AD60E4CC47CD625DEF7A14C37CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ec:46:12:43:e2:6a:be:1f:aa:96:05:93:d9: 3b:08:1f:5c:fb:6a:a8:c0:99:10:b9:68:8b:7e:36: 5b:6f:00:e0:bb:bf:6d:75:ba:89:7e:b1:8a:ba:ec: d1:03:c3:a2:e9:27:eb:66:59:c0:43:40:ae:8e:93: c1:36:c8:02:f0:34:14:32:70:db:20:ef:1f:ec:54: e6:7f:0c:71:be:4d:b3:b9:31:ab:5b:13:2f:99:c4: 95:48:92:19:68:b2:94:82:31:f2:d5:68:33:11:60: af:2e:4d:77:f8:c1:79:da:49:61:ba:0b:9c:08:15: bb:3e:24:b0:6d:63:45:0e:ba:71:57:25:86:80:ee: d8:02:58:95:c7:ee:71:f5:32:1e:a9:cb:1b:a9:44: a0:0b:a0:6a:77:43:c0:eb:94:4e:51:b0:74:c9:cd: 82:a4:ca:3f:99:49:5d:0f:1a:a4:e0:1c:5e:09:48: a8:6e:10:b9:f1:4e:7d:35:ed:d6:e7:53:68:33:33: 84:0e:04:70:dd:68:6b:17:82:07:d7:fd:91:a9:64: b0:a5:16:ef:be:c1:01:0f:03:07:c2:3d:bb:47:90: 82:1f:eb:18:9a:a5:10:fb:53:a9:d7:77:88:fc:66: 9f:f3:de:8c:c3:8e:e2:ec:4f:e9:43:5e:30:71:aa: ee:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DD:D7:CB:12:61:9A:D6:0E:4C:C4:7C:D6:25:DE:F7:A1:4C:37:CF X509v3 Authority Key Identifier: keyid:A0:25:51:56:E1:04:D6:61:F2:51:34:DF:EF:8E:F0:5B:D7:3E:8C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:42:83:90:62:af:93:c2:7a:75:bc:92:d2:1b:9b:39:6e:2b: 7f:16:ef:60:79:c6:82:4b:a5:04:04:1b:4b:0a:ee:87:b0:cd: 93:c0:0e:a3:89:88:f9:71:56:d3:ba:ca:f6:f9:c2:dc:54:d3: ed:be:1d:08:64:9b:7c:58:ed:a5:b8:df:98:81:a6:68:2d:99: be:d0:bc:22:a0:7f:af:0b:ba:26:05:7d:07:8d:ae:cf:e1:d3: c1:76:71:e2:fc:bd:55:24:cf:f6:89:83:2b:64:83:36:58:f2: ed:9c:b1:d9:99:8b:9a:d1:32:9a:d7:30:8b:07:32:b9:bf:06: 05:42:97:ed:62:33:f3:d6:6d:1e:a4:05:a5:a2:e6:ba:3c:35: bc:05:88:0f:a0:af:63:e5:c8:9e:17:08:96:0d:e6:1b:e9:2c: bc:42:b6:3f:b5:4c:3f:99:ec:99:27:6a:2e:59:04:d2:6d:83: 19:70:65:9d:51:18:4f:db:c2:90:12:bd:56:db:ab:0d:0f:28: 4b:82:d3:37:fa:dc:fa:92:c0:bf:05:e5:9f:a5:58:cf:79:9d: 82:07:75:b2:9f:3d:cb:4a:cb:b7:ef:64:14:08:ea:41:9d:4d: 76:f3:21:20:d9:01:17:40:ae:ac:00:3b:91:2d:da:37:67:72: fd:12:60:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMd5YceHE9rptly5jpsCjRrqS3uowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAyNTUxNTZFMTA0RDY2MUYyNTEzNERGRUY4RUYwNUJE NzNFOEMwNDAeFw0yNjA5MjEwNjQ0NThaFw0yNjA5MjIwOTQ2NThaMDMxMTAvBgNV BAMTKEEzREREN0NCMTI2MTlBRDYwRTRDQzQ3Q0Q2MjVERUY3QTE0QzM3Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCG7EYSQ+Jqvh+qlgWT2TsIH1z7 aqjAmRC5aIt+NltvAOC7v211uol+sYq67NEDw6LpJ+tmWcBDQK6Ok8E2yALwNBQy cNsg7x/sVOZ/DHG+TbO5MatbEy+ZxJVIkhlospSCMfLVaDMRYK8uTXf4wXnaSWG6 C5wIFbs+JLBtY0UOunFXJYaA7tgCWJXH7nH1Mh6pyxupRKALoGp3Q8DrlE5RsHTJ zYKkyj+ZSV0PGqTgHF4JSKhuELnxTn017dbnU2gzM4QOBHDdaGsXggfX/ZGpZLCl Fu++wQEPAwfCPbtHkIIf6xiapRD7U6nXd4j8Zp/z3ozDjuLsT+lDXjBxqu47AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo93XyxJhmtYOTMR81iXe96FMN88wHwYDVR0j BBgwFoAUoCVRVuEE1mHyUTTf747wW9c+jAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NiZmIyMjgtZmQwNS00YWZkLTg3YmQtZWQ1ODBiNTUwMzZmLzAvQTAyNTUxNTZF MTA0RDY2MUYyNTEzNERGRUY4RUYwNUJENzNFOEMwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDI1NTE1NkUxMDRENjYxRjI1MTM0REZFRjhFRjA1QkQ3M0U4 QzA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NiZmIyMjgtZmQwNS00YWZkLTg3 YmQtZWQ1ODBiNTUwMzZmLzAvQTAyNTUxNTZFMTA0RDY2MUYyNTEzNERGRUY4RUYw NUJENzNFOEMwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdCg5Bir5PCenW8ktIbmzluK38W72B5xoJL pQQEG0sK7oewzZPADqOJiPlxVtO6yvb5wtxU0+2+HQhkm3xY7aW435iBpmgtmb7Q vCKgf68LuiYFfQeNrs/h08F2ceL8vVUkz/aJgytkgzZY8u2csdmZi5rRMprXMIsH Mrm/BgVCl+1iM/PWbR6kBaWi5ro8NbwFiA+gr2PlyJ4XCJYN5hvpLLxCtj+1TD+Z 7Jknai5ZBNJtgxlwZZ1RGE/bwpASvVbbqw0PKEuC0zf63PqSwL8F5Z+lWM95nYIH dbKfPctKy7fvZBQI6kGdTXbzISDZARdArqwAO5Et2jdncv0SYMc= -----END CERTIFICATE-----Generated at Mon Sep 21 18:29:13 2026 by rpki-client