$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft File: A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft (raw, json) Hash identifier: eL2e+w7Bil1bQBgGptXRqqGfNHrYkfmuTL5t7gA8dZA= Subject key identifier: 8E:E8:83:64:6B:4E:E9:33:0E:72:0C:67:4F:71:AE:D0:2A:AA:3C:24 Authority key identifier: A8:31:4E:43:A1:B6:F8:AF:DA:8D:95:E8:77:9C:65:41:69:11:D3:10 Certificate issuer: /CN=A8314E43A1B6F8AFDA8D95E8779C65416911D310 Certificate serial: 177659BBAA8538B69168CD44ED5AE5F9E153CA5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft Manifest number: BB Signing time: Sun 20 Sep 2026 04:32:48 +0000 Manifest this update: Sun 20 Sep 2026 04:27:48 +0000 Manifest next update: Mon 21 Sep 2026 07:22:48 +0000 Files and hashes: 1: 3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa (hash: GuNiUOOoy6zPyANA8gj8CAZ6aJ70gefpTuHjvXAYLoc=) 2: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (hash: rj0eAc/Fx3ZnJOzSIDlZ7SEqTTGwaOV3Drw183dIjT4=) 3: 3130332e3131312e3231392e302f32342d3234203d3e20313337333233.roa (hash: 9Ri7gQA5FImbPHcWZvwCuT4KIhatc00BK6BTGVhP2a0=) 4: A8314E43A1B6F8AFDA8D95E8779C65416911D310.crl (hash: 5nj4zcbQpWOZBkqxvE/8zbWqXedxO7M/YI5eig0cZpQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.crl rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 07:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:76:59:bb:aa:85:38:b6:91:68:cd:44:ed:5a:e5:f9:e1:53:ca:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8314E43A1B6F8AFDA8D95E8779C65416911D310 Validity Not Before: Sep 20 04:27:48 2026 GMT Not After : Sep 21 07:22:48 2026 GMT Subject: CN=8EE883646B4EE9330E720C674F71AED02AAA3C24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9b:b0:28:33:cd:19:60:0e:15:79:64:23:85: 0b:4c:75:11:26:ff:ff:dd:8c:dd:c9:31:e2:ec:61: 73:9a:f2:13:c8:e7:ea:37:52:1b:56:db:79:70:47: 42:6c:29:01:a8:76:84:36:58:fb:50:e0:cc:05:c1: 2b:77:e2:11:b9:2a:3a:07:dd:2d:50:e1:b0:54:f5: 6d:28:2b:19:c7:78:89:c7:3b:00:1d:22:15:cd:81: e5:0d:30:5c:38:f0:95:a2:92:21:79:70:95:cb:a1: 1b:88:32:fe:17:21:39:4b:a4:b8:af:5b:a1:fc:33: 21:bf:2c:cf:8d:cc:12:01:6b:1d:9b:da:f6:d9:18: 1d:70:6e:a5:0a:f8:7e:f0:ba:69:bb:25:17:24:0d: 28:ef:b2:14:f3:e6:60:ec:fa:f9:ab:8c:29:a6:74: a9:c6:d8:39:5c:53:74:06:18:2e:d0:4b:0f:fe:e9: af:0f:b7:a7:70:db:30:a9:14:92:ba:67:17:57:e1: 77:80:d8:f3:0a:0c:01:77:61:4d:d2:b1:f0:15:02: 80:dc:d7:4a:8a:50:c1:5b:a7:e2:42:85:7e:9a:94: 34:0f:df:6a:a8:b5:41:ee:db:e3:82:cd:b7:b3:67: ff:b9:75:ef:89:03:e3:be:a6:8c:77:7b:35:d0:43: 1f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E8:83:64:6B:4E:E9:33:0E:72:0C:67:4F:71:AE:D0:2A:AA:3C:24 X509v3 Authority Key Identifier: keyid:A8:31:4E:43:A1:B6:F8:AF:DA:8D:95:E8:77:9C:65:41:69:11:D3:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:0c:12:eb:d5:e5:0d:9d:a4:1f:e7:7a:59:5e:38:ca:a4:fa: 7a:e0:ac:e6:01:1b:aa:3b:ea:00:b6:5b:00:86:b0:52:41:0f: 87:ec:f5:8c:f3:3c:e6:9e:99:81:a5:fb:a2:98:6d:be:61:bb: db:96:f4:73:f8:5f:41:c1:21:e9:4d:16:b2:38:40:3a:3f:d4: a3:ff:ea:26:9c:83:46:18:fe:32:be:ed:05:e5:02:2a:04:ed: 26:76:d2:48:b6:8d:f8:cc:c4:ad:75:f2:23:3d:af:25:e3:3e: 5a:18:9d:dd:f7:ae:fd:38:66:f2:3e:ba:2b:53:54:84:a8:b9: d7:d6:0e:d0:08:9d:2a:ce:95:31:3a:d3:bc:b9:cf:4f:b0:96: e9:f5:84:ca:80:5d:2f:35:ed:ee:31:c6:5f:e9:87:38:47:b2: 82:28:f2:db:d2:0f:6e:a4:cc:32:08:67:a9:50:a5:7e:7b:7a: 80:c9:db:0e:ec:2b:7d:53:5f:90:f4:7c:a5:32:aa:5d:53:0f: dc:f4:97:43:fd:03:c0:43:eb:c6:c8:2c:c9:ce:e9:a6:af:51: d2:a4:77:a0:c8:6f:91:ca:4a:19:7e:d9:a2:11:26:2e:0a:e7: 62:98:66:9a:83:b8:3a:d1:44:a2:a2:b8:7c:3f:4b:6e:aa:d7: 87:7b:a2:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF3ZZu6qFOLaRaM1E7Vrl+eFTylswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgzMTRFNDNBMUI2RjhBRkRBOEQ5NUU4Nzc5QzY1NDE2 OTExRDMxMDAeFw0yNjA5MjAwNDI3NDhaFw0yNjA5MjEwNzIyNDhaMDMxMTAvBgNV BAMTKDhFRTg4MzY0NkI0RUU5MzMwRTcyMEM2NzRGNzFBRUQwMkFBQTNDMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVm7AoM80ZYA4VeWQjhQtMdREm ///djN3JMeLsYXOa8hPI5+o3UhtW23lwR0JsKQGodoQ2WPtQ4MwFwSt34hG5KjoH 3S1Q4bBU9W0oKxnHeInHOwAdIhXNgeUNMFw48JWikiF5cJXLoRuIMv4XITlLpLiv W6H8MyG/LM+NzBIBax2b2vbZGB1wbqUK+H7wumm7JRckDSjvshTz5mDs+vmrjCmm dKnG2DlcU3QGGC7QSw/+6a8Pt6dw2zCpFJK6ZxdX4XeA2PMKDAF3YU3SsfAVAoDc 10qKUMFbp+JChX6alDQP32qotUHu2+OCzbezZ/+5de+JA+O+pox3ezXQQx9BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjuiDZGtO6TMOcgxnT3Gu0CqqPCQwHwYDVR0j BBgwFoAUqDFOQ6G2+K/ajZXod5xlQWkR0xAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTFhZjE0NGItYjkyZS00ZmZmLWI2NDEtZTQ2ZmRkZThjNmRmLzAvQTgzMTRFNDNB MUI2RjhBRkRBOEQ5NUU4Nzc5QzY1NDE2OTExRDMxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODMxNEU0M0ExQjZGOEFGREE4RDk1RTg3NzlDNjU0MTY5MTFE MzEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTFhZjE0NGItYjkyZS00ZmZmLWI2 NDEtZTQ2ZmRkZThjNmRmLzAvQTgzMTRFNDNBMUI2RjhBRkRBOEQ5NUU4Nzc5QzY1 NDE2OTExRDMxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAMEuvV5Q2dpB/nelleOMqk+nrgrOYBG6o7 6gC2WwCGsFJBD4fs9YzzPOaemYGl+6KYbb5hu9uW9HP4X0HBIelNFrI4QDo/1KP/ 6iacg0YY/jK+7QXlAioE7SZ20ki2jfjMxK118iM9ryXjPloYnd33rv04ZvI+uitT VISoudfWDtAInSrOlTE607y5z0+wlun1hMqAXS817e4xxl/phzhHsoIo8tvSD26k zDIIZ6lQpX57eoDJ2w7sK31TX5D0fKUyql1TD9z0l0P9A8BD68bILMnO6aavUdKk d6DIb5HKShl+2aIRJi4K52KYZpqDuDrRRKKiuHw/S26q14d7ogI= -----END CERTIFICATE-----Generated at Sun Sep 20 19:23:25 2026 by rpki-client