$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft File: A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft (raw, json) Hash identifier: rO9FSR+k5Br0S+h2+pkhQ0utBzU5u5pB4OgRJiqAkLQ= Subject key identifier: CA:4C:5C:09:67:73:65:AA:E6:59:AE:32:92:77:45:A9:C9:5A:2F:FC Authority key identifier: A5:1F:08:82:DC:1B:DA:E2:BF:6D:C9:1D:3E:C6:EB:23:E5:69:AF:D6 Certificate issuer: /CN=A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6 Certificate serial: 273BBB02D92043CC824E7B33E1861B81CB46CEA9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft Manifest number: BD Signing time: Mon 21 Sep 2026 03:10:28 +0000 Manifest this update: Mon 21 Sep 2026 03:05:28 +0000 Manifest next update: Tue 22 Sep 2026 06:53:28 +0000 Files and hashes: 1: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: Mtfzs1yZWVTcj+jwor1tUEKlyotPWoajpPtYoZFvsps=) 2: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: eVEWrgAX4ZnGtqRKMu7y1kldAhV5Bn5D8vbPp3E9838=) 3: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: dyba1Oz6Wp8hX68WIp/FlT5kkFNyYyRCOC354wRZyeE=) 4: A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.crl (hash: lmFp8XZCWxtqdsHEGT1VixeMJTk9pcpC/YgVtwNEjM0=) 5: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: bcrYp2H/z0S0hWGYzTC5YNTUZlTQYIqRD2WSLvGlQYs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.crl rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:3b:bb:02:d9:20:43:cc:82:4e:7b:33:e1:86:1b:81:cb:46:ce:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6 Validity Not Before: Sep 21 03:05:28 2026 GMT Not After : Sep 22 06:53:28 2026 GMT Subject: CN=CA4C5C09677365AAE659AE32927745A9C95A2FFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:be:7a:a6:78:df:4f:2f:18:3b:ae:d0:a4:e6: e6:fb:8e:b0:ac:8f:eb:b7:e3:4c:86:fc:a2:13:58: 30:f7:8c:12:b9:1f:2d:e4:06:8a:ce:83:5b:be:f6: 82:65:33:64:6b:37:56:78:a2:31:4e:f0:14:e3:64: 56:c4:fe:4d:e2:0c:f7:22:ae:31:17:b6:84:ec:cf: ae:09:87:4e:c9:27:9f:6e:50:8a:8c:a6:e1:05:e4: 97:9d:5a:48:3f:ed:6c:b6:9f:02:e9:8d:98:b2:f0: 89:14:ea:f1:38:63:54:e4:c3:af:a2:af:c5:e3:a3: 95:31:ea:d3:b9:93:96:a6:7b:fd:d7:83:72:07:7c: a4:9d:fd:33:95:55:4a:5e:07:5b:7a:eb:c5:61:5b: cd:d5:e8:e5:3b:9e:7f:10:59:ab:92:ec:3b:30:18: 14:95:4e:95:8b:45:ad:18:57:46:50:fc:85:1c:92: 61:da:08:17:3d:0c:a2:ef:8b:6e:4e:a7:6a:d2:3a: 1a:51:97:7d:fb:e0:3a:0a:c0:d0:5b:81:be:aa:7a: be:2b:a8:71:4d:2a:6c:60:63:6f:ae:30:8d:88:9b: 45:31:7c:34:52:87:84:36:66:f5:c7:2c:8a:29:e3: 7f:82:cb:a8:b6:34:71:45:9c:20:1c:0c:3f:d4:c2: d6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4C:5C:09:67:73:65:AA:E6:59:AE:32:92:77:45:A9:C9:5A:2F:FC X509v3 Authority Key Identifier: keyid:A5:1F:08:82:DC:1B:DA:E2:BF:6D:C9:1D:3E:C6:EB:23:E5:69:AF:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e7:57:66:c4:9b:3c:18:55:1c:b9:e4:47:c1:bc:bd:93:ed: 10:fe:d0:7e:4b:94:7e:00:63:30:05:9c:13:a1:91:c5:5b:0c: 23:8d:0e:f2:09:a1:87:36:df:77:9f:60:07:34:f3:69:f1:56: f0:dd:fc:d7:51:a2:ba:c6:21:d3:eb:47:e9:26:2a:78:ea:66: 6d:d8:6e:d5:f1:76:8f:24:48:96:d0:4c:c4:4b:09:4d:4d:e9: 09:b7:4e:01:a9:72:f3:73:49:98:5e:40:6d:e1:1e:c5:e9:6f: b4:86:90:2f:8a:31:3f:0e:22:eb:4b:47:57:01:f3:ee:1a:09: 39:9e:b0:bd:d2:41:bd:6a:06:78:ea:2b:ca:b5:43:41:ea:34: 65:f8:d3:98:67:c4:fc:c3:fa:fb:df:f5:1b:fe:09:6d:ae:94: 73:61:93:1d:aa:f9:e7:9b:51:be:64:ec:a3:b8:d9:0c:29:dc: 2e:89:20:6b:d3:ea:c1:12:bc:2c:2a:9d:cc:8b:64:ed:8f:03: 57:0b:8a:61:94:5b:49:0a:99:10:85:43:ef:ee:ae:15:a0:02: 9a:aa:bd:5c:72:3f:4d:21:81:13:6c:87:e2:10:98:25:35:02: ee:3a:33:17:c2:52:e1:8f:54:4d:6c:fe:a2:d1:d4:45:f3:a6: fb:47:e8:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJzu7AtkgQ8yCTnsz4YYbgctGzqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxRjA4ODJEQzFCREFFMkJGNkRDOTFEM0VDNkVCMjNF NTY5QUZENjAeFw0yNjA5MjEwMzA1MjhaFw0yNjA5MjIwNjUzMjhaMDMxMTAvBgNV BAMTKENBNEM1QzA5Njc3MzY1QUFFNjU5QUUzMjkyNzc0NUE5Qzk1QTJGRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDavnqmeN9PLxg7rtCk5ub7jrCs j+u340yG/KITWDD3jBK5Hy3kBorOg1u+9oJlM2RrN1Z4ojFO8BTjZFbE/k3iDPci rjEXtoTsz64Jh07JJ59uUIqMpuEF5JedWkg/7Wy2nwLpjZiy8IkU6vE4Y1Tkw6+i r8Xjo5Ux6tO5k5ame/3Xg3IHfKSd/TOVVUpeB1t668VhW83V6OU7nn8QWauS7Dsw GBSVTpWLRa0YV0ZQ/IUckmHaCBc9DKLvi25Op2rSOhpRl3374DoKwNBbgb6qer4r qHFNKmxgY2+uMI2Im0UxfDRSh4Q2ZvXHLIop43+Cy6i2NHFFnCAcDD/UwtZnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUykxcCWdzZarmWa4ykndFqclaL/wwHwYDVR0j BBgwFoAUpR8Igtwb2uK/bckdPsbrI+Vpr9YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjljZTBjOTQtMGQ2Yy00NWIzLWFhYzYtMzRkMGNlOWIxZjA4LzAvQTUxRjA4ODJE QzFCREFFMkJGNkRDOTFEM0VDNkVCMjNFNTY5QUZENi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNTFGMDg4MkRDMUJEQUUyQkY2REM5MUQzRUM2RUIyM0U1NjlB RkQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUxRjA4ODJEQzFCREFFMkJGNkRDOTFEM0VDNkVC MjNFNTY5QUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLnV2bEmzwYVRy55EfBvL2T7RD+0H5LlH4A YzAFnBOhkcVbDCONDvIJoYc233efYAc082nxVvDd/NdRorrGIdPrR+kmKnjqZm3Y btXxdo8kSJbQTMRLCU1N6Qm3TgGpcvNzSZheQG3hHsXpb7SGkC+KMT8OIutLR1cB 8+4aCTmesL3SQb1qBnjqK8q1Q0HqNGX405hnxPzD+vvf9Rv+CW2ulHNhkx2q+eeb Ub5k7KO42Qwp3C6JIGvT6sESvCwqncyLZO2PA1cLimGUW0kKmRCFQ+/urhWgApqq vVxyP00hgRNsh+IQmCU1Au46MxfCUuGPVE1s/qLR1EXzpvtH6PU= -----END CERTIFICATE-----Generated at Mon Sep 21 15:42:18 2026 by rpki-client