$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft File: A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft (raw, json) Hash identifier: iWiCBFwFNYEmD8AKlPCoD7FZQLFFvbeF5K8nNBny8hY= Subject key identifier: E5:D0:A8:63:44:59:35:E1:AD:E3:25:09:3E:97:D9:48:20:2D:27:25 Authority key identifier: A5:5F:7F:6B:7F:DF:D2:44:89:8F:C8:36:B3:06:F8:88:4F:94:A8:EB Certificate issuer: /CN=A55F7F6B7FDFD244898FC836B306F8884F94A8EB Certificate serial: 7D38A9B0FB3E8B984CCCD20297BC3B934D0EE1BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft Manifest number: BE Signing time: Mon 21 Sep 2026 09:23:03 +0000 Manifest this update: Mon 21 Sep 2026 09:18:03 +0000 Manifest next update: Tue 22 Sep 2026 13:11:03 +0000 Files and hashes: 1: A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl (hash: UQFs6KlXGVsI+KjG+XTXGZX+IjeYvkE6o5wJaGWRReo=) 2: 3130332e35342e3136392e302f32342d3234203d3e20313530343833.roa (hash: 53bRIBjSwWo7fUHZf8q8wJM22KHC6YENy9XlgqItFdw=) 3: 3130332e35342e3136382e302f32342d3234203d3e20313530343833.roa (hash: KJ4tcOWA2SH5n/Mp2J21qXYJWXIviat2U7Oo6EVnrbg=) 4: 3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa (hash: inh5OwQ0YrBgY5xCxaOxxgj16EXDsFBhdopHtNq3Eyc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:38:a9:b0:fb:3e:8b:98:4c:cc:d2:02:97:bc:3b:93:4d:0e:e1:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A55F7F6B7FDFD244898FC836B306F8884F94A8EB Validity Not Before: Sep 21 09:18:03 2026 GMT Not After : Sep 22 13:11:03 2026 GMT Subject: CN=E5D0A863445935E1ADE325093E97D948202D2725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cd:19:23:71:90:4d:a4:62:9c:e9:43:07:b8: 48:5d:30:10:83:7c:39:7d:b5:10:20:49:a5:21:e8: b7:2d:82:a1:a2:59:97:fd:5f:60:c5:7c:9d:13:59: d0:f7:1c:86:63:38:24:5c:78:da:e4:36:98:76:96: c2:aa:4a:f3:42:78:ed:2b:b2:ac:eb:f5:f5:bf:b4: c0:df:06:71:92:9a:b1:4b:55:02:7d:2f:7c:f8:f2: ac:0e:9b:19:6f:58:6b:75:ab:6a:81:8c:5d:03:7a: 88:82:af:02:af:9e:38:b1:16:16:69:dc:e1:2f:de: ba:95:d6:20:1c:c9:11:8e:14:26:44:3f:f5:59:d6: b4:d6:19:d7:92:e9:9a:f8:b0:07:08:05:00:7b:c5: 8d:dc:62:ad:1d:44:f6:6b:02:3e:59:4d:b6:dd:e8: 90:92:89:08:0b:8e:7f:da:64:69:e9:69:ba:03:58: 73:23:76:c9:4c:9e:b1:80:d8:ef:61:a5:c3:39:51: a3:4a:be:cc:cf:81:c0:71:1e:21:0e:d6:85:f7:07: 27:68:68:1f:4b:76:44:b2:2c:77:ce:e8:b6:e6:88: 1d:13:0f:e8:bd:2e:f1:12:b1:f1:9d:89:6a:0a:d2: 4a:45:08:47:a5:bb:51:c5:09:64:91:94:5e:c3:4c: 69:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D0:A8:63:44:59:35:E1:AD:E3:25:09:3E:97:D9:48:20:2D:27:25 X509v3 Authority Key Identifier: keyid:A5:5F:7F:6B:7F:DF:D2:44:89:8F:C8:36:B3:06:F8:88:4F:94:A8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b9:ca:af:94:58:a0:b4:b5:f4:dd:48:32:eb:42:b3:03:70: 04:4f:c6:04:91:a4:31:bc:4f:57:5a:05:83:4a:7f:e4:4b:fd: db:59:9d:20:a7:20:9f:9f:f4:6d:64:fd:5a:bf:9d:d2:b1:c7: 3c:1a:29:fc:82:33:6e:90:b9:5b:93:7a:19:2a:74:1e:11:a6: 49:a7:57:8d:f7:18:00:fe:49:ce:20:95:21:30:39:71:40:f0: 36:63:f0:26:12:94:07:30:9a:c5:56:6e:e1:3d:22:96:b9:7f: 00:a6:7a:0a:18:ae:65:7f:32:9f:bd:cf:96:94:03:5c:6f:e0: c1:51:32:f7:af:cb:8f:92:5e:74:88:0d:93:51:01:a4:93:00: 1d:4f:1a:04:c7:bd:92:ed:a7:7a:66:02:f9:97:24:ac:b5:3b: 21:38:f3:61:47:88:6b:5b:4a:27:ee:3c:fd:8c:33:a6:ed:0e: 3e:04:c9:6f:13:86:31:17:9e:57:89:ac:a5:d1:f1:f2:0c:84: 29:4e:28:73:48:c1:cc:32:c7:a8:56:68:5e:4a:08:97:c2:b8: 23:55:ba:12:23:d8:50:00:75:0b:1a:4d:8d:7f:59:93:a6:b8: b1:4a:6d:c0:a2:bb:d4:79:1f:1a:2a:e4:b9:7c:65:36:88:f4: b2:2c:e0:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfTipsPs+i5hMzNICl7w7k00O4b4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU1RjdGNkI3RkRGRDI0NDg5OEZDODM2QjMwNkY4ODg0 Rjk0QThFQjAeFw0yNjA5MjEwOTE4MDNaFw0yNjA5MjIxMzExMDNaMDMxMTAvBgNV BAMTKEU1RDBBODYzNDQ1OTM1RTFBREUzMjUwOTNFOTdEOTQ4MjAyRDI3MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVzRkjcZBNpGKc6UMHuEhdMBCD fDl9tRAgSaUh6LctgqGiWZf9X2DFfJ0TWdD3HIZjOCRceNrkNph2lsKqSvNCeO0r sqzr9fW/tMDfBnGSmrFLVQJ9L3z48qwOmxlvWGt1q2qBjF0DeoiCrwKvnjixFhZp 3OEv3rqV1iAcyRGOFCZEP/VZ1rTWGdeS6Zr4sAcIBQB7xY3cYq0dRPZrAj5ZTbbd 6JCSiQgLjn/aZGnpaboDWHMjdslMnrGA2O9hpcM5UaNKvszPgcBxHiEO1oX3Bydo aB9LdkSyLHfO6LbmiB0TD+i9LvESsfGdiWoK0kpFCEelu1HFCWSRlF7DTGkxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5dCoY0RZNeGt4yUJPpfZSCAtJyUwHwYDVR0j BBgwFoAUpV9/a3/f0kSJj8g2swb4iE+UqOswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmUzMzA2MzMtYTdkMS00ZDBhLWExY2MtYjZjM2VlZGZiYzE3LzAvQTU1RjdGNkI3 RkRGRDI0NDg5OEZDODM2QjMwNkY4ODg0Rjk0QThFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNTVGN0Y2QjdGREZEMjQ0ODk4RkM4MzZCMzA2Rjg4ODRGOTRB OEVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmUzMzA2MzMtYTdkMS00ZDBhLWEx Y2MtYjZjM2VlZGZiYzE3LzAvQTU1RjdGNkI3RkRGRDI0NDg5OEZDODM2QjMwNkY4 ODg0Rjk0QThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABG5yq+UWKC0tfTdSDLrQrMDcARPxgSRpDG8 T1daBYNKf+RL/dtZnSCnIJ+f9G1k/Vq/ndKxxzwaKfyCM26QuVuTehkqdB4Rpkmn V433GAD+Sc4glSEwOXFA8DZj8CYSlAcwmsVWbuE9Ipa5fwCmegoYrmV/Mp+9z5aU A1xv4MFRMvevy4+SXnSIDZNRAaSTAB1PGgTHvZLtp3pmAvmXJKy1OyE482FHiGtb SifuPP2MM6btDj4EyW8ThjEXnleJrKXR8fIMhClOKHNIwcwyx6hWaF5KCJfCuCNV uhIj2FAAdQsaTY1/WZOmuLFKbcCiu9R5Hxoq5Ll8ZTaI9LIs4A4= -----END CERTIFICATE-----Generated at Mon Sep 21 14:02:56 2026 by rpki-client