$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft File: 12215616BDEA90F45AB43FFCB676AA254601358F.mft (raw, json) Hash identifier: fZ1ERnui5+7S/M12QfU9Tqmpbv1YLUI5Udfs+CyfyPI= Subject key identifier: BB:72:BA:CA:A6:3F:5F:CA:7D:86:36:A7:77:48:84:DB:E5:43:B6:E2 Authority key identifier: 12:21:56:16:BD:EA:90:F4:5A:B4:3F:FC:B6:76:AA:25:46:01:35:8F Certificate issuer: /CN=12215616BDEA90F45AB43FFCB676AA254601358F Certificate serial: 4C38A9D53DF0A121206F676EBD4FA4D91762997F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12215616BDEA90F45AB43FFCB676AA254601358F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft Manifest number: A4 Signing time: Thu 03 Sep 2026 07:47:08 +0000 Manifest this update: Thu 03 Sep 2026 07:42:08 +0000 Manifest next update: Fri 04 Sep 2026 10:03:08 +0000 Files and hashes: 1: 3130332e3137342e3132322e302f32332d3233203d3e20313437303936.roa (hash: gTzJVLzwHZfB2XlD0ZDAGkf7sC4mGSUZJV6Nnni5S1g=) 2: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: 19Gxe0C+BqrJZYT7+O9ydX/09JgmXPG6bcNyUMxys/Q=) 3: 12215616BDEA90F45AB43FFCB676AA254601358F.crl (hash: fqPu7FZjnTufdLQ6EkO7L3UZpslHdveSIQdRtrYBRkU=) 4: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: BIL+aGZm0f2cNvuuhG7zFnc4Iz00ZUgKA3IGqeW+Vp0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.crl rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12215616BDEA90F45AB43FFCB676AA254601358F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 10:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:38:a9:d5:3d:f0:a1:21:20:6f:67:6e:bd:4f:a4:d9:17:62:99:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12215616BDEA90F45AB43FFCB676AA254601358F Validity Not Before: Sep 3 07:42:08 2026 GMT Not After : Sep 4 10:03:08 2026 GMT Subject: CN=BB72BACAA63F5FCA7D8636A7774884DBE543B6E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:ce:47:20:cb:6d:3c:07:16:57:9d:72:79: 50:b8:8a:6d:03:ed:65:e7:6a:40:9b:b0:16:c0:2b: 6e:6a:0f:93:80:80:2d:91:17:5a:7e:45:e8:67:b7: 5f:66:39:2c:b9:95:38:86:9d:27:13:6b:e2:ff:57: f7:20:36:97:15:90:a3:c2:3f:cb:ca:9a:fb:58:b3: 79:9d:ac:a7:ce:dd:f2:26:e2:5e:d9:2a:8d:00:47: 67:e5:d2:18:9a:83:c6:dd:5f:4b:3a:46:3c:ca:15: cb:34:20:fb:60:51:5e:0c:ac:18:bf:e3:41:3b:69: 9d:99:a0:cd:7f:b7:38:91:2a:9c:70:b9:87:9f:22: 42:4e:a9:47:0f:db:e8:1d:49:09:bb:94:c4:e6:c0: 6f:3f:35:92:7d:20:67:06:5f:0f:27:9f:35:89:bc: a9:8c:41:8c:8f:f8:1b:f6:99:37:5b:b0:59:93:ba: e8:a9:5e:ff:bc:b0:57:ba:00:0d:83:fa:35:23:3b: 8e:13:10:f6:11:ad:ee:04:47:4e:2a:b5:e3:db:75: f7:19:18:ba:54:d6:2e:7b:f5:2b:dc:0d:2c:9f:a2: 71:f0:3f:a5:6e:2c:53:9c:81:b5:1b:8b:a5:eb:36: 54:f9:5e:e9:e3:87:47:20:62:4e:96:86:ce:c7:2d: 0d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:72:BA:CA:A6:3F:5F:CA:7D:86:36:A7:77:48:84:DB:E5:43:B6:E2 X509v3 Authority Key Identifier: keyid:12:21:56:16:BD:EA:90:F4:5A:B4:3F:FC:B6:76:AA:25:46:01:35:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12215616BDEA90F45AB43FFCB676AA254601358F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:31:8f:53:77:e2:aa:d0:d4:ee:a0:b2:6d:c1:40:f3:fb:51: c3:22:e0:53:03:1d:eb:9c:5f:86:2c:ac:bf:30:71:16:fc:f6: c7:1b:e2:cc:e5:be:d1:ae:f3:83:ae:fb:d4:4a:8a:c1:b0:63: 23:ab:40:8a:a7:84:62:57:20:50:e2:a4:96:12:3f:cc:f3:b7: 63:7c:7a:5c:61:19:59:e7:16:74:99:16:89:b5:19:9a:5f:7a: fe:e2:d8:84:68:1e:01:00:20:e4:1c:30:7d:dd:67:00:7b:1e: 61:0a:c5:db:cd:94:09:b2:c2:ad:e3:b7:3c:44:4d:53:32:c3: d5:68:43:75:f8:b3:0c:dc:bc:32:aa:e4:67:e1:01:7b:03:85: e5:12:30:31:c3:b7:a6:04:45:0a:8b:56:27:a8:f9:63:fc:c1: 1d:04:75:c7:80:a6:b0:6f:2d:e7:c8:16:fd:f6:3f:a8:9b:32: 1f:8a:ae:a2:2b:9f:c7:61:cc:fe:45:40:2f:1d:22:d2:a1:2c: 4d:5a:a4:4e:e6:ce:15:9d:34:fa:1d:a2:43:d1:79:5d:4e:46: cd:eb:87:be:c7:57:c7:0f:0c:45:7a:30:16:c7:5e:c3:b6:82: 73:0e:42:9f:a4:87:ae:8a:c0:59:2f:8d:f1:1b:06:36:ab:27: da:9e:e2:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTDip1T3woSEgb2duvU+k2RdimX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIyMTU2MTZCREVBOTBGNDVBQjQzRkZDQjY3NkFBMjU0 NjAxMzU4RjAeFw0yNjA5MDMwNzQyMDhaFw0yNjA5MDQxMDAzMDhaMDMxMTAvBgNV BAMTKEJCNzJCQUNBQTYzRjVGQ0E3RDg2MzZBNzc3NDg4NERCRTU0M0I2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/M5HIMttPAcWV51yeVC4im0D 7WXnakCbsBbAK25qD5OAgC2RF1p+Rehnt19mOSy5lTiGnScTa+L/V/cgNpcVkKPC P8vKmvtYs3mdrKfO3fIm4l7ZKo0AR2fl0hiag8bdX0s6RjzKFcs0IPtgUV4MrBi/ 40E7aZ2ZoM1/tziRKpxwuYefIkJOqUcP2+gdSQm7lMTmwG8/NZJ9IGcGXw8nnzWJ vKmMQYyP+Bv2mTdbsFmTuuipXv+8sFe6AA2D+jUjO44TEPYRre4ER04qtePbdfcZ GLpU1i579SvcDSyfonHwP6VuLFOcgbUbi6XrNlT5Xunjh0cgYk6Whs7HLQ27AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu3K6yqY/X8p9hjand0iE2+VDtuIwHwYDVR0j BBgwFoAUEiFWFr3qkPRatD/8tnaqJUYBNY8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjI3MzAyN2EtMDk2Yi00ZTk1LWE2NTYtZGFiZTk4YWM2ZjZkLzAvMTIyMTU2MTZC REVBOTBGNDVBQjQzRkZDQjY3NkFBMjU0NjAxMzU4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjIxNTYxNkJERUE5MEY0NUFCNDNGRkNCNjc2QUEyNTQ2MDEz NThGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMTIyMTU2MTZCREVBOTBGNDVBQjQzRkZDQjY3NkFB MjU0NjAxMzU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkxj1N34qrQ1O6gsm3BQPP7UcMi4FMDHeuc X4YsrL8wcRb89scb4szlvtGu84Ou+9RKisGwYyOrQIqnhGJXIFDipJYSP8zzt2N8 elxhGVnnFnSZFom1GZpfev7i2IRoHgEAIOQcMH3dZwB7HmEKxdvNlAmywq3jtzxE TVMyw9VoQ3X4swzcvDKq5GfhAXsDheUSMDHDt6YERQqLVieo+WP8wR0EdceAprBv LefIFv32P6ibMh+KrqIrn8dhzP5FQC8dItKhLE1apE7mzhWdNPodokPReV1ORs3r h77HV8cPDEV6MBbHXsO2gnMOQp+kh66KwFkvjfEbBjarJ9qe4oQ= -----END CERTIFICATE-----Generated at Thu Sep 3 20:49:37 2026 by rpki-client