$ rpki-client -vvvf rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft File: A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft (raw, json) Hash identifier: mE5nF68gnPV3iwQxnUsN7L4G9sDoKSIuy9VQZ3v1A2g= Subject key identifier: B5:7A:DC:28:62:E3:E9:6E:F3:A3:54:E6:72:9A:5E:3E:16:6F:24:4A Authority key identifier: A9:78:8B:28:1E:44:81:BB:EF:C7:DC:CD:C6:D1:8C:F4:D3:6B:3D:6E Certificate issuer: /CN=A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E Certificate serial: 23CE846085AD94684AAC9F3F832CC08DF5DF627E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 19:42:00 +0000 Manifest this update: Wed 02 Sep 2026 19:37:00 +0000 Manifest next update: Thu 03 Sep 2026 20:18:00 +0000 Files and hashes: 1: A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.crl (hash: SxA0gk2zB/mDSo/lOzGYRQbDQoV8Tv98I9j6BmnIsNU=) 2: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: LzRdfO8uQHGjjJx+IZG72L+49qDt2LuDV7Qzeoi9vMg=) 3: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: +X4DdSQ9xtq8kPseZiuCwH6E+1VNqzzRG0A2Dn7OrXc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.crl rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 20:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ce:84:60:85:ad:94:68:4a:ac:9f:3f:83:2c:c0:8d:f5:df:62:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E Validity Not Before: Sep 2 19:37:00 2026 GMT Not After : Sep 3 20:18:00 2026 GMT Subject: CN=B57ADC2862E3E96EF3A354E6729A5E3E166F244A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:42:0e:9a:d8:58:87:91:9d:70:32:cd:96:92: e9:c6:c0:33:e0:83:e7:ca:55:88:f2:48:8e:78:27: 93:5f:3c:be:c5:4b:6f:2b:95:f7:44:74:83:d3:4b: 64:75:d0:93:3f:99:d5:7e:3e:95:36:c9:d2:13:6d: f5:27:75:f3:a4:37:3a:92:7c:a3:e8:1c:c5:21:34: f7:0c:7e:13:09:e1:8b:11:43:22:f6:7f:58:fa:7d: a0:5f:8e:60:96:37:63:34:f1:13:6c:ed:df:6c:ba: a1:9a:4d:95:13:97:ca:32:1d:ae:da:80:92:c5:f6: 84:27:40:57:21:86:18:2e:2d:43:42:b0:b8:01:3e: a8:02:b5:35:91:2c:bf:b8:7c:6e:eb:f3:8d:81:52: 0a:10:5b:56:69:b2:23:91:a5:66:f8:c8:8a:a9:03: 4e:b1:16:0b:fd:b0:f4:90:ff:06:b7:2e:16:43:12: 1f:47:65:58:f6:71:27:26:cc:b6:80:ec:3d:e4:63: 6c:6d:a6:ea:b8:82:85:c0:f9:4f:91:8a:84:08:e1: 78:6b:63:99:28:86:ff:41:f7:2a:52:e8:de:4d:f3: 38:ab:14:7a:f2:23:05:8f:d1:d8:f2:6c:25:f5:55: 69:b4:6b:f8:a1:02:8d:42:61:1a:ae:13:f3:33:99: 2a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7A:DC:28:62:E3:E9:6E:F3:A3:54:E6:72:9A:5E:3E:16:6F:24:4A X509v3 Authority Key Identifier: keyid:A9:78:8B:28:1E:44:81:BB:EF:C7:DC:CD:C6:D1:8C:F4:D3:6B:3D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:90:26:d3:6b:b1:77:68:0c:74:bc:12:a5:3f:88:93:bc:2d: 3e:61:82:f6:d5:aa:5b:7c:c9:e6:bb:34:a1:0d:65:50:dd:d3: 00:07:9a:41:69:e6:ad:27:90:f8:4c:18:1f:c9:07:90:8c:18: 20:4d:e7:3c:e4:37:bd:d1:4c:fe:54:8f:ad:a5:40:7d:79:d6: 07:32:07:08:72:84:5f:91:e2:c1:37:6d:c2:fb:5c:bd:bb:a0: 00:01:d4:35:4d:0a:0b:c0:82:aa:b6:26:55:43:a2:02:6a:96: d0:65:3c:a9:81:92:3a:b3:e9:b0:8f:97:61:80:b8:46:19:bd: a4:eb:10:7d:01:6a:13:76:ed:e2:b7:cb:66:bf:49:9a:cf:69: b4:01:70:00:8b:91:66:04:c4:8b:26:8f:e2:94:8c:a7:53:af: c3:bd:d4:84:90:bc:40:c9:29:3b:89:5c:55:ab:37:31:ce:0e: b1:05:78:11:85:5c:c5:74:3b:25:9f:f8:57:1d:6a:19:fd:90: d8:f9:13:58:ce:c2:8d:d9:6d:92:55:a8:84:56:db:8f:36:ce: a3:a4:40:0c:5b:01:7f:fe:6c:6c:e8:ea:3b:27:32:3b:47:cc: 8c:41:33:0d:cf:51:0f:11:a4:38:91:88:8e:14:a9:5c:c3:86: 6b:30:e4:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI86EYIWtlGhKrJ8/gyzAjfXfYn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk3ODhCMjgxRTQ0ODFCQkVGQzdEQ0NEQzZEMThDRjRE MzZCM0Q2RTAeFw0yNjA5MDIxOTM3MDBaFw0yNjA5MDMyMDE4MDBaMDMxMTAvBgNV BAMTKEI1N0FEQzI4NjJFM0U5NkVGM0EzNTRFNjcyOUE1RTNFMTY2RjI0NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Qg6a2FiHkZ1wMs2WkunGwDPg g+fKVYjySI54J5NfPL7FS28rlfdEdIPTS2R10JM/mdV+PpU2ydITbfUndfOkNzqS fKPoHMUhNPcMfhMJ4YsRQyL2f1j6faBfjmCWN2M08RNs7d9suqGaTZUTl8oyHa7a gJLF9oQnQFchhhguLUNCsLgBPqgCtTWRLL+4fG7r842BUgoQW1ZpsiORpWb4yIqp A06xFgv9sPSQ/wa3LhZDEh9HZVj2cScmzLaA7D3kY2xtpuq4goXA+U+RioQI4Xhr Y5kohv9B9ypS6N5N8zirFHryIwWP0djybCX1VWm0a/ihAo1CYRquE/MzmSolAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtXrcKGLj6W7zo1TmcppePhZvJEowHwYDVR0j BBgwFoAUqXiLKB5Egbvvx9zNxtGM9NNrPW4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjkyMjY5NDgtYjFhMS00Mjk0LTkxNTAtNmFmMGUwYmViZmI4LzAvQTk3ODhCMjgx RTQ0ODFCQkVGQzdEQ0NEQzZEMThDRjREMzZCM0Q2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTc4OEIyODFFNDQ4MUJCRUZDN0RDQ0RDNkQxOENGNEQzNkIz RDZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjkyMjY5NDgtYjFhMS00Mjk0LTkx NTAtNmFmMGUwYmViZmI4LzAvQTk3ODhCMjgxRTQ0ODFCQkVGQzdEQ0NEQzZEMThD RjREMzZCM0Q2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+QJtNrsXdoDHS8EqU/iJO8LT5hgvbVqlt8 yea7NKENZVDd0wAHmkFp5q0nkPhMGB/JB5CMGCBN5zzkN73RTP5Uj62lQH151gcy BwhyhF+R4sE3bcL7XL27oAAB1DVNCgvAgqq2JlVDogJqltBlPKmBkjqz6bCPl2GA uEYZvaTrEH0BahN27eK3y2a/SZrPabQBcACLkWYExIsmj+KUjKdTr8O91ISQvEDJ KTuJXFWrNzHODrEFeBGFXMV0OyWf+Fcdahn9kNj5E1jOwo3ZbZJVqIRW2482zqOk QAxbAX/+bGzo6jsnMjtHzIxBMw3PUQ8RpDiRiI4UqVzDhmsw5BU= -----END CERTIFICATE-----Generated at Thu Sep 3 08:00:53 2026 by rpki-client