$ rpki-client -vvvf rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft File: A9E3887289ED85663942126250F7D66CD58FE1F5.mft (raw, json) Hash identifier: fqN26B+OSrspFPW9IjeXJqNGQAdgyoQf7/ZbKeM0s5o= Subject key identifier: F3:F1:14:0E:DB:CA:89:B3:D8:73:0F:17:2F:71:36:08:64:9A:00:BF Authority key identifier: A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5 Certificate issuer: /CN=A9E3887289ED85663942126250F7D66CD58FE1F5 Certificate serial: 76423A35F5A8AAB6CB1F5B0176A6B20095D22CF9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 15:32:00 +0000 Manifest this update: Wed 02 Sep 2026 15:27:00 +0000 Manifest next update: Thu 03 Sep 2026 16:21:00 +0000 Files and hashes: 1: A9E3887289ED85663942126250F7D66CD58FE1F5.crl (hash: Je2+nspaff4bbXFp/lw7lj5HIdLDeeix1l////0Cv2M=) 2: 3130332e3136362e3132322e302f32332d3233203d3e20313431393435.roa (hash: JytxgR9jZstQPJBZYCIpgiXASID1MDjbIa5qz0t9YDc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.crl rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 16:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:42:3a:35:f5:a8:aa:b6:cb:1f:5b:01:76:a6:b2:00:95:d2:2c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E3887289ED85663942126250F7D66CD58FE1F5 Validity Not Before: Sep 2 15:27:00 2026 GMT Not After : Sep 3 16:21:00 2026 GMT Subject: CN=F3F1140EDBCA89B3D8730F172F713608649A00BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e3:67:db:e4:e4:32:6f:95:a7:9c:a6:8f:2a: 85:9d:fb:ff:17:0b:73:3e:2e:79:10:87:2a:33:16: 8d:84:79:8a:21:18:49:e7:57:ef:58:69:32:e7:b3: 64:25:07:84:5c:ff:9e:29:ba:4f:93:2c:0e:f2:1b: 11:c3:24:64:fb:2c:63:e5:d5:24:20:85:bb:d5:a3: 0d:b0:78:f5:86:6f:57:ef:b1:4c:f6:9e:c2:ce:07: a5:31:b5:40:65:99:49:2b:d9:a1:02:2d:f4:c1:e5: ee:4b:55:c6:83:51:fa:54:ea:65:6c:18:3a:e6:17: 58:53:6f:e8:c9:2b:5e:27:dc:d9:b5:dc:6f:89:11: 46:2e:86:d5:44:cf:3a:64:ae:b1:f4:73:6e:98:49: cd:19:05:b9:51:3d:0c:d6:d5:a2:e1:b7:f8:78:f3: 1e:f0:6e:fa:c1:52:36:4b:bd:d8:75:23:2b:36:01: 8a:6e:92:e5:64:91:d5:db:2c:b1:91:c4:aa:2a:56: be:d6:60:01:d1:4a:76:ce:df:08:ac:a2:4d:6c:3b: 8d:01:8e:b5:7f:06:2d:db:cb:8a:5e:41:12:eb:b9: da:e4:25:11:30:04:61:aa:1b:91:26:67:41:a5:43: 59:69:7e:b0:d3:2e:55:30:45:9e:d5:75:e8:45:45: 1c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F1:14:0E:DB:CA:89:B3:D8:73:0F:17:2F:71:36:08:64:9A:00:BF X509v3 Authority Key Identifier: keyid:A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:48:65:e8:f9:18:28:b2:20:46:42:57:39:cc:d8:f8:b4:79: 57:73:33:78:b1:8a:22:0b:77:c4:7e:a5:4d:76:5c:75:58:03: 64:d7:6c:52:6a:d1:e5:e8:c4:cb:cb:a5:dc:98:cd:1f:51:ae: 02:80:87:f0:db:a4:e5:8a:1b:0e:06:87:75:bb:5e:93:a2:2a: 01:5d:af:34:67:9b:3e:72:79:df:21:c3:4f:9a:ce:62:d4:4a: b7:da:33:72:54:94:9f:69:3a:4d:22:4c:27:13:7c:6b:9c:48: 63:20:f3:19:c6:35:3a:17:77:6a:32:0d:a1:61:36:78:97:fb: 07:95:7b:f4:d6:b6:bd:af:36:98:e1:e2:b0:85:11:00:7e:62: be:85:48:c7:0d:4d:4b:22:5d:ab:38:4a:f7:3b:ab:cf:82:47: a8:6a:11:7d:6f:07:0d:30:e7:e5:c7:79:a3:7e:1d:5c:f7:49: 86:c2:93:80:f2:2b:99:8f:e4:79:48:f2:4a:07:f0:d8:71:42: 8d:9c:63:29:6e:f9:9c:1f:22:fe:fd:c5:f8:e9:87:aa:06:6d: 13:70:69:11:16:e1:5a:11:0f:c1:3d:e8:88:d1:f5:f4:36:27: fd:e4:4e:18:a8:1a:1e:96:f4:0c:e4:fc:12:bc:37:5f:cb:61: 02:13:9d:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdkI6NfWoqrbLH1sBdqayAJXSLPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFMzg4NzI4OUVEODU2NjM5NDIxMjYyNTBGN0Q2NkNE NThGRTFGNTAeFw0yNjA5MDIxNTI3MDBaFw0yNjA5MDMxNjIxMDBaMDMxMTAvBgNV BAMTKEYzRjExNDBFREJDQTg5QjNEODczMEYxNzJGNzEzNjA4NjQ5QTAwQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ42fb5OQyb5WnnKaPKoWd+/8X C3M+LnkQhyozFo2EeYohGEnnV+9YaTLns2QlB4Rc/54puk+TLA7yGxHDJGT7LGPl 1SQghbvVow2wePWGb1fvsUz2nsLOB6UxtUBlmUkr2aECLfTB5e5LVcaDUfpU6mVs GDrmF1hTb+jJK14n3Nm13G+JEUYuhtVEzzpkrrH0c26YSc0ZBblRPQzW1aLht/h4 8x7wbvrBUjZLvdh1Iys2AYpukuVkkdXbLLGRxKoqVr7WYAHRSnbO3wisok1sO40B jrV/Bi3by4peQRLrudrkJREwBGGqG5EmZ0GlQ1lpfrDTLlUwRZ7VdehFRRzhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8/EUDtvKibPYcw8XL3E2CGSaAL8wHwYDVR0j BBgwFoAUqeOIconthWY5QhJiUPfWbNWP4fUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTQzY2M2YTgtZTdhYS00ZjM3LWJkMDgtZjJlYjU3ZTg4NzM2LzAvQTlFMzg4NzI4 OUVEODU2NjM5NDIxMjYyNTBGN0Q2NkNENThGRTFGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOUUzODg3Mjg5RUQ4NTY2Mzk0MjEyNjI1MEY3RDY2Q0Q1OEZF MUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTQzY2M2YTgtZTdhYS00ZjM3LWJk MDgtZjJlYjU3ZTg4NzM2LzAvQTlFMzg4NzI4OUVEODU2NjM5NDIxMjYyNTBGN0Q2 NkNENThGRTFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJIZej5GCiyIEZCVznM2Pi0eVdzM3ixiiIL d8R+pU12XHVYA2TXbFJq0eXoxMvLpdyYzR9RrgKAh/DbpOWKGw4Gh3W7XpOiKgFd rzRnmz5yed8hw0+azmLUSrfaM3JUlJ9pOk0iTCcTfGucSGMg8xnGNToXd2oyDaFh NniX+weVe/TWtr2vNpjh4rCFEQB+Yr6FSMcNTUsiXas4Svc7q8+CR6hqEX1vBw0w 5+XHeaN+HVz3SYbCk4DyK5mP5HlI8koH8NhxQo2cYylu+ZwfIv79xfjph6oGbRNw aREW4VoRD8E96IjR9fQ2J/3kThioGh6W9Azk/BK8N1/LYQITnaM= -----END CERTIFICATE-----Generated at Thu Sep 3 05:10:13 2026 by rpki-client