$ rpki-client -vvvf rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft File: A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft (raw, json) Hash identifier: nsiZnPDzxBzJ3zo4v8YpHCg5atbH3rgZ+7V3JeZDdHA= Subject key identifier: D4:88:A4:C7:46:E3:14:0D:8D:F0:E3:9E:A9:3D:D8:D5:F7:C8:77:AD Authority key identifier: A4:E1:4E:D9:62:51:66:5F:CF:9F:C4:FA:C3:68:DC:40:95:3E:34:0D Certificate issuer: /CN=A4E14ED96251665FCF9FC4FAC368DC40953E340D Certificate serial: 25977D6CA7C735021563FA93837637DF5B1E324C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4E14ED96251665FCF9FC4FAC368DC40953E340D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 23:52:48 +0000 Manifest this update: Wed 02 Sep 2026 23:47:48 +0000 Manifest next update: Fri 04 Sep 2026 02:14:48 +0000 Files and hashes: 1: A4E14ED96251665FCF9FC4FAC368DC40953E340D.crl (hash: nnfVi9jlULxWM/Aoy6nZIxjF6qj4HSyB0YFoPCUBLqc=) 2: 3130332e3136312e3134362e302f32332d3234203d3e20313431363238.roa (hash: q0vh/quQ+eV+UyFsOiPKTjhnWvk1GZbhfwaX1pBs5t4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.crl rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4E14ED96251665FCF9FC4FAC368DC40953E340D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:97:7d:6c:a7:c7:35:02:15:63:fa:93:83:76:37:df:5b:1e:32:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4E14ED96251665FCF9FC4FAC368DC40953E340D Validity Not Before: Sep 2 23:47:48 2026 GMT Not After : Sep 4 02:14:48 2026 GMT Subject: CN=D488A4C746E3140D8DF0E39EA93DD8D5F7C877AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:df:20:ec:0f:f7:31:51:13:05:9a:19:1a:91: 41:63:42:31:4a:c7:2f:31:ad:d7:ed:e7:ab:34:de: d1:34:53:0a:77:d1:e6:35:0d:c6:80:d0:f0:c3:65: 58:2d:74:10:ab:74:17:a0:7f:cb:1b:05:95:c3:d8: 47:64:d0:d0:f5:f2:9e:20:6c:e1:03:fb:ed:f3:5e: 4d:d1:ee:ba:99:07:fd:a4:c0:62:95:0f:2e:27:b2: 03:ee:e6:b7:b3:9e:f8:7c:01:98:f0:86:f8:93:4e: 5b:de:f7:7e:5b:af:7e:79:31:9e:57:89:e1:de:2d: 11:fd:36:d3:fb:b0:f6:4b:35:f6:15:46:64:aa:8e: 33:23:e8:a0:6a:02:d9:1f:5f:11:08:22:8e:0e:9d: ce:92:1f:1b:ad:ae:d6:05:42:2c:b5:b7:70:64:5c: 77:ee:7e:42:bb:c6:84:11:97:b3:52:b6:62:21:26: a8:bc:69:30:e8:14:e0:17:c7:42:15:42:58:e1:36: 30:4a:c0:32:a5:8a:e3:e8:a2:ba:62:90:50:f1:65: 7d:fe:23:58:7b:14:7a:39:20:a3:ef:0b:8a:60:9c: fb:db:81:dc:81:e3:f2:27:62:98:7c:9d:cd:d8:28: 46:f1:e3:77:5c:af:c9:d7:c6:92:6b:1b:f1:1c:24: d3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:88:A4:C7:46:E3:14:0D:8D:F0:E3:9E:A9:3D:D8:D5:F7:C8:77:AD X509v3 Authority Key Identifier: keyid:A4:E1:4E:D9:62:51:66:5F:CF:9F:C4:FA:C3:68:DC:40:95:3E:34:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4E14ED96251665FCF9FC4FAC368DC40953E340D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b6:3b:19:b0:eb:eb:95:45:c8:09:b4:db:e4:24:8e:96:79: aa:b1:95:71:da:f3:6b:64:92:e1:46:ad:66:f9:e1:57:41:19: b6:84:f6:8f:4d:e7:3b:70:53:6b:b5:7d:38:0e:9f:03:39:06: 44:35:ca:35:31:f2:7d:2a:39:39:60:63:93:73:56:e1:81:b7: d6:a9:59:9f:3d:34:af:26:f6:93:92:62:25:b2:bd:ad:1a:94: 94:f3:17:eb:a6:1e:27:68:04:e7:a7:81:49:98:c7:79:c9:72: 26:a8:65:a1:66:e6:8a:8c:4b:87:5d:80:bb:27:66:d9:b8:48: a0:8a:2e:33:99:0a:fd:c3:8f:27:12:b0:02:e8:9a:26:a7:23: 02:13:46:da:89:bd:5d:96:b8:f9:15:e3:c5:20:44:9c:f0:ef: 24:17:9c:57:9c:6f:0f:ef:68:31:79:0e:52:40:9c:92:a6:eb: 02:1b:16:f1:9c:27:62:bd:65:e0:1d:1a:92:7a:5b:5a:af:6f: e6:ee:4e:bd:9a:86:6e:a0:83:20:e3:23:50:20:90:a4:e8:38: 3a:a7:04:76:85:fa:90:3d:88:19:03:ec:0c:7d:36:50:35:77: 99:6d:60:89:bf:93:5a:03:1a:0b:6f:37:d4:3c:19:8b:c0:a5: fa:36:82:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJZd9bKfHNQIVY/qTg3Y331seMkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRFMTRFRDk2MjUxNjY1RkNGOUZDNEZBQzM2OERDNDA5 NTNFMzQwRDAeFw0yNjA5MDIyMzQ3NDhaFw0yNjA5MDQwMjE0NDhaMDMxMTAvBgNV BAMTKEQ0ODhBNEM3NDZFMzE0MEQ4REYwRTM5RUE5M0REOEQ1RjdDODc3QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw3yDsD/cxURMFmhkakUFjQjFK xy8xrdft56s03tE0Uwp30eY1DcaA0PDDZVgtdBCrdBegf8sbBZXD2Edk0ND18p4g bOED++3zXk3R7rqZB/2kwGKVDy4nsgPu5reznvh8AZjwhviTTlve935br355MZ5X ieHeLRH9NtP7sPZLNfYVRmSqjjMj6KBqAtkfXxEIIo4Onc6SHxutrtYFQiy1t3Bk XHfufkK7xoQRl7NStmIhJqi8aTDoFOAXx0IVQljhNjBKwDKliuPoorpikFDxZX3+ I1h7FHo5IKPvC4pgnPvbgdyB4/InYph8nc3YKEbx43dcr8nXxpJrG/EcJNO9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Iikx0bjFA2N8OOeqT3Y1ffId60wHwYDVR0j BBgwFoAUpOFO2WJRZl/Pn8T6w2jcQJU+NA0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA0MDM2NzUtNWZhOS00ZTczLWI0YTktMjMyMDY5YjMxYWQ5LzAvQTRFMTRFRDk2 MjUxNjY1RkNGOUZDNEZBQzM2OERDNDA5NTNFMzQwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNEUxNEVEOTYyNTE2NjVGQ0Y5RkM0RkFDMzY4REM0MDk1M0Uz NDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA0MDM2NzUtNWZhOS00ZTczLWI0 YTktMjMyMDY5YjMxYWQ5LzAvQTRFMTRFRDk2MjUxNjY1RkNGOUZDNEZBQzM2OERD NDA5NTNFMzQwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACG2Oxmw6+uVRcgJtNvkJI6WeaqxlXHa82tk kuFGrWb54VdBGbaE9o9N5ztwU2u1fTgOnwM5BkQ1yjUx8n0qOTlgY5NzVuGBt9ap WZ89NK8m9pOSYiWyva0alJTzF+umHidoBOengUmYx3nJciaoZaFm5oqMS4ddgLsn Ztm4SKCKLjOZCv3DjycSsALomianIwITRtqJvV2WuPkV48UgRJzw7yQXnFecbw/v aDF5DlJAnJKm6wIbFvGcJ2K9ZeAdGpJ6W1qvb+buTr2ahm6ggyDjI1AgkKToODqn BHaF+pA9iBkD7Ax9NlA1d5ltYIm/k1oDGgtvN9Q8GYvApfo2gpI= -----END CERTIFICATE-----Generated at Thu Sep 3 09:06:15 2026 by rpki-client