$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft File: A100A99332CE78931B9E02D4EFEE6712B81443A5.mft (raw, json) Hash identifier: 1qEjs5uZUZ8vJVfF1vhYkcGagsnRd0V2b4+XTrZgvJQ= Subject key identifier: FA:E1:01:45:0B:55:76:1C:53:1C:93:F8:BE:67:11:42:6A:E5:97:F2 Authority key identifier: A1:00:A9:93:32:CE:78:93:1B:9E:02:D4:EF:EE:67:12:B8:14:43:A5 Certificate issuer: /CN=A100A99332CE78931B9E02D4EFEE6712B81443A5 Certificate serial: 407C97086EA1FF595DE16BACA18700303162B903 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 07:47:11 +0000 Manifest this update: Thu 03 Sep 2026 07:42:11 +0000 Manifest next update: Fri 04 Sep 2026 11:19:11 +0000 Files and hashes: 1: 3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (hash: DTmwpednkI6HsiidwVpKHLiGYfMBV1fbHQp1IFSmAn0=) 2: 3130332e32362e3139312e302f32342d3234203d3e20313530323639.roa (hash: ZcmU1/1tmDS14EVy1azjLSMcCXj3VjCECbts/S2roW8=) 3: A100A99332CE78931B9E02D4EFEE6712B81443A5.crl (hash: HhjymmZ9taRr231DfbyONwjAEcYrNCI7k5PGORFMQ00=) 4: 3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (hash: heQq7HcquDyrw94B2s2im1ZCA88nQvwu0Cy2cBDthxc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.crl rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 11:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:7c:97:08:6e:a1:ff:59:5d:e1:6b:ac:a1:87:00:30:31:62:b9:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A100A99332CE78931B9E02D4EFEE6712B81443A5 Validity Not Before: Sep 3 07:42:11 2026 GMT Not After : Sep 4 11:19:11 2026 GMT Subject: CN=FAE101450B55761C531C93F8BE6711426AE597F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b9:1d:54:e0:3e:a6:b1:3d:a0:24:01:eb:46: 89:5d:d2:37:f2:90:91:98:73:ba:89:96:11:b1:eb: 45:67:b7:d8:59:b2:28:01:c5:a7:c3:0a:ee:2b:cf: b8:27:aa:92:6c:ee:6d:e2:7f:72:22:ca:d8:d4:0c: 50:9b:b9:3d:dc:c3:03:7e:a5:25:04:3d:43:2d:e5: ee:75:2a:11:ef:1b:57:85:73:e4:a8:ee:8b:dd:33: 22:1c:30:ec:c6:61:7f:da:43:a3:a9:d3:af:6a:10: f5:5b:2d:f9:b4:50:73:dd:5a:1c:6e:10:4b:27:7f: 5c:64:3d:4e:e0:ab:89:e2:14:93:e8:4a:e8:d9:ea: 14:19:7e:47:fd:18:9a:0b:7a:c0:44:db:c0:0b:a1: d4:60:4a:09:42:09:fd:1e:6d:01:21:a7:cf:a7:b9: 16:17:8d:34:09:34:8c:91:44:bb:8a:50:4d:3f:1a: 0e:d4:9d:60:de:a4:31:ce:26:06:cd:f1:06:33:36: 68:70:e5:31:2e:9b:12:65:7c:d8:01:ee:90:10:a1: 2a:72:a4:c0:82:22:63:8e:58:88:86:30:db:49:8c: ea:8d:91:29:ce:3e:92:89:8e:c5:e3:2c:ed:e3:bf: 20:4e:5c:91:f7:89:91:86:2f:c1:0d:b5:63:92:bd: 82:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E1:01:45:0B:55:76:1C:53:1C:93:F8:BE:67:11:42:6A:E5:97:F2 X509v3 Authority Key Identifier: keyid:A1:00:A9:93:32:CE:78:93:1B:9E:02:D4:EF:EE:67:12:B8:14:43:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:54:e1:05:83:21:79:db:20:a9:c7:49:ff:b7:8b:bd:f5:48: 5e:35:72:40:c0:38:f5:47:14:4e:6f:f1:c8:5c:9f:b7:bb:a6: c4:1f:09:31:ba:2c:91:d5:a1:04:c8:0e:58:29:ad:5a:a5:c9: ce:0c:ed:0c:6d:89:38:c8:2a:de:07:45:63:81:e1:9b:7d:50: 8f:7d:44:46:10:47:ca:3b:64:86:d8:2f:93:38:cd:5a:ca:bf: 90:22:d3:e0:eb:a8:db:98:1c:4c:32:81:3e:56:a5:3b:fb:c3: 19:b2:af:86:e8:e0:98:83:28:65:08:2b:06:2f:cf:70:27:6d: a2:62:cb:0e:81:e4:78:ad:18:0e:c3:3c:34:fb:a4:b7:d7:13: 82:d4:4f:01:90:e6:0f:bb:31:94:d6:53:c3:ad:47:ce:43:58: f1:db:de:87:a9:84:86:eb:dd:52:6a:9f:3d:09:47:f6:96:03: a9:19:18:25:27:f4:c7:0f:a7:8c:e2:84:6f:2b:b1:14:15:db: ac:63:c3:45:60:a9:5f:ab:08:e2:90:b7:e4:54:ea:53:4b:6e: b5:72:a5:fc:68:30:f2:09:d1:fa:67:d2:e3:30:3c:ed:fc:1d: 1e:ad:51:41:39:c2:f1:da:87:4a:89:5e:7d:ee:80:6a:cc:df: bc:4f:2f:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQHyXCG6h/1ld4WusoYcAMDFiuQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTEwMEE5OTMzMkNFNzg5MzFCOUUwMkQ0RUZFRTY3MTJC ODE0NDNBNTAeFw0yNjA5MDMwNzQyMTFaFw0yNjA5MDQxMTE5MTFaMDMxMTAvBgNV BAMTKEZBRTEwMTQ1MEI1NTc2MUM1MzFDOTNGOEJFNjcxMTQyNkFFNTk3RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvuR1U4D6msT2gJAHrRold0jfy kJGYc7qJlhGx60Vnt9hZsigBxafDCu4rz7gnqpJs7m3if3IiytjUDFCbuT3cwwN+ pSUEPUMt5e51KhHvG1eFc+So7ovdMyIcMOzGYX/aQ6Op069qEPVbLfm0UHPdWhxu EEsnf1xkPU7gq4niFJPoSujZ6hQZfkf9GJoLesBE28ALodRgSglCCf0ebQEhp8+n uRYXjTQJNIyRRLuKUE0/Gg7UnWDepDHOJgbN8QYzNmhw5TEumxJlfNgB7pAQoSpy pMCCImOOWIiGMNtJjOqNkSnOPpKJjsXjLO3jvyBOXJH3iZGGL8ENtWOSvYItAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+uEBRQtVdhxTHJP4vmcRQmrll/IwHwYDVR0j BBgwFoAUoQCpkzLOeJMbngLU7+5nErgUQ6UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjY5MjZjODItYzhlNS00Zjk3LTg5OTQtMmM0MDY1MzgxN2NlLzAvQTEwMEE5OTMz MkNFNzg5MzFCOUUwMkQ0RUZFRTY3MTJCODE0NDNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTAwQTk5MzMyQ0U3ODkzMUI5RTAyRDRFRkVFNjcxMkI4MTQ0 M0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjY5MjZjODItYzhlNS00Zjk3LTg5 OTQtMmM0MDY1MzgxN2NlLzAvQTEwMEE5OTMzMkNFNzg5MzFCOUUwMkQ0RUZFRTY3 MTJCODE0NDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9U4QWDIXnbIKnHSf+3i731SF41ckDAOPVH FE5v8chcn7e7psQfCTG6LJHVoQTIDlgprVqlyc4M7QxtiTjIKt4HRWOB4Zt9UI99 REYQR8o7ZIbYL5M4zVrKv5Ai0+DrqNuYHEwygT5WpTv7wxmyr4bo4JiDKGUIKwYv z3AnbaJiyw6B5HitGA7DPDT7pLfXE4LUTwGQ5g+7MZTWU8OtR85DWPHb3oephIbr 3VJqnz0JR/aWA6kZGCUn9McPp4zihG8rsRQV26xjw0VgqV+rCOKQt+RU6lNLbrVy pfxoMPIJ0fpn0uMwPO38HR6tUUE5wvHah0qJXn3ugGrM37xPL8A= -----END CERTIFICATE-----Generated at Thu Sep 3 20:49:35 2026 by rpki-client