$ rpki-client -vvvf rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft File: A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft (raw, json) Hash identifier: orj+NgOXiLunPHgEI707ftOtMABdxBsUdglKb0saHv0= Subject key identifier: 03:34:8C:E2:51:BC:B2:42:4A:48:AE:FF:B1:2B:50:C2:35:42:83:BD Authority key identifier: A8:D2:11:A5:40:A0:A5:7C:5D:6A:CB:50:32:09:1B:1A:80:BA:45:8A Certificate issuer: /CN=A8D211A540A0A57C5D6ACB5032091B1A80BA458A Certificate serial: 94D2DBE3C04440ED134D8FB4A47AE0D6B82F27 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 20:27:57 +0000 Manifest this update: Wed 02 Sep 2026 20:22:57 +0000 Manifest next update: Thu 03 Sep 2026 23:44:57 +0000 Files and hashes: 1: 3130332e37302e31392e302f32342d3234203d3e20313335343632.roa (hash: 7evCo+jZlUXwDGTBsCsQhDg2DWHBDqS4cWsJw91trY0=) 2: 3130332e37302e31362e302f32322d3232203d3e20313335343632.roa (hash: Tf1EVsRaCkdXitEPeo2GAGcjlLdYQ1D5kk2M9WCpy3U=) 3: 3130332e37302e31372e302f32342d3234203d3e20313335343632.roa (hash: lI29Pn9PS61mVywxJrefD11DZjjtEbyEF7MkqWi1LZ4=) 4: 3130332e37302e31362e302f32342d3234203d3e20313335343632.roa (hash: SJ+P4+oX8hijYzZ9qA/WaUDV4gideRVgm7o6icDoWoM=) 5: 3130332e37302e31382e302f32342d3234203d3e20313335343632.roa (hash: m9ehKEyZKrnBxPUxglJU8vra1GpJJTUpkzpv7UpDmeA=) 6: A8D211A540A0A57C5D6ACB5032091B1A80BA458A.crl (hash: 38xWTd5PGv7N6cWZ+Guq1mbGl08j/KH5HIRFKKAozH4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.crl rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 23:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94:d2:db:e3:c0:44:40:ed:13:4d:8f:b4:a4:7a:e0:d6:b8:2f:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8D211A540A0A57C5D6ACB5032091B1A80BA458A Validity Not Before: Sep 2 20:22:57 2026 GMT Not After : Sep 3 23:44:57 2026 GMT Subject: CN=03348CE251BCB2424A48AEFFB12B50C2354283BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:18:d0:a4:50:2f:99:cb:e8:32:c0:04:7d: 13:2a:fc:ed:cf:84:44:35:c7:0c:ec:7d:2b:ff:59: 08:45:45:09:c3:25:0c:2c:7e:27:34:ba:f1:7b:89: cd:34:c7:24:b4:3f:eb:1d:ed:c7:3c:9a:9c:81:9c: 62:39:f3:75:db:3b:1f:24:96:78:a5:1a:8c:92:33: 16:1d:30:67:57:a4:60:4b:83:55:eb:78:22:4f:73: eb:2a:0c:6b:9b:df:9c:db:bd:b5:a4:3b:f5:dc:3f: 95:de:90:1a:da:01:c6:11:3c:85:87:8b:ef:e0:15: 6e:57:11:d7:0a:80:21:e7:37:5f:3b:4f:a8:e3:59: 61:56:ad:23:c5:e7:b0:09:90:17:ba:24:d6:85:8a: 4a:12:8d:0e:c8:a8:a7:30:a9:d7:90:2d:df:f2:32: 6e:e4:db:4b:33:12:1e:e5:eb:47:20:26:5a:9a:0b: c2:bf:04:63:64:27:56:ed:f9:b2:6f:1a:11:39:93: 06:9b:84:dc:fc:27:77:6c:4f:63:6e:ed:8b:d5:70: a8:84:da:5e:c8:ad:6a:f7:48:a1:25:ed:e3:de:fe: 76:53:f9:0b:3c:e0:15:7b:ce:06:50:64:52:4e:8b: 22:ac:76:cd:12:14:c4:03:e7:c3:a4:6b:27:f5:0d: fa:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:34:8C:E2:51:BC:B2:42:4A:48:AE:FF:B1:2B:50:C2:35:42:83:BD X509v3 Authority Key Identifier: keyid:A8:D2:11:A5:40:A0:A5:7C:5D:6A:CB:50:32:09:1B:1A:80:BA:45:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:43:01:2e:27:e5:87:38:aa:7f:7a:33:7e:1a:db:43:05:75: da:ee:4f:7e:7c:2f:f0:fb:2f:86:0d:29:ce:f1:1a:54:8c:f2: 1c:05:11:99:7f:e3:50:84:81:50:49:d2:91:e4:1e:18:a8:55: 9e:6e:e6:ac:f2:9d:6b:84:be:43:1a:d7:10:51:16:f9:0b:2a: 76:54:0f:09:2d:c5:b1:a1:1b:e2:5b:67:42:5a:8c:72:b0:a7: 3e:5e:d8:b6:d9:e4:f9:45:5b:a7:d9:e0:a6:a2:9f:d9:6d:69: e7:12:51:cb:88:c6:f4:fa:c8:24:77:3d:29:de:fc:57:b4:7a: f3:d2:ef:0e:c8:f1:a8:ad:a8:9f:88:66:29:8b:7d:59:13:1a: ac:00:ff:b9:92:b3:6e:0c:05:be:47:b2:db:e7:32:69:a6:31: b3:5d:cd:2c:13:92:94:3e:35:3e:3f:29:a1:7c:bd:c5:78:aa: bf:68:c6:b2:74:63:3a:77:9d:dc:16:5f:1a:1b:81:4b:ba:a4: 93:c2:cb:da:9f:3b:c4:e2:9f:47:fb:f0:96:84:d1:8e:79:07: 85:76:c9:d0:66:b1:eb:90:7e:68:e9:81:56:7c:94:5b:e6:ed: 70:94:40:e0:47:e3:33:6e:53:7b:85:b6:87:6d:14:4a:70:60: 3c:6b:12:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAJTS2+PAREDtE02PtKR64Na4LycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThEMjExQTU0MEEwQTU3QzVENkFDQjUwMzIwOTFCMUE4 MEJBNDU4QTAeFw0yNjA5MDIyMDIyNTdaFw0yNjA5MDMyMzQ0NTdaMDMxMTAvBgNV BAMTKDAzMzQ4Q0UyNTFCQ0IyNDI0QTQ4QUVGRkIxMkI1MEMyMzU0MjgzQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzAxjQpFAvmcvoMsAEfRMq/O3P hEQ1xwzsfSv/WQhFRQnDJQwsfic0uvF7ic00xyS0P+sd7cc8mpyBnGI583XbOx8k lnilGoySMxYdMGdXpGBLg1XreCJPc+sqDGub35zbvbWkO/XcP5XekBraAcYRPIWH i+/gFW5XEdcKgCHnN187T6jjWWFWrSPF57AJkBe6JNaFikoSjQ7IqKcwqdeQLd/y Mm7k20szEh7l60cgJlqaC8K/BGNkJ1bt+bJvGhE5kwabhNz8J3dsT2Nu7YvVcKiE 2l7IrWr3SKEl7ePe/nZT+Qs84BV7zgZQZFJOiyKsds0SFMQD58Okayf1DfqzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAzSM4lG8skJKSK7/sStQwjVCg70wHwYDVR0j BBgwFoAUqNIRpUCgpXxdastQMgkbGoC6RYowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZmNGQ0ZjEtYjM2Yy00YTQ2LTg4NDQtNGU2YzdhM2M5N2Q5LzAvQThEMjExQTU0 MEEwQTU3QzVENkFDQjUwMzIwOTFCMUE4MEJBNDU4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEQyMTFBNTQwQTBBNTdDNUQ2QUNCNTAzMjA5MUIxQTgwQkE0 NThBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZmNGQ0ZjEtYjM2Yy00YTQ2LTg4 NDQtNGU2YzdhM2M5N2Q5LzAvQThEMjExQTU0MEEwQTU3QzVENkFDQjUwMzIwOTFC MUE4MEJBNDU4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlDAS4n5Yc4qn96M34a20MFddruT358L/D7 L4YNKc7xGlSM8hwFEZl/41CEgVBJ0pHkHhioVZ5u5qzynWuEvkMa1xBRFvkLKnZU DwktxbGhG+JbZ0JajHKwpz5e2LbZ5PlFW6fZ4Kain9ltaecSUcuIxvT6yCR3PSne /Fe0evPS7w7I8aitqJ+IZimLfVkTGqwA/7mSs24MBb5HstvnMmmmMbNdzSwTkpQ+ NT4/KaF8vcV4qr9oxrJ0Yzp3ndwWXxobgUu6pJPCy9qfO8Tin0f78JaE0Y55B4V2 ydBmseuQfmjpgVZ8lFvm7XCUQOBH4zNuU3uFtodtFEpwYDxrEvc= -----END CERTIFICATE-----Generated at Thu Sep 3 12:37:20 2026 by rpki-client