$ rpki-client -vvvf rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft File: A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft (raw, json) Hash identifier: R4PJrXgiNGQaPGEIhTIpazJ8fxilhunYDNqTvL+t5lY= Subject key identifier: 0A:C9:29:68:86:B9:A8:0E:A5:8B:41:27:6F:77:94:1A:18:D8:65:3A Authority key identifier: A4:42:33:2E:47:ED:F9:51:21:F8:35:CB:9E:EE:89:CC:D0:FD:23:AB Certificate issuer: /CN=A442332E47EDF95121F835CB9EEE89CCD0FD23AB Certificate serial: 1C1C6AB24DF085D7E2DA2603FB15BB3A98388EAC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 06:46:04 +0000 Manifest this update: Thu 03 Sep 2026 06:41:04 +0000 Manifest next update: Fri 04 Sep 2026 09:48:04 +0000 Files and hashes: 1: A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl (hash: 2S50JQXcJh/FTNOC5uekBEWA6/908jTKI5xkZN8XxCQ=) 2: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (hash: Cj0SZJARZifKQYTCMZbpWyS0hulziUW0qpiTLUY0MXw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 09:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:1c:6a:b2:4d:f0:85:d7:e2:da:26:03:fb:15:bb:3a:98:38:8e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A442332E47EDF95121F835CB9EEE89CCD0FD23AB Validity Not Before: Sep 3 06:41:04 2026 GMT Not After : Sep 4 09:48:04 2026 GMT Subject: CN=0AC9296886B9A80EA58B41276F77941A18D8653A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:24:4a:49:10:f8:b3:6f:8b:94:e4:ba:e4:f3: c3:8e:a8:96:42:81:73:c6:4c:15:f6:3b:be:3d:8d: ea:25:d5:86:a3:c8:46:56:b6:05:bd:d1:05:a9:39: 2d:ad:f4:fd:80:6c:b5:f2:0a:b3:4c:8d:cb:4f:ee: c1:3a:e0:5c:4c:d0:a1:86:25:48:b0:6e:f8:4b:fe: bc:b4:03:49:38:dd:46:64:06:24:32:14:3a:8f:ce: 33:13:b4:70:90:0f:4e:e4:9b:8e:22:60:13:ca:25: 7b:54:69:a5:b5:19:ae:d9:5c:b2:1f:d4:0a:56:ea: 39:b6:1b:d6:0c:a1:ae:7f:60:9b:15:ec:b4:a8:8c: 3b:5b:ff:04:ca:b3:53:bb:ab:a1:58:94:f3:2b:ca: ae:1d:7a:5e:fd:4d:16:04:9e:0a:0c:c8:f8:91:40: a4:56:4b:cc:94:72:3d:39:bf:da:90:7c:b1:f7:30: 95:2a:2d:3b:32:84:90:99:9f:92:96:16:c5:e6:85: dc:02:f5:86:9b:77:29:bc:ad:aa:fa:87:78:47:b6: bf:f6:b5:78:c5:8f:25:20:62:6a:71:19:d2:26:f4: 26:e4:4c:93:73:2b:77:81:20:9e:74:05:13:0e:df: bf:d6:92:f9:79:33:56:f1:b6:63:98:d1:a7:be:a6: 26:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C9:29:68:86:B9:A8:0E:A5:8B:41:27:6F:77:94:1A:18:D8:65:3A X509v3 Authority Key Identifier: keyid:A4:42:33:2E:47:ED:F9:51:21:F8:35:CB:9E:EE:89:CC:D0:FD:23:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:52:bd:86:9b:5f:56:0e:d3:a5:2c:3b:16:69:8a:47:84:17: 54:04:7c:19:1d:ad:04:fd:a8:0a:e3:bf:96:1a:02:dc:07:4e: 16:59:69:9a:5e:19:89:d5:45:79:c2:00:14:00:53:46:62:2e: 0c:1f:68:cd:f2:c3:7e:55:43:33:2c:f5:15:93:22:e6:a1:24: e5:8b:d5:3e:3a:4a:12:d4:f0:2d:a7:d3:05:01:80:1c:5d:8f: fb:6f:00:fc:8c:68:06:86:50:30:4e:0c:8e:8e:f7:5f:56:a1: ed:1e:6a:58:0f:c3:fd:b3:59:82:05:16:ca:f0:d6:ea:d9:e2: c3:8f:c7:5d:1e:fa:d8:ce:58:51:77:d7:78:bb:f5:2f:d8:a2: 63:11:95:bc:a3:da:60:88:6e:69:5f:2d:d9:08:ab:a1:77:ba: 5f:dc:39:5d:75:e3:81:2c:ed:98:80:c2:38:ec:f7:b7:3d:0f: 46:2d:b4:40:44:24:dd:d6:a8:7e:06:a6:01:56:c7:74:7e:0e: 21:a8:ac:d3:6d:09:0e:a1:be:fa:bc:52:26:78:df:f1:29:6c: ce:0d:b0:9b:cd:0a:84:45:5d:9d:d2:97:95:f6:c6:c8:06:e6: a5:8b:69:76:e7:0e:77:29:8f:1d:da:e7:02:56:b1:33:e8:0f: a0:0e:42:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHBxqsk3whdfi2iYD+xW7Opg4jqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ0MjMzMkU0N0VERjk1MTIxRjgzNUNCOUVFRTg5Q0NE MEZEMjNBQjAeFw0yNjA5MDMwNjQxMDRaFw0yNjA5MDQwOTQ4MDRaMDMxMTAvBgNV BAMTKDBBQzkyOTY4ODZCOUE4MEVBNThCNDEyNzZGNzc5NDFBMThEODY1M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPJEpJEPizb4uU5Lrk88OOqJZC gXPGTBX2O749jeol1YajyEZWtgW90QWpOS2t9P2AbLXyCrNMjctP7sE64FxM0KGG JUiwbvhL/ry0A0k43UZkBiQyFDqPzjMTtHCQD07km44iYBPKJXtUaaW1Ga7ZXLIf 1ApW6jm2G9YMoa5/YJsV7LSojDtb/wTKs1O7q6FYlPMryq4del79TRYEngoMyPiR QKRWS8yUcj05v9qQfLH3MJUqLTsyhJCZn5KWFsXmhdwC9Yabdym8rar6h3hHtr/2 tXjFjyUgYmpxGdIm9CbkTJNzK3eBIJ50BRMO37/Wkvl5M1bxtmOY0ae+piYBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCskpaIa5qA6li0Enb3eUGhjYZTowHwYDVR0j BBgwFoAUpEIzLkft+VEh+DXLnu6JzND9I6swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTYwZjg0NjEtYmIyYy00ZDNlLWE1YmUtNzAwOTM5NDI3YzhjLzAvQTQ0MjMzMkU0 N0VERjk1MTIxRjgzNUNCOUVFRTg5Q0NEMEZEMjNBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDQyMzMyRTQ3RURGOTUxMjFGODM1Q0I5RUVFODlDQ0QwRkQy M0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTYwZjg0NjEtYmIyYy00ZDNlLWE1 YmUtNzAwOTM5NDI3YzhjLzAvQTQ0MjMzMkU0N0VERjk1MTIxRjgzNUNCOUVFRTg5 Q0NEMEZEMjNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5SvYabX1YO06UsOxZpikeEF1QEfBkdrQT9 qArjv5YaAtwHThZZaZpeGYnVRXnCABQAU0ZiLgwfaM3yw35VQzMs9RWTIuahJOWL 1T46ShLU8C2n0wUBgBxdj/tvAPyMaAaGUDBODI6O919Woe0ealgPw/2zWYIFFsrw 1urZ4sOPx10e+tjOWFF313i79S/YomMRlbyj2mCIbmlfLdkIq6F3ul/cOV1144Es 7ZiAwjjs97c9D0YttEBEJN3WqH4GpgFWx3R+DiGorNNtCQ6hvvq8UiZ43/EpbM4N sJvNCoRFXZ3Sl5X2xsgG5qWLaXbnDncpjx3a5wJWsTPoD6AOQsg= -----END CERTIFICATE-----Generated at Thu Sep 3 14:16:39 2026 by rpki-client