$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft File: A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft (raw, json) Hash identifier: xhtdS6pJxU9LY/dOYX19wD2kLceJL5FET+gvh+GRatQ= Subject key identifier: B7:9D:A6:DF:55:76:F5:C9:8C:D6:F5:C5:AF:20:42:02:7B:19:D7:E1 Authority key identifier: A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C Certificate issuer: /CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C Certificate serial: 1AC6BC6758E93562AFC435F9D1897CEAB265B82E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 18:55:58 +0000 Manifest this update: Wed 02 Sep 2026 18:50:58 +0000 Manifest next update: Thu 03 Sep 2026 20:38:58 +0000 Files and hashes: 1: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: oVthfsHvJfZFfAfPgVnP6RK4i2YXuHXT4TJi3carfJc=) 2: A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl (hash: h4h/Pwy4JIn50CdZyD34u9BydldhOVfDhJ9ZjaDN6Fc=) 3: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: Xz4v16/PuWF3xc6NRQS+cFH5cfyFs8wYPFxR2GtXMDw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 20:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c6:bc:67:58:e9:35:62:af:c4:35:f9:d1:89:7c:ea:b2:65:b8:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C Validity Not Before: Sep 2 18:50:58 2026 GMT Not After : Sep 3 20:38:58 2026 GMT Subject: CN=B79DA6DF5576F5C98CD6F5C5AF2042027B19D7E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:03:12:5c:73:a6:db:09:6a:8e:bd:25:4f:8b: f0:a1:67:b8:dc:c8:be:49:b2:dd:5a:01:ee:2c:62: 56:03:9f:3e:ca:23:7b:bd:91:b4:4f:08:f9:b4:4d: e7:88:48:75:55:5f:ba:3c:24:de:1d:5e:81:c8:b4: e3:0e:8a:e7:a2:7c:03:9a:8e:79:ca:4e:2e:35:3d: 3e:1b:98:fa:70:a6:6a:b2:2f:1e:d8:ff:ff:8f:14: 56:b3:62:3a:ba:f4:26:89:43:93:96:dd:6b:82:48: 49:ce:db:61:e3:97:db:11:bd:d8:17:9f:f7:0b:01: 81:6e:ce:b6:2c:73:67:0c:76:7d:a5:14:4a:7c:c2: 72:fe:25:83:f7:5f:13:91:56:76:6c:9b:65:41:d4: 98:6b:d0:b4:d4:5d:a7:c7:72:ea:9c:8f:a3:05:3b: c0:37:7f:23:47:54:cb:e7:05:26:97:0c:52:41:53: 88:c6:9f:5b:cb:96:f9:fa:2d:a6:65:75:c1:58:60: 78:80:c1:e5:57:c5:02:15:b9:53:15:d9:39:fc:28: 41:35:54:fc:32:f4:09:20:d9:12:05:af:da:be:34: af:4d:97:db:13:a1:80:88:97:d0:db:56:b0:40:f0: 8c:c1:4a:fb:ca:ce:ee:46:f0:1b:4e:e6:99:28:0b: bf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9D:A6:DF:55:76:F5:C9:8C:D6:F5:C5:AF:20:42:02:7B:19:D7:E1 X509v3 Authority Key Identifier: keyid:A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:40:d2:3e:38:f7:fd:66:87:06:83:55:73:7d:c0:0a:97:65: e1:ed:c0:40:9c:58:3b:39:20:1c:18:f8:76:a0:5f:fe:16:c7: 1d:af:0d:bb:16:43:3b:41:7f:d4:c5:04:e9:b8:d5:70:b0:7c: 2a:36:df:3b:ef:1b:ea:62:5c:b5:9c:48:b6:28:9e:1a:79:16: 82:93:40:2a:ca:0f:c3:06:de:1b:4f:b8:63:f2:84:58:1e:3b: 74:3f:25:82:cd:cd:09:0d:f7:63:07:6d:27:73:82:8b:3b:22: 2d:27:03:3d:8b:8d:e4:53:3d:d3:28:9b:2e:28:2b:56:82:9a: 12:3d:0e:6a:c5:7a:b2:2a:7a:35:5a:2a:b4:6e:1d:2a:ff:b4: 5a:8a:67:56:60:40:d5:80:5e:1d:68:7e:ec:cd:72:b0:8b:26: 5b:bd:0d:3d:7e:8a:02:c4:b9:e8:6e:b9:6c:df:e7:a8:1f:d3: ed:20:4a:68:bc:2d:0b:9c:16:63:8b:5e:ca:18:4e:eb:07:cd: 60:8a:69:86:b9:d3:88:30:45:36:eb:ca:79:94:db:2e:a6:b5: 16:90:84:c7:24:16:08:aa:03:7d:34:15:cd:6f:7d:ec:d3:8f: ab:fc:fc:cd:02:ce:a4:d5:a9:a2:93:35:41:1f:e6:d7:6b:2c: d6:dc:a3:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGsa8Z1jpNWKvxDX50Yl86rJluC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBNUE1QzI2MDM5QUNGMjE2REYzRTVCMjg0MzQ1Njkz RUU4RjM0QzAeFw0yNjA5MDIxODUwNThaFw0yNjA5MDMyMDM4NThaMDMxMTAvBgNV BAMTKEI3OURBNkRGNTU3NkY1Qzk4Q0Q2RjVDNUFGMjA0MjAyN0IxOUQ3RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhAxJcc6bbCWqOvSVPi/ChZ7jc yL5Jst1aAe4sYlYDnz7KI3u9kbRPCPm0TeeISHVVX7o8JN4dXoHItOMOiueifAOa jnnKTi41PT4bmPpwpmqyLx7Y//+PFFazYjq69CaJQ5OW3WuCSEnO22Hjl9sRvdgX n/cLAYFuzrYsc2cMdn2lFEp8wnL+JYP3XxORVnZsm2VB1Jhr0LTUXafHcuqcj6MF O8A3fyNHVMvnBSaXDFJBU4jGn1vLlvn6LaZldcFYYHiAweVXxQIVuVMV2Tn8KEE1 VPwy9Akg2RIFr9q+NK9Nl9sToYCIl9DbVrBA8IzBSvvKzu5G8BtO5pkoC79rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt52m31V29cmM1vXFryBCAnsZ1+EwHwYDVR0j BBgwFoAUpKWlwmA5rPIW3z5bKENFaT7o80wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWQyZmE1MWUtM2ZkNC00NTIwLWIzNzUtMDllZWY1ZTBlNTEwLzAvQTRBNUE1QzI2 MDM5QUNGMjE2REYzRTVCMjg0MzQ1NjkzRUU4RjM0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNEE1QTVDMjYwMzlBQ0YyMTZERjNFNUIyODQzNDU2OTNFRThG MzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz NzUtMDllZWY1ZTBlNTEwLzAvQTRBNUE1QzI2MDM5QUNGMjE2REYzRTVCMjg0MzQ1 NjkzRUU4RjM0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABdA0j449/1mhwaDVXN9wAqXZeHtwECcWDs5 IBwY+HagX/4Wxx2vDbsWQztBf9TFBOm41XCwfCo23zvvG+piXLWcSLYonhp5FoKT QCrKD8MG3htPuGPyhFgeO3Q/JYLNzQkN92MHbSdzgos7Ii0nAz2LjeRTPdMomy4o K1aCmhI9DmrFerIqejVaKrRuHSr/tFqKZ1ZgQNWAXh1ofuzNcrCLJlu9DT1+igLE uehuuWzf56gf0+0gSmi8LQucFmOLXsoYTusHzWCKaYa504gwRTbrynmU2y6mtRaQ hMckFgiqA300Fc1vfezTj6v8/M0CzqTVqaKTNUEf5tdrLNbco1k= -----END CERTIFICATE-----Generated at Thu Sep 3 09:06:27 2026 by rpki-client