$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft File: A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft (raw, json) Hash identifier: 9Z2fLuB5nXwR3Xl3bHCHKIXw47ub5F6X+mVps5ebCr8= Subject key identifier: 62:9A:53:11:D5:4A:D4:11:CA:2A:00:1C:AE:37:45:6E:09:D1:F5:E6 Authority key identifier: A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE Certificate issuer: /CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE Certificate serial: 70C0AE78C8C02D2E93FB6AE92254DCFEFCE9594B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 15:12:55 +0000 Manifest this update: Wed 16 Sep 2026 15:07:55 +0000 Manifest next update: Thu 17 Sep 2026 17:52:55 +0000 Files and hashes: 1: A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl (hash: JyBnIV3ysBOUuCmR2mb9jonCavQfIeKY4nplfbaDTcE=) 2: 3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (hash: XjEh4h/m9O4zav0oJbGUt3KwmUOKS7DwqIAy5aQ35aY=) 3: 3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (hash: ICLSFvgSRRkmlVey9F0aZzpRAm3MpVToF57RNv3826o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c0:ae:78:c8:c0:2d:2e:93:fb:6a:e9:22:54:dc:fe:fc:e9:59:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE Validity Not Before: Sep 16 15:07:55 2026 GMT Not After : Sep 17 17:52:55 2026 GMT Subject: CN=629A5311D54AD411CA2A001CAE37456E09D1F5E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:c1:fc:79:e1:9b:26:5f:2e:ed:20:30:8b: 1a:4a:ad:32:11:6c:25:62:d7:1c:14:96:e9:a7:82: d2:98:65:0a:11:ab:dc:89:1b:04:e9:72:e7:9c:a2: a7:15:91:1b:d3:18:d2:d1:65:09:75:9d:c0:f6:bd: ec:00:d0:1e:b9:b8:f9:d0:f0:c8:b7:83:cb:15:8d: 5f:51:06:7f:30:d4:55:63:c4:ec:c0:67:eb:5b:c2: 9a:ec:96:8d:4e:50:14:8d:02:39:a4:aa:c6:5d:3a: 83:84:a5:e7:45:b3:96:34:9a:73:26:ba:b7:5e:40: 75:56:ec:2a:ea:cd:b8:fc:e9:8b:78:5a:f6:ca:62: 94:e3:05:4a:fe:f6:d9:97:85:92:1b:ba:09:72:1c: 14:f9:28:bb:74:3e:20:6f:ff:1e:b4:c9:e9:ec:b9: 81:f9:17:11:04:3d:70:75:31:8c:c3:fd:e5:89:c6: 46:ae:a0:f5:30:93:c8:e0:e1:e4:fe:3f:88:99:28: e4:60:7e:89:b3:c2:ce:92:e4:6c:b6:07:35:70:5c: 14:09:ac:7a:b3:d7:67:dd:39:a2:7b:6c:06:50:77: f6:08:4e:28:33:c4:2e:33:da:10:a0:16:60:1d:3d: 6d:20:86:70:4d:b6:a3:22:97:89:a7:41:bc:f2:c8: cd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9A:53:11:D5:4A:D4:11:CA:2A:00:1C:AE:37:45:6E:09:D1:F5:E6 X509v3 Authority Key Identifier: keyid:A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:5a:c7:63:50:88:59:de:dd:40:a4:98:d5:eb:64:47:12:2a: 8f:ab:e8:5e:e5:a5:66:31:80:06:3f:63:fe:75:40:31:6e:00: 46:70:e8:65:01:eb:fe:f7:81:f6:8e:8d:04:b3:fa:dc:06:35: 58:1c:34:8c:08:b0:9a:65:ca:d7:cc:7c:a9:16:d9:bb:27:58: 77:4b:de:45:03:d8:08:e6:a0:c5:23:db:7d:a2:7e:68:e1:38: 0c:20:14:ce:a0:4b:54:ac:ac:d3:bf:f9:b5:26:8d:81:26:a8: 1f:8e:13:f2:0e:e7:4f:ec:63:cc:b9:1a:03:94:9d:42:bd:a6: 1a:7a:da:cd:e9:0d:22:a3:08:90:ee:2a:1d:0f:37:bf:9e:0f: c5:63:c3:d1:74:d5:c7:40:c2:f1:af:da:e6:f5:92:8f:e7:44: 27:fe:57:8f:36:bb:c8:28:06:fd:9c:54:ec:aa:f0:16:6f:96: c0:bb:6b:8a:db:c0:a5:81:bb:1f:d5:7a:0e:62:f5:e8:99:59: 08:e3:8b:8e:e0:15:c4:2e:54:73:a9:8c:a8:bc:dd:ea:05:dc: 9c:bf:da:25:13:a9:54:3c:5c:b8:8c:4b:c2:64:b6:af:27:ec: 6a:dd:c0:06:05:39:dd:7d:b7:66:5c:8d:57:36:ec:26:68:c9: 2d:9c:8e:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcMCueMjALS6T+2rpIlTc/vzpWUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFOTdDOERDNTNFRDRCOTRGMDYyMDdEQUUyQjNCMjFC QTA4RDNGRTAeFw0yNjA5MTYxNTA3NTVaFw0yNjA5MTcxNzUyNTVaMDMxMTAvBgNV BAMTKDYyOUE1MzExRDU0QUQ0MTFDQTJBMDAxQ0FFMzc0NTZFMDlEMUY1RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrpsH8eeGbJl8u7SAwixpKrTIR bCVi1xwUlumngtKYZQoRq9yJGwTpcuecoqcVkRvTGNLRZQl1ncD2vewA0B65uPnQ 8Mi3g8sVjV9RBn8w1FVjxOzAZ+tbwprslo1OUBSNAjmkqsZdOoOEpedFs5Y0mnMm urdeQHVW7Crqzbj86Yt4WvbKYpTjBUr+9tmXhZIbuglyHBT5KLt0PiBv/x60yens uYH5FxEEPXB1MYzD/eWJxkauoPUwk8jg4eT+P4iZKORgfomzws6S5Gy2BzVwXBQJ rHqz12fdOaJ7bAZQd/YITigzxC4z2hCgFmAdPW0ghnBNtqMil4mnQbzyyM1bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYppTEdVK1BHKKgAcrjdFbgnR9eYwHwYDVR0j BBgwFoAUoel8jcU+1LlPBiB9ris7IboI0/4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA1MGRjYzMtODRkZC00NTk1LWJhMmMtYmM2OTk4OTY5MmYxLzAvQTFFOTdDOERD NTNFRDRCOTRGMDYyMDdEQUUyQjNCMjFCQTA4RDNGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUU5N0M4REM1M0VENEI5NEYwNjIwN0RBRTJCM0IyMUJBMDhE M0ZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvQTFFOTdDOERDNTNFRDRCOTRGMDYyMDdEQUUyQjNC MjFCQTA4RDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5ax2NQiFne3UCkmNXrZEcSKo+r6F7lpWYx gAY/Y/51QDFuAEZw6GUB6/73gfaOjQSz+twGNVgcNIwIsJplytfMfKkW2bsnWHdL 3kUD2AjmoMUj232ifmjhOAwgFM6gS1SsrNO/+bUmjYEmqB+OE/IO50/sY8y5GgOU nUK9php62s3pDSKjCJDuKh0PN7+eD8Vjw9F01cdAwvGv2ub1ko/nRCf+V482u8go Bv2cVOyq8BZvlsC7a4rbwKWBux/Veg5i9eiZWQjji47gFcQuVHOpjKi83eoF3Jy/ 2iUTqVQ8XLiMS8Jktq8n7GrdwAYFOd19t2ZcjVc27CZoyS2cjpo= -----END CERTIFICATE-----Generated at Thu Sep 17 10:03:11 2026 by rpki-client