$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft File: 412965964A4E12BD59BDF602A054F3394E99DC57.mft (raw, json) Hash identifier: TOldKdLkncDHtMQqxt3iMcsZjCkUpdNJXVVjdzNJiU4= Subject key identifier: 13:C1:ED:20:79:06:A7:C1:C9:81:F9:84:F3:0C:6A:E3:22:CD:83:59 Authority key identifier: 41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57 Certificate issuer: /CN=412965964A4E12BD59BDF602A054F3394E99DC57 Certificate serial: 0D3F2F023C5FD4B8189EEC15197D6935A2FAC30A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft Manifest number: 9B Signing time: Thu 27 Aug 2026 18:13:01 +0000 Manifest this update: Thu 27 Aug 2026 18:08:01 +0000 Manifest next update: Fri 28 Aug 2026 21:14:01 +0000 Files and hashes: 1: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (hash: TwoAdTsM3NEVv7qQwQrrGzyUs0c/Mt2dxvgYNM1lek8=) 2: 3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (hash: PR4TqG8Gt/NDoejWkXR5KiYWrPCc3WE35fh/Jxbvano=) 3: 3130332e362e33342e302f32342d3234203d3e20313332363334.roa (hash: s2Tpgag7FxdnRddbkWVhsKOC3K9zk4kizsUSEDbaWVQ=) 4: 412965964A4E12BD59BDF602A054F3394E99DC57.crl (hash: wLtxwPpvASUxjlOFCgrnwc8O4CjJGKhv3Euy+ZP4l9Y=) 5: 3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa (hash: SenSDJoyF/7+T+Cte5ij0s1hRLf2P72+k6wabdM015Q=) 6: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (hash: uLq3gfPOGWF6ZWj1F9WMmGzvCujMeECGwqgAQGV2Nv4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 19:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:3f:2f:02:3c:5f:d4:b8:18:9e:ec:15:19:7d:69:35:a2:fa:c3:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412965964A4E12BD59BDF602A054F3394E99DC57 Validity Not Before: Aug 27 18:08:01 2026 GMT Not After : Aug 28 21:14:01 2026 GMT Subject: CN=13C1ED207906A7C1C981F984F30C6AE322CD8359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:74:db:cb:37:74:c1:b2:ca:fb:37:55:b7: 3f:59:cb:73:bf:aa:76:95:c6:10:89:f2:35:45:f6: a5:d9:3f:ef:7e:40:a9:dc:0e:c3:89:a7:f5:8b:c3: 3f:0f:a7:73:10:0a:91:5b:5c:10:25:09:a8:8e:9c: ea:b6:e9:f7:d2:8f:f0:6d:66:5e:9c:73:10:72:b9: e4:09:96:b3:45:5a:c1:9b:fb:8c:50:11:b4:64:01: 26:e4:31:12:3e:1a:50:e6:1b:54:12:21:88:67:17: e1:78:e4:4e:60:33:23:77:d9:5d:07:84:5c:a6:12: cb:26:8b:f6:4e:44:9e:8c:13:00:60:d4:f3:a5:4e: 66:15:30:9b:b9:c6:43:14:09:d5:33:f2:47:be:68: 6a:17:30:fa:88:1d:7f:9b:c3:55:18:ae:10:2b:b1: f1:eb:c3:ce:66:c8:ef:2d:56:1d:97:be:0d:ae:46: b2:11:41:61:70:8b:0d:3a:41:d9:2a:15:14:2e:53: 8b:33:de:e3:c6:ef:db:68:e2:73:d6:21:b1:89:97: 0f:14:0f:ae:35:96:1a:25:96:22:eb:4d:75:df:53: 47:cc:d1:ea:56:f8:7a:a7:82:3a:42:3a:61:4a:ae: 3e:69:2c:ae:99:67:d9:f3:6b:a1:0a:45:1e:45:86: bf:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C1:ED:20:79:06:A7:C1:C9:81:F9:84:F3:0C:6A:E3:22:CD:83:59 X509v3 Authority Key Identifier: keyid:41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:39:f7:9d:a9:2e:e3:ff:ca:f2:ac:17:8c:fb:6c:71:e8:c6: 45:20:a2:43:4e:e7:d4:ce:2a:de:2c:de:a5:bb:f9:b4:9f:85: b0:86:0a:c0:ff:df:3f:1f:93:be:9c:b5:ad:79:9b:68:d5:06: 9d:f0:87:f9:76:ce:64:94:90:5d:fe:1b:c0:ad:39:05:3b:0b: 34:8f:b4:bb:32:b9:7e:8c:b8:1e:09:61:0e:84:fc:71:74:f1: e4:5e:34:e2:26:50:46:e4:2d:bf:d2:b8:fb:16:de:f9:c4:8d: 85:4b:96:0f:91:1b:f3:a9:19:e9:62:63:bf:05:e0:8f:d5:76: 53:47:ec:e2:16:48:08:06:0e:c7:37:0d:d4:a5:8d:92:e2:82: fd:a5:13:39:a2:39:cd:ce:58:c8:7e:da:92:2f:86:f0:4c:37: c2:24:18:e5:ca:1c:f1:8e:c9:a4:e5:03:6e:cd:6b:e6:3a:9d: 03:91:a1:82:7e:da:09:5f:5a:7b:ee:75:db:65:cd:75:3a:cd: 3d:e4:ad:d0:82:99:9d:24:fb:61:fc:d8:14:dc:b4:bc:97:0d: 77:4a:82:c6:11:99:95:b0:f5:85:bc:8f:9a:a3:5a:b3:83:a8: 4f:6a:ef:8d:37:83:52:f9:06:c5:56:68:17:b6:81:c2:3e:f8: 1e:db:ba:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDT8vAjxf1LgYnuwVGX1pNaL6wwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEyOTY1OTY0QTRFMTJCRDU5QkRGNjAyQTA1NEYzMzk0 RTk5REM1NzAeFw0yNjA4MjcxODA4MDFaFw0yNjA4MjgyMTE0MDFaMDMxMTAvBgNV BAMTKDEzQzFFRDIwNzkwNkE3QzFDOTgxRjk4NEYzMEM2QUUzMjJDRDgzNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7lHTbyzd0wbLK+zdVtz9Zy3O/ qnaVxhCJ8jVF9qXZP+9+QKncDsOJp/WLwz8Pp3MQCpFbXBAlCaiOnOq26ffSj/Bt Zl6ccxByueQJlrNFWsGb+4xQEbRkASbkMRI+GlDmG1QSIYhnF+F45E5gMyN32V0H hFymEssmi/ZORJ6MEwBg1POlTmYVMJu5xkMUCdUz8ke+aGoXMPqIHX+bw1UYrhAr sfHrw85myO8tVh2Xvg2uRrIRQWFwiw06QdkqFRQuU4sz3uPG79to4nPWIbGJlw8U D641lholliLrTXXfU0fM0epW+HqngjpCOmFKrj5pLK6ZZ9nza6EKRR5Fhr+jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE8HtIHkGp8HJgfmE8wxq4yLNg1kwHwYDVR0j BBgwFoAUQSlllkpOEr1ZvfYCoFTzOU6Z3FcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBmN2JlMDYtOTY3Mi00NjQxLTk3YmQtOWJmZGY5NTVkZTE3LzAvNDEyOTY1OTY0 QTRFMTJCRDU5QkRGNjAyQTA1NEYzMzk0RTk5REM1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTI5NjU5NjRBNEUxMkJENTlCREY2MDJBMDU0RjMzOTRFOTlE QzU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBmN2JlMDYtOTY3Mi00NjQxLTk3 YmQtOWJmZGY5NTVkZTE3LzAvNDEyOTY1OTY0QTRFMTJCRDU5QkRGNjAyQTA1NEYz Mzk0RTk5REM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACg5952pLuP/yvKsF4z7bHHoxkUgokNO59TO Kt4s3qW7+bSfhbCGCsD/3z8fk76cta15m2jVBp3wh/l2zmSUkF3+G8CtOQU7CzSP tLsyuX6MuB4JYQ6E/HF08eReNOImUEbkLb/SuPsW3vnEjYVLlg+RG/OpGeliY78F 4I/VdlNH7OIWSAgGDsc3DdSljZLigv2lEzmiOc3OWMh+2pIvhvBMN8IkGOXKHPGO yaTlA27Na+Y6nQORoYJ+2glfWnvuddtlzXU6zT3krdCCmZ0k+2H82BTctLyXDXdK gsYRmZWw9YW8j5qjWrODqE9q7403g1L5BsVWaBe2gcI++B7bujk= -----END CERTIFICATE-----Generated at Fri Aug 28 00:48:13 2026 by rpki-client