$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft File: A65A7370A28DA71B1C11B89E09D51753C498246D.mft (raw, json) Hash identifier: I2E4WWjwEjstPR2XEyO0otgwaFHrin8VqcHt/JL7NQc= Subject key identifier: D9:6A:A2:35:E4:E6:06:1F:F9:6C:C9:82:03:BF:91:51:56:EF:C1:4F Authority key identifier: A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D Certificate issuer: /CN=A65A7370A28DA71B1C11B89E09D51753C498246D Certificate serial: 324B74277132E9BDA53D5FCD8F079BB1E99AC53E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft Manifest number: D9 Signing time: Mon 12 Oct 2026 08:52:51 +0000 Manifest this update: Mon 12 Oct 2026 08:47:51 +0000 Manifest next update: Tue 13 Oct 2026 12:07:51 +0000 Files and hashes: 1: 3135312e3135382e37352e302f32342d3234203d3e20313331343534.roa (hash: Ho6tdl1he9FR1/62MiqnACr306KYnR/YSxoabj/m7M4=) 2: A65A7370A28DA71B1C11B89E09D51753C498246D.crl (hash: urQT/+ZJ1lcjHZJpaAwPDiSapFXXI3LY00/BSYmimv8=) 3: 3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa (hash: yLjPOFhKt4noRbzRL2MIGaluRq2L7M9f6uyh5pKU9Ec=) 4: 3135312e3135382e37342e302f32332d3233203d3e20313331343534.roa (hash: kTQiZ7hK+M7BbCy/GwseyxlIaws4BXvafRAJzzRJxhc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 08:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:4b:74:27:71:32:e9:bd:a5:3d:5f:cd:8f:07:9b:b1:e9:9a:c5:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65A7370A28DA71B1C11B89E09D51753C498246D Validity Not Before: Oct 12 08:47:51 2026 GMT Not After : Oct 13 12:07:51 2026 GMT Subject: CN=D96AA235E4E6061FF96CC98203BF915156EFC14F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:31:f9:65:57:97:3a:9f:86:7b:29:f4:12: 0d:81:65:06:22:3a:3a:e9:cb:6d:05:67:b0:7d:45: af:08:58:d5:8c:e0:0e:3d:39:53:7e:cf:b7:41:ac: c2:3b:99:a6:46:30:37:5d:06:72:00:78:77:5c:26: 29:20:c3:b4:e1:e3:af:1e:aa:d0:d1:21:c6:6b:07: 72:6c:8d:21:d7:bf:22:06:98:86:33:6b:25:cd:d6: ed:c8:c2:a9:20:81:a6:64:de:48:15:44:93:1f:73: fa:cd:72:61:14:05:63:d5:87:c1:d1:2a:02:d9:e2: 59:7f:a1:9e:48:34:8f:8f:e6:c9:fa:48:63:82:86: 55:82:94:6a:28:6b:74:36:fa:b5:cc:67:0a:c5:68: dc:45:75:27:97:1e:f1:e0:fc:06:db:69:02:b5:4f: 30:ee:62:2a:33:b5:b6:f8:02:3c:4e:30:01:d4:d7: 52:f7:64:88:86:f5:38:87:9c:5f:92:15:ad:bb:08: 5a:bf:1d:0d:ad:83:5b:35:99:02:b4:b5:ef:21:44: 1d:2a:b3:6d:21:8d:93:2f:58:14:c6:76:e4:5e:0d: a1:31:00:bb:91:50:80:f7:e7:96:dd:bb:a4:85:c6: 95:2e:db:00:c1:04:7c:57:43:5b:f6:ec:95:b4:2f: ba:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6A:A2:35:E4:E6:06:1F:F9:6C:C9:82:03:BF:91:51:56:EF:C1:4F X509v3 Authority Key Identifier: keyid:A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:fe:e7:cb:3c:9b:89:30:e7:15:f6:57:77:f3:e4:c2:ba:cf: 44:f1:6e:22:b8:9d:28:f7:70:70:00:d6:67:de:ac:ee:8c:96: 7a:f7:6f:f6:f6:68:70:88:f2:e7:39:10:74:f6:12:7c:ef:6f: ac:ed:80:0d:44:b5:81:ce:c1:0a:2c:81:dd:b1:fa:e7:cd:45: bc:58:c2:a9:b0:49:42:ef:07:93:15:95:4b:b5:ee:e4:8f:36: 03:ce:c1:53:a5:f1:16:48:a3:f7:72:73:b9:56:28:49:94:cf: bb:39:66:2e:c3:b2:69:3a:8f:51:11:ba:c4:8c:f8:ed:ee:33: 70:20:1f:33:f9:80:1d:00:59:39:2d:27:5c:bb:aa:a3:87:19: 32:d7:59:90:fb:5c:04:30:4c:13:61:8a:f4:e3:ac:16:89:2e: ba:51:4c:7d:15:d9:fd:2b:fb:5e:99:4d:7f:9e:be:cf:aa:6f: cf:e2:7b:df:06:86:90:6c:4e:85:d3:60:09:b2:f0:f0:e5:a4: 31:72:bd:27:95:2d:1e:ee:9e:3f:64:0d:ee:b5:8f:dd:63:1a: a0:83:14:85:29:13:ca:b5:1a:e6:a7:23:0c:93:b4:ff:46:c1: eb:98:2c:92:4e:18:a7:0c:69:0f:12:2a:3f:b8:d8:42:65:b5: 7d:51:50:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMkt0J3Ey6b2lPV/NjwebsemaxT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3NTND NDk4MjQ2RDAeFw0yNjEwMTIwODQ3NTFaFw0yNjEwMTMxMjA3NTFaMDMxMTAvBgNV BAMTKEQ5NkFBMjM1RTRFNjA2MUZGOTZDQzk4MjAzQkY5MTUxNTZFRkMxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCseTH5ZVeXOp+Geyn0Eg2BZQYi Ojrpy20FZ7B9Ra8IWNWM4A49OVN+z7dBrMI7maZGMDddBnIAeHdcJikgw7Th468e qtDRIcZrB3JsjSHXvyIGmIYzayXN1u3IwqkggaZk3kgVRJMfc/rNcmEUBWPVh8HR KgLZ4ll/oZ5INI+P5sn6SGOChlWClGooa3Q2+rXMZwrFaNxFdSeXHvHg/AbbaQK1 TzDuYioztbb4AjxOMAHU11L3ZIiG9TiHnF+SFa27CFq/HQ2tg1s1mQK0te8hRB0q s20hjZMvWBTGduReDaExALuRUID355bdu6SFxpUu2wDBBHxXQ1v27JW0L7plAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2WqiNeTmBh/5bMmCA7+RUVbvwU8wHwYDVR0j BBgwFoAUplpzcKKNpxscEbieCdUXU8SYJG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmVmMTZmMzEtNjBjZS00N2E3LWFlOGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBB MjhEQTcxQjFDMTFCODlFMDlENTE3NTNDNDk4MjQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy9BNjVBNzM3MEEyOERBNzFCMUMxMUI4OUUwOUQ1MTc1M0M0OTgy NDZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3 NTNDNDk4MjQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIT+58s8m4kw5xX2V3fz5MK6z0TxbiK4nSj3 cHAA1mferO6Mlnr3b/b2aHCI8uc5EHT2Enzvb6ztgA1EtYHOwQosgd2x+ufNRbxY wqmwSULvB5MVlUu17uSPNgPOwVOl8RZIo/dyc7lWKEmUz7s5Zi7Dsmk6j1ERusSM +O3uM3AgHzP5gB0AWTktJ1y7qqOHGTLXWZD7XAQwTBNhivTjrBaJLrpRTH0V2f0r +16ZTX+evs+qb8/ie98GhpBsToXTYAmy8PDlpDFyvSeVLR7unj9kDe61j91jGqCD FIUpE8q1GuanIwyTtP9GweuYLJJOGKcMaQ8SKj+42EJltX1RUAo= -----END CERTIFICATE-----Generated at Mon Oct 12 19:08:04 2026 by rpki-client