$ rpki-client -vvvf rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft File: A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft (raw, json) Hash identifier: GD3wheH6hqHK/pl7bRjlRRB1ZaE+Yq5Wi6qNp37PcHA= Subject key identifier: 00:19:49:67:CA:B6:BF:65:BE:63:5D:11:70:8D:1D:2D:E1:F9:04:0E Authority key identifier: A3:8F:DF:61:DF:D4:5E:8F:A1:C9:25:6D:BD:35:A6:7A:8C:3C:79:CE Certificate issuer: /CN=A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE Certificate serial: 134A8EB9317C5E9D64958E270278A0E5359E2A93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft Manifest number: 9D Signing time: Thu 27 Aug 2026 01:17:13 +0000 Manifest this update: Thu 27 Aug 2026 01:12:13 +0000 Manifest next update: Fri 28 Aug 2026 04:34:13 +0000 Files and hashes: 1: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: K3OLubUlACzscrRuEaqGQ8Mg86bkVIp+TswVbW3m0Us=) 2: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: aovpUXhtG7nLDYyGx/GHHZuHleB68UHdZ+Sr7i30ntQ=) 3: A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl (hash: Z1zBQ6tZQ9EN+GZNhNrC1h3hY7c1lY6kVz621905cxQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 02:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4a:8e:b9:31:7c:5e:9d:64:95:8e:27:02:78:a0:e5:35:9e:2a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE Validity Not Before: Aug 27 01:12:13 2026 GMT Not After : Aug 28 04:34:13 2026 GMT Subject: CN=00194967CAB6BF65BE635D11708D1D2DE1F9040E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f3:8e:82:5c:ce:46:a9:1d:b8:f8:64:33:3b: 40:a4:57:a1:a1:cb:1e:ab:20:54:f1:f5:a6:d2:3d: 7c:7e:7f:4f:d3:09:93:33:84:2e:1b:57:b0:90:3c: 7d:a4:f8:64:a4:66:ee:f5:2f:91:fd:04:2d:a9:ee: 5e:5a:58:55:e0:79:1e:55:34:be:a1:6b:4a:92:00: db:32:a4:f2:a8:f8:84:7f:b8:63:d7:61:66:54:fd: a4:b9:a5:01:be:82:79:2d:37:9c:0d:ff:21:b0:15: 08:6f:44:81:7f:3b:9e:90:05:ba:75:71:b5:38:8f: 55:a0:1b:75:38:ac:53:4e:46:27:15:02:c4:20:c9: a3:f0:e5:e8:54:2b:5c:9f:50:44:e5:57:1d:eb:d8: 93:92:4f:f9:d2:ec:30:45:47:74:be:5b:49:73:fc: bc:e5:58:4a:68:ba:3c:61:77:df:87:57:1b:81:2e: 95:c8:9d:ec:24:e8:10:33:48:9c:e4:af:ba:83:5f: 3d:05:2c:d8:55:e1:11:66:c8:6e:8e:6a:21:ed:31: ad:93:b9:83:99:06:c5:a1:32:05:67:2f:79:29:bc: 52:9c:bb:e1:a2:18:5a:09:8e:3e:ec:05:b5:20:8a: 83:b9:b3:5f:6e:96:4e:66:04:77:bb:de:7f:2c:41: 8b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:19:49:67:CA:B6:BF:65:BE:63:5D:11:70:8D:1D:2D:E1:F9:04:0E X509v3 Authority Key Identifier: keyid:A3:8F:DF:61:DF:D4:5E:8F:A1:C9:25:6D:BD:35:A6:7A:8C:3C:79:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:0b:1c:7e:d2:a5:ba:26:6f:ec:29:45:9d:4e:a8:7c:38:0d: 94:66:28:63:16:1a:13:f4:04:99:06:37:74:4a:39:77:75:7c: d4:98:6e:01:05:97:89:63:dc:6b:d6:f4:a0:7f:bf:76:6a:e4: ae:b5:f8:41:3d:22:b1:0b:ed:f4:19:f0:04:60:e7:3c:ea:ba: 98:fc:6e:fa:11:27:82:1a:6b:34:9f:da:d6:53:4b:5e:01:d2: ee:52:84:44:5b:93:44:0d:e4:1e:59:f1:32:9a:af:eb:e7:a3: 51:12:89:00:ba:fa:3d:c4:4d:ff:95:a4:aa:aa:00:d4:53:34: bc:91:22:ab:40:49:ca:7b:3c:69:80:fa:9a:6e:7f:b8:03:f6: b3:8e:e1:65:bf:73:a0:28:79:94:62:40:e9:71:91:a0:6c:70: f4:6a:fd:c1:2a:61:89:57:42:fc:7b:55:8f:5c:c1:2e:a6:26: 96:e2:a9:bd:b9:15:05:41:3f:b3:bb:6b:8e:ff:c1:60:9a:27: b5:ff:a6:4b:50:8b:cd:38:cf:67:54:07:99:99:af:7d:da:ef: ea:4c:e6:24:91:75:76:f8:23:cb:d0:32:6f:ff:a1:db:74:89: dd:94:b5:fb:ee:f9:cc:8c:17:73:d5:b5:db:34:d6:5f:a4:89: c2:56:54:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE0qOuTF8Xp1klY4nAnig5TWeKpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM4RkRGNjFERkQ0NUU4RkExQzkyNTZEQkQzNUE2N0E4 QzNDNzlDRTAeFw0yNjA4MjcwMTEyMTNaFw0yNjA4MjgwNDM0MTNaMDMxMTAvBgNV BAMTKDAwMTk0OTY3Q0FCNkJGNjVCRTYzNUQxMTcwOEQxRDJERTFGOTA0MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb846CXM5GqR24+GQzO0CkV6Gh yx6rIFTx9abSPXx+f0/TCZMzhC4bV7CQPH2k+GSkZu71L5H9BC2p7l5aWFXgeR5V NL6ha0qSANsypPKo+IR/uGPXYWZU/aS5pQG+gnktN5wN/yGwFQhvRIF/O56QBbp1 cbU4j1WgG3U4rFNORicVAsQgyaPw5ehUK1yfUETlVx3r2JOST/nS7DBFR3S+W0lz /LzlWEpoujxhd9+HVxuBLpXInewk6BAzSJzkr7qDXz0FLNhV4RFmyG6OaiHtMa2T uYOZBsWhMgVnL3kpvFKcu+GiGFoJjj7sBbUgioO5s19ulk5mBHe73n8sQYvpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUABlJZ8q2v2W+Y10RcI0dLeH5BA4wHwYDVR0j BBgwFoAUo4/fYd/UXo+hySVtvTWmeow8ec4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDdkZjJhZDAtNmU5OS00NGE3LWEwNjgtNTAwNjU2ZmZiMDBmLzAvQTM4RkRGNjFE RkQ0NUU4RkExQzkyNTZEQkQzNUE2N0E4QzNDNzlDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzhGREY2MURGRDQ1RThGQTFDOTI1NkRCRDM1QTY3QThDM0M3 OUNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvQTM4RkRGNjFERkQ0NUU4RkExQzkyNTZEQkQzNUE2 N0E4QzNDNzlDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALILHH7Spbomb+wpRZ1OqHw4DZRmKGMWGhP0 BJkGN3RKOXd1fNSYbgEFl4lj3GvW9KB/v3Zq5K61+EE9IrEL7fQZ8ARg5zzqupj8 bvoRJ4IaazSf2tZTS14B0u5ShERbk0QN5B5Z8TKar+vno1ESiQC6+j3ETf+VpKqq ANRTNLyRIqtAScp7PGmA+ppuf7gD9rOO4WW/c6AoeZRiQOlxkaBscPRq/cEqYYlX Qvx7VY9cwS6mJpbiqb25FQVBP7O7a47/wWCaJ7X/pktQi804z2dUB5mZr33a7+pM 5iSRdXb4I8vQMm//odt0id2Utfvu+cyMF3PVtds01l+kicJWVKM= -----END CERTIFICATE-----Generated at Thu Aug 27 17:39:47 2026 by rpki-client