$ rpki-client -vvvf rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft File: A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft (raw, json) Hash identifier: s1bF+56Dy95Anu+gns2k6hK+fvN9tkcMDZsPVQBRW+w= Subject key identifier: FD:2F:02:57:76:53:B4:1C:BE:1A:03:A7:5E:20:5C:D5:3D:EC:DA:03 Authority key identifier: A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F Certificate issuer: /CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F Certificate serial: 74D0EFBE99EB8D4D4A96D79D9F998D8538736A27 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 02:06:05 +0000 Manifest this update: Thu 17 Sep 2026 02:01:05 +0000 Manifest next update: Fri 18 Sep 2026 04:40:05 +0000 Files and hashes: 1: A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl (hash: OPga0bbDJ9dCwAj3rfRpOyURmnpTfUmGltyWGmlXx2I=) 2: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: lknjz+xGrn74yDQTZoQhv/KjNKL2zVYWd4Swco59gWA=) 3: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: mTSHlFZAxZWWAKZzsiMuSqeFq/VKg23JR+BpuxRfCT8=) 4: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: Il2995+O34HRt5QUYak7wmOSE/xt1UwsadzXH7aEOYo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d0:ef:be:99:eb:8d:4d:4a:96:d7:9d:9f:99:8d:85:38:73:6a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F Validity Not Before: Sep 17 02:01:05 2026 GMT Not After : Sep 18 04:40:05 2026 GMT Subject: CN=FD2F02577653B41CBE1A03A75E205CD53DECDA03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:13:e4:40:16:0a:2a:08:f5:e3:fb:77:50: b2:33:e9:c0:76:62:ce:8f:30:61:87:07:fb:48:f1: c1:4e:c5:12:1a:f9:6a:a6:7b:28:49:0c:12:47:bb: 20:a1:47:cc:e1:ea:58:a7:97:c6:cc:e1:bb:ad:da: 38:4f:02:46:b3:d8:4c:03:c4:1b:dc:75:9d:5b:5d: 76:e5:92:dc:d1:a2:fe:c4:d7:b4:e9:c9:a5:f4:8a: aa:ee:00:da:93:ba:6b:37:ba:ed:a0:b9:a3:44:74: 25:14:62:4e:17:fd:62:8c:38:04:5d:63:1d:2a:64: 6d:d2:4f:6e:bf:4f:ea:a1:17:55:1f:db:b6:dd:6f: 46:e6:10:84:9a:c3:54:c3:64:a8:64:42:a9:20:ff: d5:ec:3e:d7:14:2f:b9:b7:13:0d:cb:1c:68:33:22: 9a:65:98:4c:0b:c7:ba:cb:ee:43:a6:08:e9:9d:7f: 05:5d:5e:55:83:00:85:37:9a:9c:77:eb:fa:fe:79: a0:76:a9:51:c6:d1:54:30:9b:14:b6:43:0f:3d:fa: 4e:c1:c3:5e:10:0d:ab:87:b9:a5:18:5c:74:5d:b7: 06:86:5b:f8:15:ce:8d:b5:a5:9f:eb:f1:44:7a:a3: bd:d5:24:d8:93:fb:18:79:59:8d:57:79:b4:47:02: 62:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2F:02:57:76:53:B4:1C:BE:1A:03:A7:5E:20:5C:D5:3D:EC:DA:03 X509v3 Authority Key Identifier: keyid:A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:43:16:54:d1:f4:7c:27:3d:de:7b:a5:2e:7e:8a:ea:67:b7: c1:80:3c:f3:6e:0a:50:9e:71:cb:bc:51:e7:80:95:0a:e2:af: 64:f5:94:ed:52:81:da:8d:33:72:97:79:0e:55:c4:8a:e9:e9: 6a:d2:a4:7d:ac:05:e5:dc:82:b1:ff:95:8f:8f:0e:9f:7b:ab: 59:29:d0:03:9b:67:25:c0:e0:2c:59:c1:cf:a2:ac:4d:b0:8a: e1:49:5d:20:f0:4e:77:13:2d:f6:ed:ad:83:3e:0b:63:62:7a: 4a:1f:a0:7c:3e:19:73:97:ac:d7:3e:49:6a:d9:9a:fc:0d:ee: 6c:f7:86:77:e4:e5:49:44:06:e5:25:64:8d:81:32:ec:1f:bc: d5:1a:cc:08:15:29:99:9c:5c:bf:99:fd:d1:02:d6:1b:4c:39: f0:fb:4a:c4:ac:9e:a6:f4:d1:8c:94:dd:a8:5e:f1:20:70:53: f4:ce:8c:4f:33:b1:6e:29:43:a7:cc:13:08:c1:00:a8:87:fe: 52:f3:8e:8b:b7:bf:7b:d1:55:ad:6d:c6:26:bb:63:7b:84:99: a4:bc:ce:6d:eb:cb:1f:2d:ad:4e:8b:f6:20:84:d6:db:8b:5d: 34:fa:fb:62:98:1a:93:a7:57:4c:86:b8:90:e4:f7:03:1b:10: 8c:d7:15:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdNDvvpnrjU1Kltedn5mNhThzaicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOEQyQzQ1RDgyMEMxRkM0MEJDRjAzQjlCMTA2OTk5 OTJEOEIyRjAeFw0yNjA5MTcwMjAxMDVaFw0yNjA5MTgwNDQwMDVaMDMxMTAvBgNV BAMTKEZEMkYwMjU3NzY1M0I0MUNCRTFBMDNBNzVFMjA1Q0Q1M0RFQ0RBMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vhPkQBYKKgj14/t3ULIz6cB2 Ys6PMGGHB/tI8cFOxRIa+WqmeyhJDBJHuyChR8zh6linl8bM4but2jhPAkaz2EwD xBvcdZ1bXXblktzRov7E17TpyaX0iqruANqTums3uu2guaNEdCUUYk4X/WKMOARd Yx0qZG3ST26/T+qhF1Uf27bdb0bmEISaw1TDZKhkQqkg/9XsPtcUL7m3Ew3LHGgz IpplmEwLx7rL7kOmCOmdfwVdXlWDAIU3mpx36/r+eaB2qVHG0VQwmxS2Qw89+k7B w14QDauHuaUYXHRdtwaGW/gVzo21pZ/r8UR6o73VJNiT+xh5WY1XebRHAmLZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/S8CV3ZTtBy+GgOnXiBc1T3s2gMwHwYDVR0j BBgwFoAUqejSxF2CDB/EC88DubEGmZktiy8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDgxZDU0Y2ItNTdhOS00YTE2LWE3MGUtYzVmNjAyNGUxMzlkLzAvQTlFOEQyQzQ1 RDgyMEMxRkM0MEJDRjAzQjlCMTA2OTk5OTJEOEIyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BOUU4RDJDNDVEODIwQzFGQzQwQkNGMDNCOUIxMDY5OTk5MkQ4 QjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQTlFOEQyQzQ1RDgyMEMxRkM0MEJDRjAzQjlCMTA2 OTk5OTJEOEIyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINDFlTR9HwnPd57pS5+iupnt8GAPPNuClCe ccu8UeeAlQrir2T1lO1SgdqNM3KXeQ5VxIrp6WrSpH2sBeXcgrH/lY+PDp97q1kp 0AObZyXA4CxZwc+irE2wiuFJXSDwTncTLfbtrYM+C2NiekofoHw+GXOXrNc+SWrZ mvwN7mz3hnfk5UlEBuUlZI2BMuwfvNUazAgVKZmcXL+Z/dEC1htMOfD7SsSsnqb0 0YyU3ahe8SBwU/TOjE8zsW4pQ6fMEwjBAKiH/lLzjou3v3vRVa1txia7Y3uEmaS8 zm3ryx8trU6L9iCE1tuLXTT6+2KYGpOnV0yGuJDk9wMbEIzXFTc= -----END CERTIFICATE-----Generated at Thu Sep 17 10:51:03 2026 by rpki-client