$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft File: A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft (raw, json) Hash identifier: hXZOhHECiMlMLvQSEN8hY44xPC9SjjnnBxEoYU6bHbg= Subject key identifier: 38:99:5C:A3:C3:92:79:F8:30:EB:AC:A0:1B:0B:9E:4E:4F:56:7E:B0 Authority key identifier: A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3 Certificate issuer: /CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3 Certificate serial: 30BFDB2E395FBE0E63462B9BAD4230F3D344CB95 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 01:15:10 +0000 Manifest this update: Thu 17 Sep 2026 01:10:10 +0000 Manifest next update: Fri 18 Sep 2026 02:13:10 +0000 Files and hashes: 1: 3130332e32382e3134382e302f32342d3234203d3e203538343737.roa (hash: xw+egA02OX5uOYAGnedHg8tG8xIxYeukOfUcUDfNNIQ=) 2: 34352e36342e39372e302f32342d3234203d3e20313335333630.roa (hash: eVL30F9FmWg9xfcbeGTmvP0LqqOdBiZkfgWJnF3c51k=) 3: 323030313a6466303a3237333a3a2f34382d3438203d3e20313431393835.roa (hash: xS3CYv6HlOigS6V1ToXrtXoIA2pH/yBeJ3+U9/cCmQA=) 4: 3130332e32382e3134392e302f32342d3234203d3e203538343737.roa (hash: qDJ/c5qWojiJYfc9eIqgLudqj78rlDzX+1L2SPWNYTQ=) 5: A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl (hash: 8mkdhdLTxysifQ8igPPYBkUp384B2TfQioq2hxDi1SQ=) 6: 34352e36342e39382e302f32342d3234203d3e203538343737.roa (hash: /BLy7k3doovw3jQVTXaYTnBas7DL4Zfrgn7U9J4fWVA=) 7: 3130332e33312e3235312e302f32342d3234203d3e203538343737.roa (hash: nNs3zCmZDfGYSq9FVm5Dz3ukk7qRss0F7cyqFrIdiUs=) 8: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (hash: dyN12mfoRjXFlNHqIFEChK7+mIsDEFYombQgQudcekM=) 9: 34352e36342e39362e302f32342d3234203d3e203538343737.roa (hash: 5ev3rc/Wu45AIU9QKYFuF4qHEkUSlKkTnsZ3JdywnVM=) 10: 3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (hash: 2ZuwNGg62iU8raGM9TYM3A0jrh0UG5HDKyy6dwXOLS0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:bf:db:2e:39:5f:be:0e:63:46:2b:9b:ad:42:30:f3:d3:44:cb:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3 Validity Not Before: Sep 17 01:10:10 2026 GMT Not After : Sep 18 02:13:10 2026 GMT Subject: CN=38995CA3C39279F830EBACA01B0B9E4E4F567EB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:52:5e:72:89:84:95:ae:2d:c2:11:f2:78: a1:1b:9f:a7:48:d3:15:da:05:9f:cb:d9:3f:9d:1b: d1:78:75:cc:87:79:f7:2b:c9:81:9f:b0:d0:82:32: ea:70:9f:9e:87:1e:8b:f8:09:d7:59:53:03:2d:f0: 6b:52:85:5c:0c:e4:64:db:6b:81:cb:b1:fe:ee:5f: a7:fd:e2:39:54:d7:62:84:0e:ca:f7:f6:c2:11:cb: 60:65:14:01:cf:c7:e8:93:bc:34:bb:40:43:bc:ce: b8:cc:f9:b7:c8:be:86:bb:bb:f0:52:ea:ec:b0:0a: 0f:b6:9e:74:c0:1d:1c:49:8d:1d:8c:33:f9:f0:ef: db:c4:df:c5:32:68:52:77:85:23:33:07:bc:ea:e5: 10:d3:74:3b:24:bf:49:ed:76:ec:a9:9a:19:fc:f0: 26:d1:d4:44:8d:f2:9f:fb:7e:3a:d7:44:ad:72:0c: ca:4f:c2:e6:a4:ef:3b:4c:f2:03:af:cb:60:d6:0c: bf:11:93:73:b4:9e:54:ed:a5:c5:bc:0a:1b:e8:13: 68:3a:a7:1e:ca:44:d6:e8:8f:15:3c:1d:a7:05:a2: 63:32:b2:e2:6b:14:d1:60:e0:d0:62:8c:0e:dd:61: cb:17:93:3b:b4:55:bd:68:74:ae:43:df:37:71:db: 89:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:99:5C:A3:C3:92:79:F8:30:EB:AC:A0:1B:0B:9E:4E:4F:56:7E:B0 X509v3 Authority Key Identifier: keyid:A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:4c:14:f7:0e:20:95:31:84:e6:d5:7f:73:e5:ba:49:72:02: d1:23:3d:52:f1:db:7a:cd:93:be:6f:5c:c3:db:79:ea:58:e0: 7b:bc:3b:b2:d3:10:20:52:ca:05:89:61:70:06:9c:0e:4b:7f: 47:72:f5:db:7d:16:90:0f:4e:c7:7a:25:23:f0:81:83:07:34: 4a:c7:38:8f:18:db:05:57:9f:0d:ed:ac:47:8e:c3:87:0f:12: b9:95:80:95:82:6c:8d:7b:46:8e:7f:0f:cf:2f:4a:4c:6e:7b: 3f:c9:11:6e:19:c8:70:a6:45:a7:30:74:c8:8f:4f:4f:bc:0e: 63:af:cd:77:e0:c3:a0:29:84:06:84:b4:20:1f:19:5f:4c:71: 5e:28:1f:38:55:f6:a1:8d:c5:0b:a1:4c:a3:00:a2:d5:14:d9: 2c:db:38:1c:db:ae:e0:08:8b:00:3d:9a:df:15:b0:82:e7:16: 7a:bd:7b:d7:75:44:35:f2:12:4b:49:ea:8e:b8:0c:87:0c:aa: 89:3c:a4:e6:82:8a:34:b9:03:f0:22:d1:ad:c2:f7:16:cb:02: 3f:da:55:ef:41:c0:f9:be:e9:c8:cb:87:a3:9b:64:ab:34:98: c6:4b:ca:5a:2f:f4:00:aa:11:5b:51:2c:86:56:10:d9:b7:94: 05:5c:07:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUML/bLjlfvg5jRiubrUIw89NEy5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QkFGMkQ4ODUxNEVDMDQxQTg3RjA5MkU2QjZBNTIx RjMzNDlGMzAeFw0yNjA5MTcwMTEwMTBaFw0yNjA5MTgwMjEzMTBaMDMxMTAvBgNV BAMTKDM4OTk1Q0EzQzM5Mjc5RjgzMEVCQUNBMDFCMEI5RTRFNEY1NjdFQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vlJecomEla4twhHyeKEbn6dI 0xXaBZ/L2T+dG9F4dcyHefcryYGfsNCCMupwn56HHov4CddZUwMt8GtShVwM5GTb a4HLsf7uX6f94jlU12KEDsr39sIRy2BlFAHPx+iTvDS7QEO8zrjM+bfIvoa7u/BS 6uywCg+2nnTAHRxJjR2MM/nw79vE38UyaFJ3hSMzB7zq5RDTdDskv0ntduypmhn8 8CbR1ESN8p/7fjrXRK1yDMpPwuak7ztM8gOvy2DWDL8Rk3O0nlTtpcW8ChvoE2g6 px7KRNbojxU8HacFomMysuJrFNFg4NBijA7dYcsXkzu0Vb1odK5D3zdx24l1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOJlco8OSefgw66ygGwueTk9WfrAwHwYDVR0j BBgwFoAUoIuvLYhRTsBBqH8JLmtqUh8zSfMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJjNmFhMDMtMWI0ZC00MzhlLWE5ZjMtZWZlYWFlNmIwOTIxLzAvQTA4QkFGMkQ4 ODUxNEVDMDQxQTg3RjA5MkU2QjZBNTIxRjMzNDlGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDhCQUYyRDg4NTE0RUMwNDFBODdGMDkyRTZCNkE1MjFGMzM0 OUYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJjNmFhMDMtMWI0ZC00MzhlLWE5 ZjMtZWZlYWFlNmIwOTIxLzAvQTA4QkFGMkQ4ODUxNEVDMDQxQTg3RjA5MkU2QjZB NTIxRjMzNDlGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5MFPcOIJUxhObVf3PluklyAtEjPVLx23rN k75vXMPbeepY4Hu8O7LTECBSygWJYXAGnA5Lf0dy9dt9FpAPTsd6JSPwgYMHNErH OI8Y2wVXnw3trEeOw4cPErmVgJWCbI17Ro5/D88vSkxuez/JEW4ZyHCmRacwdMiP T0+8DmOvzXfgw6AphAaEtCAfGV9McV4oHzhV9qGNxQuhTKMAotUU2SzbOBzbruAI iwA9mt8VsILnFnq9e9d1RDXyEktJ6o64DIcMqok8pOaCijS5A/Ai0a3C9xbLAj/a Ve9BwPm+6cjLh6ObZKs0mMZLylov9ACqEVtRLIZWENm3lAVcBzA= -----END CERTIFICATE-----Generated at Thu Sep 17 08:25:18 2026 by rpki-client