$ rpki-client -vvvf rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft File: A655C14C173A3BE852B5A2C52C501937C4340242.mft (raw, json) Hash identifier: SERV5ERy1RQ4oPbLsJw79Xnq9wd8sAwuA2huWcs6Twc= Subject key identifier: E7:9D:93:73:F1:BB:17:25:B1:ED:EE:91:E4:93:02:83:3F:01:9F:CE Authority key identifier: A6:55:C1:4C:17:3A:3B:E8:52:B5:A2:C5:2C:50:19:37:C4:34:02:42 Certificate issuer: /CN=A655C14C173A3BE852B5A2C52C501937C4340242 Certificate serial: 0C93992A678C3D0B3A8F66D6E6729FC25E17E91C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 00:34:17 +0000 Manifest this update: Thu 17 Sep 2026 00:29:17 +0000 Manifest next update: Fri 18 Sep 2026 03:58:17 +0000 Files and hashes: 1: 3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa (hash: St+whbiWn8DuDZzEPL2qqiXyvmUfCd91hjaKC3vJifA=) 2: A655C14C173A3BE852B5A2C52C501937C4340242.crl (hash: cGfEXiprnFuY4RpIB7kO1vmjUQ9E9ZJgae6g23XpQAY=) 3: 3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa (hash: qkm6D0klaQyvN59pQnarOTQhutzEDT+u+1JdsHBl/VQ=) 4: 3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa (hash: VTw+tu3SsLrqMi7jJgKUunIG386oKhLKeizx0PYXC2g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.crl rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:93:99:2a:67:8c:3d:0b:3a:8f:66:d6:e6:72:9f:c2:5e:17:e9:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A655C14C173A3BE852B5A2C52C501937C4340242 Validity Not Before: Sep 17 00:29:17 2026 GMT Not After : Sep 18 03:58:17 2026 GMT Subject: CN=E79D9373F1BB1725B1EDEE91E49302833F019FCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3d:23:8d:5c:63:7b:07:1f:c6:4a:5a:ba:d3: 4c:9d:f8:4f:39:68:69:bc:01:f3:0c:8a:c0:e6:85: a9:7a:b9:2a:4f:c7:f2:ae:2b:15:b9:1e:2b:92:5a: 02:93:e7:a0:4f:d9:5f:c3:1a:c8:f5:d0:8a:14:ef: 8d:87:e8:7a:bd:3c:eb:c3:89:d8:21:10:f0:d3:21: 4f:d7:bf:ac:0e:4b:c6:af:25:65:84:99:29:a1:b6: 44:aa:18:ec:ae:a7:b2:be:fc:f7:93:23:60:bc:ec: 5e:9a:4f:a8:9d:6c:75:11:fb:26:29:55:6d:de:4a: c8:3d:62:7b:38:d6:ec:9f:8f:02:28:8e:d8:ee:63: 87:27:4a:ec:26:c4:01:2b:d5:d1:d7:56:8e:9c:57: 0c:73:de:e5:91:6b:b2:ae:44:37:c9:cb:53:9b:fc: be:3a:b0:61:c5:76:25:a0:d4:5b:8e:cf:25:44:ce: e2:2f:ed:78:08:58:25:00:30:0d:1e:8e:2d:db:37: 08:8d:2c:82:94:82:19:0c:52:f8:64:6c:74:5a:51: db:35:57:c6:bc:15:9a:90:40:01:aa:80:b6:f6:94: d2:3d:42:c0:23:a2:b6:4e:50:9f:fe:f4:95:65:c7: 30:4c:72:bd:73:e0:32:db:68:11:d5:1f:09:51:73: b6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9D:93:73:F1:BB:17:25:B1:ED:EE:91:E4:93:02:83:3F:01:9F:CE X509v3 Authority Key Identifier: keyid:A6:55:C1:4C:17:3A:3B:E8:52:B5:A2:C5:2C:50:19:37:C4:34:02:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:af:c6:8f:f3:df:10:73:90:57:48:8d:3b:d8:5b:e6:0d:57: a4:09:ff:8f:85:43:04:a2:d0:d7:fd:37:da:1a:37:8b:02:4e: 4f:24:59:22:a7:75:99:64:72:ca:5e:a0:97:97:0b:2c:63:60: 9a:bb:24:15:1c:41:02:e6:9c:67:50:07:95:bd:6d:81:f0:8f: e9:13:2e:6f:f6:f2:9e:a5:3b:de:19:36:34:67:8b:2c:2e:31: 60:11:6a:4e:18:c5:5a:e5:a3:61:d4:f8:f3:e7:1b:2b:90:d5: 4b:3e:82:39:3d:11:27:03:ab:27:53:06:2a:91:ee:d2:e6:4a: 6e:59:cf:55:3b:5c:a9:15:5d:e7:d8:6a:b5:52:12:e1:b5:dd: 04:36:a9:8b:9b:57:d5:90:09:24:79:7f:87:40:24:c4:2e:ce: 7c:fc:64:d6:62:a6:20:88:9d:fe:e9:90:a8:d4:3c:ed:e8:ab: d7:76:c0:c6:24:87:56:21:77:53:32:8f:4a:b1:3e:23:f0:b8: 78:4d:20:4c:83:f4:ff:f3:db:22:55:8f:58:44:bd:7f:5c:91: 8b:f0:68:70:16:ec:34:fb:81:8e:d7:f9:e4:9e:c7:4d:47:59: 94:76:51:67:00:e0:f7:09:63:77:87:6d:23:9b:3b:72:21:32: 5b:f4:6e:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJOZKmeMPQs6j2bW5nKfwl4X6RwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1NUMxNEMxNzNBM0JFODUyQjVBMkM1MkM1MDE5MzdD NDM0MDI0MjAeFw0yNjA5MTcwMDI5MTdaFw0yNjA5MTgwMzU4MTdaMDMxMTAvBgNV BAMTKEU3OUQ5MzczRjFCQjE3MjVCMUVERUU5MUU0OTMwMjgzM0YwMTlGQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPSONXGN7Bx/GSlq600yd+E85 aGm8AfMMisDmhal6uSpPx/KuKxW5HiuSWgKT56BP2V/DGsj10IoU742H6Hq9POvD idghEPDTIU/Xv6wOS8avJWWEmSmhtkSqGOyup7K+/PeTI2C87F6aT6idbHUR+yYp VW3eSsg9Yns41uyfjwIojtjuY4cnSuwmxAEr1dHXVo6cVwxz3uWRa7KuRDfJy1Ob /L46sGHFdiWg1FuOzyVEzuIv7XgIWCUAMA0eji3bNwiNLIKUghkMUvhkbHRaUds1 V8a8FZqQQAGqgLb2lNI9QsAjorZOUJ/+9JVlxzBMcr1z4DLbaBHVHwlRc7Y/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU552Tc/G7FyWx7e6R5JMCgz8Bn84wHwYDVR0j BBgwFoAUplXBTBc6O+hStaLFLFAZN8Q0AkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTgxMjc0YWYtN2NkMC00MGFmLWEzMjEtNjc2ODk4ZDU4ZGI4LzAvQTY1NUMxNEMx NzNBM0JFODUyQjVBMkM1MkM1MDE5MzdDNDM0MDI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNjU1QzE0QzE3M0EzQkU4NTJCNUEyQzUyQzUwMTkzN0M0MzQw MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTgxMjc0YWYtN2NkMC00MGFmLWEz MjEtNjc2ODk4ZDU4ZGI4LzAvQTY1NUMxNEMxNzNBM0JFODUyQjVBMkM1MkM1MDE5 MzdDNDM0MDI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmvxo/z3xBzkFdIjTvYW+YNV6QJ/4+FQwSi 0Nf9N9oaN4sCTk8kWSKndZlkcspeoJeXCyxjYJq7JBUcQQLmnGdQB5W9bYHwj+kT Lm/28p6lO94ZNjRniywuMWARak4YxVrlo2HU+PPnGyuQ1Us+gjk9EScDqydTBiqR 7tLmSm5Zz1U7XKkVXefYarVSEuG13QQ2qYubV9WQCSR5f4dAJMQuznz8ZNZipiCI nf7pkKjUPO3oq9d2wMYkh1Yhd1Myj0qxPiPwuHhNIEyD9P/z2yJVj1hEvX9ckYvw aHAW7DT7gY7X+eSex01HWZR2UWcA4PcJY3eHbSObO3IhMlv0bsY= -----END CERTIFICATE-----Generated at Thu Sep 17 05:41:33 2026 by rpki-client