$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft File: A241AC704BB26D3BB01102643E819AF4873EBFF4.mft (raw, json) Hash identifier: o5t4e9VCZEzG15QSu8a0yfxOmHktxZwOcHBxhyF/SvI= Subject key identifier: DE:3C:C7:19:8C:56:59:48:54:17:4F:4B:C6:06:E5:EA:FC:6C:79:EE Authority key identifier: A2:41:AC:70:4B:B2:6D:3B:B0:11:02:64:3E:81:9A:F4:87:3E:BF:F4 Certificate issuer: /CN=A241AC704BB26D3BB01102643E819AF4873EBFF4 Certificate serial: 25358ED23EDADC1C40D2849EA5147BC249C7D5CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 20:18:28 +0000 Manifest this update: Thu 17 Sep 2026 20:13:28 +0000 Manifest next update: Sat 19 Sep 2026 00:12:28 +0000 Files and hashes: 1: A241AC704BB26D3BB01102643E819AF4873EBFF4.crl (hash: 4U2/d1I9pXRkkq2+ZNzFINfHioxvt92dUOBeiGGv+wA=) 2: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: A0dq7gCpUZizRlTZxmyyhDpzPzM9JT/yiUa6QfFC4Os=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.crl rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:35:8e:d2:3e:da:dc:1c:40:d2:84:9e:a5:14:7b:c2:49:c7:d5:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A241AC704BB26D3BB01102643E819AF4873EBFF4 Validity Not Before: Sep 17 20:13:28 2026 GMT Not After : Sep 19 00:12:28 2026 GMT Subject: CN=DE3CC7198C56594854174F4BC606E5EAFC6C79EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a6:5a:0a:12:3e:b1:b4:5d:dc:83:19:6b:d8: 07:8b:c7:8b:81:bb:dc:43:df:a6:55:2d:a8:3e:ad: 6a:98:41:6c:23:56:b1:15:90:05:26:05:60:ce:0a: e9:e5:6e:89:8d:fd:93:c5:ab:a9:68:2a:96:74:ce: 28:27:0f:77:68:d5:14:01:c1:41:af:2f:2e:c4:60: 46:61:97:3f:32:65:22:89:fc:0b:10:bf:2b:69:a5: 47:ef:2d:90:46:b3:72:51:2c:5a:93:50:8a:3d:39: 1b:e7:a8:80:21:d4:b7:4d:63:01:b1:00:bc:3d:4d: 75:6e:24:2c:ff:23:26:c8:5e:92:da:3d:98:27:64: 8b:8f:78:8f:03:01:10:1e:60:f7:c2:9a:b0:e4:56: 9f:d0:79:20:80:60:19:33:97:88:04:4e:fa:b2:d5: f5:82:1f:61:67:f7:82:32:65:47:87:a4:d8:5f:f4: fb:02:5d:97:55:0e:3a:25:68:b8:fb:6e:20:cc:d4: 78:74:fa:58:ff:f2:75:c6:94:87:fa:7e:c4:40:5e: 88:3c:cb:c3:48:d5:bf:48:13:88:0e:28:38:dd:48: 77:02:1c:e2:5f:66:00:e3:dd:f4:17:fe:75:e7:8b: a5:61:ca:e8:90:ba:fd:07:91:81:08:b2:06:30:e0: 78:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3C:C7:19:8C:56:59:48:54:17:4F:4B:C6:06:E5:EA:FC:6C:79:EE X509v3 Authority Key Identifier: keyid:A2:41:AC:70:4B:B2:6D:3B:B0:11:02:64:3E:81:9A:F4:87:3E:BF:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e5:5b:4c:3c:08:52:7e:6c:f1:c0:36:7e:96:e4:e7:aa:53: d9:3f:c6:64:9b:98:11:3c:74:f6:ca:a0:3c:8c:d0:83:cc:1f: 62:d2:d2:8a:f3:24:11:2e:13:1b:bf:de:c9:02:d9:89:be:5e: be:a5:b2:4f:2a:37:de:7f:f8:30:6b:ce:e3:2a:00:44:ff:43: 3d:84:e3:0d:c9:99:10:d7:72:0c:fb:30:e9:2d:e4:cb:55:17: 0e:9e:11:6e:46:8c:b2:8f:9b:1d:b4:82:89:54:15:28:64:29: 18:02:a9:03:23:c9:46:53:9f:02:bf:02:1b:6d:48:76:29:bb: ed:71:bd:73:8b:5f:d1:cf:a3:17:68:13:1e:ea:85:54:38:8a: d9:23:08:b7:5b:37:b5:d9:09:05:b3:15:00:1a:4d:2d:0c:c2: 5c:43:6d:dd:f6:77:10:ba:31:2a:9b:70:c6:b9:a4:8f:ac:68: 85:69:a3:d0:21:80:51:30:fc:df:33:00:d7:b0:25:3c:0d:a1: c9:16:6f:a0:cc:89:df:2f:c5:81:78:4b:7e:58:aa:9c:25:00: c9:a2:68:70:68:cf:23:e9:fa:94:c0:d4:96:bb:33:45:aa:16: 64:9a:20:10:6e:1e:62:4f:d0:0f:33:a3:93:dd:75:25:08:37: 34:19:ba:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJTWO0j7a3BxA0oSepRR7wknH1c8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI0MUFDNzA0QkIyNkQzQkIwMTEwMjY0M0U4MTlBRjQ4 NzNFQkZGNDAeFw0yNjA5MTcyMDEzMjhaFw0yNjA5MTkwMDEyMjhaMDMxMTAvBgNV BAMTKERFM0NDNzE5OEM1NjU5NDg1NDE3NEY0QkM2MDZFNUVBRkM2Qzc5RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMploKEj6xtF3cgxlr2AeLx4uB u9xD36ZVLag+rWqYQWwjVrEVkAUmBWDOCunlbomN/ZPFq6loKpZ0zignD3do1RQB wUGvLy7EYEZhlz8yZSKJ/AsQvytppUfvLZBGs3JRLFqTUIo9ORvnqIAh1LdNYwGx ALw9TXVuJCz/IybIXpLaPZgnZIuPeI8DARAeYPfCmrDkVp/QeSCAYBkzl4gETvqy 1fWCH2Fn94IyZUeHpNhf9PsCXZdVDjolaLj7biDM1Hh0+lj/8nXGlIf6fsRAXog8 y8NI1b9IE4gOKDjdSHcCHOJfZgDj3fQX/nXni6VhyuiQuv0HkYEIsgYw4HjBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3jzHGYxWWUhUF09Lxgbl6vxsee4wHwYDVR0j BBgwFoAUokGscEuybTuwEQJkPoGa9Ic+v/QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWRhNGVmNzEtZjBlMC00MjUyLTgxNjAtNTA1MzIxZmE1MDg5LzAvQTI0MUFDNzA0 QkIyNkQzQkIwMTEwMjY0M0U4MTlBRjQ4NzNFQkZGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMjQxQUM3MDRCQjI2RDNCQjAxMTAyNjQzRTgxOUFGNDg3M0VC RkY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQTI0MUFDNzA0QkIyNkQzQkIwMTEwMjY0M0U4MTlB RjQ4NzNFQkZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7lW0w8CFJ+bPHANn6W5OeqU9k/xmSbmBE8 dPbKoDyM0IPMH2LS0orzJBEuExu/3skC2Ym+Xr6lsk8qN95/+DBrzuMqAET/Qz2E 4w3JmRDXcgz7MOkt5MtVFw6eEW5GjLKPmx20golUFShkKRgCqQMjyUZTnwK/Ahtt SHYpu+1xvXOLX9HPoxdoEx7qhVQ4itkjCLdbN7XZCQWzFQAaTS0MwlxDbd32dxC6 MSqbcMa5pI+saIVpo9AhgFEw/N8zANewJTwNockWb6DMid8vxYF4S35YqpwlAMmi aHBozyPp+pTA1Ja7M0WqFmSaIBBuHmJP0A8zo5PddSUINzQZunA= -----END CERTIFICATE-----Generated at Thu Sep 17 21:34:42 2026 by rpki-client