$ rpki-client -vvvf rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft File: A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft (raw, json) Hash identifier: ARTULNNPo5ylSFHD12lhq7jTFseQOkjcJ8w1xO8luUk= Subject key identifier: C5:C9:05:E0:A4:28:B7:F8:21:67:50:0F:48:31:44:C5:37:F8:92:A7 Authority key identifier: A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62 Certificate issuer: /CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462 Certificate serial: 59579E6FC815264AA1C9D43CB4B35BEF95D047B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 05:35:25 +0000 Manifest this update: Thu 17 Sep 2026 05:30:25 +0000 Manifest next update: Fri 18 Sep 2026 08:05:25 +0000 Files and hashes: 1: 3130332e31302e38312e302f32342d3234203d3e203536323435.roa (hash: 8t40pL4fQo3N87VVWTTwLCjvAxbdAzsDM6MoI8rvfOU=) 2: 3130332e36312e3131392e302f32342d3234203d3e203536323435.roa (hash: qPSkhr1Hfd95Nteo2ukz+NrVtlkjXkiSW+VId9eRa8U=) 3: 3130332e31302e38302e302f32342d3234203d3e203536323435.roa (hash: QcsJg3qfqnd65tjMyauj31CLylmqEJ9JmPfIivInN4s=) 4: 3130332e36312e3131382e302f32342d3234203d3e203536323435.roa (hash: fq37ZHBu24pHeLdJZjOVOOPOX99zj7waBTPuiWqsdHw=) 5: A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl (hash: U+6KibxquHRlvkYu3dNYgS6VioyZQD0pHLqXhKdAYnI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:57:9e:6f:c8:15:26:4a:a1:c9:d4:3c:b4:b3:5b:ef:95:d0:47:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462 Validity Not Before: Sep 17 05:30:25 2026 GMT Not After : Sep 18 08:05:25 2026 GMT Subject: CN=C5C905E0A428B7F82167500F483144C537F892A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f0:63:cf:81:02:24:e4:4f:7c:fd:3d:71:e1: cb:08:f0:0e:7e:c5:a5:6e:04:38:8c:9a:7b:3e:34: f8:ac:4e:a6:7b:ec:02:ae:06:20:ca:62:a4:e6:1a: 37:be:78:7d:3f:ca:f4:86:4a:0f:4a:51:cc:92:65: 70:75:d7:63:e7:da:61:1c:e2:39:6d:eb:7c:56:f2: a4:7e:df:b5:f4:aa:d8:8a:b9:d5:54:5a:1d:98:d9: 3d:96:f9:9f:7e:b7:8b:54:31:5d:92:d4:3f:9e:fa: 23:5e:29:d0:0e:7b:67:30:e1:4c:ce:09:e0:23:5c: d3:a5:56:8e:17:41:2d:55:d8:02:68:14:77:07:52: b4:b6:26:70:e3:5f:4a:94:1b:a8:96:3d:30:6c:d4: 9d:65:8d:07:9b:e9:96:49:bf:fe:dd:aa:a2:36:a7: 1d:eb:87:b3:ff:37:ed:ec:ec:64:ab:4b:2b:31:47: 7b:a0:e4:37:eb:dd:18:6e:93:ff:b4:07:ca:f7:d7: e5:a1:f0:4f:07:7e:f3:40:2c:2d:c5:56:ae:f5:08: d3:78:8a:7f:a4:72:d4:18:d1:83:74:fe:4d:d3:f4: 39:47:46:48:ef:a0:04:0d:79:9b:8c:68:4f:4a:cf: c5:74:e0:31:69:9f:c4:7e:7f:81:1f:6f:9c:c7:64: 21:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C9:05:E0:A4:28:B7:F8:21:67:50:0F:48:31:44:C5:37:F8:92:A7 X509v3 Authority Key Identifier: keyid:A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:1a:ce:cb:b3:57:4a:cc:d0:d2:ca:84:e4:67:d9:96:6d:16: 19:8c:93:7d:65:09:41:d3:f2:a2:e3:ac:a5:69:62:f6:07:0f: ec:0b:2e:ef:d6:9b:90:b3:87:0f:ea:6a:69:8c:fd:47:d7:bb: e6:31:a9:d2:a0:94:a2:64:0b:51:11:46:06:55:05:bc:b0:46: 14:f1:46:b7:7b:01:b0:2a:39:42:5f:77:f9:77:9d:a7:bf:cb: 79:bf:15:50:34:63:05:b3:a0:a9:4f:12:c2:3c:67:1b:a2:57: 8c:c7:9c:73:74:a8:f5:8c:f8:7b:ea:02:6e:d5:ba:d2:8d:3b: c9:c0:d7:0c:c1:8d:63:fe:0c:e3:2e:65:24:3f:08:47:cd:08: 44:14:99:fd:7a:81:01:de:d5:8c:0f:07:fa:45:80:48:7d:61: 6c:d9:71:55:a6:9a:a2:f7:dc:6e:7c:1e:23:02:cf:b3:6e:ff: 2b:b7:b9:30:c5:02:f8:83:8e:a4:40:d9:a7:17:c7:6e:84:b6: 02:4c:33:60:98:ee:9a:89:32:ea:75:4b:0d:c7:fa:ce:99:13: 35:b0:04:63:0c:fb:26:e7:1a:36:1d:07:95:2b:18:70:ae:37: dd:cb:7d:d4:86:4e:0d:42:d9:3c:6d:f7:87:6b:97:1b:b6:2c: da:9c:db:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWVeeb8gVJkqhydQ8tLNb75XQR7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZBRkQ2NUFDNjZENEVCNzAyN0FFRDVGODk4RThFQ0Q4 MDc5RjQ2MjAeFw0yNjA5MTcwNTMwMjVaFw0yNjA5MTgwODA1MjVaMDMxMTAvBgNV BAMTKEM1QzkwNUUwQTQyOEI3RjgyMTY3NTAwRjQ4MzE0NEM1MzdGODkyQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm8GPPgQIk5E98/T1x4csI8A5+ xaVuBDiMmns+NPisTqZ77AKuBiDKYqTmGje+eH0/yvSGSg9KUcySZXB112Pn2mEc 4jlt63xW8qR+37X0qtiKudVUWh2Y2T2W+Z9+t4tUMV2S1D+e+iNeKdAOe2cw4UzO CeAjXNOlVo4XQS1V2AJoFHcHUrS2JnDjX0qUG6iWPTBs1J1ljQeb6ZZJv/7dqqI2 px3rh7P/N+3s7GSrSysxR3ug5Dfr3Rhuk/+0B8r31+Wh8E8HfvNALC3FVq71CNN4 in+kctQY0YN0/k3T9DlHRkjvoAQNeZuMaE9Kz8V04DFpn8R+f4Efb5zHZCG3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxckF4KQot/ghZ1APSDFExTf4kqcwHwYDVR0j BBgwFoAUpq/WWsZtTrcCeu1fiY6OzYB59GIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA4ODY4MDUtM2I4NS00YzViLTliNmEtZDYyYWQ1NmE2NmFjLzAvQTZBRkQ2NUFD NjZENEVCNzAyN0FFRDVGODk4RThFQ0Q4MDc5RjQ2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNkFGRDY1QUM2NkQ0RUI3MDI3QUVENUY4OThFOEVDRDgwNzlG NDYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA4ODY4MDUtM2I4NS00YzViLTli NmEtZDYyYWQ1NmE2NmFjLzAvQTZBRkQ2NUFDNjZENEVCNzAyN0FFRDVGODk4RThF Q0Q4MDc5RjQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwazsuzV0rM0NLKhORn2ZZtFhmMk31lCUHT 8qLjrKVpYvYHD+wLLu/Wm5Czhw/qammM/UfXu+YxqdKglKJkC1ERRgZVBbywRhTx Rrd7AbAqOUJfd/l3nae/y3m/FVA0YwWzoKlPEsI8ZxuiV4zHnHN0qPWM+HvqAm7V utKNO8nA1wzBjWP+DOMuZSQ/CEfNCEQUmf16gQHe1YwPB/pFgEh9YWzZcVWmmqL3 3G58HiMCz7Nu/yu3uTDFAviDjqRA2acXx26EtgJMM2CY7pqJMup1Sw3H+s6ZEzWw BGMM+ybnGjYdB5UrGHCuN93LfdSGTg1C2Txt94drlxu2LNqc2z4= -----END CERTIFICATE-----Generated at Thu Sep 17 11:04:19 2026 by rpki-client