$ rpki-client -vvf rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft File: A008821941A61F29770FC73A584B71178BCAE916.mft (raw, json) Hash identifier: 6mtQXbX0d2czK0ag/psYT0ghv1nLXVvezVIuL4S+ySU= Subject key identifier: 26:0E:83:2A:23:66:8C:A6:77:18:F0:0F:22:D8:8D:16:62:15:A4:2E Authority key identifier: A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16 Certificate issuer: /CN=A008821941A61F29770FC73A584B71178BCAE916 Certificate serial: 361E4746ECE692DD7974EF2A4402B97DB48A8F67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft Manifest number: 05 Signing time: Tue 05 May 2026 06:34:52 +0000 Manifest this update: Tue 05 May 2026 06:29:52 +0000 Manifest next update: Wed 06 May 2026 08:37:52 +0000 Files and hashes: 1: 3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (hash: IsFb+2IB3+NAOmMQ4bANX3K12nM98beEkYNtdgmBcMk=) 2: A008821941A61F29770FC73A584B71178BCAE916.crl (hash: 9/ph2W5abHFOGtRdRJRE0fpwJHWeQVRqGTo7LDvn18Q=) 3: 3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (hash: MEn9rSCA+X2qT8GUKSJ4R7eRC44YahAnX3SQmIywZAg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 08:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:1e:47:46:ec:e6:92:dd:79:74:ef:2a:44:02:b9:7d:b4:8a:8f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A008821941A61F29770FC73A584B71178BCAE916 Validity Not Before: May 5 06:29:52 2026 GMT Not After : May 6 08:37:52 2026 GMT Subject: CN=260E832A23668CA67718F00F22D88D166215A42E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:87:b9:cb:66:8a:1c:3b:0f:f5:b9:63:4a:f4: fb:f5:4d:ed:f7:54:ad:7d:79:f7:56:2d:87:81:4a: cf:4f:39:08:db:70:4b:21:aa:7a:06:96:5d:c6:9e: 32:c4:46:a5:5d:5e:ce:01:fb:1d:04:e3:1e:b5:77: 44:27:ca:03:8c:f4:bf:af:95:65:32:b3:a3:ff:22: ce:60:4e:78:3f:12:58:f4:04:17:95:d9:aa:d4:e2: 5c:d3:ab:66:67:a6:7a:88:b3:84:a6:9d:8b:10:1a: f6:46:41:ce:4a:e4:3f:85:de:01:14:c0:36:ff:03: c6:87:06:f1:9c:e7:71:f0:43:a2:89:f2:a2:0f:7c: 78:63:a6:fe:ab:99:7e:0e:e3:4f:2c:58:9c:6a:15: 20:f2:15:0b:af:e8:bc:a5:79:66:8b:52:76:0f:36: e7:13:20:77:23:83:c6:8a:22:19:a2:75:b8:b6:cb: 2d:b2:1f:f6:08:c7:90:a2:c2:60:e2:e5:23:96:4f: 4e:f3:bd:bb:77:80:f8:18:93:12:53:b4:6a:c3:ff: 61:5a:22:0f:52:34:f6:d5:dd:9d:1f:de:43:b2:b0: 00:f6:fa:3f:d5:87:96:ca:46:01:e1:72:cb:2d:e6: 10:73:3d:f0:ff:13:4e:eb:3b:3c:7b:ae:33:85:3e: 91:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0E:83:2A:23:66:8C:A6:77:18:F0:0F:22:D8:8D:16:62:15:A4:2E X509v3 Authority Key Identifier: keyid:A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:76:1b:b1:f4:cb:ef:dc:48:f6:01:26:01:a5:a1:20:3f:e1: 23:f8:4a:36:e1:a6:9f:f8:51:49:ae:fb:26:5b:67:67:f8:f3: c1:c3:c1:d4:60:bd:58:35:da:91:68:7a:01:bf:b8:28:44:69: 5c:dc:b7:3c:c0:a9:96:e9:33:5e:9e:f0:82:70:8d:fb:b5:32: a3:a4:d6:e8:d8:c9:29:54:90:58:f5:63:c7:4a:24:85:4e:a4: e7:3f:0a:a0:93:c0:ad:a6:ae:bc:78:74:20:72:e5:80:e9:ba: 4c:95:00:7b:1a:0e:b7:46:0c:7e:7a:f5:c1:97:4d:f3:a4:20: 16:68:40:73:a1:8b:d8:14:aa:be:0d:ff:9c:e9:ca:6b:b1:1c: 5e:aa:e9:76:f6:10:71:64:96:76:cf:fd:75:c2:fa:27:83:74: 68:c5:48:e3:0e:25:c9:66:95:36:97:a8:c3:8d:3e:f7:d4:84: 67:ac:67:41:c3:46:0d:cd:1c:7a:65:8f:5a:ef:a5:99:e5:fe: 5c:21:29:96:a8:f8:e9:7d:03:e1:94:03:d2:d6:57:d8:ad:73: 7a:90:6e:3d:60:ad:6b:e8:63:ee:61:89:20:0d:0c:ee:78:ca: 29:c5:2d:0a:b8:19:06:df:70:f3:2f:3d:ea:62:16:b0:a1:bc: 60:d8:82:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNh5HRuzmkt15dO8qRAK5fbSKj2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwODgyMTk0MUE2MUYyOTc3MEZDNzNBNTg0QjcxMTc4 QkNBRTkxNjAeFw0yNjA1MDUwNjI5NTJaFw0yNjA1MDYwODM3NTJaMDMxMTAvBgNV BAMTKDI2MEU4MzJBMjM2NjhDQTY3NzE4RjAwRjIyRDg4RDE2NjIxNUE0MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzh7nLZoocOw/1uWNK9Pv1Te33 VK19efdWLYeBSs9POQjbcEshqnoGll3GnjLERqVdXs4B+x0E4x61d0QnygOM9L+v lWUys6P/Is5gTng/Elj0BBeV2arU4lzTq2ZnpnqIs4SmnYsQGvZGQc5K5D+F3gEU wDb/A8aHBvGc53HwQ6KJ8qIPfHhjpv6rmX4O408sWJxqFSDyFQuv6LyleWaLUnYP NucTIHcjg8aKIhmidbi2yy2yH/YIx5CiwmDi5SOWT07zvbt3gPgYkxJTtGrD/2Fa Ig9SNPbV3Z0f3kOysAD2+j/Vh5bKRgHhcsst5hBzPfD/E07rOzx7rjOFPpHHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJg6DKiNmjKZ3GPAPItiNFmIVpC4wHwYDVR0j BBgwFoAUoAiCGUGmHyl3D8c6WEtxF4vK6RYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmFhZDZhM2YtNmNhMC00NjY5LTk4ZjctNmYzNDgzN2ZhYTYyLzAvQTAwODgyMTk0 MUE2MUYyOTc3MEZDNzNBNTg0QjcxMTc4QkNBRTkxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDA4ODIxOTQxQTYxRjI5NzcwRkM3M0E1ODRCNzExNzhCQ0FF OTE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmFhZDZhM2YtNmNhMC00NjY5LTk4 ZjctNmYzNDgzN2ZhYTYyLzAvQTAwODgyMTk0MUE2MUYyOTc3MEZDNzNBNTg0Qjcx MTc4QkNBRTkxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKd2G7H0y+/cSPYBJgGloSA/4SP4Sjbhpp/4 UUmu+yZbZ2f488HDwdRgvVg12pFoegG/uChEaVzctzzAqZbpM16e8IJwjfu1MqOk 1ujYySlUkFj1Y8dKJIVOpOc/CqCTwK2mrrx4dCBy5YDpukyVAHsaDrdGDH569cGX TfOkIBZoQHOhi9gUqr4N/5zpymuxHF6q6Xb2EHFklnbP/XXC+ieDdGjFSOMOJclm lTaXqMONPvfUhGesZ0HDRg3NHHplj1rvpZnl/lwhKZao+Ol9A+GUA9LWV9itc3qQ bj1grWvoY+5hiSANDO54yinFLQq4GQbfcPMvPepiFrChvGDYgjY= -----END CERTIFICATE-----Generated at Tue May 5 14:20:28 2026 by rpki-client