$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft File: A008821941A61F29770FC73A584B71178BCAE916.mft (raw, json) Hash identifier: JfvqwIMlbGHz4w+gbEfctQZyc3IxqFURcuvwskFwfRs= Subject key identifier: EC:2C:65:2F:EC:57:9A:64:EA:9F:F7:18:07:EF:FE:41:A6:D5:1C:5B Authority key identifier: A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16 Certificate issuer: /CN=A008821941A61F29770FC73A584B71178BCAE916 Certificate serial: 4D28988B7194210F5AE6D1E68FA27139C18887B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft Manifest number: DB Signing time: Mon 12 Oct 2026 09:18:14 +0000 Manifest this update: Mon 12 Oct 2026 09:13:14 +0000 Manifest next update: Tue 13 Oct 2026 12:10:14 +0000 Files and hashes: 1: 3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (hash: MEn9rSCA+X2qT8GUKSJ4R7eRC44YahAnX3SQmIywZAg=) 2: 3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (hash: IsFb+2IB3+NAOmMQ4bANX3K12nM98beEkYNtdgmBcMk=) 3: A008821941A61F29770FC73A584B71178BCAE916.crl (hash: k4+i819HpQzin7dwsPTetA/5NEqj6Gq/FAXbNr0pqaM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 12:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:28:98:8b:71:94:21:0f:5a:e6:d1:e6:8f:a2:71:39:c1:88:87:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A008821941A61F29770FC73A584B71178BCAE916 Validity Not Before: Oct 12 09:13:14 2026 GMT Not After : Oct 13 12:10:14 2026 GMT Subject: CN=EC2C652FEC579A64EA9FF71807EFFE41A6D51C5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ad:8b:d5:92:bf:d1:0a:d7:b5:a4:1d:f8:d9: 55:67:93:a9:87:b3:1b:e1:e9:9d:8e:00:83:6b:b9: 69:c0:8c:7b:05:c4:3e:47:64:39:21:5d:6f:6b:45: cc:14:73:ba:d8:1e:e2:b3:99:48:8c:23:56:c1:4e: 8c:19:86:38:7b:ca:5b:29:74:9a:e1:5c:1e:72:3d: 9a:e4:d2:c5:38:55:0d:2e:2e:88:cd:98:70:e0:c1: 63:b8:ad:23:22:74:46:16:2f:2a:26:4e:15:44:32: d7:7b:ea:5b:d5:41:3a:59:ce:c1:0e:e6:19:f8:3b: 48:36:f8:cc:38:b7:b1:69:46:b2:77:a0:02:a6:06: 7e:35:a7:2d:dd:a8:f5:7f:68:f1:72:7b:c3:d4:da: 05:58:6b:34:63:61:a8:60:6a:73:e5:89:66:80:01: 23:74:2b:96:02:f4:c7:9e:48:3d:ad:88:fb:df:13: 4c:b6:f6:79:02:9a:de:40:16:61:6e:38:0e:fd:53: 1d:83:dc:17:b6:1a:a9:c9:ae:2c:0e:7c:32:7f:d1: ca:c3:64:4d:6d:fe:97:b0:30:d5:40:94:c3:f8:59: 34:53:20:88:c6:0e:3e:07:55:c8:ef:cc:97:c4:56: 01:75:7c:d8:9f:fd:e9:45:a4:1d:a6:69:af:8c:49: 77:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2C:65:2F:EC:57:9A:64:EA:9F:F7:18:07:EF:FE:41:A6:D5:1C:5B X509v3 Authority Key Identifier: keyid:A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:65:56:29:88:65:fb:c1:fb:3d:35:45:6c:ac:08:b3:3c:25: fc:91:e6:37:b3:af:21:b3:23:3e:61:58:3b:e7:a8:a8:88:aa: 71:58:d8:34:99:67:b0:ba:12:df:bc:2a:98:05:10:7e:57:9b: 32:c6:7c:90:ac:de:3c:1e:49:46:9b:25:c2:3b:ce:f1:49:7f: 17:7d:56:9a:e9:1b:e8:df:7e:bc:a9:90:51:21:3a:43:ac:91: 50:03:cb:60:66:28:c2:41:f0:ee:cd:a0:6b:25:e1:4a:4e:6d: 53:6e:5e:79:27:dc:6a:57:a1:25:4f:c3:10:71:d1:4d:7b:94: 4e:25:4e:bf:bb:94:88:c4:d9:01:b6:06:c8:b0:51:b5:57:28: 0b:d1:bb:88:10:9c:5b:29:56:8a:55:37:61:fe:0c:37:5c:f3: 08:d3:1a:7e:b5:2c:bb:da:3f:3d:68:c8:c5:6b:4c:80:49:d4: 19:21:cf:cd:54:fb:5e:20:8a:28:80:ae:c8:a0:63:76:c7:66: e9:d2:96:b4:a4:b3:62:20:91:a2:16:ae:67:ba:fa:96:b6:35: 9a:fe:03:07:6f:a8:4d:b6:fe:e0:eb:f7:21:6c:7c:88:19:15: e5:73:0d:87:e7:19:da:92:bf:4c:cc:0d:47:c7:8f:69:7e:a0: c3:8b:e8:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTSiYi3GUIQ9a5tHmj6JxOcGIh7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwODgyMTk0MUE2MUYyOTc3MEZDNzNBNTg0QjcxMTc4 QkNBRTkxNjAeFw0yNjEwMTIwOTEzMTRaFw0yNjEwMTMxMjEwMTRaMDMxMTAvBgNV BAMTKEVDMkM2NTJGRUM1NzlBNjRFQTlGRjcxODA3RUZGRTQxQTZENTFDNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHrYvVkr/RCte1pB342VVnk6mH sxvh6Z2OAINruWnAjHsFxD5HZDkhXW9rRcwUc7rYHuKzmUiMI1bBTowZhjh7ylsp dJrhXB5yPZrk0sU4VQ0uLojNmHDgwWO4rSMidEYWLyomThVEMtd76lvVQTpZzsEO 5hn4O0g2+Mw4t7FpRrJ3oAKmBn41py3dqPV/aPFye8PU2gVYazRjYahganPliWaA ASN0K5YC9MeeSD2tiPvfE0y29nkCmt5AFmFuOA79Ux2D3Be2GqnJriwOfDJ/0crD ZE1t/pewMNVAlMP4WTRTIIjGDj4HVcjvzJfEVgF1fNif/elFpB2maa+MSXe/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7CxlL+xXmmTqn/cYB+/+QabVHFswHwYDVR0j BBgwFoAUoAiCGUGmHyl3D8c6WEtxF4vK6RYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmFhZDZhM2YtNmNhMC00NjY5LTk4ZjctNmYzNDgzN2ZhYTYyLzAvQTAwODgyMTk0 MUE2MUYyOTc3MEZDNzNBNTg0QjcxMTc4QkNBRTkxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDA4ODIxOTQxQTYxRjI5NzcwRkM3M0E1ODRCNzExNzhCQ0FF OTE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmFhZDZhM2YtNmNhMC00NjY5LTk4 ZjctNmYzNDgzN2ZhYTYyLzAvQTAwODgyMTk0MUE2MUYyOTc3MEZDNzNBNTg0Qjcx MTc4QkNBRTkxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJllVimIZfvB+z01RWysCLM8JfyR5jezryGz Iz5hWDvnqKiIqnFY2DSZZ7C6Et+8KpgFEH5XmzLGfJCs3jweSUabJcI7zvFJfxd9 VprpG+jffrypkFEhOkOskVADy2BmKMJB8O7NoGsl4UpObVNuXnkn3GpXoSVPwxBx 0U17lE4lTr+7lIjE2QG2BsiwUbVXKAvRu4gQnFspVopVN2H+DDdc8wjTGn61LLva Pz1oyMVrTIBJ1Bkhz81U+14giiiArsigY3bHZunSlrSks2IgkaIWrme6+pa2NZr+ AwdvqE22/uDr9yFsfIgZFeVzDYfnGdqSv0zMDUfHj2l+oMOL6CY= -----END CERTIFICATE-----Generated at Tue Oct 13 04:08:53 2026 by rpki-client