$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft File: A1AE56A4554AF816FB70C7D151B60B95E8688866.mft (raw, json) Hash identifier: 0Y9l08PzQrmNMsdwAwSQ9imFQ3myW2MlqHUupHW7BGc= Subject key identifier: A5:A0:CD:AA:DE:B1:5D:70:67:B0:55:1C:7E:AC:D5:42:DF:A7:2D:57 Authority key identifier: A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66 Certificate issuer: /CN=A1AE56A4554AF816FB70C7D151B60B95E8688866 Certificate serial: 7FD59F0485499753698C74A47D48CC71B4D05DB8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft Manifest number: A3 Signing time: Tue 01 Sep 2026 00:19:42 +0000 Manifest this update: Tue 01 Sep 2026 00:14:42 +0000 Manifest next update: Wed 02 Sep 2026 02:49:42 +0000 Files and hashes: 1: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: He41ch40XucuK+aPHGiuSTFi+Lk7tn/MpsAXY1hRpGE=) 2: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: GHM2a/obSFnIX4sm3ZBeoTgx7NT/IcpWeeqALQWuCgk=) 3: A1AE56A4554AF816FB70C7D151B60B95E8688866.crl (hash: zc87hVHutbQabL0/JDjq+EL4mYaCPmTmtFDUA4drQ2Q=) 4: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 9v0FNIRz7U0Do3bFO3VnUQP4Wx+ba0tNG1r1AH/OeqY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 02:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d5:9f:04:85:49:97:53:69:8c:74:a4:7d:48:cc:71:b4:d0:5d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1AE56A4554AF816FB70C7D151B60B95E8688866 Validity Not Before: Sep 1 00:14:42 2026 GMT Not After : Sep 2 02:49:42 2026 GMT Subject: CN=A5A0CDAADEB15D7067B0551C7EACD542DFA72D57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9b:00:e4:b1:56:a8:7d:03:d7:6c:43:ed:93: 82:28:ee:37:99:fc:f5:83:36:e4:50:b7:62:7e:9a: 7a:05:37:e7:b5:e7:a4:a6:96:d7:2c:1e:41:ff:3b: 01:b4:96:77:4f:ab:b3:cb:b4:8e:5d:8d:0f:26:21: a0:be:ed:f4:cd:1d:98:3c:eb:55:fd:69:6f:95:4f: 07:5c:7c:8a:4d:30:b8:94:4b:e2:04:be:d5:07:af: 85:1b:bf:73:18:dd:4a:f9:77:d8:7e:f7:f0:10:48: e3:12:b4:68:95:80:49:8f:3c:29:8e:2e:12:86:15: 46:2b:a2:80:8b:e3:a3:57:e4:96:60:04:7e:0a:07: cf:88:7c:0c:fe:57:3a:6b:27:b5:41:20:c3:95:10: f5:79:f7:53:af:b5:5d:f4:e8:68:a1:a6:6c:83:43: a2:55:3f:79:7e:e4:63:f4:40:7a:07:20:e2:8f:d9: 5c:eb:2a:c0:c8:33:ba:42:21:df:35:bf:4a:3c:53: b3:bb:eb:53:d3:89:a0:06:c3:23:02:00:ce:2a:9b: 5d:2b:c2:08:04:95:d9:8f:74:e4:91:ff:0b:37:cf: 04:64:16:b0:5b:8c:19:03:7c:9c:3c:ab:43:4f:4b: 24:46:15:6e:e4:a7:ea:61:12:5c:14:3f:f0:6e:91: 40:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A0:CD:AA:DE:B1:5D:70:67:B0:55:1C:7E:AC:D5:42:DF:A7:2D:57 X509v3 Authority Key Identifier: keyid:A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:9a:08:99:c2:c9:13:e9:44:6b:d4:69:f9:2d:0d:d8:47:41: 28:a4:1f:df:1d:01:b0:c3:1b:99:6f:33:62:ec:d7:fb:53:52: c7:a9:98:cd:cb:10:51:d3:ad:b2:3c:7e:42:63:28:78:3c:54: 6f:d0:c9:71:09:91:14:cc:26:52:78:11:56:41:39:9f:db:42: 87:fb:61:37:74:dd:b6:00:e9:8c:c7:60:07:52:47:0c:8b:16: c5:96:e3:ad:98:bc:b3:28:55:58:61:ef:16:0a:98:71:7d:cb: 44:98:5c:35:3e:10:5c:df:6e:58:0b:1b:da:be:4c:3c:f0:66: 7f:f8:8d:26:12:e4:40:8d:65:b9:0c:e8:4d:89:f9:23:db:f1: 13:d0:f5:31:48:31:2b:9c:ee:0a:28:7e:a0:c7:76:71:c7:2c: ef:f5:89:59:ab:e5:37:3b:a7:82:4c:92:7c:5a:58:65:45:9f: 9b:ac:5d:84:cd:b4:7b:86:86:33:93:97:c1:7d:45:05:e5:12: 22:ae:af:6b:ed:17:e3:3c:95:e0:09:ee:1f:1d:00:9f:b4:94: 12:17:d8:11:5b:dd:c4:94:86:8d:f2:2c:32:bd:59:09:13:00: e7:11:a0:c7:aa:7b:ed:3b:fb:1d:0e:97:1d:18:99:aa:53:3b: 3b:65:fe:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf9WfBIVJl1NpjHSkfUjMcbTQXbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFBRTU2QTQ1NTRBRjgxNkZCNzBDN0QxNTFCNjBCOTVF ODY4ODg2NjAeFw0yNjA5MDEwMDE0NDJaFw0yNjA5MDIwMjQ5NDJaMDMxMTAvBgNV BAMTKEE1QTBDREFBREVCMTVENzA2N0IwNTUxQzdFQUNENTQyREZBNzJENTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOmwDksVaofQPXbEPtk4Io7jeZ /PWDNuRQt2J+mnoFN+e156SmltcsHkH/OwG0lndPq7PLtI5djQ8mIaC+7fTNHZg8 61X9aW+VTwdcfIpNMLiUS+IEvtUHr4Ubv3MY3Ur5d9h+9/AQSOMStGiVgEmPPCmO LhKGFUYrooCL46NX5JZgBH4KB8+IfAz+VzprJ7VBIMOVEPV591OvtV306GihpmyD Q6JVP3l+5GP0QHoHIOKP2VzrKsDIM7pCId81v0o8U7O761PTiaAGwyMCAM4qm10r wggEldmPdOSR/ws3zwRkFrBbjBkDfJw8q0NPSyRGFW7kp+phElwUP/BukUCrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpaDNqt6xXXBnsFUcfqzVQt+nLVcwHwYDVR0j BBgwFoAUoa5WpFVK+Bb7cMfRUbYLlehoiGYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I1ZDcyZjMtMmRiMi00YmNjLTlmNzctZDE0NDJiNjMyZDA0LzAvQTFBRTU2QTQ1 NTRBRjgxNkZCNzBDN0QxNTFCNjBCOTVFODY4ODg2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUFFNTZBNDU1NEFGODE2RkI3MEM3RDE1MUI2MEI5NUU4Njg4 ODY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvQTFBRTU2QTQ1NTRBRjgxNkZCNzBDN0QxNTFCNjBC OTVFODY4ODg2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImaCJnCyRPpRGvUafktDdhHQSikH98dAbDD G5lvM2Ls1/tTUsepmM3LEFHTrbI8fkJjKHg8VG/QyXEJkRTMJlJ4EVZBOZ/bQof7 YTd03bYA6YzHYAdSRwyLFsWW462YvLMoVVhh7xYKmHF9y0SYXDU+EFzfblgLG9q+ TDzwZn/4jSYS5ECNZbkM6E2J+SPb8RPQ9TFIMSuc7goofqDHdnHHLO/1iVmr5Tc7 p4JMknxaWGVFn5usXYTNtHuGhjOTl8F9RQXlEiKur2vtF+M8leAJ7h8dAJ+0lBIX 2BFb3cSUho3yLDK9WQkTAOcRoMeqe+07+x0Olx0YmapTOztl/nw= -----END CERTIFICATE-----Generated at Tue Sep 1 05:10:20 2026 by rpki-client