$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft File: A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft (raw, json) Hash identifier: QkoiY14MqhIKozC6b3e2994YsN8Qyei1pYlCl0Ykb+w= Subject key identifier: 28:80:F9:A2:BC:55:74:D6:60:15:1D:AE:62:FB:38:D4:31:F0:39:16 Authority key identifier: A9:D5:86:A8:2C:B1:66:90:2F:1D:1B:2C:AE:5E:B4:20:F0:8D:23:D0 Certificate issuer: /CN=A9D586A82CB166902F1D1B2CAE5EB420F08D23D0 Certificate serial: 6E0CD8344BAB1FB177DC9BD8331B6D72367F470A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 10:36:39 +0000 Manifest this update: Thu 17 Sep 2026 10:31:39 +0000 Manifest next update: Fri 18 Sep 2026 14:02:39 +0000 Files and hashes: 1: A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl (hash: 28xZDXtHmiCeQr78tg/yFyGhq+Oc29hWClpBTEFmIHc=) 2: 3130332e3135302e3135392e302f32342d3234203d3e20313430343331.roa (hash: hcBwS6YzikTq1s/P8jlWWii/vuvMdnJI6Od19w2iLTM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:0c:d8:34:4b:ab:1f:b1:77:dc:9b:d8:33:1b:6d:72:36:7f:47:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D586A82CB166902F1D1B2CAE5EB420F08D23D0 Validity Not Before: Sep 17 10:31:39 2026 GMT Not After : Sep 18 14:02:39 2026 GMT Subject: CN=2880F9A2BC5574D660151DAE62FB38D431F03916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:72:1e:b3:88:61:3e:00:53:e3:3e:a2:0d:f1: 04:ed:ac:d5:3e:21:a1:19:09:df:a2:e0:e1:52:53: d2:f0:85:69:a1:f2:7d:dd:03:71:54:59:c3:ea:4c: 7b:15:41:c1:e9:17:bd:18:79:10:5f:e3:25:d9:78: 17:21:e3:6f:0e:b8:77:05:ba:75:6d:60:0a:37:aa: 47:05:75:34:90:cd:9d:96:7e:8b:35:38:10:8d:c3: d6:d4:0f:ba:75:88:59:27:16:23:90:63:00:19:89: a4:fd:0b:92:86:1b:ca:79:e2:10:12:e5:51:aa:47: bd:6c:da:32:52:5a:d2:60:4c:cb:4d:82:d9:99:f1: 24:39:c9:f5:ea:63:66:0f:76:6c:86:7d:86:d5:82: b1:30:d7:16:d3:f6:33:64:91:b5:a8:f9:ae:5a:89: d4:f5:8e:35:0e:e3:02:e5:b0:f9:6b:f1:58:6c:a3: 37:71:4a:8c:53:0b:f8:df:be:8b:08:4b:6c:42:0c: 9c:7c:d1:f9:d4:03:35:82:eb:ca:8e:26:ad:01:03: 7c:78:40:80:dd:b4:23:b5:8c:4a:64:54:67:10:24: 4c:c8:9c:f8:bb:1b:ca:9f:0f:2b:8c:69:ed:5a:09: 85:c7:89:63:00:8f:d6:70:9a:8a:67:cf:74:93:72: 8b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:80:F9:A2:BC:55:74:D6:60:15:1D:AE:62:FB:38:D4:31:F0:39:16 X509v3 Authority Key Identifier: keyid:A9:D5:86:A8:2C:B1:66:90:2F:1D:1B:2C:AE:5E:B4:20:F0:8D:23:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:fb:16:0d:30:85:4c:25:f5:a6:e2:ed:58:c6:ca:4f:93:75: 1b:93:a9:a4:ee:df:f1:40:24:d5:e3:0f:db:48:80:50:3a:81: 2e:9c:f7:d2:b0:3d:e8:5d:3e:3c:a6:4a:2f:8f:c9:23:c9:f4: f1:3b:fb:6c:74:ea:68:0e:db:88:83:82:de:86:17:50:50:fe: e4:f5:b4:48:9c:25:69:31:63:49:a9:3f:61:39:36:c3:71:9a: 23:f4:f7:5c:35:93:cc:e9:3d:d8:ef:bf:7a:46:05:14:eb:cd: f0:49:15:8f:d1:bc:32:49:7d:f5:eb:0e:9a:dc:33:e5:80:1e: 55:54:5f:18:ac:1f:39:61:0b:e1:90:3d:7f:76:b4:e1:35:e9: 8b:72:a5:13:3d:5e:96:81:9c:95:36:97:9b:5c:70:cb:43:42: 22:95:77:ad:8e:77:43:ca:93:02:e7:73:21:05:06:6f:87:22: 59:c1:8c:1e:0a:7c:d3:e1:35:60:62:c8:aa:0c:19:1e:b6:ca: 8c:7d:45:94:90:04:db:92:ad:7f:ec:bb:da:c6:17:59:8a:59: 31:11:6a:bf:53:fe:cd:09:25:6a:6f:fa:10:08:f7:5d:c9:f3: a5:4a:08:7e:73:7e:c9:47:59:29:d6:67:b5:2c:74:a1:21:63: db:be:b1:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbgzYNEurH7F33JvYMxttcjZ/RwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENTg2QTgyQ0IxNjY5MDJGMUQxQjJDQUU1RUI0MjBG MDhEMjNEMDAeFw0yNjA5MTcxMDMxMzlaFw0yNjA5MTgxNDAyMzlaMDMxMTAvBgNV BAMTKDI4ODBGOUEyQkM1NTc0RDY2MDE1MURBRTYyRkIzOEQ0MzFGMDM5MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzch6ziGE+AFPjPqIN8QTtrNU+ IaEZCd+i4OFSU9LwhWmh8n3dA3FUWcPqTHsVQcHpF70YeRBf4yXZeBch428OuHcF unVtYAo3qkcFdTSQzZ2Wfos1OBCNw9bUD7p1iFknFiOQYwAZiaT9C5KGG8p54hAS 5VGqR71s2jJSWtJgTMtNgtmZ8SQ5yfXqY2YPdmyGfYbVgrEw1xbT9jNkkbWo+a5a idT1jjUO4wLlsPlr8VhsozdxSoxTC/jfvosIS2xCDJx80fnUAzWC68qOJq0BA3x4 QIDdtCO1jEpkVGcQJEzInPi7G8qfDyuMae1aCYXHiWMAj9Zwmopnz3STcotjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKID5orxVdNZgFR2uYvs41DHwORYwHwYDVR0j BBgwFoAUqdWGqCyxZpAvHRssrl60IPCNI9AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODE2NWU0ODEtNWE3OS00ODY4LWE0ZTQtZmFjZmQ5MjJkODEzLzAvQTlENTg2QTgy Q0IxNjY5MDJGMUQxQjJDQUU1RUI0MjBGMDhEMjNEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOUQ1ODZBODJDQjE2NjkwMkYxRDFCMkNBRTVFQjQyMEYwOEQy M0QwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODE2NWU0ODEtNWE3OS00ODY4LWE0 ZTQtZmFjZmQ5MjJkODEzLzAvQTlENTg2QTgyQ0IxNjY5MDJGMUQxQjJDQUU1RUI0 MjBGMDhEMjNEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGj7Fg0whUwl9abi7VjGyk+TdRuTqaTu3/FA JNXjD9tIgFA6gS6c99KwPehdPjymSi+PySPJ9PE7+2x06mgO24iDgt6GF1BQ/uT1 tEicJWkxY0mpP2E5NsNxmiP091w1k8zpPdjvv3pGBRTrzfBJFY/RvDJJffXrDprc M+WAHlVUXxisHzlhC+GQPX92tOE16YtypRM9XpaBnJU2l5tccMtDQiKVd62Od0PK kwLncyEFBm+HIlnBjB4KfNPhNWBiyKoMGR62yox9RZSQBNuSrX/su9rGF1mKWTER ar9T/s0JJWpv+hAI913J86VKCH5zfslHWSnWZ7UsdKEhY9u+sfc= -----END CERTIFICATE-----Generated at Thu Sep 17 13:51:38 2026 by rpki-client