$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft File: A4249B719E5F988286AD3B4164C4E77F434FF948.mft (raw, json) Hash identifier: du8G5QIWqlmSLtP822tlqHq5LYaeW47xx6tNOegA6Po= Subject key identifier: A0:73:18:A5:3C:2E:6D:AD:03:8C:12:09:5D:2D:70:18:68:23:6B:FE Authority key identifier: A4:24:9B:71:9E:5F:98:82:86:AD:3B:41:64:C4:E7:7F:43:4F:F9:48 Certificate issuer: /CN=A4249B719E5F988286AD3B4164C4E77F434FF948 Certificate serial: 2EF8CB3455EF34F68C9B6859B8839693CAB7428A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 22:52:07 +0000 Manifest this update: Wed 16 Sep 2026 22:47:07 +0000 Manifest next update: Fri 18 Sep 2026 00:12:07 +0000 Files and hashes: 1: 3136302e3139312e3233342e302f32342d3234203d3e20313533343932.roa (hash: /8ZMrBAQoa3qQ8hBZzRb+TXTbN8qY8Wvj8VBQo+giW0=) 2: A4249B719E5F988286AD3B4164C4E77F434FF948.crl (hash: CRLIdJbSAaehDsHTSs8J9ZPSQS22yKPyZADVEHQ5sow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.crl rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f8:cb:34:55:ef:34:f6:8c:9b:68:59:b8:83:96:93:ca:b7:42:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4249B719E5F988286AD3B4164C4E77F434FF948 Validity Not Before: Sep 16 22:47:07 2026 GMT Not After : Sep 18 00:12:07 2026 GMT Subject: CN=A07318A53C2E6DAD038C12095D2D701868236BFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fc:83:12:80:3f:cc:85:5d:8b:10:93:0a:3e: 30:54:bb:44:cd:31:35:4c:18:82:90:4e:f2:48:b6: a4:df:82:e0:e8:ef:64:c7:55:56:73:7d:11:86:ff: 2d:fa:6b:41:5b:55:3b:03:6e:e2:d7:9b:6c:c6:04: 19:ab:74:63:90:e5:79:b9:c0:32:bb:fd:7e:f2:12: 89:98:87:e7:f7:dc:44:27:8c:80:cf:87:75:38:a5: 66:9c:04:8e:c7:01:52:dc:1f:9b:fa:a9:ce:37:88: bc:38:d4:15:01:bc:60:89:35:7d:10:2c:d2:35:45: 10:ba:9a:9b:9e:ca:03:d6:f6:cd:9c:d2:20:05:bd: e9:ec:69:d2:aa:0b:61:f5:c2:49:a5:26:fe:ab:56: 6f:e4:9e:64:82:5d:d3:be:14:4e:d4:71:b1:23:be: f3:de:89:d9:26:04:4a:83:c3:2f:1a:df:7c:9a:99: 0b:b5:b4:a3:36:25:6f:bd:2f:fb:35:61:98:e5:f8: 73:d3:9a:d4:48:51:5c:37:62:86:eb:66:0d:47:68: 5a:2a:36:f1:ff:9d:b4:38:38:fc:6a:ad:98:81:bf: 93:b9:be:86:ad:8d:05:81:47:ae:ee:28:b0:4b:21: 64:eb:c5:35:d3:b5:6c:35:40:db:ca:9a:ef:a1:18: 30:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:73:18:A5:3C:2E:6D:AD:03:8C:12:09:5D:2D:70:18:68:23:6B:FE X509v3 Authority Key Identifier: keyid:A4:24:9B:71:9E:5F:98:82:86:AD:3B:41:64:C4:E7:7F:43:4F:F9:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:98:a8:fd:a1:e0:06:08:44:d8:06:e6:dd:68:77:b9:1a:96: 48:4a:5d:43:de:28:34:1c:bd:ca:e8:0c:15:a1:46:df:f5:38: 76:da:8f:75:ce:af:1e:0d:e8:c0:3b:de:c9:48:85:c3:d4:08: 97:e8:2b:8d:36:e0:b7:58:9d:f8:bf:c1:71:97:f4:18:69:7d: cc:4c:c3:e9:85:82:9f:c1:11:cd:f4:1d:15:1f:fb:c1:92:e2: 16:77:b1:81:0d:c7:58:90:04:2c:31:d5:45:be:72:7e:ab:ec: ef:7c:50:3f:c0:9e:49:c9:69:c2:de:7e:a4:d2:c2:20:71:a0: dc:bc:79:80:9a:43:87:d4:d2:3f:c1:5d:bc:bc:bc:98:59:93: f8:b8:c6:f9:5e:31:da:a9:5a:ec:a7:85:0e:fc:b4:7c:59:d2: a7:b8:3b:b6:d4:18:6d:cc:61:14:61:7e:68:1d:2e:78:8e:9d: ce:8c:7e:08:ae:c9:f5:41:29:da:4a:0d:0e:98:68:05:ec:d4: 43:64:58:ce:38:c7:18:f7:b7:b2:3f:4b:41:ef:4d:bd:8a:8c: de:3b:b6:74:11:0f:cc:24:55:d0:4e:c1:fc:ac:1b:dc:c1:0b: e4:0f:4f:e9:b1:5b:6b:d4:93:15:6a:02:17:ee:90:28:fb:82: 4d:be:df:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULvjLNFXvNPaMm2hZuIOWk8q3QoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyNDlCNzE5RTVGOTg4Mjg2QUQzQjQxNjRDNEU3N0Y0 MzRGRjk0ODAeFw0yNjA5MTYyMjQ3MDdaFw0yNjA5MTgwMDEyMDdaMDMxMTAvBgNV BAMTKEEwNzMxOEE1M0MyRTZEQUQwMzhDMTIwOTVEMkQ3MDE4NjgyMzZCRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY/IMSgD/MhV2LEJMKPjBUu0TN MTVMGIKQTvJItqTfguDo72THVVZzfRGG/y36a0FbVTsDbuLXm2zGBBmrdGOQ5Xm5 wDK7/X7yEomYh+f33EQnjIDPh3U4pWacBI7HAVLcH5v6qc43iLw41BUBvGCJNX0Q LNI1RRC6mpueygPW9s2c0iAFvensadKqC2H1wkmlJv6rVm/knmSCXdO+FE7UcbEj vvPeidkmBEqDwy8a33yamQu1tKM2JW+9L/s1YZjl+HPTmtRIUVw3YobrZg1HaFoq NvH/nbQ4OPxqrZiBv5O5voatjQWBR67uKLBLIWTrxTXTtWw1QNvKmu+hGDBtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoHMYpTwuba0DjBIJXS1wGGgja/4wHwYDVR0j BBgwFoAUpCSbcZ5fmIKGrTtBZMTnf0NP+UgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWJjYzYyYWUtMjBjOC00OTc0LWFhZTktYjEwOGRmOGUyZjU5LzAvQTQyNDlCNzE5 RTVGOTg4Mjg2QUQzQjQxNjRDNEU3N0Y0MzRGRjk0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNDI0OUI3MTlFNUY5ODgyODZBRDNCNDE2NEM0RTc3RjQzNEZG OTQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWJjYzYyYWUtMjBjOC00OTc0LWFh ZTktYjEwOGRmOGUyZjU5LzAvQTQyNDlCNzE5RTVGOTg4Mjg2QUQzQjQxNjRDNEU3 N0Y0MzRGRjk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+YqP2h4AYIRNgG5t1od7kalkhKXUPeKDQc vcroDBWhRt/1OHbaj3XOrx4N6MA73slIhcPUCJfoK4024LdYnfi/wXGX9BhpfcxM w+mFgp/BEc30HRUf+8GS4hZ3sYENx1iQBCwx1UW+cn6r7O98UD/AnknJacLefqTS wiBxoNy8eYCaQ4fU0j/BXby8vJhZk/i4xvleMdqpWuynhQ78tHxZ0qe4O7bUGG3M YRRhfmgdLniOnc6MfgiuyfVBKdpKDQ6YaAXs1ENkWM44xxj3t7I/S0HvTb2KjN47 tnQRD8wkVdBOwfysG9zBC+QPT+mxW2vUkxVqAhfukCj7gk2+32U= -----END CERTIFICATE-----Generated at Thu Sep 17 15:47:28 2026 by rpki-client