$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft File: A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft (raw, json) Hash identifier: B60+2VsksbrkmbnKgSChmJN0WH/MminlzVcYr30CVyE= Subject key identifier: 6A:97:4E:18:69:D1:59:95:35:3C:D2:0E:4D:F1:F2:F0:55:CB:8B:FE Authority key identifier: A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C Certificate issuer: /CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C Certificate serial: 386D48D608A039F5FCC5BE1E0E3D5A6622BF4303 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft Manifest number: EC Signing time: Sun 25 Oct 2026 10:14:18 +0000 Manifest this update: Sun 25 Oct 2026 10:09:18 +0000 Manifest next update: Mon 26 Oct 2026 12:11:18 +0000 Files and hashes: 1: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: Xz4v16/PuWF3xc6NRQS+cFH5cfyFs8wYPFxR2GtXMDw=) 2: A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl (hash: xJfg91RTWxZNVjDYnp35B+hNuY6EGXLCV2+RDcn/+Ao=) 3: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: oVthfsHvJfZFfAfPgVnP6RK4i2YXuHXT4TJi3carfJc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6d:48:d6:08:a0:39:f5:fc:c5:be:1e:0e:3d:5a:66:22:bf:43:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C Validity Not Before: Oct 25 10:09:18 2026 GMT Not After : Oct 26 12:11:18 2026 GMT Subject: CN=6A974E1869D15995353CD20E4DF1F2F055CB8BFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b4:46:e7:a6:83:c0:c2:4e:2e:c8:6b:eb:dd: 65:bd:da:08:37:5b:84:8e:3f:21:da:77:d1:5c:71: 01:e4:e4:99:d1:46:31:d1:b5:1b:14:89:e5:65:2b: 64:e2:2a:fe:fb:a1:ae:b6:cf:91:cb:ba:cc:61:bb: da:99:fb:f2:d4:de:a6:c4:14:89:37:7b:6c:0f:61: 99:0c:c0:91:b1:fb:d4:13:15:fd:29:c3:ca:b9:39: e1:cc:ae:91:7f:dd:cc:c1:eb:56:1a:49:fe:cf:5c: 2e:12:d5:77:e4:8d:fa:62:f8:93:ed:4e:f4:a2:ec: fe:39:57:7f:df:c1:f0:ca:bd:19:69:d2:77:4f:a1: 40:14:3c:da:8a:80:75:b8:ac:f3:cd:4c:db:4d:17: 82:bc:5c:45:87:e9:e0:18:8f:35:9e:83:90:e6:e9: 7a:a8:14:bd:59:9a:a3:cb:3f:74:c0:58:55:00:52: 98:f2:f0:cc:90:ae:21:c9:ec:a0:b1:9f:ab:18:52: 95:8e:17:c6:d7:14:7c:7f:c9:f4:2a:7b:dc:52:78: a1:59:02:09:91:17:5a:d6:7a:cd:7c:7d:ec:d9:92: c1:bd:97:fe:22:ca:ed:82:38:8d:6d:76:b4:6f:d1: b0:3b:7c:f2:e8:f9:e4:33:b8:6a:b4:23:e2:01:55: 42:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:97:4E:18:69:D1:59:95:35:3C:D2:0E:4D:F1:F2:F0:55:CB:8B:FE X509v3 Authority Key Identifier: keyid:A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:47:90:3e:5b:5e:5f:05:8c:c7:79:fe:d3:c7:cb:ef:2e:58: 64:2d:78:69:f8:22:d5:dd:18:d5:0c:ce:16:7a:45:0e:93:23: ad:7d:82:83:fb:6f:9e:56:77:8e:79:8c:dd:c9:0a:7b:52:fd: f6:be:8b:ae:4b:36:01:f1:b6:33:17:7c:80:1d:0e:92:95:db: 6e:21:ab:28:34:3c:cc:5b:81:92:59:2d:0f:f2:1a:f7:b4:d2: 42:5b:7c:57:81:e8:50:34:5f:1e:14:5f:12:c4:0f:0d:20:73: af:1c:21:30:13:01:b8:cf:b6:68:db:fe:b3:7d:fe:45:95:29: bc:23:7f:07:0b:e5:61:6e:c4:e0:56:f4:ce:52:79:d2:b2:5b: 55:89:4d:e2:43:5b:e9:82:a9:0f:45:be:5b:7a:80:77:7b:6d: ce:38:27:aa:81:a1:85:ab:89:e5:24:91:27:50:e5:12:95:d1: 1f:38:bb:d3:5d:78:31:85:9a:09:ee:5d:b7:eb:d8:3a:ee:87: 03:2d:fb:27:09:37:14:08:17:d8:27:58:8e:15:ad:80:5d:88: b6:79:32:ee:79:e5:9b:cb:37:dd:8b:fd:1c:70:a8:c3:a8:4f: c5:2d:77:80:96:17:c7:4b:60:cb:e7:fe:ab:a9:2d:6c:8e:ba: 3a:84:45:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOG1I1gigOfX8xb4eDj1aZiK/QwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBNUE1QzI2MDM5QUNGMjE2REYzRTVCMjg0MzQ1Njkz RUU4RjM0QzAeFw0yNjEwMjUxMDA5MThaFw0yNjEwMjYxMjExMThaMDMxMTAvBgNV BAMTKDZBOTc0RTE4NjlEMTU5OTUzNTNDRDIwRTRERjFGMkYwNTVDQjhCRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqtEbnpoPAwk4uyGvr3WW92gg3 W4SOPyHad9FccQHk5JnRRjHRtRsUieVlK2TiKv77oa62z5HLusxhu9qZ+/LU3qbE FIk3e2wPYZkMwJGx+9QTFf0pw8q5OeHMrpF/3czB61YaSf7PXC4S1Xfkjfpi+JPt TvSi7P45V3/fwfDKvRlp0ndPoUAUPNqKgHW4rPPNTNtNF4K8XEWH6eAYjzWeg5Dm 6XqoFL1ZmqPLP3TAWFUAUpjy8MyQriHJ7KCxn6sYUpWOF8bXFHx/yfQqe9xSeKFZ AgmRF1rWes18fezZksG9l/4iyu2COI1tdrRv0bA7fPLo+eQzuGq0I+IBVUIlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUapdOGGnRWZU1PNIOTfHy8FXLi/4wHwYDVR0j BBgwFoAUpKWlwmA5rPIW3z5bKENFaT7o80wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWQyZmE1MWUtM2ZkNC00NTIwLWIzNzUtMDllZWY1ZTBlNTEwLzAvQTRBNUE1QzI2 MDM5QUNGMjE2REYzRTVCMjg0MzQ1NjkzRUU4RjM0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNEE1QTVDMjYwMzlBQ0YyMTZERjNFNUIyODQzNDU2OTNFRThG MzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz NzUtMDllZWY1ZTBlNTEwLzAvQTRBNUE1QzI2MDM5QUNGMjE2REYzRTVCMjg0MzQ1 NjkzRUU4RjM0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9HkD5bXl8FjMd5/tPHy+8uWGQteGn4ItXd GNUMzhZ6RQ6TI619goP7b55Wd455jN3JCntS/fa+i65LNgHxtjMXfIAdDpKV224h qyg0PMxbgZJZLQ/yGve00kJbfFeB6FA0Xx4UXxLEDw0gc68cITATAbjPtmjb/rN9 /kWVKbwjfwcL5WFuxOBW9M5SedKyW1WJTeJDW+mCqQ9Fvlt6gHd7bc44J6qBoYWr ieUkkSdQ5RKV0R84u9NdeDGFmgnuXbfr2DruhwMt+ycJNxQIF9gnWI4VrYBdiLZ5 Mu555ZvLN92L/RxwqMOoT8Utd4CWF8dLYMvn/qupLWyOujqERXs= -----END CERTIFICATE-----Generated at Sun Oct 25 18:50:02 2026 by rpki-client