$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft File: 26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft (raw, json) Hash identifier: SbQqjiFVQHmcUZEciy82j8y3NZgNKDyVbpE1g1oxp0E= Subject key identifier: 7D:4F:53:81:B5:7E:E0:30:F3:82:70:64:09:16:DF:0D:BF:6F:AD:15 Authority key identifier: 26:AC:84:7A:FE:F1:BA:DA:17:32:A8:A2:24:9B:AE:EC:2F:2D:61:5A Certificate issuer: /CN=26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A Certificate serial: 256D8A282A181076445A85F959E02611509C4C76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 14:37:08 +0000 Manifest this update: Wed 16 Sep 2026 14:32:08 +0000 Manifest next update: Thu 17 Sep 2026 15:45:08 +0000 Files and hashes: 1: 3130332e3233392e32302e302f32342d3234203d3e20313531353139.roa (hash: WHmkkfpIM8Fej10LNvo4eMoAmMSgE4SOk4GXSFe9Ky8=) 2: 3130332e3233392e32302e302f32332d3234203d3e20313531353139.roa (hash: diFLhr4fVvfR6ElD2+x6FyfBVBmvWMODzaZCy9XdQ10=) 3: 3130332e3233392e32312e302f32342d3234203d3e20313531353139.roa (hash: xuo20faVsDcaxZ95BSzWiVO7mQjYOYEJpwuA8scBHdE=) 4: 26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.crl (hash: HQHZKWLbhZrxeHqVWaluswArl8cMMoORU8fqvcvx92c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.crl rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 15:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:6d:8a:28:2a:18:10:76:44:5a:85:f9:59:e0:26:11:50:9c:4c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A Validity Not Before: Sep 16 14:32:08 2026 GMT Not After : Sep 17 15:45:08 2026 GMT Subject: CN=7D4F5381B57EE030F38270640916DF0DBF6FAD15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:67:64:de:6b:f9:ea:e4:5c:96:9a:3c:a1: 82:01:91:b7:ee:bd:ae:87:00:7b:57:6f:46:63:5a: be:58:ce:ea:9b:83:c4:82:04:f6:26:13:17:81:6d: be:56:07:6b:83:ac:ff:00:25:66:76:bc:42:89:3c: 7e:84:ee:87:a5:cc:27:00:10:21:dd:a6:38:3b:a0: 2c:fa:2b:02:56:57:24:de:15:dd:24:90:75:fb:59: 38:f0:ab:f2:5e:9c:56:e5:dd:2d:32:49:d1:e4:8e: c9:a1:79:3f:a7:00:3a:d6:9c:f7:ff:c1:e4:af:c0: 5f:d7:00:6a:77:f4:54:7a:ec:95:6e:a3:a0:c7:e8: cf:8a:e8:f2:56:64:51:52:8e:c9:93:55:51:42:ff: 40:19:03:bc:59:d7:1c:3c:f8:95:db:9d:13:aa:e0: 8e:64:7c:e9:88:f9:62:50:c6:81:9e:c8:5f:67:dc: 2a:78:2d:05:a3:2f:0b:1a:57:d2:e2:77:b9:c8:70: 03:57:74:e0:ed:a6:3e:c3:36:5b:10:8a:c3:b7:c5: 8d:f4:7f:17:1b:17:45:f5:9c:68:17:fb:2d:2e:a0: 58:90:a3:e2:8e:82:e7:b4:1e:d6:ff:b6:85:3f:43: 0e:71:16:61:a9:c0:8c:bf:09:fe:80:c5:03:91:fd: 60:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4F:53:81:B5:7E:E0:30:F3:82:70:64:09:16:DF:0D:BF:6F:AD:15 X509v3 Authority Key Identifier: keyid:26:AC:84:7A:FE:F1:BA:DA:17:32:A8:A2:24:9B:AE:EC:2F:2D:61:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d3:a2:3d:19:e9:22:ec:79:f0:3c:f6:68:ef:5c:48:5f:db: d0:8d:7e:6e:de:10:9b:d3:4e:c5:82:86:74:65:0f:0c:ee:b4: 88:3a:cd:5c:2d:e6:89:b0:e0:a3:a0:4e:92:cc:2d:9b:31:51: 90:3b:64:62:e3:29:7e:b1:7b:69:48:cf:8b:63:2e:c0:ab:b7: 9b:b4:47:b0:dd:1b:78:d0:52:7c:d7:af:60:c4:40:97:26:92: 45:1f:cd:6b:e1:ab:24:7c:12:6e:6a:1d:ee:bd:8e:b9:ac:c3: d0:09:86:15:13:5a:ba:78:9d:05:7c:2f:ff:6c:94:de:ff:88: 0d:11:09:a5:4a:35:9c:5f:23:44:9c:04:5a:ce:dc:80:2f:14: 8a:dd:29:a6:ce:7a:ca:5c:98:6b:45:9b:5a:ea:b5:09:34:32: 0b:10:77:6e:67:44:81:2d:d5:91:b6:08:f6:0b:c0:a3:b3:e0: 49:f2:27:d4:94:fd:78:92:88:42:8f:ee:29:12:17:14:e7:09: 4f:86:fa:7d:c9:b1:60:0d:06:70:b2:44:e4:14:c9:f2:84:6f: 9b:9f:9c:a1:b1:7d:a5:ed:c3:7f:52:a0:55:a2:c5:e7:d6:3d: d4:16:8a:0d:3a:c6:c0:bd:47:11:6f:37:b8:85:de:78:04:41: e0:76:f4:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJW2KKCoYEHZEWoX5WeAmEVCcTHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZBQzg0N0FGRUYxQkFEQTE3MzJBOEEyMjQ5QkFFRUMy RjJENjE1QTAeFw0yNjA5MTYxNDMyMDhaFw0yNjA5MTcxNTQ1MDhaMDMxMTAvBgNV BAMTKDdENEY1MzgxQjU3RUUwMzBGMzgyNzA2NDA5MTZERjBEQkY2RkFEMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjoGdk3mv56uRclpo8oYIBkbfu va6HAHtXb0ZjWr5Yzuqbg8SCBPYmExeBbb5WB2uDrP8AJWZ2vEKJPH6E7oelzCcA ECHdpjg7oCz6KwJWVyTeFd0kkHX7WTjwq/JenFbl3S0ySdHkjsmheT+nADrWnPf/ weSvwF/XAGp39FR67JVuo6DH6M+K6PJWZFFSjsmTVVFC/0AZA7xZ1xw8+JXbnROq 4I5kfOmI+WJQxoGeyF9n3Cp4LQWjLwsaV9Lid7nIcANXdODtpj7DNlsQisO3xY30 fxcbF0X1nGgX+y0uoFiQo+KOgue0Htb/toU/Qw5xFmGpwIy/Cf6AxQOR/WCvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfU9TgbV+4DDzgnBkCRbfDb9vrRUwHwYDVR0j BBgwFoAUJqyEev7xutoXMqiiJJuu7C8tYVowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTdhZmQ1N2EtZTZkZS00YTVmLWI1YzYtMTA4NjVkNWE4Yzk4LzAvMjZBQzg0N0FG RUYxQkFEQTE3MzJBOEEyMjQ5QkFFRUMyRjJENjE1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNkFDODQ3QUZFRjFCQURBMTczMkE4QTIyNDlCQUVFQzJGMkQ2 MTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTdhZmQ1N2EtZTZkZS00YTVmLWI1 YzYtMTA4NjVkNWE4Yzk4LzAvMjZBQzg0N0FGRUYxQkFEQTE3MzJBOEEyMjQ5QkFF RUMyRjJENjE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHToj0Z6SLsefA89mjvXEhf29CNfm7eEJvT TsWChnRlDwzutIg6zVwt5omw4KOgTpLMLZsxUZA7ZGLjKX6xe2lIz4tjLsCrt5u0 R7DdG3jQUnzXr2DEQJcmkkUfzWvhqyR8Em5qHe69jrmsw9AJhhUTWrp4nQV8L/9s lN7/iA0RCaVKNZxfI0ScBFrO3IAvFIrdKabOespcmGtFm1rqtQk0MgsQd25nRIEt 1ZG2CPYLwKOz4EnyJ9SU/XiSiEKP7ikSFxTnCU+G+n3JsWANBnCyROQUyfKEb5uf nKGxfaXtw39SoFWixefWPdQWig06xsC9RxFvN7iF3ngEQeB29MA= -----END CERTIFICATE-----Generated at Thu Sep 17 09:14:42 2026 by rpki-client