$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft File: A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft (raw, json) Hash identifier: CvMJ0Ho0M4zn+ZT5sXiW9MwpF4ADyjA1YBoSm6BdJ4U= Subject key identifier: 55:37:F3:B5:65:31:7F:2D:A0:23:BC:5B:6C:A7:E3:CD:BC:16:64:30 Authority key identifier: A9:2D:7A:2C:E9:CB:AA:FD:76:3A:38:0C:28:FA:DD:D1:A3:C7:EA:81 Certificate issuer: /CN=A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81 Certificate serial: 49F5946E379C7CB515CCF034794E7F6EF967B1B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 19:02:48 +0000 Manifest this update: Wed 16 Sep 2026 18:57:48 +0000 Manifest next update: Thu 17 Sep 2026 20:52:48 +0000 Files and hashes: 1: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: WV8Z97xrGgFHwypp6SwSp1IloS8eHHkMOVgWyPQX300=) 2: A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl (hash: gXd5UjUHn20VZE63UophWF/2z7x7RgP3wDasGERMM6c=) 3: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: gM1AjlPJEA8ARwiEjxXZ/XYQjY805lBo3kfjSVH4yf0=) 4: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: 3KrJ0+AfMCOxSs3J3yun9Ot0fuEZmxiN3y8DZjfYS7Q=) 5: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: VuUTV6DF0NO0ScLbFc6eylw+nle2kUmBZXnxVkFv7U0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:f5:94:6e:37:9c:7c:b5:15:cc:f0:34:79:4e:7f:6e:f9:67:b1:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81 Validity Not Before: Sep 16 18:57:48 2026 GMT Not After : Sep 17 20:52:48 2026 GMT Subject: CN=5537F3B565317F2DA023BC5B6CA7E3CDBC166430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:66:8b:8b:58:e9:bb:28:06:f1:1e:a3:21: 8c:21:5d:10:12:24:02:dd:39:90:f0:2b:8a:49:b4: 55:aa:2e:f6:46:be:40:d5:bc:ef:8e:bd:e4:f6:28: ce:e7:f8:c9:e6:90:26:0c:ee:53:c9:33:40:11:18: cc:0f:a9:77:95:86:90:16:84:bc:61:bf:f3:84:5a: 78:6e:ef:cb:9e:00:67:ef:ed:2b:71:84:53:7c:a3: ae:4b:88:92:32:6b:9f:91:01:a6:14:96:a7:0b:84: 73:6e:39:16:20:c1:16:55:ca:c0:01:c5:7d:db:c6: 88:97:e1:fa:fb:4b:70:6b:27:43:6d:7c:04:30:69: 51:f4:c4:34:32:21:14:d5:63:a6:c8:44:8b:98:2a: 20:80:ab:76:52:01:40:46:d4:a8:18:c5:b1:92:63: 38:83:b3:26:fc:74:44:76:34:09:a8:cc:e9:99:68: 91:a8:20:e0:60:3e:9f:69:5b:62:d3:e9:fc:2c:22: da:1a:ff:40:99:3a:67:91:00:78:5f:08:9f:d7:1d: c5:ee:9a:c4:d4:e6:1e:77:8f:24:94:2f:7d:7e:70: 56:af:53:b8:14:5b:f9:1e:47:83:95:7b:68:92:6a: fe:a9:a4:bb:f6:ba:c8:35:2c:bc:6c:ad:79:54:27: 5c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:37:F3:B5:65:31:7F:2D:A0:23:BC:5B:6C:A7:E3:CD:BC:16:64:30 X509v3 Authority Key Identifier: keyid:A9:2D:7A:2C:E9:CB:AA:FD:76:3A:38:0C:28:FA:DD:D1:A3:C7:EA:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:73:5e:04:4a:9a:af:21:b8:2b:c0:4c:37:50:d1:05:76:c5: b0:ed:c4:76:40:00:27:1d:99:4d:85:d7:dd:3e:09:3e:0a:76: 74:f7:b4:58:cc:1f:eb:74:69:0e:a0:cd:7b:f6:a4:fa:dc:2c: 14:c6:4a:e2:45:89:6d:ac:31:0b:59:4a:9c:f5:1e:06:85:4d: d8:f2:a1:14:26:86:8f:12:94:ee:ae:d9:d5:61:e9:89:e7:08: 7a:9f:ae:6e:17:2f:16:81:3d:4d:e0:1f:7e:f9:96:54:dc:3b: 07:53:37:91:8d:52:26:f9:fd:a3:f3:14:30:a8:5b:35:c4:5f: 90:29:4f:bc:3d:ba:a0:06:d7:fd:b5:23:66:76:3f:6a:75:9d: e4:cd:2e:57:e9:24:99:1f:c6:f6:50:92:a1:63:bd:78:e3:39: 56:c7:00:ac:2a:6f:fa:39:05:0d:88:62:a7:1a:73:2d:c3:17: de:a3:10:0f:b5:94:04:07:d6:fe:f8:e7:16:80:cd:59:17:b3: 54:b2:1a:c6:71:f1:e3:c8:c3:2a:23:2e:b9:4b:bc:70:74:60: 1b:86:04:22:7e:08:93:1b:74:ff:93:0e:08:65:13:f3:03:b4: ce:75:27:6f:d4:42:14:7e:19:e4:cc:1d:5f:b0:5d:9f:a0:9f: 11:74:e6:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSfWUbjecfLUVzPA0eU5/bvlnsbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkyRDdBMkNFOUNCQUFGRDc2M0EzODBDMjhGQURERDFB M0M3RUE4MTAeFw0yNjA5MTYxODU3NDhaFw0yNjA5MTcyMDUyNDhaMDMxMTAvBgNV BAMTKDU1MzdGM0I1NjUzMTdGMkRBMDIzQkM1QjZDQTdFM0NEQkMxNjY0MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGO2aLi1jpuygG8R6jIYwhXRAS JALdOZDwK4pJtFWqLvZGvkDVvO+OveT2KM7n+MnmkCYM7lPJM0ARGMwPqXeVhpAW hLxhv/OEWnhu78ueAGfv7StxhFN8o65LiJIya5+RAaYUlqcLhHNuORYgwRZVysAB xX3bxoiX4fr7S3BrJ0NtfAQwaVH0xDQyIRTVY6bIRIuYKiCAq3ZSAUBG1KgYxbGS YziDsyb8dER2NAmozOmZaJGoIOBgPp9pW2LT6fwsItoa/0CZOmeRAHhfCJ/XHcXu msTU5h53jySUL31+cFavU7gUW/keR4OVe2iSav6ppLv2usg1LLxsrXlUJ1wDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVTfztWUxfy2gI7xbbKfjzbwWZDAwHwYDVR0j BBgwFoAUqS16LOnLqv12OjgMKPrd0aPH6oEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE5MTRhZGEtYTlhYS00ZDdmLTllNDctNTk0YmNiN2E3MGFiLzAvQTkyRDdBMkNF OUNCQUFGRDc2M0EzODBDMjhGQURERDFBM0M3RUE4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTJEN0EyQ0U5Q0JBQUZENzYzQTM4MEMyOEZBREREMUEzQzdF QTgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvQTkyRDdBMkNFOUNCQUFGRDc2M0EzODBDMjhGQURE RDFBM0M3RUE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVzXgRKmq8huCvATDdQ0QV2xbDtxHZAACcd mU2F190+CT4KdnT3tFjMH+t0aQ6gzXv2pPrcLBTGSuJFiW2sMQtZSpz1HgaFTdjy oRQmho8SlO6u2dVh6YnnCHqfrm4XLxaBPU3gH375llTcOwdTN5GNUib5/aPzFDCo WzXEX5ApT7w9uqAG1/21I2Z2P2p1neTNLlfpJJkfxvZQkqFjvXjjOVbHAKwqb/o5 BQ2IYqcacy3DF96jEA+1lAQH1v745xaAzVkXs1SyGsZx8ePIwyojLrlLvHB0YBuG BCJ+CJMbdP+TDghlE/MDtM51J2/UQhR+GeTMHV+wXZ+gnxF05jU= -----END CERTIFICATE-----Generated at Thu Sep 17 09:22:22 2026 by rpki-client