$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft File: A5251C27E1AF09AE2F28618250807EA4D573694B.mft (raw, json) Hash identifier: 12XpPEd7sBfNbxdGK5Ywu8icok4JPZdjl33xU1jl23Q= Subject key identifier: 17:28:D6:4A:7F:F5:60:37:A6:2E:A4:70:73:46:7C:EA:66:A9:1C:DA Authority key identifier: A5:25:1C:27:E1:AF:09:AE:2F:28:61:82:50:80:7E:A4:D5:73:69:4B Certificate issuer: /CN=A5251C27E1AF09AE2F28618250807EA4D573694B Certificate serial: 195021DCE4FA50967B9B7952679978A806B7D876 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 22:01:11 +0000 Manifest this update: Wed 16 Sep 2026 21:56:11 +0000 Manifest next update: Fri 18 Sep 2026 01:26:11 +0000 Files and hashes: 1: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: 8PPdaCX6mIjApYArjunSo3wNOsnTma7JcAZ0c6t+SzU=) 2: A5251C27E1AF09AE2F28618250807EA4D573694B.crl (hash: oBrNauSZGB8cA4+vF08nsBdb70Eng7OD/of4AKLvClY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.crl rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:50:21:dc:e4:fa:50:96:7b:9b:79:52:67:99:78:a8:06:b7:d8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5251C27E1AF09AE2F28618250807EA4D573694B Validity Not Before: Sep 16 21:56:11 2026 GMT Not After : Sep 18 01:26:11 2026 GMT Subject: CN=1728D64A7FF56037A62EA47073467CEA66A91CDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b9:e1:dc:aa:54:77:92:90:57:99:ef:aa:8f: 7b:5d:ef:88:27:a3:8a:71:5a:36:19:df:0b:a5:46: 16:07:04:dc:21:65:95:fb:d0:00:e2:e0:ff:47:8a: f6:b4:9e:47:2c:75:1d:08:c3:d8:a1:3a:d0:00:79: 53:73:5b:fd:ad:61:d3:22:02:dc:54:9f:b7:ed:33: 7a:e9:52:9c:98:45:51:88:d6:d4:d1:5c:3f:da:5b: 9f:98:09:ce:f7:f5:78:a1:f5:6e:11:15:ac:38:84: b9:a6:11:64:8c:8d:2e:4d:59:b7:89:5f:15:fb:59: 00:de:9c:f5:a7:5b:db:18:4c:29:5d:64:25:bf:93: 9d:e5:af:06:78:44:3b:d5:e7:2e:4e:d2:86:28:34: 8b:5c:92:69:04:9b:0e:ab:1d:a4:aa:b0:94:76:6a: 90:e1:6e:86:4a:f7:bd:e5:d3:ce:3d:fa:73:03:f1: 31:b2:8b:f9:1d:1c:40:b0:c4:07:43:e6:99:97:f6: 4d:cb:5d:fd:2d:d8:0e:39:e9:fc:73:ec:e4:bd:d7: 9d:e8:40:f9:2b:9f:a5:62:6c:bb:9a:5a:d8:d1:52: 9f:df:ca:49:d4:f5:c7:cd:99:61:a2:d2:d2:cc:d6: 2b:34:29:4d:be:28:08:3d:a0:97:07:85:92:02:ea: eb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:28:D6:4A:7F:F5:60:37:A6:2E:A4:70:73:46:7C:EA:66:A9:1C:DA X509v3 Authority Key Identifier: keyid:A5:25:1C:27:E1:AF:09:AE:2F:28:61:82:50:80:7E:A4:D5:73:69:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:06:3b:d9:cd:bc:14:3d:39:ce:e6:76:a8:eb:4e:8b:2a:2b: 6d:00:49:43:20:75:a6:ad:57:85:cc:35:ab:4c:81:bb:1d:d9: c7:66:02:f9:c5:f8:f9:81:da:4f:c7:b5:d4:68:c3:0d:ab:e1: a1:e6:75:64:9a:2d:4f:75:b0:0e:4e:18:14:f5:15:d6:40:1d: 42:9d:9c:40:ff:4b:14:bf:98:4a:28:34:ec:c3:6e:f7:09:9b: 5e:5e:34:d8:df:33:7e:d8:0e:53:89:b2:f5:ab:9f:34:df:15: e3:28:ee:e5:ed:e1:7b:18:1e:65:65:ae:db:7a:94:44:15:ac: 2b:85:48:17:c7:76:c0:01:89:10:a1:23:49:40:37:f4:a7:90: f1:50:36:d1:eb:d2:5e:7e:a7:dc:17:7f:94:3c:f9:6c:1d:40: 5d:ba:66:2e:33:de:46:72:d3:b9:e1:51:df:dd:69:11:eb:62: c8:11:d3:22:c5:57:d4:59:ec:e1:02:76:79:a4:71:a6:e3:d3: 7c:4e:a6:a0:97:e7:e9:99:51:e1:46:f4:18:bd:23:4c:70:98: 08:4d:1a:96:db:bc:65:ec:2f:81:e7:5e:3e:d4:09:fa:83:41: 8e:d1:2d:6d:ad:9a:f8:b8:b7:49:a5:36:90:fe:12:3f:25:b3: f9:62:06:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGVAh3OT6UJZ7m3lSZ5l4qAa32HYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUyNTFDMjdFMUFGMDlBRTJGMjg2MTgyNTA4MDdFQTRE NTczNjk0QjAeFw0yNjA5MTYyMTU2MTFaFw0yNjA5MTgwMTI2MTFaMDMxMTAvBgNV BAMTKDE3MjhENjRBN0ZGNTYwMzdBNjJFQTQ3MDczNDY3Q0VBNjZBOTFDREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQueHcqlR3kpBXme+qj3td74gn o4pxWjYZ3wulRhYHBNwhZZX70ADi4P9Hiva0nkcsdR0Iw9ihOtAAeVNzW/2tYdMi AtxUn7ftM3rpUpyYRVGI1tTRXD/aW5+YCc739Xih9W4RFaw4hLmmEWSMjS5NWbeJ XxX7WQDenPWnW9sYTCldZCW/k53lrwZ4RDvV5y5O0oYoNItckmkEmw6rHaSqsJR2 apDhboZK973l0849+nMD8TGyi/kdHECwxAdD5pmX9k3LXf0t2A456fxz7OS9153o QPkrn6VibLuaWtjRUp/fyknU9cfNmWGi0tLM1is0KU2+KAg9oJcHhZIC6uv3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFyjWSn/1YDemLqRwc0Z86mapHNowHwYDVR0j BBgwFoAUpSUcJ+GvCa4vKGGCUIB+pNVzaUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ3ZjZjZjYtZGQyYi00ODIzLWIyNjQtZTJiZjRmMzBhYmZlLzAvQTUyNTFDMjdF MUFGMDlBRTJGMjg2MTgyNTA4MDdFQTRENTczNjk0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNTI1MUMyN0UxQUYwOUFFMkYyODYxODI1MDgwN0VBNEQ1NzM2 OTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy NjQtZTJiZjRmMzBhYmZlLzAvQTUyNTFDMjdFMUFGMDlBRTJGMjg2MTgyNTA4MDdF QTRENTczNjk0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcGO9nNvBQ9Oc7mdqjrTosqK20ASUMgdaat V4XMNatMgbsd2cdmAvnF+PmB2k/HtdRoww2r4aHmdWSaLU91sA5OGBT1FdZAHUKd nED/SxS/mEooNOzDbvcJm15eNNjfM37YDlOJsvWrnzTfFeMo7uXt4XsYHmVlrtt6 lEQVrCuFSBfHdsABiRChI0lAN/SnkPFQNtHr0l5+p9wXf5Q8+WwdQF26Zi4z3kZy 07nhUd/daRHrYsgR0yLFV9RZ7OECdnmkcabj03xOpqCX5+mZUeFG9Bi9I0xwmAhN GpbbvGXsL4HnXj7UCfqDQY7RLW2tmvi4t0mlNpD+Ej8ls/liBvM= -----END CERTIFICATE-----Generated at Thu Sep 17 14:21:37 2026 by rpki-client