$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft File: A0255156E104D661F25134DFEF8EF05BD73E8C04.mft (raw, json) Hash identifier: NbF9qTFw+DMNbqrBLjLOUqU+0viFSRSIP51SWTnUymw= Subject key identifier: EC:FD:65:C4:A0:D8:30:1F:38:7B:F6:E6:83:2B:E0:05:D6:F8:C8:33 Authority key identifier: A0:25:51:56:E1:04:D6:61:F2:51:34:DF:EF:8E:F0:5B:D7:3E:8C:04 Certificate issuer: /CN=A0255156E104D661F25134DFEF8EF05BD73E8C04 Certificate serial: 16840789527F156D56A6D54896F63D2E3DAE0C28 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 11:53:21 +0000 Manifest this update: Thu 17 Sep 2026 11:48:21 +0000 Manifest next update: Fri 18 Sep 2026 15:30:21 +0000 Files and hashes: 1: 3130332e3136312e3139342e302f32332d3233203d3e20313431363232.roa (hash: mPG/zuyU/XUm9QM+7MhLY4PXMJXJc11dpd+ekiFfezo=) 2: 3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa (hash: 00GZwg/Y9T0ZdKSWulyuB3JLDZ01RudXgy9Ju+lMmEg=) 3: 3130332e3136312e3139342e302f32342d3234203d3e20313431363232.roa (hash: OwiazASeDIe+vC4nWyzCtb4oqvt1RTV99SuTJlMtud4=) 4: A0255156E104D661F25134DFEF8EF05BD73E8C04.crl (hash: Sxr7NvM9qp82gi6Nq0SLvVVfpdW2Yma2yUd7ypGvBos=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.crl rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:84:07:89:52:7f:15:6d:56:a6:d5:48:96:f6:3d:2e:3d:ae:0c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0255156E104D661F25134DFEF8EF05BD73E8C04 Validity Not Before: Sep 17 11:48:21 2026 GMT Not After : Sep 18 15:30:21 2026 GMT Subject: CN=ECFD65C4A0D8301F387BF6E6832BE005D6F8C833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fc:60:b9:d9:a9:4f:0a:7f:80:cf:9e:4a:16: 81:5d:96:5b:f7:25:c0:5c:da:ac:41:8a:b5:68:35: d0:90:bf:61:89:b7:3d:2d:a1:49:0c:44:be:e7:e5: 66:62:41:1a:52:da:bb:77:2c:2a:b1:3d:b9:c3:08: bf:74:db:76:55:c8:17:97:58:09:1f:bf:d5:09:2b: e8:c8:fa:1b:be:3a:48:65:83:79:04:c1:a5:9c:5a: 6a:5e:a5:c4:35:13:06:92:11:c3:96:1f:cc:45:db: 09:7d:9b:a3:89:a5:3c:6b:b2:7e:86:5f:62:3b:ad: 9b:c4:8b:7d:44:81:23:57:62:2f:2e:b6:45:47:f5: d0:35:0d:17:04:6e:9a:2a:1f:be:c3:ac:f9:81:4e: b5:0a:ff:4f:0e:3c:37:e0:68:8a:06:42:8e:0c:e8: 55:ab:25:03:60:9b:62:ed:20:6b:15:6b:8a:20:83: bd:9b:e5:36:5c:6b:7c:14:a7:fc:3a:62:01:df:f4: 23:1e:5a:8d:2b:1c:83:44:ee:30:2f:cc:1b:e2:a2: 05:c1:d0:33:bf:8c:16:f3:d2:48:87:eb:d5:c1:e3: 23:e5:7d:b2:c0:a5:d9:c9:b0:4d:a9:07:b8:96:40: e4:55:aa:4d:a4:d7:64:08:8c:73:7d:8e:1e:bf:18: dc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FD:65:C4:A0:D8:30:1F:38:7B:F6:E6:83:2B:E0:05:D6:F8:C8:33 X509v3 Authority Key Identifier: keyid:A0:25:51:56:E1:04:D6:61:F2:51:34:DF:EF:8E:F0:5B:D7:3E:8C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:52:81:90:bb:c7:ef:50:b9:ce:cd:fe:d7:c8:26:8a:cd:a6: da:c3:7b:cb:6c:76:c4:99:e3:24:f2:25:d3:7d:f3:91:d3:9e: 5a:6f:37:ee:27:5b:5f:05:72:88:41:a3:42:a2:2c:18:5d:6f: 3e:fa:c4:70:14:99:9f:e3:9e:eb:64:9a:7c:3b:f5:1f:df:3f: bf:eb:2e:f5:2e:58:bf:d1:0c:66:26:06:fd:60:45:5f:04:be: 57:4b:27:72:6c:8d:00:16:c9:ac:e0:8b:72:c2:19:cf:02:b4: 31:b6:85:e7:a1:9e:d9:a4:ea:01:ba:d3:a1:fe:6e:79:c1:03: b0:84:4c:26:b7:27:5a:f9:1d:6b:68:9d:97:21:42:9c:80:e2: b5:d8:6e:ea:26:24:18:fb:4b:4c:dd:e6:d6:16:b4:b8:d8:78: b2:5e:1f:df:90:48:a4:ec:3d:1f:fd:44:42:e9:e1:63:05:15: 9d:55:b0:aa:18:1a:44:15:8f:d6:31:f2:7e:61:ba:85:75:a3: 8c:94:47:5f:29:a8:e0:e8:2a:69:76:c5:0d:c4:19:07:22:2c: 22:ea:7c:48:74:09:ec:ed:e6:73:eb:c9:40:eb:04:da:dd:b9: 9d:1f:93:02:55:89:08:06:41:28:35:d2:c9:e9:d4:d0:9d:21: 20:87:a6:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFoQHiVJ/FW1WptVIlvY9Lj2uDCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAyNTUxNTZFMTA0RDY2MUYyNTEzNERGRUY4RUYwNUJE NzNFOEMwNDAeFw0yNjA5MTcxMTQ4MjFaFw0yNjA5MTgxNTMwMjFaMDMxMTAvBgNV BAMTKEVDRkQ2NUM0QTBEODMwMUYzODdCRjZFNjgzMkJFMDA1RDZGOEM4MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU/GC52alPCn+Az55KFoFdllv3 JcBc2qxBirVoNdCQv2GJtz0toUkMRL7n5WZiQRpS2rt3LCqxPbnDCL9023ZVyBeX WAkfv9UJK+jI+hu+Okhlg3kEwaWcWmpepcQ1EwaSEcOWH8xF2wl9m6OJpTxrsn6G X2I7rZvEi31EgSNXYi8utkVH9dA1DRcEbpoqH77DrPmBTrUK/08OPDfgaIoGQo4M 6FWrJQNgm2LtIGsVa4ogg72b5TZca3wUp/w6YgHf9CMeWo0rHINE7jAvzBviogXB 0DO/jBbz0kiH69XB4yPlfbLApdnJsE2pB7iWQORVqk2k12QIjHN9jh6/GNx9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7P1lxKDYMB84e/bmgyvgBdb4yDMwHwYDVR0j BBgwFoAUoCVRVuEE1mHyUTTf747wW9c+jAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NiZmIyMjgtZmQwNS00YWZkLTg3YmQtZWQ1ODBiNTUwMzZmLzAvQTAyNTUxNTZF MTA0RDY2MUYyNTEzNERGRUY4RUYwNUJENzNFOEMwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDI1NTE1NkUxMDRENjYxRjI1MTM0REZFRjhFRjA1QkQ3M0U4 QzA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NiZmIyMjgtZmQwNS00YWZkLTg3 YmQtZWQ1ODBiNTUwMzZmLzAvQTAyNTUxNTZFMTA0RDY2MUYyNTEzNERGRUY4RUYw NUJENzNFOEMwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxSgZC7x+9Quc7N/tfIJorNptrDe8tsdsSZ 4yTyJdN985HTnlpvN+4nW18FcohBo0KiLBhdbz76xHAUmZ/jnutkmnw79R/fP7/r LvUuWL/RDGYmBv1gRV8EvldLJ3JsjQAWyazgi3LCGc8CtDG2heehntmk6gG606H+ bnnBA7CETCa3J1r5HWtonZchQpyA4rXYbuomJBj7S0zd5tYWtLjYeLJeH9+QSKTs PR/9RELp4WMFFZ1VsKoYGkQVj9Yx8n5huoV1o4yUR18pqODoKml2xQ3EGQciLCLq fEh0Cezt5nPryUDrBNrduZ0fkwJViQgGQSg10snp1NCdISCHps0= -----END CERTIFICATE-----Generated at Thu Sep 17 14:40:03 2026 by rpki-client