$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft File: A1E11F793F01828AF09B99BCD923D78E53C244F8.mft (raw, json) Hash identifier: hwIVziE+ugUFTLaDPmSltLXYy6wVJypnghDfSgqYUgE= Subject key identifier: 09:69:88:CE:5F:85:DE:67:FB:D5:B8:CA:AA:EF:63:DC:F5:91:B9:BA Authority key identifier: A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8 Certificate issuer: /CN=A1E11F793F01828AF09B99BCD923D78E53C244F8 Certificate serial: 0D2FF6095C0430BADA9E0B89B59101BCB9057011 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 04:54:32 +0000 Manifest this update: Thu 17 Sep 2026 04:49:32 +0000 Manifest next update: Fri 18 Sep 2026 07:08:32 +0000 Files and hashes: 1: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: UROVvNQkBLkgNHOadPoNQ+qS5gW9uF+lG16ZZ4rQo7Y=) 2: A1E11F793F01828AF09B99BCD923D78E53C244F8.crl (hash: BynIKcCX4jvOkhoI0xwf65Ir8dc+mi/05hv6l/RDhkc=) 3: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: aoz9FF3zaBxJcTS/CNaTKvg2hS72RZ/WIHtE0qTjGI0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:2f:f6:09:5c:04:30:ba:da:9e:0b:89:b5:91:01:bc:b9:05:70:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1E11F793F01828AF09B99BCD923D78E53C244F8 Validity Not Before: Sep 17 04:49:32 2026 GMT Not After : Sep 18 07:08:32 2026 GMT Subject: CN=096988CE5F85DE67FBD5B8CAAAEF63DCF591B9BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d9:12:87:bc:d3:fd:37:f1:6b:b0:e3:83:9e: 69:12:1b:47:00:c2:f8:1e:aa:b3:d9:1c:a6:ce:9a: 38:cc:e2:80:0d:18:f6:f5:c8:cd:80:07:c6:6a:7d: d6:7c:55:89:73:b4:78:0d:83:1d:d4:82:62:5a:8d: 40:ba:53:6b:ff:b0:b3:38:8f:17:1f:7a:92:e9:f3: c6:e9:16:fb:6e:7a:19:f9:77:9a:5c:2e:9f:61:90: ce:6d:74:9c:36:d8:4b:c4:9d:b3:93:90:51:f3:cc: 27:16:f4:64:bf:16:78:85:fe:b2:b9:f3:a8:57:d2: 63:bb:54:1e:d9:ee:90:99:53:af:07:ee:f0:48:d7: 5f:bb:c8:cb:54:55:17:0e:7b:79:2e:28:b1:db:c1: a1:6b:5e:26:cf:5a:da:06:52:2c:e7:94:03:d9:e3: d4:96:df:e0:a0:f3:59:52:73:88:71:c4:7e:e9:de: 24:ce:92:45:88:15:67:f1:d2:8d:4f:e9:71:2a:ff: da:05:e5:0f:a8:d6:54:23:b0:c0:76:12:eb:44:ce: 5c:3b:05:f7:85:21:b6:95:e7:27:48:8e:a6:3f:b2: ac:fc:9f:3c:13:5e:8c:5f:3e:4f:d5:59:3f:ec:a5: f3:37:43:9b:6d:02:f5:01:aa:c3:50:08:a5:ac:18: 78:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:69:88:CE:5F:85:DE:67:FB:D5:B8:CA:AA:EF:63:DC:F5:91:B9:BA X509v3 Authority Key Identifier: keyid:A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:47:ad:e3:c7:c6:c5:b0:30:ad:b4:29:aa:78:b6:0a:7c:3f: 22:ff:66:df:02:1c:fc:50:78:9a:f0:cf:18:86:b6:30:dc:d0: 1c:90:5b:a6:31:61:6c:58:24:b8:33:80:96:20:4a:f5:cb:98: 32:b7:af:cd:13:4a:03:05:cc:66:71:79:e1:de:68:35:27:e5: 2e:bd:73:67:04:09:ca:9a:37:3c:b9:33:aa:47:70:6a:41:94: a1:2f:9b:55:da:d1:17:4e:73:12:cf:43:72:68:94:66:53:8c: 6d:b5:ef:45:00:dc:b0:d5:42:33:ef:43:6e:da:51:f9:63:1f: d2:98:94:d9:71:e5:83:dd:be:7a:47:59:4a:e2:82:3e:8b:fa: 0e:8a:7d:e7:e9:9a:9a:54:c3:04:e6:47:26:08:b8:dd:3d:52: d7:78:bd:65:71:9f:fe:14:02:db:e0:ac:fe:f5:85:c5:54:ce: 5a:ea:0c:f4:ca:a5:d5:dc:a7:a5:ff:0f:90:c9:c6:b4:7b:b4: 95:d2:c8:ca:95:32:4f:52:1d:82:09:aa:ab:f1:7c:3b:c1:82: 7e:e2:13:f0:3b:91:64:a4:27:c7:6c:f6:eb:f8:a6:d6:8f:15: 15:ab:39:f3:6b:35:83:19:5d:21:bb:74:10:3f:0d:c8:53:b8: c7:0b:f6:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDS/2CVwEMLranguJtZEBvLkFcBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFMTFGNzkzRjAxODI4QUYwOUI5OUJDRDkyM0Q3OEU1 M0MyNDRGODAeFw0yNjA5MTcwNDQ5MzJaFw0yNjA5MTgwNzA4MzJaMDMxMTAvBgNV BAMTKDA5Njk4OENFNUY4NURFNjdGQkQ1QjhDQUFBRUY2M0RDRjU5MUI5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj2RKHvNP9N/FrsOODnmkSG0cA wvgeqrPZHKbOmjjM4oANGPb1yM2AB8ZqfdZ8VYlztHgNgx3UgmJajUC6U2v/sLM4 jxcfepLp88bpFvtuehn5d5pcLp9hkM5tdJw22EvEnbOTkFHzzCcW9GS/FniF/rK5 86hX0mO7VB7Z7pCZU68H7vBI11+7yMtUVRcOe3kuKLHbwaFrXibPWtoGUiznlAPZ 49SW3+Cg81lSc4hxxH7p3iTOkkWIFWfx0o1P6XEq/9oF5Q+o1lQjsMB2EutEzlw7 BfeFIbaV5ydIjqY/sqz8nzwTXoxfPk/VWT/spfM3Q5ttAvUBqsNQCKWsGHgLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCWmIzl+F3mf71bjKqu9j3PWRubowHwYDVR0j BBgwFoAUoeEfeT8Bgorwm5m82SPXjlPCRPgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2YwYmExZTctZDE0Mi00N2NkLThkOGYtMmEzNzJiOTIyMjIzLzAvQTFFMTFGNzkz RjAxODI4QUYwOUI5OUJDRDkyM0Q3OEU1M0MyNDRGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUUxMUY3OTNGMDE4MjhBRjA5Qjk5QkNEOTIzRDc4RTUzQzI0 NEY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvQTFFMTFGNzkzRjAxODI4QUYwOUI5OUJDRDkyM0Q3 OEU1M0MyNDRGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlHrePHxsWwMK20Kap4tgp8PyL/Zt8CHPxQ eJrwzxiGtjDc0ByQW6YxYWxYJLgzgJYgSvXLmDK3r80TSgMFzGZxeeHeaDUn5S69 c2cECcqaNzy5M6pHcGpBlKEvm1Xa0RdOcxLPQ3JolGZTjG2170UA3LDVQjPvQ27a UfljH9KYlNlx5YPdvnpHWUrigj6L+g6KfefpmppUwwTmRyYIuN09Utd4vWVxn/4U AtvgrP71hcVUzlrqDPTKpdXcp6X/D5DJxrR7tJXSyMqVMk9SHYIJqqvxfDvBgn7i E/A7kWSkJ8ds9uv4ptaPFRWrOfNrNYMZXSG7dBA/DchTuMcL9tY= -----END CERTIFICATE-----Generated at Thu Sep 17 14:26:58 2026 by rpki-client