$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft File: A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft (raw, json) Hash identifier: M3fe+6hYYLCvPZ2Yo+Yn/cuilllq7yLIQHSqBQSxhjQ= Subject key identifier: 97:B1:C4:1D:E2:83:8A:22:7E:42:57:5F:53:DE:18:60:DB:EB:DB:6C Authority key identifier: A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05 Certificate issuer: /CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305 Certificate serial: 22664722EC0F6B9E3DD29506824C41A6B617149F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft Manifest number: 9C Signing time: Thu 27 Aug 2026 10:43:56 +0000 Manifest this update: Thu 27 Aug 2026 10:38:56 +0000 Manifest next update: Fri 28 Aug 2026 11:13:56 +0000 Files and hashes: 1: 323430323a666463303a313337333a3a2f34382d3438203d3e20313337333633.roa (hash: ZDiFkcumHYkuWYUBaPK86t3Am+BHd46fhGXEEhnKxDM=) 2: 3230322e31302e35342e302f32342d3234203d3e20313430343735.roa (hash: HRGD4R+yGdYBp3Or0hgA2AcbAMPLv3YF0a66aMPbpmc=) 3: 3230322e31302e35322e302f32342d3234203d3e20313337333633.roa (hash: u+Of6FkZ8x04Mn/sbxjOJpufFlGKsbMZ43MhOVlUe9g=) 4: 3230322e31302e36322e302f32342d3234203d3e20313530353031.roa (hash: dENlFssvXSbhibcUcmYMpj6LsZqbMhw2TzlfQilBjlw=) 5: 3230322e31302e35352e302f32342d3234203d3e20313430343735.roa (hash: qdsWQTeruYCWO1TWsZRfYq1Fijj3AYRnr4xjjtmwgSY=) 6: 323430323a666463303a633830303a3a2f34382d3438203d3e20313337333633.roa (hash: CjRDsAz+aS/+92X6fntWUbGjGlM8inRBSEZ9nZ+tTOw=) 7: 3230322e31302e35312e302f32342d3234203d3e20313332363334.roa (hash: JKmskqrmBEKWLRqcTfgQmkJ1rpIxbXQj387cHsgkWiM=) 8: 3230322e31302e35332e302f32342d3234203d3e20313430343639.roa (hash: XZqZKEwcIT/tOmTDjZRtLyihPdxqZLum5E4RRGNWZX0=) 9: 323430323a666463303a633830333a3a2f34382d3438203d3e20313337333633.roa (hash: /a6Zkf/b5H6einy3Z1kSJisNnYNJg+CY4h7REq9bRxc=) 10: 3230322e31302e35302e302f32342d3234203d3e20313332363334.roa (hash: fhzQrs4pWOvYBZ4DUAGRteOfMOG5375PmHr/Gd3soN4=) 11: 3230322e31302e33322e302f32332d3234203d3e20313337333633.roa (hash: RzbRWoTyq317VopjOdRZUyYGaw/2GeV/fl1ATPbbRe8=) 12: 323430323a666463303a633830323a3a2f34382d3438203d3e20313337333633.roa (hash: Gsl3H+Xpktz1qLk/16DVTjg0FvEY5dvYbGDi7zrN6y4=) 13: 323430323a666463303a633830313a3a2f34382d3438203d3e20313337333633.roa (hash: 12hGBEU127xFfYRBwaq0Vm/CxpSbZT0y22MOj9lRvjg=) 14: 3130332e3131362e3137322e302f32322d3234203d3e20313337333633.roa (hash: cgOdljzD6Kb/efyo5mEV6JVDlvdGepzZA5hSBuGf/kU=) 15: 3230322e31302e35342e302f32332d3234203d3e20313430343735.roa (hash: 53lk28OB7C2r9Lbn77bndS7Z8jO3dRRKei6ftjTbvh8=) 16: 3230322e31302e35322e302f32332d3234203d3e20313337333633.roa (hash: Tj44K8M0kyIyNVPMD0ebyVJjg9LhX68HN2gKKlUECaQ=) 17: A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl (hash: uMuVEsm7Hvi7iuzUo1k3Zb5KlSgPLLHgad8Gj5W6n7o=) 18: 323430323a666463303a3a2f33322d3438203d3e20313337333633.roa (hash: Z7H/OfXP8qxT4Zi/m6gpjjp2JZ6eagoR20N4vstB3k0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 02:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:66:47:22:ec:0f:6b:9e:3d:d2:95:06:82:4c:41:a6:b6:17:14:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305 Validity Not Before: Aug 27 10:38:56 2026 GMT Not After : Aug 28 11:13:56 2026 GMT Subject: CN=97B1C41DE2838A227E42575F53DE1860DBEBDB6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d6:da:b6:64:04:91:20:ed:51:6d:0f:cb:4e: 63:9e:c4:68:a4:c2:98:64:f5:f5:49:58:dd:be:9c: e9:09:88:91:40:b6:1e:f2:09:2c:4e:4c:3f:98:e7: d7:1e:47:dc:05:6c:1c:e0:82:83:8d:8e:e4:88:d5: d9:31:74:bc:bd:fc:c3:70:74:f2:ba:58:fc:8c:00: 30:3b:c7:80:a0:be:30:36:1c:e4:e5:0f:03:35:d3: 79:4d:61:5c:a7:fa:79:4a:73:c9:8d:4e:d8:74:af: af:fe:1f:b1:3c:b9:61:03:93:6a:7a:d3:92:11:95: 82:7b:f8:1f:94:8f:ff:1f:cb:0b:17:1c:1e:8e:f6: fb:11:7f:36:80:04:76:fb:6a:6a:d9:42:0f:f5:8f: 14:e2:67:c0:1a:5d:b5:ec:a7:8c:ca:61:a5:46:32: ed:02:1d:6b:87:c5:f7:f9:48:9c:11:0a:fe:3a:81: c7:44:d2:69:15:72:77:87:3d:68:64:98:ba:8c:fa: 70:24:09:b9:28:94:44:6a:be:be:10:88:45:7a:4b: 43:0b:25:88:af:63:38:66:76:59:cc:e0:53:f2:3f: e9:8e:13:51:9a:f4:ef:a6:ef:53:11:7a:70:2f:03: ef:cb:b7:0c:75:ae:8a:12:69:61:f0:96:05:1d:b1: 9d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B1:C4:1D:E2:83:8A:22:7E:42:57:5F:53:DE:18:60:DB:EB:DB:6C X509v3 Authority Key Identifier: keyid:A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:37:49:58:66:1b:36:a1:9a:2e:8c:bc:04:d1:ef:cb:c1:b5: f9:4b:78:84:cf:6e:3a:53:98:f8:e3:d8:e5:96:a7:48:15:c7: 2d:29:ea:5f:44:10:90:65:cd:1b:c1:de:74:cb:f4:bc:04:1f: 64:33:79:2b:d0:4b:54:4d:be:4d:73:19:b4:71:68:fc:ce:ce: 53:b9:83:a3:d0:2c:6e:2b:1e:cd:a1:ce:58:a0:db:63:85:30: 54:2f:3c:71:69:15:0e:df:ff:09:dc:47:09:f5:03:2e:6e:b7: 14:b0:99:5c:e2:4f:b9:83:d2:e3:f3:95:08:01:a8:07:0d:17: 90:50:0e:e8:c4:05:94:e2:cf:f8:c8:39:01:ef:bf:e3:b7:b4: 4c:45:31:aa:75:43:93:c8:d7:7e:f1:aa:9a:f3:28:44:88:07: 33:ad:fa:3c:12:63:79:27:b1:d0:77:e3:fa:a1:f6:a6:9e:4e: 11:29:46:53:1f:24:80:ca:87:d0:05:a0:7d:89:9d:c5:95:b4: b0:62:42:5c:59:fe:5b:fe:dc:7d:8a:c3:18:6f:ee:bc:04:bc: f8:91:07:3a:04:95:af:47:9e:03:57:b0:02:40:66:7e:14:70: d5:ce:34:54:e5:9f:e5:bc:e4:fe:4d:7c:2e:c5:87:eb:4a:d9: d7:0c:f2:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUImZHIuwPa5490pUGgkxBprYXFJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA2Q0U1RUVFRkRCNUI2NjQzQjE4QTgzRUJFMzlCM0M1 MkZGRDMwNTAeFw0yNjA4MjcxMDM4NTZaFw0yNjA4MjgxMTEzNTZaMDMxMTAvBgNV BAMTKDk3QjFDNDFERTI4MzhBMjI3RTQyNTc1RjUzREUxODYwREJFQkRCNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs1tq2ZASRIO1RbQ/LTmOexGik wphk9fVJWN2+nOkJiJFAth7yCSxOTD+Y59ceR9wFbBzggoONjuSI1dkxdLy9/MNw dPK6WPyMADA7x4CgvjA2HOTlDwM103lNYVyn+nlKc8mNTth0r6/+H7E8uWEDk2p6 05IRlYJ7+B+Uj/8fywsXHB6O9vsRfzaABHb7amrZQg/1jxTiZ8AaXbXsp4zKYaVG Mu0CHWuHxff5SJwRCv46gcdE0mkVcneHPWhkmLqM+nAkCbkolERqvr4QiEV6S0ML JYivYzhmdlnM4FPyP+mOE1Ga9O+m71MRenAvA+/Ltwx1rooSaWHwlgUdsZ11AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl7HEHeKDiiJ+QldfU94YYNvr22wwHwYDVR0j BBgwFoAUoGzl7u/bW2ZDsYqD6+ObPFL/0wUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDEwODViNGEtZjU3My00MmYzLTgyNWMtMWNmMGM4NzJiMTUyLzAvQTA2Q0U1RUVF RkRCNUI2NjQzQjE4QTgzRUJFMzlCM0M1MkZGRDMwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDZDRTVFRUVGREI1QjY2NDNCMThBODNFQkUzOUIzQzUyRkZE MzA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDEwODViNGEtZjU3My00MmYzLTgy NWMtMWNmMGM4NzJiMTUyLzAvQTA2Q0U1RUVFRkRCNUI2NjQzQjE4QTgzRUJFMzlC M0M1MkZGRDMwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADY3SVhmGzahmi6MvATR78vBtflLeITPbjpT mPjj2OWWp0gVxy0p6l9EEJBlzRvB3nTL9LwEH2QzeSvQS1RNvk1zGbRxaPzOzlO5 g6PQLG4rHs2hzlig22OFMFQvPHFpFQ7f/wncRwn1Ay5utxSwmVziT7mD0uPzlQgB qAcNF5BQDujEBZTiz/jIOQHvv+O3tExFMap1Q5PI137xqprzKESIBzOt+jwSY3kn sdB34/qh9qaeThEpRlMfJIDKh9AFoH2JncWVtLBiQlxZ/lv+3H2Kwxhv7rwEvPiR BzoEla9HngNXsAJAZn4UcNXONFTln+W85P5NfC7Fh+tK2dcM8g8= -----END CERTIFICATE-----Generated at Thu Aug 27 17:41:37 2026 by rpki-client