$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft File: A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft (raw, json) Hash identifier: fwre+G/EWo+f1suBMvIyi4hkb4TWpfhTiel2AK4EsIs= Subject key identifier: 00:45:D5:1F:69:1C:97:39:4A:11:0F:B0:F3:0A:4E:A6:12:E6:02:98 Authority key identifier: A4:3C:61:0C:15:26:2A:F1:F9:93:3E:16:0A:30:AE:3D:98:59:DD:A3 Certificate issuer: /CN=A43C610C15262AF1F9933E160A30AE3D9859DDA3 Certificate serial: 2B536BE272BD9950A9884BB9744FFDADD37FA2D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A43C610C15262AF1F9933E160A30AE3D9859DDA3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 05:09:48 +0000 Manifest this update: Thu 17 Sep 2026 05:04:48 +0000 Manifest next update: Fri 18 Sep 2026 06:11:48 +0000 Files and hashes: 1: A43C610C15262AF1F9933E160A30AE3D9859DDA3.crl (hash: T7+tb4vgPkaZkGChvffIVfPyWSYBopUso/n7pJo5TMQ=) 2: 3130332e3131332e32362e302f32342d3234203d3e20313337333339.roa (hash: YWJzGjODoThVoKPyccsDqAnY6JX/6P8ILYIH216SRNI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.crl rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A43C610C15262AF1F9933E160A30AE3D9859DDA3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:53:6b:e2:72:bd:99:50:a9:88:4b:b9:74:4f:fd:ad:d3:7f:a2:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A43C610C15262AF1F9933E160A30AE3D9859DDA3 Validity Not Before: Sep 17 05:04:48 2026 GMT Not After : Sep 18 06:11:48 2026 GMT Subject: CN=0045D51F691C97394A110FB0F30A4EA612E60298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3e:99:45:9c:4c:16:97:ae:a5:f0:15:07:a3: c6:2a:7f:55:60:c6:a9:21:9e:b1:e1:93:ae:e1:2a: ef:13:c7:c1:7a:1e:ca:3a:cd:60:98:c5:8b:86:68: 7b:fd:dc:65:69:26:18:fa:4a:fe:91:af:58:ec:d3: 97:d4:5a:a9:5a:67:ec:b1:96:80:a5:1d:81:15:d8: ab:c6:32:e0:59:97:94:ef:9e:37:79:60:bf:58:f7: ad:82:fe:0b:eb:9b:bb:90:7b:d4:4e:49:3c:da:d5: 96:ed:0d:32:0d:4c:59:67:d0:7e:2e:dd:3e:0f:32: 07:94:97:50:aa:ac:ce:aa:45:20:a2:96:3e:4c:f2: be:52:2d:a1:1d:55:b9:d6:91:c1:bb:75:8b:be:13: 89:aa:d4:c3:72:a3:35:25:46:1d:21:fc:bb:05:b1: aa:05:e8:fd:e6:9e:8f:8a:56:79:99:2e:1b:6e:20: 55:8d:54:be:86:ba:77:8d:a0:eb:a8:01:a0:9e:b4: 46:40:32:cd:90:fe:0b:95:96:43:df:3c:52:2a:7b: ae:72:71:fc:7f:c5:89:33:59:86:46:30:b0:1c:18: 4f:be:ed:ee:74:24:cb:c0:03:29:89:a8:ca:13:b8: c6:25:52:ec:2b:a9:0c:eb:e3:1b:e3:a4:f7:9d:b0: f2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:45:D5:1F:69:1C:97:39:4A:11:0F:B0:F3:0A:4E:A6:12:E6:02:98 X509v3 Authority Key Identifier: keyid:A4:3C:61:0C:15:26:2A:F1:F9:93:3E:16:0A:30:AE:3D:98:59:DD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A43C610C15262AF1F9933E160A30AE3D9859DDA3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:00:96:94:af:f1:4e:a0:26:15:fc:e4:d9:72:57:be:b7:68: 4a:aa:7c:50:d2:0a:94:e1:88:81:2d:f3:36:a6:bb:9b:27:ed: 7e:e9:a7:d2:8f:2a:50:79:f9:d2:4b:9f:f7:cb:c4:e7:11:0d: 57:fd:1c:39:e6:dd:8b:4b:c6:4d:ab:e1:32:96:6a:92:f5:96: 29:05:db:1c:64:47:b6:c8:65:ce:cc:56:6e:44:58:79:37:4d: a0:52:55:c7:77:89:1a:ed:5c:d8:3e:8b:07:87:34:96:8f:a4: 27:4f:f5:45:b0:ac:de:76:92:15:47:2c:7f:e3:80:67:45:3f: 3b:65:dd:b9:2a:e3:7f:4a:ec:31:06:15:8b:56:22:ed:86:c6: 82:be:dd:51:e7:e7:90:8b:55:17:7f:69:b8:cf:da:ef:09:a5: f1:b3:34:42:98:00:1a:6c:d3:de:77:7e:a8:3b:3c:4d:5f:0c: 60:09:77:0d:de:17:b9:da:09:6f:da:6f:25:bb:59:0e:6e:14: 41:c8:2c:2b:78:4c:f7:24:34:7e:b5:c9:f9:c1:28:ab:44:5b: cf:ac:11:3d:db:ab:40:82:c0:02:42:4b:db:97:c6:18:ae:32: 47:17:60:f6:6f:09:96:88:00:82:52:3b:45:7b:dd:c0:87:3e: 6d:df:c6:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK1Nr4nK9mVCpiEu5dE/9rdN/otIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQzQzYxMEMxNTI2MkFGMUY5OTMzRTE2MEEzMEFFM0Q5 ODU5RERBMzAeFw0yNjA5MTcwNTA0NDhaFw0yNjA5MTgwNjExNDhaMDMxMTAvBgNV BAMTKDAwNDVENTFGNjkxQzk3Mzk0QTExMEZCMEYzMEE0RUE2MTJFNjAyOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuPplFnEwWl66l8BUHo8Yqf1Vg xqkhnrHhk67hKu8Tx8F6Hso6zWCYxYuGaHv93GVpJhj6Sv6Rr1js05fUWqlaZ+yx loClHYEV2KvGMuBZl5Tvnjd5YL9Y962C/gvrm7uQe9ROSTza1ZbtDTINTFln0H4u 3T4PMgeUl1CqrM6qRSCilj5M8r5SLaEdVbnWkcG7dYu+E4mq1MNyozUlRh0h/LsF saoF6P3mno+KVnmZLhtuIFWNVL6GuneNoOuoAaCetEZAMs2Q/guVlkPfPFIqe65y cfx/xYkzWYZGMLAcGE++7e50JMvAAymJqMoTuMYlUuwrqQzr4xvjpPedsPJpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAEXVH2kclzlKEQ+w8wpOphLmApgwHwYDVR0j BBgwFoAUpDxhDBUmKvH5kz4WCjCuPZhZ3aMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFiY2U3MWUtNGVlNC00NTkwLTk0ZmItMzdmZmQ5ZjBkNmI3LzAvQTQzQzYxMEMx NTI2MkFGMUY5OTMzRTE2MEEzMEFFM0Q5ODU5RERBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDNDNjEwQzE1MjYyQUYxRjk5MzNFMTYwQTMwQUUzRDk4NTlE REEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFiY2U3MWUtNGVlNC00NTkwLTk0 ZmItMzdmZmQ5ZjBkNmI3LzAvQTQzQzYxMEMxNTI2MkFGMUY5OTMzRTE2MEEzMEFF M0Q5ODU5RERBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMAlpSv8U6gJhX85NlyV763aEqqfFDSCpTh iIEt8zamu5sn7X7pp9KPKlB5+dJLn/fLxOcRDVf9HDnm3YtLxk2r4TKWapL1likF 2xxkR7bIZc7MVm5EWHk3TaBSVcd3iRrtXNg+iweHNJaPpCdP9UWwrN52khVHLH/j gGdFPztl3bkq439K7DEGFYtWIu2GxoK+3VHn55CLVRd/abjP2u8JpfGzNEKYABps 0953fqg7PE1fDGAJdw3eF7naCW/abyW7WQ5uFEHILCt4TPckNH61yfnBKKtEW8+s ET3bq0CCwAJCS9uXxhiuMkcXYPZvCZaIAIJSO0V73cCHPm3fxiA= -----END CERTIFICATE-----Generated at Thu Sep 17 14:39:35 2026 by rpki-client