$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft File: A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft (raw, json) Hash identifier: QigEal7wHisA6R2BDfmiiduKchxdkkWXe5dchci/9HU= Subject key identifier: E5:DB:14:64:42:CF:93:4D:D4:73:3F:AF:F3:3E:18:32:59:14:E5:21 Authority key identifier: A8:31:4E:43:A1:B6:F8:AF:DA:8D:95:E8:77:9C:65:41:69:11:D3:10 Certificate issuer: /CN=A8314E43A1B6F8AFDA8D95E8779C65416911D310 Certificate serial: 6D2E238EE88F6FE556EA0A50F5E2A281DEE2DC00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 03:38:02 +0000 Manifest this update: Thu 17 Sep 2026 03:33:01 +0000 Manifest next update: Fri 18 Sep 2026 05:53:01 +0000 Files and hashes: 1: 3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa (hash: GuNiUOOoy6zPyANA8gj8CAZ6aJ70gefpTuHjvXAYLoc=) 2: A8314E43A1B6F8AFDA8D95E8779C65416911D310.crl (hash: BG6AK0rucOW2vXZjO/65kCapFORv6k6xkKHlo4dhgZ4=) 3: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (hash: rj0eAc/Fx3ZnJOzSIDlZ7SEqTTGwaOV3Drw183dIjT4=) 4: 3130332e3131312e3231392e302f32342d3234203d3e20313337333233.roa (hash: 9Ri7gQA5FImbPHcWZvwCuT4KIhatc00BK6BTGVhP2a0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.crl rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:2e:23:8e:e8:8f:6f:e5:56:ea:0a:50:f5:e2:a2:81:de:e2:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8314E43A1B6F8AFDA8D95E8779C65416911D310 Validity Not Before: Sep 17 03:33:01 2026 GMT Not After : Sep 18 05:53:01 2026 GMT Subject: CN=E5DB146442CF934DD4733FAFF33E18325914E521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bb:97:24:96:51:05:13:76:40:30:1e:f5:63: 72:6d:73:34:e0:4a:73:8f:17:16:c1:8f:44:f9:ef: ff:04:22:aa:a3:0f:70:94:fd:bd:ec:8c:2b:67:a5: 44:c4:c3:68:22:78:51:a4:4d:7d:d5:9c:3f:c5:41: 11:65:2c:3e:a9:2b:e0:72:8e:65:00:b2:c0:c5:4c: af:f4:4b:9c:10:32:30:df:60:f7:b7:33:15:40:3c: 84:7e:f0:33:47:2d:93:e9:e9:c4:eb:c3:d3:d3:f1: 51:d6:4c:de:35:de:cb:f1:91:00:c6:13:8d:77:3f: c9:2b:b2:81:9f:e8:10:07:71:fb:3d:90:31:bc:94: 88:94:4b:a6:b5:ff:df:7d:06:93:a8:08:45:d6:49: fb:e8:5a:a3:2a:84:4a:e5:a4:4b:5d:c3:88:60:cf: 3e:d2:04:fd:c1:8b:1d:f6:13:e0:e1:e5:97:5f:82: 82:91:ed:fe:ea:8d:e5:09:36:6d:d5:8f:3a:75:86: a3:5b:fd:ce:b3:ec:ce:8c:79:74:f1:6c:d4:34:c6: 9f:8b:8f:b9:45:28:3b:01:41:2d:61:74:f8:59:98: e0:13:6b:04:24:ac:bd:2c:0d:a9:d3:b2:d7:cd:3d: 4b:85:8f:3a:03:ec:2b:0e:10:18:a0:e4:ee:30:88: 3b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DB:14:64:42:CF:93:4D:D4:73:3F:AF:F3:3E:18:32:59:14:E5:21 X509v3 Authority Key Identifier: keyid:A8:31:4E:43:A1:B6:F8:AF:DA:8D:95:E8:77:9C:65:41:69:11:D3:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f1:c9:96:d4:dc:3d:99:22:f5:32:28:b6:d3:e7:ef:14:49: d0:c5:94:0d:a0:a4:bb:49:c5:59:8d:1c:6b:3b:70:90:18:bb: 16:d8:27:17:48:d9:3a:75:54:06:dc:65:7f:65:cb:08:db:49: 7e:96:1b:e8:28:10:a3:4e:d2:f2:fa:46:00:1f:b5:6b:de:20: ef:aa:3f:b6:20:32:51:2b:93:83:e9:51:73:4a:1c:67:ad:6c: 4e:1b:db:ee:8e:5f:88:3c:8e:1c:45:e9:cf:22:f3:2f:ac:2a: 94:af:74:66:80:00:aa:11:4d:b7:13:5d:74:12:81:05:09:1c: 8c:de:fc:22:d4:3f:ad:ee:b7:00:b3:13:d4:eb:92:30:78:87: ed:29:24:87:f4:41:06:dc:0e:71:04:5b:37:e5:14:90:0c:5b: d9:fd:fd:15:83:ae:e4:95:c3:52:6a:08:c2:f5:c6:8b:51:5d: 65:67:6d:36:c4:b2:b2:07:ff:bb:65:e2:21:4e:cf:0e:fb:47: 3f:25:50:9a:5e:a4:35:d9:c4:88:c8:df:93:54:32:39:84:14: 20:d1:a9:29:a2:65:05:02:52:73:86:f0:16:d0:ad:4c:fd:4a: e5:a9:66:bf:c3:66:e2:33:d0:4d:be:98:fb:01:43:dd:63:5b: b4:fe:dc:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbS4jjuiPb+VW6gpQ9eKigd7i3AAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgzMTRFNDNBMUI2RjhBRkRBOEQ5NUU4Nzc5QzY1NDE2 OTExRDMxMDAeFw0yNjA5MTcwMzMzMDFaFw0yNjA5MTgwNTUzMDFaMDMxMTAvBgNV BAMTKEU1REIxNDY0NDJDRjkzNERENDczM0ZBRkYzM0UxODMyNTkxNEU1MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzu5ckllEFE3ZAMB71Y3JtczTg SnOPFxbBj0T57/8EIqqjD3CU/b3sjCtnpUTEw2gieFGkTX3VnD/FQRFlLD6pK+By jmUAssDFTK/0S5wQMjDfYPe3MxVAPIR+8DNHLZPp6cTrw9PT8VHWTN413svxkQDG E413P8krsoGf6BAHcfs9kDG8lIiUS6a1/999BpOoCEXWSfvoWqMqhErlpEtdw4hg zz7SBP3Bix32E+Dh5ZdfgoKR7f7qjeUJNm3Vjzp1hqNb/c6z7M6MeXTxbNQ0xp+L j7lFKDsBQS1hdPhZmOATawQkrL0sDanTstfNPUuFjzoD7CsOEBig5O4wiDsbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5dsUZELPk03Ucz+v8z4YMlkU5SEwHwYDVR0j BBgwFoAUqDFOQ6G2+K/ajZXod5xlQWkR0xAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTFhZjE0NGItYjkyZS00ZmZmLWI2NDEtZTQ2ZmRkZThjNmRmLzAvQTgzMTRFNDNB MUI2RjhBRkRBOEQ5NUU4Nzc5QzY1NDE2OTExRDMxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODMxNEU0M0ExQjZGOEFGREE4RDk1RTg3NzlDNjU0MTY5MTFE MzEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTFhZjE0NGItYjkyZS00ZmZmLWI2 NDEtZTQ2ZmRkZThjNmRmLzAvQTgzMTRFNDNBMUI2RjhBRkRBOEQ5NUU4Nzc5QzY1 NDE2OTExRDMxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrxyZbU3D2ZIvUyKLbT5+8USdDFlA2gpLtJ xVmNHGs7cJAYuxbYJxdI2Tp1VAbcZX9lywjbSX6WG+goEKNO0vL6RgAftWveIO+q P7YgMlErk4PpUXNKHGetbE4b2+6OX4g8jhxF6c8i8y+sKpSvdGaAAKoRTbcTXXQS gQUJHIze/CLUP63utwCzE9TrkjB4h+0pJIf0QQbcDnEEWzflFJAMW9n9/RWDruSV w1JqCML1xotRXWVnbTbEsrIH/7tl4iFOzw77Rz8lUJpepDXZxIjI35NUMjmEFCDR qSmiZQUCUnOG8BbQrUz9SuWpZr/DZuIz0E2+mPsBQ91jW7T+3Lo= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:42 2026 by rpki-client