$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft File: 1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft (raw, json) Hash identifier: V85CI+55pBiCG8L9kVQWjIdI34tp90Hx42KJiqrV/oY= Subject key identifier: 0F:A0:42:4A:34:DD:ED:1B:2C:39:E6:C8:C8:AE:C7:31:C2:60:4E:9B Authority key identifier: 1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA Certificate issuer: /CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA Certificate serial: 19BB4BC96EFA31E96DC6F5B197DB9A6015EB2B74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 17:47:57 +0000 Manifest this update: Wed 23 Sep 2026 17:42:57 +0000 Manifest next update: Thu 24 Sep 2026 21:05:57 +0000 Files and hashes: 1: 1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl (hash: xHR2AnrI4NqxEkjxM9RM5dIjoVStljcIJ7VyKvEV720=) 2: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: nSsVilLmRiJa0+a7BBDxlGj708JBl0xDsJ3rq/l4Ock=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:05:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:bb:4b:c9:6e:fa:31:e9:6d:c6:f5:b1:97:db:9a:60:15:eb:2b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA Validity Not Before: Sep 23 17:42:57 2026 GMT Not After : Sep 24 21:05:57 2026 GMT Subject: CN=0FA0424A34DDED1B2C39E6C8C8AEC731C2604E9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b3:fb:d2:34:2e:c6:a2:bd:17:f3:3a:d6:34: ce:22:a9:13:2a:9e:1b:4c:4e:67:fc:ee:6f:e4:67: 5a:7d:ca:d4:7d:21:01:67:16:70:27:40:90:1f:e8: d2:7d:6e:19:2c:f5:ba:a9:d1:34:81:c4:66:a2:0f: 7e:2d:00:e6:bd:60:51:f6:66:4d:88:2d:63:a6:ce: a7:a5:c4:d6:48:ea:66:d5:67:f8:d8:1d:c9:19:22: 69:cd:a0:bd:3a:10:24:ae:37:94:bf:83:5e:96:b9: ac:cf:9f:cc:cb:50:5f:90:38:f0:e2:4d:91:cd:be: 79:fd:fa:87:ea:47:f6:f9:da:29:a3:ac:c2:54:b8: c2:2a:60:17:6e:46:e4:fb:62:8a:4f:9b:e4:d4:be: 02:1c:29:59:d0:a4:e4:2b:6e:d6:3f:cf:6d:1c:ac: f8:ae:09:d6:b8:28:b6:8b:7b:d2:df:34:d5:fd:59: 79:a4:bf:a1:3a:4c:20:f3:64:7c:12:de:42:d9:5b: 0e:7e:04:86:90:1b:26:fa:7c:8b:71:53:b2:67:fe: fe:4d:e1:2a:4d:fa:e6:e2:fb:d2:88:3f:a3:bf:00: f8:7c:a5:b0:10:d2:6c:94:8d:17:c6:c1:13:f4:88: 96:d5:56:01:dd:88:e0:ad:a0:f0:20:0c:ab:d1:f1: 0b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A0:42:4A:34:DD:ED:1B:2C:39:E6:C8:C8:AE:C7:31:C2:60:4E:9B X509v3 Authority Key Identifier: keyid:1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:8e:b2:78:68:d1:1e:1c:ec:7d:64:c8:cd:86:6a:8a:3e:8d: f6:8e:57:ec:16:fd:db:81:58:8a:11:fa:f4:b3:f1:0e:8c:87: 6b:20:9e:12:6b:87:c3:c1:06:87:4f:51:18:58:50:76:b4:a1: d9:b1:84:e5:dc:74:6a:97:b0:80:4c:d3:6d:bf:93:f3:de:f3: d2:06:18:11:4c:6b:86:f4:34:92:3f:c1:eb:8f:77:4d:75:b6: a2:9a:90:9f:12:dd:e1:04:f0:0d:6f:a2:4c:3e:f9:24:dd:71: a2:6c:06:b0:39:03:85:6e:13:8f:ac:5f:ca:5d:57:a1:94:78: e2:36:02:9c:43:6a:cb:26:9c:2a:0e:7b:04:65:46:a0:5b:aa: 2d:65:2e:9d:39:b9:e2:9e:b4:7b:af:ab:57:a3:e4:9a:69:c3: b8:41:d7:3d:46:85:0c:09:f7:d9:88:fd:cd:33:c6:98:f7:9f: 14:5a:2a:6c:1a:4a:cb:6a:f8:ef:ce:a7:a9:8c:ec:d0:43:94: cb:de:63:5a:f2:e6:a1:92:92:c7:2e:b1:65:c9:09:13:45:c4: ff:fa:09:f5:e6:c8:48:22:a1:eb:c0:8c:25:35:73:03:c9:ef: 3f:5c:fa:c2:99:a2:af:84:62:e9:76:3e:68:4f:d4:b2:5e:95: 6f:c7:fb:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGbtLyW76MeltxvWxl9uaYBXrK3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ0NTczMjVDODVGM0ZFRTJERTU3RkQzRUQyNTI2RDhD MTA0NTFGQTAeFw0yNjA5MjMxNzQyNTdaFw0yNjA5MjQyMTA1NTdaMDMxMTAvBgNV BAMTKDBGQTA0MjRBMzREREVEMUIyQzM5RTZDOEM4QUVDNzMxQzI2MDRFOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUs/vSNC7Gor0X8zrWNM4iqRMq nhtMTmf87m/kZ1p9ytR9IQFnFnAnQJAf6NJ9bhks9bqp0TSBxGaiD34tAOa9YFH2 Zk2ILWOmzqelxNZI6mbVZ/jYHckZImnNoL06ECSuN5S/g16WuazPn8zLUF+QOPDi TZHNvnn9+ofqR/b52imjrMJUuMIqYBduRuT7YopPm+TUvgIcKVnQpOQrbtY/z20c rPiuCda4KLaLe9LfNNX9WXmkv6E6TCDzZHwS3kLZWw5+BIaQGyb6fItxU7Jn/v5N 4SpN+ubi+9KIP6O/APh8pbAQ0myUjRfGwRP0iJbVVgHdiOCtoPAgDKvR8QsxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD6BCSjTd7RssOebIyK7HMcJgTpswHwYDVR0j BBgwFoAUHUVzJchfP+4t5X/T7SUm2MEEUfowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQwMWIyZDEtMDFjYS00MGU4LWJmNzctOTg2MTU5ODY3YTA0LzAvMUQ0NTczMjVD ODVGM0ZFRTJERTU3RkQzRUQyNTI2RDhDMTA0NTFGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDQ1NzMyNUM4NUYzRkVFMkRFNTdGRDNFRDI1MjZEOEMxMDQ1 MUZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvMUQ0NTczMjVDODVGM0ZFRTJERTU3RkQzRUQyNTI2 RDhDMTA0NTFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmOsnho0R4c7H1kyM2Gaoo+jfaOV+wW/duB WIoR+vSz8Q6Mh2sgnhJrh8PBBodPURhYUHa0odmxhOXcdGqXsIBM022/k/Pe89IG GBFMa4b0NJI/weuPd011tqKakJ8S3eEE8A1vokw++STdcaJsBrA5A4VuE4+sX8pd V6GUeOI2ApxDassmnCoOewRlRqBbqi1lLp05ueKetHuvq1ej5Jppw7hB1z1GhQwJ 99mI/c0zxpj3nxRaKmwaSstq+O/Op6mM7NBDlMveY1ry5qGSkscusWXJCRNFxP/6 CfXmyEgioevAjCU1cwPJ7z9c+sKZoq+EYul2PmhP1LJelW/H+wQ= -----END CERTIFICATE-----Generated at Thu Sep 24 10:22:11 2026 by rpki-client