$ rpki-client -vvvf rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.mft File: 1351A2C01F31DE3BE0AE00B957282481FA877D80.mft (raw, json) Hash identifier: 9i9NAX/uVNCZRQhY7RhKs/hoxumaDM3s1J17p+uaAYA= Subject key identifier: C1:06:B1:14:ED:BA:1E:0B:01:4F:39:FF:B8:07:71:13:EE:E4:1E:21 Authority key identifier: 13:51:A2:C0:1F:31:DE:3B:E0:AE:00:B9:57:28:24:81:FA:87:7D:80 Certificate issuer: /CN=1351A2C01F31DE3BE0AE00B957282481FA877D80 Certificate serial: 2F02D28C0ED4431E1CF69215CC91568F193F62B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1351A2C01F31DE3BE0AE00B957282481FA877D80.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 11:45:06 +0000 Manifest this update: Fri 25 Sep 2026 11:40:06 +0000 Manifest next update: Sat 26 Sep 2026 11:58:06 +0000 Files and hashes: 1: 3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa (hash: fjuzJS9VCKizjfIN5unaQZhEiXot8Mm25qklVdFMhbs=) 2: 1351A2C01F31DE3BE0AE00B957282481FA877D80.crl (hash: 9f5z/tZhr5sUnfAFc2Z16RREjl1JQUWtMQJlAvC+EWg=) 3: 3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa (hash: VfT1JeeXKm1v01tmdjLA+eN6veAeXQzQ5yXazEtdaok=) 4: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (hash: XC72sTT1UANPWg5y93bIJ8fKMA+26iRggZMn6hJnkeY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.crl rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1351A2C01F31DE3BE0AE00B957282481FA877D80.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 11:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:02:d2:8c:0e:d4:43:1e:1c:f6:92:15:cc:91:56:8f:19:3f:62:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1351A2C01F31DE3BE0AE00B957282481FA877D80 Validity Not Before: Sep 25 11:40:06 2026 GMT Not After : Sep 26 11:58:06 2026 GMT Subject: CN=C106B114EDBA1E0B014F39FFB8077113EEE41E21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9c:85:2a:8f:10:2d:cb:6e:cd:49:9e:41:fd: e7:17:cd:4d:4f:a2:30:fc:08:78:21:4b:72:7b:a0: 2b:d0:bf:7e:c2:d8:23:b0:a9:e3:21:77:b3:78:7d: c7:7f:ea:61:75:04:56:5f:e3:74:8c:52:58:b6:46: d1:24:a4:2b:57:49:32:85:01:b5:94:93:9d:86:55: e0:55:38:90:4d:2b:26:95:47:95:95:94:d0:c0:c4: 88:7d:e5:67:27:1b:74:10:2b:67:64:4f:7e:ed:1c: c0:e1:03:ae:1a:f4:b2:ce:bb:35:43:fd:0c:7f:10: a5:1e:51:26:49:c3:ec:4e:55:81:a9:a4:a2:2f:c2: c0:27:dc:ec:0c:1c:ec:32:11:5c:eb:14:b9:22:43: df:57:62:f5:db:cb:93:33:02:58:d0:24:22:b2:a5: 1a:60:c8:44:61:aa:e2:47:2a:8e:1c:c8:9c:bd:1c: 02:4b:d6:a5:8f:e2:70:0e:af:b2:1f:f5:96:ba:03: fb:56:85:74:25:eb:7f:7c:f3:6a:be:45:20:9a:c1: 39:b2:e2:34:96:9a:5c:7e:9d:85:26:9e:3c:15:c2: cd:7f:ac:34:f4:5c:69:df:1c:c6:92:81:7b:1a:a7: b3:1f:60:36:08:fc:b6:d2:b9:25:c6:fe:e0:ee:e1: 38:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:06:B1:14:ED:BA:1E:0B:01:4F:39:FF:B8:07:71:13:EE:E4:1E:21 X509v3 Authority Key Identifier: keyid:13:51:A2:C0:1F:31:DE:3B:E0:AE:00:B9:57:28:24:81:FA:87:7D:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1351A2C01F31DE3BE0AE00B957282481FA877D80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:02:48:1a:1b:bd:75:39:9c:6c:5d:d9:fc:4c:d1:9a:a7:cd: 1c:c4:d6:ec:a6:ba:39:82:67:25:4a:d9:a9:a2:47:ee:4c:fb: 7c:3c:ce:51:a1:95:83:71:9b:1f:fc:7c:b6:c9:1c:6e:99:f6: 89:f1:3a:14:12:48:31:68:e6:7e:4b:02:a2:14:96:c4:ff:98: d9:c4:94:cf:eb:83:6b:1b:02:9b:94:60:04:4d:1e:31:22:47: f5:28:5f:69:03:75:2c:af:c4:10:09:b4:a9:e8:73:66:c6:65: b9:72:70:e4:ba:ff:61:f8:d0:38:81:cd:dc:cd:82:cb:4f:0f: a1:af:b4:d4:d5:fa:2d:62:f5:ff:3a:73:7a:1e:ed:11:dd:43: 98:9c:a1:96:33:91:c1:74:03:99:01:dd:1c:6f:bd:f1:62:44: a2:5b:8a:33:74:ec:b4:55:c4:a9:d5:52:ba:54:ba:fe:fa:7f: 46:78:f4:78:16:58:b7:88:24:9e:21:5c:c1:02:6c:57:44:17: d2:4a:53:d1:4a:8e:fa:c8:90:33:a7:e6:4b:35:a7:25:61:01: ba:4a:11:07:63:87:be:79:ac:de:7e:d6:6e:69:c5:69:5b:47: 53:88:41:6d:aa:20:35:1e:d9:ef:11:f2:ef:16:38:75:fa:31: 92:77:24:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULwLSjA7UQx4c9pIVzJFWjxk/YrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM1MUEyQzAxRjMxREUzQkUwQUUwMEI5NTcyODI0ODFG QTg3N0Q4MDAeFw0yNjA5MjUxMTQwMDZaFw0yNjA5MjYxMTU4MDZaMDMxMTAvBgNV BAMTKEMxMDZCMTE0RURCQTFFMEIwMTRGMzlGRkI4MDc3MTEzRUVFNDFFMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXnIUqjxAty27NSZ5B/ecXzU1P ojD8CHghS3J7oCvQv37C2COwqeMhd7N4fcd/6mF1BFZf43SMUli2RtEkpCtXSTKF AbWUk52GVeBVOJBNKyaVR5WVlNDAxIh95WcnG3QQK2dkT37tHMDhA64a9LLOuzVD /Qx/EKUeUSZJw+xOVYGppKIvwsAn3OwMHOwyEVzrFLkiQ99XYvXby5MzAljQJCKy pRpgyERhquJHKo4cyJy9HAJL1qWP4nAOr7If9Za6A/tWhXQl639882q+RSCawTmy 4jSWmlx+nYUmnjwVws1/rDT0XGnfHMaSgXsap7MfYDYI/LbSuSXG/uDu4TiHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwQaxFO26HgsBTzn/uAdxE+7kHiEwHwYDVR0j BBgwFoAUE1GiwB8x3jvgrgC5VygkgfqHfYAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVlZmNiZjAtNjZlYy00OGQzLWIyMjEtMGYwOTY4NmQ1ODE4LzAvMTM1MUEyQzAx RjMxREUzQkUwQUUwMEI5NTcyODI0ODFGQTg3N0Q4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzUxQTJDMDFGMzFERTNCRTBBRTAwQjk1NzI4MjQ4MUZBODc3 RDgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVlZmNiZjAtNjZlYy00OGQzLWIy MjEtMGYwOTY4NmQ1ODE4LzAvMTM1MUEyQzAxRjMxREUzQkUwQUUwMEI5NTcyODI0 ODFGQTg3N0Q4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoCSBobvXU5nGxd2fxM0ZqnzRzE1uymujmC ZyVK2amiR+5M+3w8zlGhlYNxmx/8fLbJHG6Z9onxOhQSSDFo5n5LAqIUlsT/mNnE lM/rg2sbApuUYARNHjEiR/UoX2kDdSyvxBAJtKnoc2bGZblycOS6/2H40DiBzdzN gstPD6GvtNTV+i1i9f86c3oe7RHdQ5icoZYzkcF0A5kB3RxvvfFiRKJbijN07LRV xKnVUrpUuv76f0Z49HgWWLeIJJ4hXMECbFdEF9JKU9FKjvrIkDOn5ks1pyVhAbpK EQdjh755rN5+1m5pxWlbR1OIQW2qIDUe2e8R8u8WOHX6MZJ3JBI= -----END CERTIFICATE-----Generated at Fri Sep 25 21:52:57 2026 by rpki-client