$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft File: 1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft (raw, json) Hash identifier: +aSWRO9MoptA+qczwed6NM8aLt/J2ua1+ErJu2U7cDg= Subject key identifier: 71:1B:7B:10:2B:DA:11:F5:70:D7:49:B4:47:E5:79:56:24:2A:B0:F1 Authority key identifier: 1C:64:A5:D7:8F:86:E2:7A:0F:CF:C0:B1:E2:60:6E:2A:96:1F:72:05 Certificate issuer: /CN=1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205 Certificate serial: 6DB151E954B61665C85FA3395C45C0E8C0DF48F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 06:49:09 +0000 Manifest this update: Fri 25 Sep 2026 06:44:09 +0000 Manifest next update: Sat 26 Sep 2026 10:34:09 +0000 Files and hashes: 1: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: sefAns8WGP+QODtyZI5xSMBLlCAhkEsg1IdG1oXtiJc=) 2: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: krKKJL8xoxgN2wyxvjJrqrqA9vT6YHk/PFCm7/PP3c4=) 3: 1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl (hash: 6AE84vUfM9/cqwWM+2xAIfSKxxm2oRfnEgBAajcjkfA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 10:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b1:51:e9:54:b6:16:65:c8:5f:a3:39:5c:45:c0:e8:c0:df:48:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205 Validity Not Before: Sep 25 06:44:09 2026 GMT Not After : Sep 26 10:34:09 2026 GMT Subject: CN=711B7B102BDA11F570D749B447E57956242AB0F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6c:58:1f:67:c9:7a:6b:4f:6a:fc:2e:22:4c: cc:b7:51:d6:17:1c:a7:4a:75:1e:2d:4b:70:bd:9e: 74:17:ab:fb:ad:19:c9:03:a5:bb:d2:ce:fe:12:be: c6:17:32:4e:5e:09:0e:9e:f0:e2:5b:fd:36:43:47: b2:ee:6a:e7:2f:97:c4:62:cb:d5:ad:98:78:c1:f8: 8b:a6:77:d3:31:fe:e1:cb:17:3c:5e:2d:ea:c9:0f: 3b:c4:bf:28:0b:56:c7:65:ff:a1:0b:3d:3a:bb:72: c2:5b:ff:41:85:6a:72:d5:fd:9c:5e:fc:eb:1f:63: 8d:24:8a:a8:40:02:d6:fd:70:a3:b6:7f:af:75:44: 7d:76:80:0b:39:04:93:c6:f6:ef:33:f3:94:73:48: 16:af:d2:05:fc:83:97:dd:21:aa:87:5b:da:43:81: 0e:a0:72:e2:82:5a:b9:de:0f:17:a3:e9:4c:98:e1: 27:0a:02:32:6a:d0:28:19:58:3e:49:7a:1a:8e:97: 04:18:ff:a7:90:5f:ee:99:fa:24:b3:97:d1:23:31: 4b:d0:b3:40:28:4a:5c:77:cf:88:2e:56:a7:27:4a: e3:95:5b:27:4a:bc:cd:7d:36:5a:d4:63:b3:e0:d3: 5d:94:35:d9:b8:e2:38:02:d4:fe:ac:d8:a5:87:2a: 6d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1B:7B:10:2B:DA:11:F5:70:D7:49:B4:47:E5:79:56:24:2A:B0:F1 X509v3 Authority Key Identifier: keyid:1C:64:A5:D7:8F:86:E2:7A:0F:CF:C0:B1:E2:60:6E:2A:96:1F:72:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:23:2f:ad:c9:6b:00:65:9f:63:90:e7:c6:59:01:cc:5c:ba: af:d2:35:4f:2c:89:84:f7:c9:ba:88:08:cd:4b:49:01:e8:4d: 94:1b:9d:95:d6:e0:ce:e7:8b:4a:42:05:0b:6b:bc:f9:0b:a5: 1c:72:24:1a:17:25:4c:80:91:c3:b9:62:61:7e:71:73:6d:23: 0d:c0:30:77:e9:54:39:4f:e2:0a:0a:97:a9:18:99:58:ba:b8: 7b:fd:60:ea:e9:38:53:2a:62:fb:73:bd:2a:e6:58:e3:1c:39: 81:da:9f:f0:44:c9:ac:f5:3a:ec:96:c9:ed:49:36:02:2f:92: cc:af:e7:00:9d:bc:1e:50:a6:bc:5a:af:65:3b:04:3b:63:99: 27:82:b7:38:e6:db:bc:26:f2:7f:04:b2:e4:02:d4:5f:cb:e0: ae:3b:66:e8:a8:ad:62:e9:9e:bc:52:ed:b9:dd:8a:27:38:a4: 73:1b:41:6a:f6:10:ad:8d:8b:b7:e3:fb:7c:fd:88:63:98:19: 99:d2:37:d9:79:a1:1d:ef:14:81:cf:a6:b1:7d:b1:ff:85:a7: b8:2c:24:94:72:70:e3:e7:80:ed:5e:e4:08:f8:33:49:59:9c: 09:85:9d:7e:2a:6e:db:b3:2d:a9:ea:cd:bf:e1:13:60:bd:df: cf:f5:09:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbbFR6VS2FmXIX6M5XEXA6MDfSPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM2NEE1RDc4Rjg2RTI3QTBGQ0ZDMEIxRTI2MDZFMkE5 NjFGNzIwNTAeFw0yNjA5MjUwNjQ0MDlaFw0yNjA5MjYxMDM0MDlaMDMxMTAvBgNV BAMTKDcxMUI3QjEwMkJEQTExRjU3MEQ3NDlCNDQ3RTU3OTU2MjQyQUIwRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBbFgfZ8l6a09q/C4iTMy3UdYX HKdKdR4tS3C9nnQXq/utGckDpbvSzv4SvsYXMk5eCQ6e8OJb/TZDR7Luaucvl8Ri y9WtmHjB+Iumd9Mx/uHLFzxeLerJDzvEvygLVsdl/6ELPTq7csJb/0GFanLV/Zxe /OsfY40kiqhAAtb9cKO2f691RH12gAs5BJPG9u8z85RzSBav0gX8g5fdIaqHW9pD gQ6gcuKCWrneDxej6UyY4ScKAjJq0CgZWD5JehqOlwQY/6eQX+6Z+iSzl9EjMUvQ s0AoSlx3z4guVqcnSuOVWydKvM19NlrUY7Pg012UNdm44jgC1P6s2KWHKm2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcRt7ECvaEfVw10m0R+V5ViQqsPEwHwYDVR0j BBgwFoAUHGSl14+G4noPz8Cx4mBuKpYfcgUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdkZWRlZDEtZDE0ZS00MTIzLWI1YzktYzkzYTU5OTdmYzMwLzAvMUM2NEE1RDc4 Rjg2RTI3QTBGQ0ZDMEIxRTI2MDZFMkE5NjFGNzIwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQzY0QTVENzhGODZFMjdBMEZDRkMwQjFFMjYwNkUyQTk2MUY3 MjA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvMUM2NEE1RDc4Rjg2RTI3QTBGQ0ZDMEIxRTI2MDZF MkE5NjFGNzIwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMQjL63JawBln2OQ58ZZAcxcuq/SNU8siYT3 ybqICM1LSQHoTZQbnZXW4M7ni0pCBQtrvPkLpRxyJBoXJUyAkcO5YmF+cXNtIw3A MHfpVDlP4goKl6kYmVi6uHv9YOrpOFMqYvtzvSrmWOMcOYHan/BEyaz1OuyWye1J NgIvksyv5wCdvB5Qprxar2U7BDtjmSeCtzjm27wm8n8EsuQC1F/L4K47ZuiorWLp nrxS7bndiic4pHMbQWr2EK2Ni7fj+3z9iGOYGZnSN9l5oR3vFIHPprF9sf+Fp7gs JJRycOPngO1e5Aj4M0lZnAmFnX4qbtuzLanqzb/hE2C938/1CUI= -----END CERTIFICATE-----Generated at Sat Sep 26 00:28:55 2026 by rpki-client