$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft File: 1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft (raw, json) Hash identifier: orVcA6uYKdQJbX0al+AlBG18pHyNxRqrQqfp7sUXZVc= Subject key identifier: 42:77:2E:D7:18:63:01:11:E4:8C:F2:40:8D:28:5A:66:BD:16:1E:20 Authority key identifier: 1E:40:4A:F6:CF:F0:85:E2:0B:EE:4C:7B:E2:A5:F2:BF:28:0F:3B:A8 Certificate issuer: /CN=1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8 Certificate serial: 6AF1155D2F266AAAF378778A566FCF66AFADFDAD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft Manifest number: BF Signing time: Wed 23 Sep 2026 10:44:28 +0000 Manifest this update: Wed 23 Sep 2026 10:39:28 +0000 Manifest next update: Thu 24 Sep 2026 11:10:28 +0000 Files and hashes: 1: 1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl (hash: ISEMCM5npmZcNQ0JVVq+6OV/+lQWqbrnqbglto6w57A=) 2: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (hash: qUv8iwGfDUNsSHoYpr8OtHbSrHxY05J4t5ZSAS55J1w=) 3: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (hash: YqAlX6I3eetKbPgn7q5+SNbPjP9RfqZzOtFwmWR8tB8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f1:15:5d:2f:26:6a:aa:f3:78:77:8a:56:6f:cf:66:af:ad:fd:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8 Validity Not Before: Sep 23 10:39:28 2026 GMT Not After : Sep 24 11:10:28 2026 GMT Subject: CN=42772ED718630111E48CF2408D285A66BD161E20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:09:77:7b:f0:06:7e:74:2d:41:de:fe:58: 7c:61:fb:16:21:61:d5:33:9d:97:d3:56:d0:95:61: 0d:be:cf:17:6b:42:89:f1:79:fb:97:67:ec:67:79: 33:c3:fd:4c:37:73:62:eb:1e:b9:38:be:fc:c6:be: 9b:f1:62:c2:a7:05:a4:d3:3c:98:f3:08:3f:17:70: 34:1d:0f:5b:28:5e:d5:68:d2:ee:a8:bd:07:03:41: c8:09:e4:39:86:27:c9:15:73:6c:5d:0b:7f:65:23: f2:21:38:a7:da:14:89:11:63:ec:f6:1e:d6:93:5d: 0d:31:32:f3:a1:df:d1:9e:b7:14:5c:eb:4f:d1:c8: 2d:67:57:78:a9:66:15:3d:c8:c0:3a:cf:16:26:4f: ae:72:2a:6c:d6:6b:e5:0a:24:62:59:a7:22:cd:1b: 0b:3b:17:3f:66:d5:18:a5:a6:1f:a1:e4:0e:82:ab: 67:05:6e:0f:95:b2:f6:e6:32:35:7b:05:35:f0:9a: c1:66:6a:6c:08:02:d6:0f:91:69:42:b7:96:81:c2: 9d:9a:40:35:bb:2a:0c:bd:ab:86:26:18:d7:63:5d: 21:0d:94:df:ef:89:b9:d3:31:c0:7d:02:bc:51:20: 5b:e6:e0:73:08:5a:5c:3d:38:19:d7:a2:b6:ed:dc: 4e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:77:2E:D7:18:63:01:11:E4:8C:F2:40:8D:28:5A:66:BD:16:1E:20 X509v3 Authority Key Identifier: keyid:1E:40:4A:F6:CF:F0:85:E2:0B:EE:4C:7B:E2:A5:F2:BF:28:0F:3B:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:7a:43:24:ee:70:ce:90:92:68:dc:90:19:a3:27:76:4d:5f: 25:44:b4:7d:29:07:d4:28:e0:6e:3c:fe:08:a2:be:dc:ef:73: 67:9d:7d:93:c3:02:79:33:d4:9a:04:64:c6:d3:3f:ca:cd:bb: 75:59:be:e3:6d:a0:64:78:e0:cf:a7:8e:db:9b:db:db:fe:11: c6:c5:d2:c6:f5:e2:98:a1:dd:1a:4f:57:99:65:39:1b:05:c3: 0f:a1:a9:f7:58:c4:7e:f6:b7:26:96:96:ec:cb:97:44:93:ee: fd:8f:13:bc:a5:16:d8:32:19:97:47:6c:c7:f9:b9:23:e9:88: 65:b4:3d:e2:6b:d7:c3:21:a0:d5:9f:be:4d:aa:73:f6:f9:0b: 93:57:93:d0:0d:9a:05:dd:cd:8a:95:65:29:cd:ed:f6:20:d6: 7a:dc:a8:e3:ce:3b:e5:aa:42:7a:6a:17:c3:9c:77:66:d7:3d: 18:ad:96:07:9e:6e:5a:91:e9:0f:bb:d0:34:34:af:06:13:be: d2:d5:35:f4:cf:55:71:54:c6:8f:20:de:77:af:3f:16:97:fa: ed:a5:e6:2e:12:1f:87:1d:97:de:70:c4:4d:68:4f:72:23:f4: 1e:48:06:62:54:53:ad:a3:75:9b:07:f4:77:89:97:2e:59:7d: 2e:95:49:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUavEVXS8maqrzeHeKVm/PZq+t/a0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU0MDRBRjZDRkYwODVFMjBCRUU0QzdCRTJBNUYyQkYy ODBGM0JBODAeFw0yNjA5MjMxMDM5MjhaFw0yNjA5MjQxMTEwMjhaMDMxMTAvBgNV BAMTKDQyNzcyRUQ3MTg2MzAxMTFFNDhDRjI0MDhEMjg1QTY2QkQxNjFFMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvOgl3e/AGfnQtQd7+WHxh+xYh YdUznZfTVtCVYQ2+zxdrQonxefuXZ+xneTPD/Uw3c2LrHrk4vvzGvpvxYsKnBaTT PJjzCD8XcDQdD1soXtVo0u6ovQcDQcgJ5DmGJ8kVc2xdC39lI/IhOKfaFIkRY+z2 HtaTXQ0xMvOh39GetxRc60/RyC1nV3ipZhU9yMA6zxYmT65yKmzWa+UKJGJZpyLN Gws7Fz9m1Rilph+h5A6Cq2cFbg+VsvbmMjV7BTXwmsFmamwIAtYPkWlCt5aBwp2a QDW7Kgy9q4YmGNdjXSENlN/vibnTMcB9ArxRIFvm4HMIWlw9OBnXorbt3E5HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQncu1xhjARHkjPJAjShaZr0WHiAwHwYDVR0j BBgwFoAUHkBK9s/wheIL7kx74qXyvygPO6gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYwMDIyOGYtNmUyNS00Yzk2LTljZTUtMmQ1MDIyOWExZDE4LzAvMUU0MDRBRjZD RkYwODVFMjBCRUU0QzdCRTJBNUYyQkYyODBGM0JBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRTQwNEFGNkNGRjA4NUUyMEJFRTRDN0JFMkE1RjJCRjI4MEYz QkE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGYwMDIyOGYtNmUyNS00Yzk2LTlj ZTUtMmQ1MDIyOWExZDE4LzAvMUU0MDRBRjZDRkYwODVFMjBCRUU0QzdCRTJBNUYy QkYyODBGM0JBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGp6QyTucM6QkmjckBmjJ3ZNXyVEtH0pB9Qo 4G48/giivtzvc2edfZPDAnkz1JoEZMbTP8rNu3VZvuNtoGR44M+njtub29v+EcbF 0sb14pih3RpPV5llORsFww+hqfdYxH72tyaWluzLl0ST7v2PE7ylFtgyGZdHbMf5 uSPpiGW0PeJr18MhoNWfvk2qc/b5C5NXk9ANmgXdzYqVZSnN7fYg1nrcqOPOO+Wq QnpqF8Ocd2bXPRitlgeeblqR6Q+70DQ0rwYTvtLVNfTPVXFUxo8g3nevPxaX+u2l 5i4SH4cdl95wxE1oT3Ij9B5IBmJUU62jdZsH9HeJly5ZfS6VSbQ= -----END CERTIFICATE-----Generated at Wed Sep 23 19:05:39 2026 by rpki-client