$ rpki-client -vvvf rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft File: 1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft (raw, json) Hash identifier: 28g8HLsDeg8YlSZWeuP3iq+teR+JR0cjWeLV+abwGMQ= Subject key identifier: D5:76:F8:48:43:3A:6F:AD:21:08:A9:0B:8F:D3:FD:9D:3F:A7:B0:50 Authority key identifier: 1C:4F:D4:27:31:A3:06:9E:B1:1E:BB:1A:1D:08:D6:E4:59:2C:9A:F0 Certificate issuer: /CN=1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0 Certificate serial: 6DA7CF039088FFE7BBD1009325CB6D18EF5D129B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 18:59:27 +0000 Manifest this update: Wed 23 Sep 2026 18:54:27 +0000 Manifest next update: Thu 24 Sep 2026 22:44:27 +0000 Files and hashes: 1: 3130332e3137342e31382e302f32332d3234203d3e20313331313131.roa (hash: u/1jDxUqM/7ncceawRPeB2DW2rEBNRQs2Nl3FA3lKkg=) 2: 1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl (hash: hdZI6BbEvDFkiQzNQ4LvRvHnsJwzN3Ay6CQLJFqBRYE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a7:cf:03:90:88:ff:e7:bb:d1:00:93:25:cb:6d:18:ef:5d:12:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0 Validity Not Before: Sep 23 18:54:27 2026 GMT Not After : Sep 24 22:44:27 2026 GMT Subject: CN=D576F848433A6FAD2108A90B8FD3FD9D3FA7B050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:b5:72:f4:1b:c5:62:8c:0d:94:7f:17:ef: f5:77:de:61:02:76:f5:23:86:da:c2:63:ba:52:bf: 67:5a:5f:d3:c0:2b:20:b2:71:42:6b:47:af:26:32: 3f:4a:95:68:19:e1:2f:6e:a6:48:24:10:20:7d:d7: 41:d1:92:c0:9a:de:ec:83:ec:a6:b5:3d:0e:15:66: 19:e8:9a:fc:75:c4:bc:93:51:9e:72:68:1d:8c:4f: 4b:82:8e:9f:e1:d3:86:6c:f5:ed:c9:fd:6c:ab:cb: 38:4d:c2:16:77:bd:a7:d0:45:e1:9d:56:ce:80:7f: f5:df:5a:bd:08:bf:53:c5:a4:21:a7:dd:80:23:b1: 6c:65:b1:2c:0c:3b:bd:73:b1:e6:c9:cf:ca:90:b8: 33:a5:31:17:d0:d0:d5:a0:4d:d9:b4:d2:f4:4d:38: c4:5c:58:67:9c:78:2f:99:0f:3d:d7:8f:9d:6b:ac: bb:29:fe:08:14:d6:11:69:1f:14:31:00:5b:86:0c: bc:c8:02:1c:89:85:aa:bf:de:30:8b:3b:71:09:74: 05:ab:a3:f8:f2:92:7c:30:4f:63:67:05:a0:fb:db: c0:14:a5:70:95:76:28:17:1b:82:f7:a2:8b:eb:36: e5:fe:cc:47:70:64:4b:05:4c:8f:d2:a1:f0:b2:77: 68:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:76:F8:48:43:3A:6F:AD:21:08:A9:0B:8F:D3:FD:9D:3F:A7:B0:50 X509v3 Authority Key Identifier: keyid:1C:4F:D4:27:31:A3:06:9E:B1:1E:BB:1A:1D:08:D6:E4:59:2C:9A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:62:84:1f:2b:98:dc:e5:54:3f:2b:66:c1:e5:81:50:f2:35: 97:fd:d1:a1:5f:17:17:0c:43:3b:54:81:f6:76:2f:ad:e7:da: f6:0e:c6:18:5e:cc:31:4a:e0:3b:1b:16:6b:f6:97:51:81:ce: f6:e6:df:f0:6b:11:34:bc:8e:49:e4:6a:f0:88:a1:a8:4b:4b: ba:f5:89:4c:82:36:4b:61:63:12:b6:20:a3:7d:a4:91:7c:79: 8c:3e:95:b3:d7:42:18:43:94:27:25:35:e5:c6:2f:f2:f9:04: ef:9a:48:ea:ba:e8:b0:c5:6c:6b:21:74:e9:db:01:20:58:0f: 5f:fc:ea:8e:9a:27:86:a2:9d:bc:d0:e0:4d:82:a4:a6:af:44: fc:28:35:c2:f8:f9:39:70:bf:f3:bd:f5:d1:61:fd:de:c5:67: 4b:54:c7:cc:98:ee:bb:60:85:73:83:a0:0f:0f:e2:7c:dd:e5: aa:54:c1:ce:ae:c7:e3:36:ff:43:86:fc:14:22:5a:eb:ba:f3: 82:86:33:0c:f8:51:56:17:85:c2:85:c2:56:b4:4b:6f:9e:79: 5d:fe:dc:f5:a6:bd:14:f6:10:4e:81:24:ae:aa:40:96:b8:82: 87:63:c0:16:19:26:52:a6:9f:96:f0:1a:53:dc:90:0d:cf:01: 0d:b4:c0:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbafPA5CI/+e70QCTJcttGO9dEpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0RkQ0MjczMUEzMDY5RUIxMUVCQjFBMUQwOEQ2RTQ1 OTJDOUFGMDAeFw0yNjA5MjMxODU0MjdaFw0yNjA5MjQyMjQ0MjdaMDMxMTAvBgNV BAMTKEQ1NzZGODQ4NDMzQTZGQUQyMTA4QTkwQjhGRDNGRDlEM0ZBN0IwNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1h7Vy9BvFYowNlH8X7/V33mEC dvUjhtrCY7pSv2daX9PAKyCycUJrR68mMj9KlWgZ4S9upkgkECB910HRksCa3uyD 7Ka1PQ4VZhnomvx1xLyTUZ5yaB2MT0uCjp/h04Zs9e3J/WyryzhNwhZ3vafQReGd Vs6Af/XfWr0Iv1PFpCGn3YAjsWxlsSwMO71zsebJz8qQuDOlMRfQ0NWgTdm00vRN OMRcWGeceC+ZDz3Xj51rrLsp/ggU1hFpHxQxAFuGDLzIAhyJhaq/3jCLO3EJdAWr o/jyknwwT2NnBaD728AUpXCVdigXG4L3oovrNuX+zEdwZEsFTI/SofCyd2gBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Xb4SEM6b60hCKkLj9P9nT+nsFAwHwYDVR0j BBgwFoAUHE/UJzGjBp6xHrsaHQjW5FksmvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTAxZGJhZmMtYzBjYy00OTZhLWI1ZTAtNGY0OGJhOTQ2Y2QzLzAvMUM0RkQ0Mjcz MUEzMDY5RUIxMUVCQjFBMUQwOEQ2RTQ1OTJDOUFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQzRGRDQyNzMxQTMwNjlFQjExRUJCMUExRDA4RDZFNDU5MkM5 QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTAxZGJhZmMtYzBjYy00OTZhLWI1 ZTAtNGY0OGJhOTQ2Y2QzLzAvMUM0RkQ0MjczMUEzMDY5RUIxMUVCQjFBMUQwOEQ2 RTQ1OTJDOUFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBihB8rmNzlVD8rZsHlgVDyNZf90aFfFxcM QztUgfZ2L63n2vYOxhhezDFK4DsbFmv2l1GBzvbm3/BrETS8jknkavCIoahLS7r1 iUyCNkthYxK2IKN9pJF8eYw+lbPXQhhDlCclNeXGL/L5BO+aSOq66LDFbGshdOnb ASBYD1/86o6aJ4ainbzQ4E2CpKavRPwoNcL4+Tlwv/O99dFh/d7FZ0tUx8yY7rtg hXODoA8P4nzd5apUwc6ux+M2/0OG/BQiWuu684KGMwz4UVYXhcKFwla0S2+eeV3+ 3PWmvRT2EE6BJK6qQJa4godjwBYZJlKmn5bwGlPckA3PAQ20wKQ= -----END CERTIFICATE-----Generated at Thu Sep 24 07:01:30 2026 by rpki-client