$ rpki-client -vvvf rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft File: 143B0FF235C900164875105AD0C37F3C7DB28151.mft (raw, json) Hash identifier: dR2nQkmR221lToUIFO0V94I+ob/SHMnMcHz6qfeugYE= Subject key identifier: 28:0C:9E:B0:8F:2F:18:CF:BA:A6:F6:5E:3F:91:A5:20:9D:13:4A:9E Authority key identifier: 14:3B:0F:F2:35:C9:00:16:48:75:10:5A:D0:C3:7F:3C:7D:B2:81:51 Certificate issuer: /CN=143B0FF235C900164875105AD0C37F3C7DB28151 Certificate serial: 136E526A2F0C1B6566F77F6335D346B91BB24F31 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 22:28:24 +0000 Manifest this update: Fri 25 Sep 2026 22:23:24 +0000 Manifest next update: Sun 27 Sep 2026 00:38:24 +0000 Files and hashes: 1: 3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa (hash: hD2c2fRRpw85nnii8gI6DgDgE1ceI1WBb5qAu0bq2pA=) 2: 3130332e36352e3233382e302f32342d3234203d3e20313335343531.roa (hash: nNVKvZ0ilopUJmLIwR3JaCCbYQBiWauo32pM1hDB2qM=) 3: 143B0FF235C900164875105AD0C37F3C7DB28151.crl (hash: tur3MFrc7BfiOaMWZG2MrBYznggd/vBkUALvFfTFI1g=) 4: 3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa (hash: kEo9J9YDEfycsSJU6o/UUiHq399l3gpS8mmcj4dD7Es=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.crl rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:6e:52:6a:2f:0c:1b:65:66:f7:7f:63:35:d3:46:b9:1b:b2:4f:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143B0FF235C900164875105AD0C37F3C7DB28151 Validity Not Before: Sep 25 22:23:24 2026 GMT Not After : Sep 27 00:38:24 2026 GMT Subject: CN=280C9EB08F2F18CFBAA6F65E3F91A5209D134A9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:58:f9:93:ca:0c:0e:6d:03:28:b2:70:62: 00:32:ba:cc:3d:a7:4b:a4:73:e7:18:6e:51:1b:6b: 46:0a:07:e8:10:d7:e7:f9:0a:ec:3d:17:2a:59:71: 9d:08:0c:ce:97:29:79:1a:38:db:d6:f4:2b:19:76: 7d:a8:0a:2a:ca:5b:b0:4b:a3:2d:44:2c:47:f1:92: 58:b1:90:48:17:95:a6:a6:2e:72:63:ed:10:ea:1d: 8a:9a:06:39:9a:d3:ff:ce:f9:16:31:0d:3e:90:46: e7:63:9f:9e:b8:40:36:56:2f:8f:7e:7c:25:db:63: fd:c9:1b:16:8a:69:3c:98:f3:c8:b5:3b:f5:8c:7a: 61:70:f4:a2:ea:7c:72:9d:79:a9:5d:4b:51:dd:2b: 03:2d:7b:e2:35:bd:f2:b2:27:3a:20:68:c3:d2:37: f5:dd:95:c1:5f:ea:18:d3:52:a3:3a:11:f4:a5:ed: 6f:c5:c1:fa:16:d8:36:cd:b8:22:f4:5c:f9:a0:ba: 19:91:26:47:b0:c1:35:76:44:93:51:97:a7:37:77: 1c:6d:b9:f7:97:1a:74:68:27:1f:c4:e2:2d:15:70: 82:ff:da:8b:3a:18:af:84:fd:1d:74:b7:fa:41:26: a8:75:87:77:7e:b3:29:76:02:ae:73:dd:6e:cd:cf: 1c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0C:9E:B0:8F:2F:18:CF:BA:A6:F6:5E:3F:91:A5:20:9D:13:4A:9E X509v3 Authority Key Identifier: keyid:14:3B:0F:F2:35:C9:00:16:48:75:10:5A:D0:C3:7F:3C:7D:B2:81:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:39:1b:0f:c3:af:f9:b7:c1:20:e8:c2:21:6f:c9:db:7d:d0: 15:75:22:5a:95:a8:83:48:74:7d:47:51:3e:e9:40:d7:08:36: 1f:9f:9a:06:6c:01:6c:58:a4:24:0e:64:0b:2e:b2:f7:8b:49: fd:25:09:41:cd:44:24:ec:78:7b:26:31:d4:83:10:f2:c5:b7: 7b:c5:fc:44:1e:4d:90:8a:dd:e4:1d:b4:df:4d:32:b9:a4:db: 90:11:15:e8:d5:fa:07:06:32:b2:1f:1a:ec:7e:de:76:be:c2: 6a:a3:28:0c:82:07:aa:fb:f1:3c:c4:53:39:25:67:b1:f2:73: d0:ca:8a:d6:40:6d:c9:17:a3:64:f6:21:d4:f4:23:f4:b8:2d: 80:2b:56:7b:7f:29:06:ce:59:71:56:57:04:f5:53:bf:b8:71: 20:f9:c2:50:d6:89:35:97:46:04:10:52:67:d1:a3:33:ac:0b: 2c:26:13:dc:14:3a:5a:d7:5f:cf:23:68:f8:d5:17:22:e8:81: 64:9a:48:3b:e4:ba:d9:14:3d:c1:19:54:c5:e2:8c:85:80:3d: 9b:c1:4d:bf:35:9d:87:7f:1d:2a:f5:13:de:d9:70:76:57:8b: 90:11:a8:f3:12:33:76:1b:98:a2:97:49:6b:ba:bb:72:66:3e: be:89:36:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE25Sai8MG2Vm939jNdNGuRuyTzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQzQjBGRjIzNUM5MDAxNjQ4NzUxMDVBRDBDMzdGM0M3 REIyODE1MTAeFw0yNjA5MjUyMjIzMjRaFw0yNjA5MjcwMDM4MjRaMDMxMTAvBgNV BAMTKDI4MEM5RUIwOEYyRjE4Q0ZCQUE2RjY1RTNGOTFBNTIwOUQxMzRBOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCElj5k8oMDm0DKLJwYgAyusw9 p0ukc+cYblEba0YKB+gQ1+f5Cuw9FypZcZ0IDM6XKXkaONvW9CsZdn2oCirKW7BL oy1ELEfxklixkEgXlaamLnJj7RDqHYqaBjma0//O+RYxDT6QRudjn564QDZWL49+ fCXbY/3JGxaKaTyY88i1O/WMemFw9KLqfHKdealdS1HdKwMte+I1vfKyJzogaMPS N/XdlcFf6hjTUqM6EfSl7W/FwfoW2DbNuCL0XPmguhmRJkewwTV2RJNRl6c3dxxt ufeXGnRoJx/E4i0VcIL/2os6GK+E/R10t/pBJqh1h3d+syl2Aq5z3W7NzxyjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKAyesI8vGM+6pvZeP5GlIJ0TSp4wHwYDVR0j BBgwFoAUFDsP8jXJABZIdRBa0MN/PH2ygVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTFjMWQ1NmUtMTVjNi00YjY1LWE5YTgtZjkwYWQ2ZmJhMDkwLzAvMTQzQjBGRjIz NUM5MDAxNjQ4NzUxMDVBRDBDMzdGM0M3REIyODE1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDNCMEZGMjM1QzkwMDE2NDg3NTEwNUFEMEMzN0YzQzdEQjI4 MTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTFjMWQ1NmUtMTVjNi00YjY1LWE5 YTgtZjkwYWQ2ZmJhMDkwLzAvMTQzQjBGRjIzNUM5MDAxNjQ4NzUxMDVBRDBDMzdG M0M3REIyODE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACg5Gw/Dr/m3wSDowiFvydt90BV1IlqVqINI dH1HUT7pQNcINh+fmgZsAWxYpCQOZAsusveLSf0lCUHNRCTseHsmMdSDEPLFt3vF /EQeTZCK3eQdtN9NMrmk25ARFejV+gcGMrIfGux+3na+wmqjKAyCB6r78TzEUzkl Z7Hyc9DKitZAbckXo2T2IdT0I/S4LYArVnt/KQbOWXFWVwT1U7+4cSD5wlDWiTWX RgQQUmfRozOsCywmE9wUOlrXX88jaPjVFyLogWSaSDvkutkUPcEZVMXijIWAPZvB Tb81nYd/HSr1E97ZcHZXi5ARqPMSM3YbmKKXSWu6u3JmPr6JNsY= -----END CERTIFICATE-----Generated at Sat Sep 26 03:56:29 2026 by rpki-client