$ rpki-client -vvvf rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft File: 1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft (raw, json) Hash identifier: QX7Jm7m5hH3mgNi7rx8j3guaivc1DZLz4HajfIhlPHw= Subject key identifier: 5D:39:FF:A6:1A:1A:07:0E:C5:1C:70:B1:28:97:45:B4:3C:7A:ED:86 Authority key identifier: 13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42 Certificate issuer: /CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342 Certificate serial: 0D3D30D0D6027DE338B195CB97F6D1186E356A30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 10:59:43 +0000 Manifest this update: Wed 23 Sep 2026 10:54:43 +0000 Manifest next update: Thu 24 Sep 2026 14:40:43 +0000 Files and hashes: 1: 1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl (hash: It2tknoZAGl/bF+qTWBusx1kV3/r6zmYGex6o3kgbiA=) 2: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: uVPktCZC8+f+6UT6i6M1uIRYRGCJQ3maVFAM7Hkvn3s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:3d:30:d0:d6:02:7d:e3:38:b1:95:cb:97:f6:d1:18:6e:35:6a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342 Validity Not Before: Sep 23 10:54:43 2026 GMT Not After : Sep 24 14:40:43 2026 GMT Subject: CN=5D39FFA61A1A070EC51C70B1289745B43C7AED86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:17:ec:bd:8a:d1:76:8d:c4:63:33:4b:a3:f9: 95:4c:c1:b7:eb:8a:e4:7d:8e:59:e3:1d:4c:62:57: 2c:b1:41:37:42:14:b8:53:48:d7:e7:04:e1:77:f3: b4:d8:d5:2e:bb:1c:c9:29:2f:93:33:0b:32:26:19: 92:cd:ee:ed:96:b1:bf:2b:4e:76:80:40:68:61:ad: d2:6f:63:ae:27:19:c5:42:41:87:13:06:db:b7:16: c6:b1:44:da:b4:31:95:96:ec:a2:cc:a0:42:85:56: 59:b0:87:0b:94:5b:83:bc:cc:0f:61:77:04:5e:e1: 9b:4c:e6:9f:db:21:f5:cd:07:5d:f3:6a:57:0f:e5: 27:93:a2:64:34:55:e7:22:cf:b5:31:d6:a6:39:84: 5b:89:9b:2a:f2:f8:0a:9a:b1:da:d2:2c:d0:e2:1e: c2:ae:e7:dc:2d:8a:c6:5f:bc:bb:c5:38:7b:78:92: b5:10:ba:7b:c9:e4:04:df:2b:95:1b:85:6b:bf:5a: 16:b2:a9:2b:f1:dc:0c:1b:9e:27:60:77:32:37:d4: 48:61:f7:c7:77:49:4e:37:b2:15:8b:ce:ef:2a:42: d3:c5:3f:c0:d6:f9:ba:ee:d7:65:6d:2d:23:d2:42: a9:ff:51:7e:89:cc:38:24:56:a4:a9:c5:4a:7d:e9: 1f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:39:FF:A6:1A:1A:07:0E:C5:1C:70:B1:28:97:45:B4:3C:7A:ED:86 X509v3 Authority Key Identifier: keyid:13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:ac:09:bb:68:ee:db:69:cf:fd:8f:3f:f1:65:76:a1:6b:c8: c1:f6:4f:7f:ce:5f:bc:21:65:23:5a:c0:fe:fc:64:8c:b5:e7: 42:f2:90:ab:4e:59:e8:38:8c:b0:39:63:90:58:60:fe:fe:43: 6a:54:e6:2d:e6:d3:01:a4:ca:b2:dd:ce:9b:72:f6:0d:58:04: 14:a2:4f:52:43:5d:af:cd:36:ab:f2:8d:d1:37:05:2d:4e:1b: 3c:7b:df:18:64:4b:9d:fd:e7:61:a6:8f:84:cd:45:04:be:5e: 10:cc:ac:f1:cc:06:37:52:3c:57:9e:8e:77:e7:38:7c:66:b5: 7d:ba:b4:fa:cf:39:db:78:76:67:90:ac:6a:89:c5:15:a6:b4: 5d:0f:20:14:04:31:28:39:f6:f4:b1:43:cc:7c:93:08:f0:4e: bd:e1:68:b1:0b:db:13:37:a0:24:af:e5:d3:72:e3:73:14:3b: 86:d5:f3:61:e7:c8:e8:73:6c:5d:b6:76:88:6f:7b:f2:07:da: 13:87:90:c2:10:ac:4b:66:e5:72:b9:26:a8:34:be:55:2e:10: 50:26:31:10:38:5a:39:26:4d:75:6b:90:8c:02:13:9e:56:ce: d8:3f:3a:ee:c5:d2:ce:7d:ca:ad:fb:c7:0d:86:16:6f:d6:61: 40:d5:33:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDT0w0NYCfeM4sZXLl/bRGG41ajAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0NEI4MUI5NzBEM0Y5MENBMDlBODFGMkVBNzk2QjlE RDA5RDM0MjAeFw0yNjA5MjMxMDU0NDNaFw0yNjA5MjQxNDQwNDNaMDMxMTAvBgNV BAMTKDVEMzlGRkE2MUExQTA3MEVDNTFDNzBCMTI4OTc0NUI0M0M3QUVEODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnF+y9itF2jcRjM0uj+ZVMwbfr iuR9jlnjHUxiVyyxQTdCFLhTSNfnBOF387TY1S67HMkpL5MzCzImGZLN7u2Wsb8r TnaAQGhhrdJvY64nGcVCQYcTBtu3FsaxRNq0MZWW7KLMoEKFVlmwhwuUW4O8zA9h dwRe4ZtM5p/bIfXNB13zalcP5SeTomQ0Veciz7Ux1qY5hFuJmyry+AqasdrSLNDi HsKu59wtisZfvLvFOHt4krUQunvJ5ATfK5UbhWu/WhayqSvx3AwbnidgdzI31Ehh 98d3SU43shWLzu8qQtPFP8DW+bru12VtLSPSQqn/UX6JzDgkVqSpxUp96R9LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXTn/phoaBw7FHHCxKJdFtDx67YYwHwYDVR0j BBgwFoAUE0S4G5cNP5DKCagfLqeWud0J00IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTJhZWM3YzYtMmI4My00Y2YwLThjZDktNTM0Y2U3N2ZmNGIwLzAvMTM0NEI4MUI5 NzBEM0Y5MENBMDlBODFGMkVBNzk2QjlERDA5RDM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzQ0QjgxQjk3MEQzRjkwQ0EwOUE4MUYyRUE3OTZCOUREMDlE MzQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTJhZWM3YzYtMmI4My00Y2YwLThj ZDktNTM0Y2U3N2ZmNGIwLzAvMTM0NEI4MUI5NzBEM0Y5MENBMDlBODFGMkVBNzk2 QjlERDA5RDM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKsCbto7ttpz/2PP/FldqFryMH2T3/OX7wh ZSNawP78ZIy150LykKtOWeg4jLA5Y5BYYP7+Q2pU5i3m0wGkyrLdzpty9g1YBBSi T1JDXa/NNqvyjdE3BS1OGzx73xhkS53952Gmj4TNRQS+XhDMrPHMBjdSPFeejnfn OHxmtX26tPrPOdt4dmeQrGqJxRWmtF0PIBQEMSg59vSxQ8x8kwjwTr3haLEL2xM3 oCSv5dNy43MUO4bV82HnyOhzbF22dohve/IH2hOHkMIQrEtm5XK5Jqg0vlUuEFAm MRA4WjkmTXVrkIwCE55Wztg/Ou7F0s59yq37xw2GFm/WYUDVMyc= -----END CERTIFICATE-----Generated at Thu Sep 24 03:08:14 2026 by rpki-client