$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft File: 1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft (raw, json) Hash identifier: Ca7W0Nx1LKJttk4L0CFznbWJrxYAHgUnYw4BVc7X+LQ= Subject key identifier: 01:C5:8B:06:52:34:40:5A:E9:1F:24:5E:24:28:88:27:65:C4:CC:AB Authority key identifier: 1E:DE:11:80:AE:9C:99:2B:64:85:CD:65:9C:5D:7E:1B:F2:70:AB:7A Certificate issuer: /CN=1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A Certificate serial: 309F99C4B83F153E1FB6E54C21C4B4003AD673B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 07:24:58 +0000 Manifest this update: Fri 25 Sep 2026 07:19:58 +0000 Manifest next update: Sat 26 Sep 2026 09:33:58 +0000 Files and hashes: 1: 1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.crl (hash: Vs9Occ9TDViTL1gJ5F8PlmbWmJqkaIAFEbH2LlCveWs=) 2: 3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa (hash: Acd+CNDLcrmehVnAROgrc31TunZVSjXxsQg7HAi/x2w=) 3: 323030313a6466343a346230303a3a2f34382d3438203d3e20313337333135.roa (hash: 6zf7vx7+kMHdnFJu/oDlY4/HuNaESvsIJtoWRx8KDTI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.crl rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 09:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:9f:99:c4:b8:3f:15:3e:1f:b6:e5:4c:21:c4:b4:00:3a:d6:73:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A Validity Not Before: Sep 25 07:19:58 2026 GMT Not After : Sep 26 09:33:58 2026 GMT Subject: CN=01C58B065234405AE91F245E2428882765C4CCAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:32:bc:c0:46:c1:74:66:e6:33:74:9a:7c: bb:8e:bf:e6:09:6c:eb:6d:c4:f1:3a:a9:5d:6f:61: 6d:3c:17:25:ca:7a:bd:27:60:df:e7:3a:4a:19:7e: 78:04:4d:99:8f:f5:9c:fc:a6:6d:20:c6:34:ae:4c: 72:ea:91:6c:7a:24:15:12:f9:87:ca:f1:99:ea:97: 70:1b:f5:af:3c:b5:6e:1d:b3:2a:3f:db:50:68:7f: 04:7e:8f:11:c2:7d:f5:85:f9:f3:fd:66:ec:46:f6: e9:ab:6a:1e:9b:c4:83:77:b0:d7:bb:d2:c3:09:a8: b4:ab:23:2b:0c:3b:9a:3b:2a:55:d9:6e:68:db:df: 46:37:81:ce:8a:0c:a8:0d:6b:06:a0:78:12:99:dd: 37:2b:71:6f:35:75:eb:50:a2:4b:87:14:5b:3a:e0: da:75:db:93:b1:44:15:65:92:cc:18:be:4a:90:91: 62:d3:b2:53:65:1a:7f:7a:bf:c1:af:05:5e:fb:13: 60:eb:61:d3:ec:1c:76:b0:4f:7c:4e:f2:8d:c0:bb: f6:90:ec:4b:27:f2:68:fe:58:b5:dd:f3:b8:1d:70: 7d:12:5f:19:35:4a:79:7a:fa:32:94:96:a2:08:b0: ce:ab:75:69:dd:cf:dd:cc:dc:89:3c:b6:42:69:2c: 7c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C5:8B:06:52:34:40:5A:E9:1F:24:5E:24:28:88:27:65:C4:CC:AB X509v3 Authority Key Identifier: keyid:1E:DE:11:80:AE:9C:99:2B:64:85:CD:65:9C:5D:7E:1B:F2:70:AB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c6:b8:58:f0:ed:30:75:bb:a1:85:9f:52:12:72:13:79:3f: 88:b1:ee:91:3a:fb:2b:69:d6:ab:8e:c9:0d:bc:9b:4d:3f:6a: ec:fa:f6:57:d6:04:01:a8:85:e2:5e:c7:f5:0a:3d:c9:1e:b6: 72:5c:93:01:93:ac:d2:a7:22:91:d4:23:ac:17:46:e1:8d:5f: 42:e2:df:7c:ec:76:2f:69:73:fa:81:3a:6f:66:af:55:cc:31: df:e4:7a:6a:96:6e:17:0b:77:e3:e7:1e:7c:f3:86:3f:65:81: 26:9e:27:a8:a5:55:42:2b:6b:79:67:cf:8f:8c:67:39:76:45: 8a:a1:b1:bc:59:be:b4:52:3d:e7:27:c2:80:f2:e3:90:09:8d: 2d:6b:a5:66:54:7d:f6:06:28:f9:0d:13:46:5d:de:31:20:8e: 70:4f:f3:ab:27:fb:00:5e:f0:52:02:55:eb:3a:0c:af:89:d8: e3:5b:66:be:3d:ac:ca:f6:be:93:f8:aa:0b:81:1c:ca:8c:90: 52:7d:45:2d:69:90:12:b1:3e:fc:1d:80:d4:15:31:b4:89:2a: 27:96:02:a1:a2:63:07:34:91:f1:83:1d:e8:28:58:93:0d:04: 9e:0f:75:69:30:84:0d:a2:89:61:c1:5c:01:8f:fe:a1:25:bd: 5c:6e:23:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMJ+ZxLg/FT4ftuVMIcS0ADrWc7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVERTExODBBRTlDOTkyQjY0ODVDRDY1OUM1RDdFMUJG MjcwQUI3QTAeFw0yNjA5MjUwNzE5NThaFw0yNjA5MjYwOTMzNThaMDMxMTAvBgNV BAMTKDAxQzU4QjA2NTIzNDQwNUFFOTFGMjQ1RTI0Mjg4ODI3NjVDNENDQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqlDK8wEbBdGbmM3SafLuOv+YJ bOttxPE6qV1vYW08FyXKer0nYN/nOkoZfngETZmP9Zz8pm0gxjSuTHLqkWx6JBUS +YfK8Znql3Ab9a88tW4dsyo/21BofwR+jxHCffWF+fP9ZuxG9umrah6bxIN3sNe7 0sMJqLSrIysMO5o7KlXZbmjb30Y3gc6KDKgNawageBKZ3TcrcW81detQokuHFFs6 4Np125OxRBVlkswYvkqQkWLTslNlGn96v8GvBV77E2DrYdPsHHawT3xO8o3Au/aQ 7Esn8mj+WLXd87gdcH0SXxk1Snl6+jKUlqIIsM6rdWndz93M3Ik8tkJpLHypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAcWLBlI0QFrpHyReJCiIJ2XEzKswHwYDVR0j BBgwFoAUHt4RgK6cmStkhc1lnF1+G/Jwq3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2RmMDY4YmQtOGUzYS00Njk1LTg5ZWQtM2IzMjUwZjg3NWM5LzAvMUVERTExODBB RTlDOTkyQjY0ODVDRDY1OUM1RDdFMUJGMjcwQUI3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRURFMTE4MEFFOUM5OTJCNjQ4NUNENjU5QzVEN0UxQkYyNzBB QjdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2RmMDY4YmQtOGUzYS00Njk1LTg5 ZWQtM2IzMjUwZjg3NWM5LzAvMUVERTExODBBRTlDOTkyQjY0ODVDRDY1OUM1RDdF MUJGMjcwQUI3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPGuFjw7TB1u6GFn1ISchN5P4ix7pE6+ytp 1quOyQ28m00/auz69lfWBAGoheJex/UKPcketnJckwGTrNKnIpHUI6wXRuGNX0Li 33zsdi9pc/qBOm9mr1XMMd/kemqWbhcLd+PnHnzzhj9lgSaeJ6ilVUIra3lnz4+M Zzl2RYqhsbxZvrRSPecnwoDy45AJjS1rpWZUffYGKPkNE0Zd3jEgjnBP86sn+wBe 8FICVes6DK+J2ONbZr49rMr2vpP4qguBHMqMkFJ9RS1pkBKxPvwdgNQVMbSJKieW AqGiYwc0kfGDHegoWJMNBJ4PdWkwhA2iiWHBXAGP/qElvVxuI/0= -----END CERTIFICATE-----Generated at Fri Sep 25 19:06:16 2026 by rpki-client