$ rpki-client -vvvf rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft File: 1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft (raw, json) Hash identifier: fRqB5Q79b1VK5rhNbIKI5KGxbk1Y6WLcFrP4AsyqRXI= Subject key identifier: 28:F0:4B:1B:74:BC:FE:C3:91:64:48:DC:8C:97:39:B9:3A:F1:7E:50 Authority key identifier: 1C:24:1A:D1:CC:30:1E:81:5C:A4:D6:FA:5F:1B:CC:66:06:91:59:10 Certificate issuer: /CN=1C241AD1CC301E815CA4D6FA5F1BCC6606915910 Certificate serial: 49A7854E243C784D314A3CE2E33A5F1148E4D0AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 06:28:45 +0000 Manifest this update: Thu 24 Sep 2026 06:23:45 +0000 Manifest next update: Fri 25 Sep 2026 10:27:45 +0000 Files and hashes: 1: 3130332e3231302e33352e302f32342d3234203d3e203539313531.roa (hash: tYiK/crTfBIFT43mP50CWE5Oz0vdhgTgDowq7UN7boc=) 2: 3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa (hash: FOuLqe8z3jP9/FdA5FO4WwiK2ha2s9B/nD4rv4Mnpyg=) 3: 3130332e3235352e31352e302f32342d3234203d3e203539313531.roa (hash: OGO8y1XI3uaFZBO8XdrSwCG094qddn+s0g2Ctr82rYM=) 4: 1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl (hash: ZS8bIQvyCtPscnMaEX9mIy8pSpuVkNS6PcfHDTBLwd0=) 5: 323430303a653332303a3a2f33322d3438203d3e203539313531.roa (hash: 8FVK2/2gNZC5oxeYl9/JXd0zGR6AZ1yS8I4EVn+PCZM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a7:85:4e:24:3c:78:4d:31:4a:3c:e2:e3:3a:5f:11:48:e4:d0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C241AD1CC301E815CA4D6FA5F1BCC6606915910 Validity Not Before: Sep 24 06:23:45 2026 GMT Not After : Sep 25 10:27:45 2026 GMT Subject: CN=28F04B1B74BCFEC3916448DC8C9739B93AF17E50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:4d:66:28:33:a7:87:a8:63:b9:cd:8e:d5: ad:35:44:21:c3:eb:e8:10:24:2e:9f:e9:7a:48:3f: 5a:05:c9:60:ff:e9:76:a2:47:b8:64:21:23:a1:52: d1:21:7a:f4:ba:47:e2:e0:34:b4:e2:6d:1e:f3:d8: c0:a5:70:5b:a4:37:21:34:cb:b4:7f:0c:5d:ca:61: a5:78:40:80:ac:72:31:dd:91:a5:de:db:ee:f3:ba: d0:64:27:71:3e:b9:0a:f4:85:60:f4:13:85:ca:76: 1e:a6:78:c8:af:5b:bb:a0:a2:25:7f:bc:67:68:9e: 66:50:dc:87:0f:be:79:48:ef:ae:15:fb:b2:71:64: ce:74:e3:f9:d9:1c:17:b0:ed:d9:c2:dd:3e:28:27: 42:e5:42:82:1c:a4:d4:86:89:03:e9:e9:99:d5:c6: dd:a7:30:27:13:95:ad:72:2f:2f:36:97:e0:47:c9: 3b:9e:e7:ec:3f:9b:40:15:a8:41:0d:4d:f2:0f:96: 2d:4a:ae:16:39:9f:52:eb:79:cd:21:00:48:a9:08: 49:ae:71:99:fc:ba:00:05:7a:01:d0:0e:03:b4:b0: e2:ab:42:6c:b8:8a:b1:cf:6b:3b:4d:63:1c:1f:63: 5f:4c:97:6d:17:89:d9:f9:0c:a2:3a:9d:60:0b:72: f4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F0:4B:1B:74:BC:FE:C3:91:64:48:DC:8C:97:39:B9:3A:F1:7E:50 X509v3 Authority Key Identifier: keyid:1C:24:1A:D1:CC:30:1E:81:5C:A4:D6:FA:5F:1B:CC:66:06:91:59:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:48:1e:36:e4:5d:c5:2b:9e:ab:85:a0:35:62:5d:25:fe:22: e8:e2:f1:ba:09:ab:3b:c4:5a:b2:27:e2:f4:23:d0:bb:42:8b: 12:cd:f4:14:1f:66:bd:db:a1:aa:ab:ef:52:57:cf:38:81:b6: d5:f8:6e:70:3c:94:09:91:9e:7f:9f:0b:ba:d6:88:1e:9d:02: 31:8d:1c:d6:44:2e:d7:2e:c0:16:a7:eb:29:76:40:f7:f2:08: ad:a1:cc:02:ae:cc:fd:08:83:95:d3:b5:ca:61:4a:6e:b5:01: 65:fc:3e:a9:2d:ad:35:80:9a:96:6f:33:16:89:c3:8e:3d:6c: 34:b9:1c:68:13:73:88:7d:fd:83:13:10:93:68:a3:05:5b:a5: 89:d2:eb:93:52:75:cf:67:15:54:44:90:7c:5f:30:80:a5:62: e3:a8:b6:7c:3a:f1:9b:7f:79:a9:df:8b:a0:c7:c8:3d:ab:87: 05:2f:f4:97:83:94:44:06:85:1b:25:5d:03:a3:af:8c:71:12: 08:10:22:69:d7:71:d6:c0:56:7c:60:80:83:21:43:73:17:12: d7:18:8f:9d:ab:0c:ea:96:d0:6a:a9:39:55:f1:e5:3d:4e:4b: 3a:47:09:1f:21:35:35:10:a3:8e:e4:90:0b:c1:e7:df:99:3e: 9b:ff:5c:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSaeFTiQ8eE0xSjzi4zpfEUjk0KowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMyNDFBRDFDQzMwMUU4MTVDQTRENkZBNUYxQkNDNjYw NjkxNTkxMDAeFw0yNjA5MjQwNjIzNDVaFw0yNjA5MjUxMDI3NDVaMDMxMTAvBgNV BAMTKDI4RjA0QjFCNzRCQ0ZFQzM5MTY0NDhEQzhDOTczOUI5M0FGMTdFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15E1mKDOnh6hjuc2O1a01RCHD 6+gQJC6f6XpIP1oFyWD/6XaiR7hkISOhUtEhevS6R+LgNLTibR7z2MClcFukNyE0 y7R/DF3KYaV4QICscjHdkaXe2+7zutBkJ3E+uQr0hWD0E4XKdh6meMivW7ugoiV/ vGdonmZQ3IcPvnlI764V+7JxZM504/nZHBew7dnC3T4oJ0LlQoIcpNSGiQPp6ZnV xt2nMCcTla1yLy82l+BHyTue5+w/m0AVqEENTfIPli1KrhY5n1Lrec0hAEipCEmu cZn8ugAFegHQDgO0sOKrQmy4irHPaztNYxwfY19Ml20Xidn5DKI6nWALcvQjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKPBLG3S8/sORZEjcjJc5uTrxflAwHwYDVR0j BBgwFoAUHCQa0cwwHoFcpNb6XxvMZgaRWRAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg3NjZkNjYtMjkyMy00Y2UwLWFhODUtOWM0OTg4Y2M4YmExLzAvMUMyNDFBRDFD QzMwMUU4MTVDQTRENkZBNUYxQkNDNjYwNjkxNTkxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQzI0MUFEMUNDMzAxRTgxNUNBNEQ2RkE1RjFCQ0M2NjA2OTE1 OTEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDg3NjZkNjYtMjkyMy00Y2UwLWFh ODUtOWM0OTg4Y2M4YmExLzAvMUMyNDFBRDFDQzMwMUU4MTVDQTRENkZBNUYxQkND NjYwNjkxNTkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9IHjbkXcUrnquFoDViXSX+Iuji8boJqzvE WrIn4vQj0LtCixLN9BQfZr3boaqr71JXzziBttX4bnA8lAmRnn+fC7rWiB6dAjGN HNZELtcuwBan6yl2QPfyCK2hzAKuzP0Ig5XTtcphSm61AWX8PqktrTWAmpZvMxaJ w449bDS5HGgTc4h9/YMTEJNoowVbpYnS65NSdc9nFVREkHxfMIClYuOotnw68Zt/ eanfi6DHyD2rhwUv9JeDlEQGhRslXQOjr4xxEggQImnXcdbAVnxggIMhQ3MXEtcY j52rDOqW0GqpOVXx5T1OSzpHCR8hNTUQo47kkAvB59+ZPpv/XJ8= -----END CERTIFICATE-----Generated at Thu Sep 24 12:24:56 2026 by rpki-client