$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft File: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft (raw, json) Hash identifier: uDSF7gAbFxwW+u7fVFw5vugOz/dwhTqAvTI2vTLVpME= Subject key identifier: 9B:D4:7F:10:52:36:54:3D:D5:04:BC:AC:72:37:2C:D1:6A:E7:F3:87 Authority key identifier: 1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 Certificate issuer: /CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Certificate serial: 4F1BC42AC666525F1ABF0ABDAA99FD30EF553A54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 02:18:59 +0000 Manifest this update: Wed 23 Sep 2026 02:13:59 +0000 Manifest next update: Thu 24 Sep 2026 02:54:59 +0000 Files and hashes: 1: AS17885.roa (hash: 3Nn5BIp9l2d6qwrPMnlXmVzjNdvVAOjZPjaxN/LFUNQ=) 2: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl (hash: 6tUs4ISh8n86DHwCBOrSTuvM5JQeqxSO/HPatIYJ15I=) 3: AS139994.roa (hash: G9jUsHOqGF8GyMe4d4F0m9p9Wpq1ELwFCpA8Pkmrzks=) 4: AS24203.roa (hash: GC9KIMugoCl+PFxNhKrxUiJjAqMz/PW5WzhJj/Fex+w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 02:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:1b:c4:2a:c6:66:52:5f:1a:bf:0a:bd:aa:99:fd:30:ef:55:3a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Validity Not Before: Sep 23 02:13:59 2026 GMT Not After : Sep 24 02:54:59 2026 GMT Subject: CN=9BD47F105236543DD504BCAC72372CD16AE7F387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:af:16:55:ca:b7:01:c4:e9:ca:d3:46:8a:0d: f2:f2:15:aa:59:d9:57:f7:de:ba:1a:28:cc:15:d8: 4e:43:7c:bf:c5:21:3e:26:61:73:1b:18:07:30:79: ae:1d:52:5e:82:8f:a8:f6:e6:08:c8:18:36:0c:98: b0:79:d6:8c:7b:cf:c9:f7:c9:a8:37:18:3b:1c:e6: fb:f6:58:83:71:39:b0:c9:7f:10:cc:78:4e:3d:8c: d3:6b:0f:3d:1b:1f:21:ae:2c:f6:0e:29:30:ca:0e: 12:9a:ee:91:5a:dd:71:d5:67:52:ed:d9:c9:2f:81: a7:db:1e:4c:15:f7:1c:72:76:b5:ea:fb:e1:36:9e: a4:58:25:c5:f8:b9:e8:ee:a4:c1:54:1e:28:8e:58: f2:04:b5:3f:99:f8:a7:66:c4:a3:9e:12:37:4f:21: e3:44:47:b4:a0:1c:f5:6a:20:fa:c0:36:94:02:ac: 85:5c:aa:ee:62:86:e1:00:d4:7a:47:62:8c:3d:b8: ff:d3:21:a2:1a:e8:83:29:21:26:c2:4a:06:8e:5a: 0a:a7:fe:d3:0b:b9:12:24:7c:67:5e:7f:98:77:96: 02:10:a8:86:3b:e0:c9:e8:e3:15:21:29:ff:54:72: 23:52:25:d1:77:ba:ed:fe:a2:b6:c8:38:7a:65:a6: f8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D4:7F:10:52:36:54:3D:D5:04:BC:AC:72:37:2C:D1:6A:E7:F3:87 X509v3 Authority Key Identifier: keyid:1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:f5:5d:a3:b7:6c:b0:c7:cf:77:3c:70:9b:89:2c:bb:70:57: ee:74:36:be:46:8c:f3:de:e6:f6:bf:82:12:19:fb:c3:fa:95: bf:9b:68:a5:96:6a:34:74:86:35:1c:71:c9:b3:69:5d:7e:50: d9:1a:ec:37:94:29:a3:5c:38:5c:02:40:0f:6a:eb:78:0a:93: d9:8e:8c:a0:13:9e:98:be:e9:e7:f7:43:f9:58:2a:71:80:3a: 1d:30:7e:c2:aa:ac:cf:af:ed:cf:d2:c4:9d:44:db:c7:28:bb: 34:84:f6:bb:12:02:07:80:42:ca:9b:04:e8:09:c2:96:6a:33: 29:8f:42:ee:39:fb:df:e2:09:9f:42:e6:aa:45:74:c7:04:39: bd:5b:2e:fd:a8:3d:90:62:fb:38:86:0b:cf:d8:4e:a7:3e:31: 2a:bb:f8:96:aa:03:b7:8e:40:fd:f1:2c:7e:5f:88:b4:a2:84: 55:2a:bc:4a:f4:7d:2b:a6:00:74:83:22:56:c4:43:e9:5e:ac: d7:48:6d:8b:80:43:5a:a7:b8:8f:21:34:61:76:8c:2c:c5:91: cc:0a:b7:bd:35:1c:8e:dd:fa:c8:b0:65:a9:09:22:42:23:35: 0a:2a:3b:ec:7c:b5:6c:48:8a:fd:df:d7:c0:96:09:38:b5:d0: a4:bc:a2:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTxvEKsZmUl8avwq9qpn9MO9VOlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4 RjlEMDA3MTAeFw0yNjA5MjMwMjEzNTlaFw0yNjA5MjQwMjU0NTlaMDMxMTAvBgNV BAMTKDlCRDQ3RjEwNTIzNjU0M0RENTA0QkNBQzcyMzcyQ0QxNkFFN0YzODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwrxZVyrcBxOnK00aKDfLyFapZ 2Vf33roaKMwV2E5DfL/FIT4mYXMbGAcwea4dUl6Cj6j25gjIGDYMmLB51ox7z8n3 yag3GDsc5vv2WINxObDJfxDMeE49jNNrDz0bHyGuLPYOKTDKDhKa7pFa3XHVZ1Lt 2ckvgafbHkwV9xxydrXq++E2nqRYJcX4uejupMFUHiiOWPIEtT+Z+KdmxKOeEjdP IeNER7SgHPVqIPrANpQCrIVcqu5ihuEA1HpHYow9uP/TIaIa6IMpISbCSgaOWgqn /tMLuRIkfGdef5h3lgIQqIY74Mno4xUhKf9UciNSJdF3uu3+orbIOHplpviBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm9R/EFI2VD3VBLyscjcs0Wrn84cwHwYDVR0j BBgwFoAUHgwK2ApkHiiC+QJVQfttrI+dAHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgw QTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4RjlEMDA3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRTBDMEFEODBBNjQxRTI4ODJGOTAyNTU0MUZCNkRBQzhGOUQw MDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZE QUM4RjlEMDA3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM71XaO3bLDHz3c8cJuJLLtwV+50Nr5GjPPe 5va/ghIZ+8P6lb+baKWWajR0hjUcccmzaV1+UNka7DeUKaNcOFwCQA9q63gKk9mO jKATnpi+6ef3Q/lYKnGAOh0wfsKqrM+v7c/SxJ1E28couzSE9rsSAgeAQsqbBOgJ wpZqMymPQu45+9/iCZ9C5qpFdMcEOb1bLv2oPZBi+ziGC8/YTqc+MSq7+JaqA7eO QP3xLH5fiLSihFUqvEr0fSumAHSDIlbEQ+lerNdIbYuAQ1qnuI8hNGF2jCzFkcwK t701HI7d+siwZakJIkIjNQoqO+x8tWxIiv3f18CWCTi10KS8oi4= -----END CERTIFICATE-----Generated at Wed Sep 23 09:58:56 2026 by rpki-client