$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft File: 1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft (raw, json) Hash identifier: QrGBuZ/brgSYFVecie9ogCmYgaK0ojLRFxkDanxp+zw= Subject key identifier: 14:5E:DC:DA:19:06:37:77:E8:BE:60:02:F7:26:51:F0:FD:67:AE:F6 Authority key identifier: 1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92 Certificate issuer: /CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692 Certificate serial: 241D60E984B66305115B1B082A1185BE7D7E93AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 16:26:08 +0000 Manifest this update: Thu 24 Sep 2026 16:21:08 +0000 Manifest next update: Fri 25 Sep 2026 17:31:08 +0000 Files and hashes: 1: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: YBDSZRtlV3p/ZiGWn3MdsKVwu9Di7caAjGBDoupE+PI=) 2: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: Nk1xhHZXV5Jyg1FLRsoF8BjuMkVYDKCRPbEV62yPbSM=) 3: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: OElnQGjywIal+TKkNzEv0fSQqUAS10jHhU+dlj8V8js=) 4: 1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl (hash: ZZSfoEZf6sk6Pgj6bjurCfuQA0NmDp3adeOQQjgpuGY=) 5: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: PTvRAn9wK3M28ze+u03Jb/fa1WyNAdR/8RUqE31KU0c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1d:60:e9:84:b6:63:05:11:5b:1b:08:2a:11:85:be:7d:7e:93:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692 Validity Not Before: Sep 24 16:21:08 2026 GMT Not After : Sep 25 17:31:08 2026 GMT Subject: CN=145EDCDA19063777E8BE6002F72651F0FD67AEF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:c5:30:71:da:e6:18:1c:15:ee:5d:25:da: 79:33:85:ee:08:1d:ce:b9:98:87:02:df:fb:9e:eb: 72:90:63:17:9a:67:0c:3e:48:7e:36:1d:36:35:dd: dd:ee:7d:70:1f:70:44:b0:bd:fb:e2:2a:cc:46:34: c6:92:0d:d3:4d:88:de:30:6c:ed:b6:38:92:de:85: 4f:dc:c0:37:7f:43:49:e6:b2:41:0b:13:0b:18:4e: bc:a4:3e:21:89:a6:9b:c9:b2:70:f2:f4:6e:70:7a: d5:03:f6:bb:94:a5:ea:8b:e6:40:27:ae:e2:21:91: 6f:b5:45:90:45:5d:18:1a:78:f9:a7:52:0e:42:8c: 9b:3b:f0:7b:9f:a6:99:02:68:43:ac:8e:6c:09:4b: db:14:16:c4:f8:f4:45:07:f5:0c:eb:0f:07:62:70: 12:2c:8d:18:a8:4e:1b:ea:64:17:0d:a5:36:c6:6d: 2b:2d:65:91:b5:27:09:f3:a3:a0:74:6e:d8:74:bb: 81:94:a6:6a:cb:d7:4c:f9:83:10:15:08:39:5e:22: 7e:6f:76:41:18:a8:eb:24:0d:1e:39:bf:3d:5b:14: cc:49:9d:55:d7:71:a4:dd:d6:a9:50:b4:b1:c4:28: eb:db:b4:0f:61:f3:c0:3c:fa:9c:ec:5a:14:83:b7: 39:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5E:DC:DA:19:06:37:77:E8:BE:60:02:F7:26:51:F0:FD:67:AE:F6 X509v3 Authority Key Identifier: keyid:1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:8d:fc:f6:fc:16:4c:80:12:f3:4d:d6:b1:b8:e2:5e:eb:3e: be:fc:ab:5a:c3:cf:e3:9b:56:d2:16:99:a0:4e:34:00:a4:1c: a5:12:bf:c0:5c:42:04:b9:00:a1:c5:67:fa:5e:61:03:bf:27: 91:56:81:15:d7:37:b1:64:28:18:23:df:19:63:33:bf:b8:ca: bb:6c:fb:0b:a3:10:06:a9:f4:dd:f5:8a:8c:09:c8:e9:d5:09: 2a:ab:16:a7:12:39:9e:41:46:ed:37:89:7e:7c:7b:42:b4:48: 05:3f:07:c3:77:4c:67:23:17:50:47:6d:bb:22:2d:83:0f:f2: 3d:22:f4:c8:d0:10:4a:21:0e:92:5d:bd:53:96:51:c8:7f:2a: f8:85:af:10:53:0e:a8:22:db:0b:f1:10:7d:d7:b1:ac:f9:ca: 95:18:6f:d5:d8:a0:16:d0:dc:21:95:d3:83:a2:10:ea:0f:05: 86:d8:58:7b:7c:d9:ad:29:74:40:fb:4f:2a:9d:cd:d3:50:74: 6b:55:7d:db:bf:5d:d7:20:2b:32:98:5a:06:70:9f:fa:8d:be: 70:19:92:0b:84:27:a3:7f:94:13:44:b0:70:c2:01:28:10:eb: 2a:4c:e2:42:55:a7:f0:e2:02:9e:de:06:bb:a9:39:9b:92:ae: c8:dc:c8:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJB1g6YS2YwURWxsIKhGFvn1+k6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBQTkzN0EyMzZENEFEQTM2RDlBQ0RGODhGM0IwN0Mx QUZGRTY5MjAeFw0yNjA5MjQxNjIxMDhaFw0yNjA5MjUxNzMxMDhaMDMxMTAvBgNV BAMTKDE0NUVEQ0RBMTkwNjM3NzdFOEJFNjAwMkY3MjY1MUYwRkQ2N0FFRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCswMUwcdrmGBwV7l0l2nkzhe4I Hc65mIcC3/ue63KQYxeaZww+SH42HTY13d3ufXAfcESwvfviKsxGNMaSDdNNiN4w bO22OJLehU/cwDd/Q0nmskELEwsYTrykPiGJppvJsnDy9G5wetUD9ruUpeqL5kAn ruIhkW+1RZBFXRgaePmnUg5CjJs78HufppkCaEOsjmwJS9sUFsT49EUH9QzrDwdi cBIsjRioThvqZBcNpTbGbSstZZG1Jwnzo6B0bth0u4GUpmrL10z5gxAVCDleIn5v dkEYqOskDR45vz1bFMxJnVXXcaTd1qlQtLHEKOvbtA9h88A8+pzsWhSDtzlZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFF7c2hkGN3fovmAC9yZR8P1nrvYwHwYDVR0j BBgwFoAUHqqTeiNtSto22azfiPOwfBr/5pIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY4ODUxZTUtZWU1Yi00MWUxLTlhYmMtNDQyNjUxZDI3Mjk0LzAvMUVBQTkzN0Ey MzZENEFEQTM2RDlBQ0RGODhGM0IwN0MxQUZGRTY5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUFBOTM3QTIzNkQ0QURBMzZEOUFDREY4OEYzQjA3QzFBRkZF NjkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvMUVBQTkzN0EyMzZENEFEQTM2RDlBQ0RGODhGM0Iw N0MxQUZGRTY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACON/Pb8FkyAEvNN1rG44l7rPr78q1rDz+Ob VtIWmaBONACkHKUSv8BcQgS5AKHFZ/peYQO/J5FWgRXXN7FkKBgj3xljM7+4yrts +wujEAap9N31iowJyOnVCSqrFqcSOZ5BRu03iX58e0K0SAU/B8N3TGcjF1BHbbsi LYMP8j0i9MjQEEohDpJdvVOWUch/KviFrxBTDqgi2wvxEH3Xsaz5ypUYb9XYoBbQ 3CGV04OiEOoPBYbYWHt82a0pdED7TyqdzdNQdGtVfdu/XdcgKzKYWgZwn/qNvnAZ kguEJ6N/lBNEsHDCASgQ6ypM4kJVp/DiAp7eBrupOZuSrsjcyBA= -----END CERTIFICATE-----Generated at Thu Sep 24 19:53:58 2026 by rpki-client