$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/1F6C96793661DE4673D63F9B4676953E4CEFDC3A.mft File: 1F6C96793661DE4673D63F9B4676953E4CEFDC3A.mft (raw, json) Hash identifier: CMKZD3lfnA9Pf3C+3kFbB1rC1wz50FVOxBmOshtoUW8= Subject key identifier: 7D:DB:03:5D:FD:33:EF:C4:23:83:9B:F6:7E:88:A0:88:CC:6F:97:0E Authority key identifier: 1F:6C:96:79:36:61:DE:46:73:D6:3F:9B:46:76:95:3E:4C:EF:DC:3A Certificate issuer: /CN=1F6C96793661DE4673D63F9B4676953E4CEFDC3A Certificate serial: 47AEE92D003DDADB4A3993ED9D3ED95A7C9E6BCF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F6C96793661DE4673D63F9B4676953E4CEFDC3A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/1F6C96793661DE4673D63F9B4676953E4CEFDC3A.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 13:12:13 +0000 Manifest this update: Thu 24 Sep 2026 13:07:13 +0000 Manifest next update: Fri 25 Sep 2026 15:54:13 +0000 Files and hashes: 1: 3130332e3131302e3130302e302f32332d3233203d3e20313530393337.roa (hash: grarK/OEkmzbddi3gcH2ULkCDLQvGSboK91xScB9ONU=) 2: 1F6C96793661DE4673D63F9B4676953E4CEFDC3A.crl (hash: NGcU4Y2d5zm8c2BEnLkepywDO8J5o+pjK8ZQ11u8siM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/1F6C96793661DE4673D63F9B4676953E4CEFDC3A.crl rsync://rpki-rsync.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/1F6C96793661DE4673D63F9B4676953E4CEFDC3A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F6C96793661DE4673D63F9B4676953E4CEFDC3A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ae:e9:2d:00:3d:da:db:4a:39:93:ed:9d:3e:d9:5a:7c:9e:6b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F6C96793661DE4673D63F9B4676953E4CEFDC3A Validity Not Before: Sep 24 13:07:13 2026 GMT Not After : Sep 25 15:54:13 2026 GMT Subject: CN=7DDB035DFD33EFC423839BF67E88A088CC6F970E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:da:1f:ee:ca:fd:b8:34:07:70:2e:db:a3:4d: 39:12:11:4c:ef:c2:48:d2:f5:d9:e4:14:db:7c:59: 69:af:d7:70:14:b5:20:f4:e3:c8:4f:c9:d3:bc:26: dd:be:b0:d2:ab:c2:23:5a:69:a5:d6:46:9b:d2:0b: 1a:1e:46:80:0a:db:2d:2f:2e:3c:26:10:3d:7e:f7: b6:f8:a4:33:0a:56:49:4b:74:29:29:39:ca:dc:bb: 75:34:50:f4:76:9f:b9:60:2b:47:93:ff:1b:7b:d0: 09:d5:ff:24:29:8d:98:a9:4f:f9:64:bb:04:f5:70: b4:44:26:01:c0:ed:32:9f:f5:7f:8a:3c:e7:f3:db: 5d:ef:a1:bf:ae:e2:30:77:ca:0e:45:c5:14:22:b7: 86:4d:79:57:d4:32:2e:5c:01:90:33:84:5a:01:0e: 63:b2:8b:51:65:a4:80:1a:c4:78:2c:f5:bf:be:14: f0:01:d5:34:b9:13:17:62:30:82:99:a0:03:93:0b: 56:e8:b9:30:fd:c0:5c:cd:59:44:ad:a7:80:95:e7: 6c:6d:25:c3:8b:6e:2a:10:6f:40:f9:44:0b:bd:62: 65:16:76:b7:3b:96:1c:3e:3e:74:fa:71:f0:88:6c: ad:fb:2e:41:26:8b:b3:55:93:01:f9:f0:ad:7d:d1: ae:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DB:03:5D:FD:33:EF:C4:23:83:9B:F6:7E:88:A0:88:CC:6F:97:0E X509v3 Authority Key Identifier: keyid:1F:6C:96:79:36:61:DE:46:73:D6:3F:9B:46:76:95:3E:4C:EF:DC:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/1F6C96793661DE4673D63F9B4676953E4CEFDC3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F6C96793661DE4673D63F9B4676953E4CEFDC3A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/1F6C96793661DE4673D63F9B4676953E4CEFDC3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:d8:f5:2c:18:f3:30:eb:d8:7f:18:b2:9f:e0:8f:89:17:c4: 07:3e:a1:3f:ca:3e:8a:89:01:fe:0b:6a:e8:5b:26:81:9f:8f: 27:70:6b:5a:6f:a4:e6:17:61:e5:f9:f3:e3:23:1e:ab:23:c8: 41:5e:98:3b:98:d4:05:d4:2a:fe:a0:a6:6a:e2:ed:70:66:da: 43:75:ed:34:7c:03:27:11:e5:2b:30:20:7f:e9:ae:9e:1a:cb: 21:8b:a4:3a:f0:e7:2e:24:82:7c:09:f0:18:7e:4b:1c:75:6b: 68:c2:0c:46:79:2f:3f:80:32:d9:9f:26:fe:b8:e7:a7:fb:87: 0f:49:93:fa:7c:bd:d4:62:21:c6:49:ab:17:57:06:44:1f:a3: bf:43:75:cd:e2:bc:fa:79:91:55:ca:0c:41:69:07:31:31:82: 94:37:1b:5a:87:0c:f8:fb:09:06:47:c5:f1:72:ea:b6:86:f3: 44:cc:61:f8:a0:66:d8:85:84:17:a6:57:ef:52:65:2b:79:f3: cd:53:80:6e:a1:5a:72:09:a1:35:26:02:d8:f5:80:d7:09:43: d5:ac:8b:50:a1:90:c0:74:96:6c:b7:4a:10:ab:58:d1:cb:74: bb:d6:5a:13:bb:fa:fe:22:7c:97:e4:24:b7:80:31:d9:2b:a7: a9:b5:b5:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR67pLQA92ttKOZPtnT7ZWnyea88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2Qzk2NzkzNjYxREU0NjczRDYzRjlCNDY3Njk1M0U0 Q0VGREMzQTAeFw0yNjA5MjQxMzA3MTNaFw0yNjA5MjUxNTU0MTNaMDMxMTAvBgNV BAMTKDdEREIwMzVERkQzM0VGQzQyMzgzOUJGNjdFODhBMDg4Q0M2Rjk3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw2h/uyv24NAdwLtujTTkSEUzv wkjS9dnkFNt8WWmv13AUtSD048hPydO8Jt2+sNKrwiNaaaXWRpvSCxoeRoAK2y0v LjwmED1+97b4pDMKVklLdCkpOcrcu3U0UPR2n7lgK0eT/xt70AnV/yQpjZipT/lk uwT1cLREJgHA7TKf9X+KPOfz213vob+u4jB3yg5FxRQit4ZNeVfUMi5cAZAzhFoB DmOyi1FlpIAaxHgs9b++FPAB1TS5ExdiMIKZoAOTC1bouTD9wFzNWUStp4CV52xt JcOLbioQb0D5RAu9YmUWdrc7lhw+PnT6cfCIbK37LkEmi7NVkwH58K190a4FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfdsDXf0z78Qjg5v2foigiMxvlw4wHwYDVR0j BBgwFoAUH2yWeTZh3kZz1j+bRnaVPkzv3DowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTNkZTUwMzUtODRlMS00NGM2LTljZjktNGVhMGJiYWEwOTNmLzAvMUY2Qzk2Nzkz NjYxREU0NjczRDYzRjlCNDY3Njk1M0U0Q0VGREMzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRjZDOTY3OTM2NjFERTQ2NzNENjNGOUI0Njc2OTUzRTRDRUZE QzNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTNkZTUwMzUtODRlMS00NGM2LTlj ZjktNGVhMGJiYWEwOTNmLzAvMUY2Qzk2NzkzNjYxREU0NjczRDYzRjlCNDY3Njk1 M0U0Q0VGREMzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHY9SwY8zDr2H8Ysp/gj4kXxAc+oT/KPoqJ Af4LauhbJoGfjydwa1pvpOYXYeX58+MjHqsjyEFemDuY1AXUKv6gpmri7XBm2kN1 7TR8AycR5SswIH/prp4ayyGLpDrw5y4kgnwJ8Bh+Sxx1a2jCDEZ5Lz+AMtmfJv64 56f7hw9Jk/p8vdRiIcZJqxdXBkQfo79Ddc3ivPp5kVXKDEFpBzExgpQ3G1qHDPj7 CQZHxfFy6raG80TMYfigZtiFhBemV+9SZSt5881TgG6hWnIJoTUmAtj1gNcJQ9Ws i1ChkMB0lmy3ShCrWNHLdLvWWhO7+v4ifJfkJLeAMdkrp6m1tTQ= -----END CERTIFICATE-----Generated at Fri Sep 25 02:43:50 2026 by rpki-client