$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft File: 1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft (raw, json) Hash identifier: zxApa87vaNKuoZCfe8bi5S58VRJMF9EL112qeESVMUk= Subject key identifier: 74:EC:B9:2B:D4:F7:B0:92:B0:64:0D:14:5C:D7:BD:22:45:0C:2B:37 Authority key identifier: 11:33:57:82:21:40:7D:A4:E6:D6:E1:F7:DD:BD:40:2A:D1:71:42:D1 Certificate issuer: /CN=1133578221407DA4E6D6E1F7DDBD402AD17142D1 Certificate serial: 1AB50073A6EB43A34B9D5A6F2BD0EC633D6256A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 01:48:02 +0000 Manifest this update: Thu 24 Sep 2026 01:43:02 +0000 Manifest next update: Fri 25 Sep 2026 03:01:02 +0000 Files and hashes: 1: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: oHCuH/wfD5uofyH9qDQzuSNonMRnW2BjZEpAbHvRcj0=) 2: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: Zk2C8S3MwM5h7vXomg1WGWoihsk+uAiRDgp6DvLkrYk=) 3: 1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl (hash: Ja/3BT5znr4ovifGyL3q9e+D1xgixbCeK/cQL9nfuiw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b5:00:73:a6:eb:43:a3:4b:9d:5a:6f:2b:d0:ec:63:3d:62:56:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133578221407DA4E6D6E1F7DDBD402AD17142D1 Validity Not Before: Sep 24 01:43:02 2026 GMT Not After : Sep 25 03:01:02 2026 GMT Subject: CN=74ECB92BD4F7B092B0640D145CD7BD22450C2B37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:ad:26:3c:5c:d8:41:fc:6b:ed:df:fa:25: 94:05:9f:d8:c3:75:b5:3c:c0:ce:bb:ca:60:bb:d3: 89:75:a0:3d:18:d5:12:8e:5d:55:19:37:53:2c:f7: 7b:eb:5c:78:41:18:ec:4b:07:6c:73:d0:2b:02:b5: 0d:a1:03:61:e9:2e:1e:3c:29:2a:3d:13:cd:7e:26: d2:42:ff:ec:d6:a0:97:18:33:3b:74:e7:03:5b:dc: e9:a0:6b:57:ea:56:8f:c7:5c:7c:57:f3:4f:5d:95: 99:81:c7:eb:96:1e:03:c7:46:f5:18:4d:d3:d5:ec: 34:d2:f9:1f:c8:20:6d:81:09:3d:e3:ea:36:81:dc: 72:28:19:1a:83:d8:39:2f:06:6b:9f:fd:7c:a5:8f: cb:1f:67:ad:29:5e:b3:ee:d8:a9:6a:67:9f:55:ab: 0a:7e:ee:ac:d8:dc:f4:64:28:b1:65:8a:c4:5e:49: 3b:44:7f:f9:ca:d7:2d:4f:c3:99:71:c3:46:e8:4a: c5:f5:13:f1:79:77:59:f6:b7:dc:37:0f:b2:eb:16: ee:0e:9b:bf:8c:d9:9d:8b:ec:f1:1e:1f:af:7b:8f: 7b:c9:d3:5f:23:9c:ab:67:2a:f4:01:40:ee:82:87: e8:e0:37:99:41:bc:be:77:4d:67:50:1a:85:e5:11: 91:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:EC:B9:2B:D4:F7:B0:92:B0:64:0D:14:5C:D7:BD:22:45:0C:2B:37 X509v3 Authority Key Identifier: keyid:11:33:57:82:21:40:7D:A4:E6:D6:E1:F7:DD:BD:40:2A:D1:71:42:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:63:ea:f7:90:5f:13:7d:d3:1a:0c:60:65:e3:1b:70:f6:dc: 3f:93:77:56:c2:b0:cc:d9:01:75:bc:c7:72:b7:e1:c7:16:97: 8e:56:36:db:48:d1:97:ce:de:c2:2b:b2:81:e4:a6:cd:40:f5: a0:3f:b9:98:88:b5:3f:5a:1d:99:52:51:be:0f:11:f5:a0:81: e0:59:2d:a8:0a:fc:d7:aa:68:52:76:b6:ed:00:07:f7:32:32: c3:93:80:03:88:45:2b:bc:54:d3:e3:20:0f:9e:8d:86:1a:fa: 53:ae:26:78:e3:aa:34:9a:11:e8:0e:d6:3f:43:39:65:97:5a: 0a:c1:5d:b5:8d:81:86:7a:fb:c7:fd:45:67:14:33:7c:7c:b2: 01:e9:ef:4c:d1:e6:32:22:49:07:8c:40:4c:8c:0a:d0:7b:48: 57:42:10:68:5b:fd:d5:3e:57:64:b7:80:74:4b:43:f3:2d:72: 73:74:68:e8:6e:7f:69:e8:27:43:9d:7a:e6:3e:54:88:2b:e3: 52:04:e3:51:82:c8:36:2b:1a:bd:24:da:7a:6b:db:ba:79:f8: 7d:b5:65:a9:91:56:f3:1a:5b:1b:ac:f7:bf:5f:c5:12:ba:df: 33:15:62:62:6a:37:bf:91:5a:b2:84:21:87:ff:e7:bc:d1:51: b4:d9:6c:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGrUAc6brQ6NLnVpvK9DsYz1iVqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzU3ODIyMTQwN0RBNEU2RDZFMUY3RERCRDQwMkFE MTcxNDJEMTAeFw0yNjA5MjQwMTQzMDJaFw0yNjA5MjUwMzAxMDJaMDMxMTAvBgNV BAMTKDc0RUNCOTJCRDRGN0IwOTJCMDY0MEQxNDVDRDdCRDIyNDUwQzJCMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+QK0mPFzYQfxr7d/6JZQFn9jD dbU8wM67ymC704l1oD0Y1RKOXVUZN1Ms93vrXHhBGOxLB2xz0CsCtQ2hA2HpLh48 KSo9E81+JtJC/+zWoJcYMzt05wNb3Omga1fqVo/HXHxX809dlZmBx+uWHgPHRvUY TdPV7DTS+R/IIG2BCT3j6jaB3HIoGRqD2DkvBmuf/Xylj8sfZ60pXrPu2KlqZ59V qwp+7qzY3PRkKLFlisReSTtEf/nK1y1Pw5lxw0boSsX1E/F5d1n2t9w3D7LrFu4O m7+M2Z2L7PEeH697j3vJ018jnKtnKvQBQO6Ch+jgN5lBvL53TWdQGoXlEZFjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdOy5K9T3sJKwZA0UXNe9IkUMKzcwHwYDVR0j BBgwFoAUETNXgiFAfaTm1uH33b1AKtFxQtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZjMWY1MWEtODY0NS00ZWIxLWEyZmYtZTI3YzI0YzhlMGM4LzAvMTEzMzU3ODIy MTQwN0RBNEU2RDZFMUY3RERCRDQwMkFEMTcxNDJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTMzNTc4MjIxNDA3REE0RTZENkUxRjdEREJENDAyQUQxNzE0 MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvMTEzMzU3ODIyMTQwN0RBNEU2RDZFMUY3RERCRDQw MkFEMTcxNDJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBj6veQXxN90xoMYGXjG3D23D+Td1bCsMzZ AXW8x3K34ccWl45WNttI0ZfO3sIrsoHkps1A9aA/uZiItT9aHZlSUb4PEfWggeBZ LagK/NeqaFJ2tu0AB/cyMsOTgAOIRSu8VNPjIA+ejYYa+lOuJnjjqjSaEegO1j9D OWWXWgrBXbWNgYZ6+8f9RWcUM3x8sgHp70zR5jIiSQeMQEyMCtB7SFdCEGhb/dU+ V2S3gHRLQ/MtcnN0aOhuf2noJ0OdeuY+VIgr41IE41GCyDYrGr0k2npr27p5+H21 ZamRVvMaWxus979fxRK63zMVYmJqN7+RWrKEIYf/57zRUbTZbGg= -----END CERTIFICATE-----Generated at Thu Sep 24 04:20:17 2026 by rpki-client