$ rpki-client -vvvf rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.mft File: C1107160ED19380A2A35934230DDBD4EBFCD6BB6.mft (raw, json) Hash identifier: 6VtpOCMs+oA0xT5PkxubfTKoY7nAvV/3tAdX0VMt4PE= Subject key identifier: 4E:62:D4:41:82:90:20:32:78:B9:CB:82:C6:46:98:0E:E1:36:A4:DE Authority key identifier: C1:10:71:60:ED:19:38:0A:2A:35:93:42:30:DD:BD:4E:BF:CD:6B:B6 Certificate issuer: /CN=C1107160ED19380A2A35934230DDBD4EBFCD6BB6 Certificate serial: 607A0CA44F56E262DBDB08151A27E218BCB51172 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 22:28:52 +0000 Manifest this update: Wed 23 Sep 2026 22:23:52 +0000 Manifest next update: Thu 24 Sep 2026 23:16:52 +0000 Files and hashes: 1: 3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa (hash: n0alGDAQHzfwa/TCA71GvBc0gKSVwlNBnQQN05lyfzo=) 2: 323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa (hash: rLDPQJO68wJrimu4TJs2pIl/cXWHfaWgrJapXpkI9R8=) 3: 3130332e3137302e39362e302f32342d3234203d3e20313432333638.roa (hash: UXkd0faoisOkStofIDAfK2htT8/ITEfQcEcnGH3OuXg=) 4: 3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa (hash: FJISYiehb+isZLmdCEovtMtqPbmkmTJQ7IEYdacbi0g=) 5: C1107160ED19380A2A35934230DDBD4EBFCD6BB6.crl (hash: BMUnVo+c8EbeOF9LNM7gkWJZ+k6i8dECQNUea6dC2jQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.crl rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:7a:0c:a4:4f:56:e2:62:db:db:08:15:1a:27:e2:18:bc:b5:11:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1107160ED19380A2A35934230DDBD4EBFCD6BB6 Validity Not Before: Sep 23 22:23:52 2026 GMT Not After : Sep 24 23:16:52 2026 GMT Subject: CN=4E62D4418290203278B9CB82C646980EE136A4DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e6:83:3e:53:85:c4:e3:5a:5e:4a:82:68:1c: 52:c6:e5:0c:f1:91:a2:be:40:c8:ec:b5:5f:29:ca: 71:0f:62:9b:70:fb:d2:24:1e:be:09:f7:74:59:da: dc:e8:9e:23:06:8b:41:86:ac:29:c4:62:a1:d0:1b: cb:7f:81:35:cb:fb:ef:38:ce:2a:53:b8:61:cb:00: a7:b8:ed:35:64:50:cf:fd:84:09:db:57:b1:90:57: 95:01:af:db:4e:3e:d8:b4:c1:e1:fb:c7:cb:92:3c: b1:06:2e:6b:41:f3:f8:60:85:74:8a:e3:dc:36:13: 03:44:1c:b4:5b:dc:4e:b4:e2:44:7f:61:43:ec:94: 25:4a:2c:48:63:7e:71:5d:de:a7:58:57:e7:f8:a5: 37:a0:66:02:20:27:07:3c:b8:79:ee:6e:b0:1c:65: 25:04:4b:9e:d7:8e:4a:72:1c:24:6c:c6:3f:e2:43: 69:73:63:25:9c:84:f8:5c:b4:ae:91:63:c3:15:ca: 69:28:66:ca:30:c8:bb:e4:1f:a1:e0:04:7b:30:16: 7f:4c:9d:82:97:ed:3d:69:ff:8d:8f:68:7b:87:6e: c8:f0:e2:69:b5:1a:e4:78:ad:4b:1d:59:39:40:25: bd:96:44:fe:dc:9e:79:59:4f:a5:c1:f9:43:31:c0: e8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:62:D4:41:82:90:20:32:78:B9:CB:82:C6:46:98:0E:E1:36:A4:DE X509v3 Authority Key Identifier: keyid:C1:10:71:60:ED:19:38:0A:2A:35:93:42:30:DD:BD:4E:BF:CD:6B:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:2a:04:c3:06:b7:71:26:92:c3:88:66:e9:ef:4a:4c:ce:38: 0a:19:a2:4b:de:03:6c:8a:84:bd:88:18:18:ae:56:00:30:b9: f0:ca:0f:aa:24:a8:20:e6:15:a3:0e:5c:90:ad:30:e1:f5:66: a0:e0:3b:59:42:dc:30:c6:1e:cf:a0:d7:64:7b:9a:6b:78:be: e2:6c:f7:0a:a9:40:f1:aa:27:bd:27:b7:22:2f:3f:48:9f:8f: 48:49:2b:b0:1d:82:31:d8:0f:00:67:b4:a7:01:ce:20:f6:25: b9:ca:82:6a:44:ed:46:97:b4:ac:d5:de:a3:55:12:81:1f:b3: fd:19:ca:ca:f3:3f:bf:8a:3c:63:39:61:c6:cd:b7:d4:63:da: 10:c9:13:c3:3c:75:74:ed:f6:06:42:75:d6:1e:2d:70:ff:97: 6c:38:28:a2:1d:62:1d:e7:a8:d9:dc:c2:85:91:43:c9:26:e4: 22:c0:54:4e:1f:7b:64:80:a4:5b:de:ef:6e:2a:fa:30:d6:1c: 16:fe:c9:2d:b6:32:fb:5f:04:22:93:85:bf:cb:55:6a:5d:d5: d0:03:03:73:cd:46:52:da:93:65:49:87:a3:df:6f:48:e2:47: ff:73:47:f4:d2:89:48:ac:8a:0a:9a:aa:dc:60:34:ed:81:d3: db:a5:c7:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYHoMpE9W4mLb2wgVGifiGLy1EXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzExMDcxNjBFRDE5MzgwQTJBMzU5MzQyMzBEREJENEVC RkNENkJCNjAeFw0yNjA5MjMyMjIzNTJaFw0yNjA5MjQyMzE2NTJaMDMxMTAvBgNV BAMTKDRFNjJENDQxODI5MDIwMzI3OEI5Q0I4MkM2NDY5ODBFRTEzNkE0REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe5oM+U4XE41peSoJoHFLG5Qzx kaK+QMjstV8pynEPYptw+9IkHr4J93RZ2tzoniMGi0GGrCnEYqHQG8t/gTXL++84 zipTuGHLAKe47TVkUM/9hAnbV7GQV5UBr9tOPti0weH7x8uSPLEGLmtB8/hghXSK 49w2EwNEHLRb3E604kR/YUPslCVKLEhjfnFd3qdYV+f4pTegZgIgJwc8uHnubrAc ZSUES57XjkpyHCRsxj/iQ2lzYyWchPhctK6RY8MVymkoZsowyLvkH6HgBHswFn9M nYKX7T1p/42PaHuHbsjw4mm1GuR4rUsdWTlAJb2WRP7cnnlZT6XB+UMxwOglAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTmLUQYKQIDJ4ucuCxkaYDuE2pN4wHwYDVR0j BBgwFoAUwRBxYO0ZOAoqNZNCMN29Tr/Na7YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODJkNDkxNzktNGQ4Yi00ZDJkLWFiZjQtNDMyMzFkZWI1YjAxLzAvQzExMDcxNjBF RDE5MzgwQTJBMzU5MzQyMzBEREJENEVCRkNENkJCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMTEwNzE2MEVEMTkzODBBMkEzNTkzNDIzMEREQkQ0RUJGQ0Q2 QkI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODJkNDkxNzktNGQ4Yi00ZDJkLWFi ZjQtNDMyMzFkZWI1YjAxLzAvQzExMDcxNjBFRDE5MzgwQTJBMzU5MzQyMzBEREJE NEVCRkNENkJCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgqBMMGt3EmksOIZunvSkzOOAoZokveA2yK hL2IGBiuVgAwufDKD6okqCDmFaMOXJCtMOH1ZqDgO1lC3DDGHs+g12R7mmt4vuJs 9wqpQPGqJ70ntyIvP0ifj0hJK7AdgjHYDwBntKcBziD2JbnKgmpE7UaXtKzV3qNV EoEfs/0ZysrzP7+KPGM5YcbNt9Rj2hDJE8M8dXTt9gZCddYeLXD/l2w4KKIdYh3n qNncwoWRQ8km5CLAVE4fe2SApFve724q+jDWHBb+yS22MvtfBCKThb/LVWpd1dAD A3PNRlLak2VJh6Pfb0jiR/9zR/TSiUisigqaqtxgNO2B09ulx3o= -----END CERTIFICATE-----Generated at Thu Sep 24 17:06:19 2026 by rpki-client