$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft File: 1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft (raw, json) Hash identifier: sUrsc7v9AlpUMIpy6peyBYcbXBPNuS0Xg6RFBbVWDWg= Subject key identifier: 60:F5:27:CB:8C:16:1A:8C:95:C4:95:F9:52:F2:3A:40:0A:70:AF:32 Authority key identifier: 1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97 Certificate issuer: /CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97 Certificate serial: 107522793019011D2DD32BE83625360C894878BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 20:41:37 +0000 Manifest this update: Wed 23 Sep 2026 20:36:37 +0000 Manifest next update: Fri 25 Sep 2026 00:14:37 +0000 Files and hashes: 1: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: dL84/0rOuXqtPF6MekaG9yTRybyEbuVFXsB4G8qdgKg=) 2: 1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl (hash: ac6nM5E6mY7cHy4whg2R/GcK1euhyRMjfdiaBYbL550=) 3: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: mjBCiOFY82W/5BaaCPKdfmkELXQJ5JnJLV1VHbKxJAE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:75:22:79:30:19:01:1d:2d:d3:2b:e8:36:25:36:0c:89:48:78:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97 Validity Not Before: Sep 23 20:36:37 2026 GMT Not After : Sep 25 00:14:37 2026 GMT Subject: CN=60F527CB8C161A8C95C495F952F23A400A70AF32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9d:3d:62:6d:7a:88:01:39:ca:d6:7e:04:44: 4b:19:4c:d0:20:a6:1d:cb:ea:e1:b0:79:31:39:82: a3:57:c6:7b:83:c3:07:20:39:6f:07:41:38:47:fa: 2e:29:97:49:15:ba:3e:45:0e:d9:a2:ac:b4:1c:83: 40:30:18:f4:65:f9:8a:e6:7a:fb:21:55:84:60:a8: 72:33:7a:3c:67:90:fe:00:51:be:f2:1c:ac:1a:60: 42:93:c6:d1:27:62:7e:f3:8b:67:01:d3:6f:61:77: 30:2f:24:1d:e1:dc:bb:d2:16:b8:8a:58:0c:e1:c3: 8e:c8:04:84:1a:6d:6b:53:96:20:91:e9:c3:52:af: 45:44:2f:ff:e4:f6:c5:f6:da:6a:05:b1:82:fc:b6: 1d:14:8d:9e:c4:10:37:a7:47:66:0f:13:c0:f7:db: 90:11:df:7c:af:0b:d6:38:c4:4f:9e:9b:20:c0:21: e3:c1:28:c5:0a:a6:2c:3b:a5:ab:96:08:7b:ae:e9: bf:8c:1b:f5:1b:74:f4:80:a0:20:f9:0c:40:91:60: ca:f7:d5:b1:cd:5c:b3:ff:2e:49:e2:ae:75:05:62: 39:b3:96:f9:6d:75:0e:23:c4:d4:ed:2c:59:43:26: 08:63:41:c0:2f:e4:7e:9f:73:d0:21:c3:23:98:c8: 3b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F5:27:CB:8C:16:1A:8C:95:C4:95:F9:52:F2:3A:40:0A:70:AF:32 X509v3 Authority Key Identifier: keyid:1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:fb:be:41:10:8a:f9:0b:b6:e4:2f:f6:2b:ed:64:03:b7:22: 51:9b:9d:c0:4f:04:67:ea:c4:9d:2b:e3:fa:0a:6c:dd:65:f9: 62:8d:ed:12:fb:dd:d2:6f:24:59:ad:d7:42:6a:bb:1c:24:59: aa:12:ba:7a:62:d4:16:25:29:3f:38:23:8b:8f:58:2a:c6:1f: df:a8:cf:f1:56:e8:2c:88:c0:61:93:6b:91:23:08:68:9e:c7: 8e:2c:44:fa:66:86:99:a4:2c:48:be:9d:83:96:06:62:fd:f8: ba:20:4d:d8:88:11:5a:82:d7:f6:d1:b7:4d:a2:72:42:a9:9f: ad:d9:3a:b1:5e:f4:d0:79:19:92:33:89:e0:0f:1e:ae:7c:8d: aa:6e:0a:87:a9:70:97:76:80:dc:1f:27:36:3d:d1:07:73:9a: e6:98:d2:77:db:2d:d7:25:3c:4c:83:af:c0:be:57:39:1e:22: e8:e1:73:5c:cd:72:89:4e:b0:d1:12:7d:a5:a5:c9:ff:47:47: c5:77:99:5d:37:82:41:0e:ad:c0:bb:fe:e8:c9:d3:6c:4b:7f: bf:84:2b:cd:9e:a0:19:b0:b9:93:f5:80:ea:e0:0f:7d:4a:22: 20:23:bc:28:b2:25:c5:8e:09:16:fe:41:9b:21:51:10:1f:57: ca:dd:2c:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEHUieTAZAR0t0yvoNiU2DIlIeLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1QzNBQUY3RDVDRkUzOENFQUU1MzZDQTk0Q0YwNzBG RjE3N0Q5NzAeFw0yNjA5MjMyMDM2MzdaFw0yNjA5MjUwMDE0MzdaMDMxMTAvBgNV BAMTKDYwRjUyN0NCOEMxNjFBOEM5NUM0OTVGOTUyRjIzQTQwMEE3MEFGMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDinT1ibXqIATnK1n4EREsZTNAg ph3L6uGweTE5gqNXxnuDwwcgOW8HQThH+i4pl0kVuj5FDtmirLQcg0AwGPRl+Yrm evshVYRgqHIzejxnkP4AUb7yHKwaYEKTxtEnYn7zi2cB029hdzAvJB3h3LvSFriK WAzhw47IBIQabWtTliCR6cNSr0VEL//k9sX22moFsYL8th0UjZ7EEDenR2YPE8D3 25AR33yvC9Y4xE+emyDAIePBKMUKpiw7pauWCHuu6b+MG/UbdPSAoCD5DECRYMr3 1bHNXLP/LknirnUFYjmzlvltdQ4jxNTtLFlDJghjQcAv5H6fc9AhwyOYyDsJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYPUny4wWGoyVxJX5UvI6QApwrzIwHwYDVR0j BBgwFoAUHFw6r31c/jjOrlNsqUzwcP8XfZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY1ODJmMmItODYyNS00ZjM4LWIyNmUtNDJmYmQzYzIxY2YwLzAvMUM1QzNBQUY3 RDVDRkUzOENFQUU1MzZDQTk0Q0YwNzBGRjE3N0Q5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQzVDM0FBRjdENUNGRTM4Q0VBRTUzNkNBOTRDRjA3MEZGMTc3 RDk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvMUM1QzNBQUY3RDVDRkUzOENFQUU1MzZDQTk0Q0Yw NzBGRjE3N0Q5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADX7vkEQivkLtuQv9ivtZAO3IlGbncBPBGfq xJ0r4/oKbN1l+WKN7RL73dJvJFmt10JquxwkWaoSunpi1BYlKT84I4uPWCrGH9+o z/FW6CyIwGGTa5EjCGiex44sRPpmhpmkLEi+nYOWBmL9+LogTdiIEVqC1/bRt02i ckKpn63ZOrFe9NB5GZIzieAPHq58japuCoepcJd2gNwfJzY90QdzmuaY0nfbLdcl PEyDr8C+VzkeIujhc1zNcolOsNESfaWlyf9HR8V3mV03gkEOrcC7/ujJ02xLf7+E K82eoBmwuZP1gOrgD31KIiAjvCiyJcWOCRb+QZshURAfV8rdLFg= -----END CERTIFICATE-----Generated at Thu Sep 24 06:06:28 2026 by rpki-client