$ rpki-client -vvvf rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft File: 1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft (raw, json) Hash identifier: xpc94o1HlOzi34u+eqAb687ILPBm8s8pblT5KrQkGOI= Subject key identifier: A4:CD:CE:92:F5:8C:6C:1A:7B:DF:86:07:1E:5F:0C:22:24:57:4F:6B Authority key identifier: 1A:0D:AD:24:57:66:AE:B1:9B:B0:4F:68:8F:00:02:54:E9:F4:BB:89 Certificate issuer: /CN=1A0DAD245766AEB19BB04F688F000254E9F4BB89 Certificate serial: 38DBFC18C4D579395F65192ABD54BBF484799CD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 20:25:54 +0000 Manifest this update: Fri 25 Sep 2026 20:20:54 +0000 Manifest next update: Sat 26 Sep 2026 22:24:54 +0000 Files and hashes: 1: 3130332e3131352e33352e302f32342d3234203d3e20313530343831.roa (hash: 8ZC6zz9Re3rZ3m+opQHEHUjBM1e+RO/tPdv5dWkLhp4=) 2: 1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl (hash: n3tnT6zBNvMN2KtC7fov35TMfhyB7Hlk6Vhc6crLXtA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:db:fc:18:c4:d5:79:39:5f:65:19:2a:bd:54:bb:f4:84:79:9c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A0DAD245766AEB19BB04F688F000254E9F4BB89 Validity Not Before: Sep 25 20:20:54 2026 GMT Not After : Sep 26 22:24:54 2026 GMT Subject: CN=A4CDCE92F58C6C1A7BDF86071E5F0C2224574F6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:26:a7:46:b2:09:46:b4:dd:94:e6:df:d7:b0: 32:eb:c2:c8:13:5a:04:17:9d:15:b1:90:2f:9c:4f: d5:2e:3d:19:92:f6:8e:5a:af:a4:ce:df:29:34:4f: 9a:6c:eb:c3:ea:8c:fb:78:70:8e:9e:a6:9c:ca:51: fc:73:94:a7:8e:08:3d:c9:96:bb:ff:b8:46:0e:a0: 10:20:34:3b:d7:9f:00:1e:2a:2d:75:cf:e4:91:60: 04:d0:c3:ab:ec:7d:b9:86:2f:fb:b1:d2:d7:76:74: 19:bd:7c:24:d9:d8:9c:e5:39:11:ea:b6:e9:ae:1d: 1f:02:d2:03:e8:ac:26:87:d2:43:76:34:b3:b5:04: 3b:ae:67:ed:6c:0f:df:16:4f:e9:b2:81:6d:32:df: f8:81:fa:1b:c3:64:e3:5a:15:4a:b2:06:15:42:4e: b4:39:1e:9c:4b:5b:fb:d8:c3:3d:d9:de:08:e9:94: 43:68:7c:4f:3c:e8:20:1d:34:fa:0a:55:df:81:da: 92:89:5e:33:b5:e9:5f:fd:07:65:8d:c6:f1:6f:30: 35:47:a1:d2:bd:fd:c1:95:aa:ae:d0:eb:e2:df:8d: 89:ac:5c:3c:6d:96:8f:a5:c3:9a:75:05:16:53:85: 18:8e:2c:94:10:23:c4:01:2b:b7:83:99:53:2e:72: 3b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CD:CE:92:F5:8C:6C:1A:7B:DF:86:07:1E:5F:0C:22:24:57:4F:6B X509v3 Authority Key Identifier: keyid:1A:0D:AD:24:57:66:AE:B1:9B:B0:4F:68:8F:00:02:54:E9:F4:BB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f6:06:b3:14:55:b7:39:c5:cd:c7:78:ca:57:8f:37:f1:b7: 66:9b:68:76:e8:61:e2:4f:86:8b:9d:0e:d8:b3:61:c6:05:8d: 2c:8b:f3:95:ab:31:f7:6d:b0:16:cd:ea:b0:23:76:f2:b0:d3: fa:82:44:40:a3:83:41:d3:9e:ee:0e:d1:46:d1:ff:0f:43:2a: db:19:48:21:b4:33:1b:4d:b2:75:9a:5e:68:45:95:fd:54:ce: 84:39:52:7c:d6:12:0b:a1:2c:b7:d4:b0:74:d7:4f:8e:e5:1c: 32:72:e7:99:ae:ce:1a:be:5f:46:8a:09:62:13:dc:28:33:5f: 71:ca:8d:8b:ff:f2:61:cf:b2:7a:ea:db:f1:20:64:93:81:65: 6f:c1:58:a7:c9:8f:b9:3b:c9:cd:d7:d9:23:59:44:60:1e:be: b0:59:97:f2:84:f6:c6:de:97:44:9e:65:6d:50:b2:94:10:31: bf:48:80:ce:5b:dc:7b:7e:c8:e2:78:b6:e3:d8:ff:f2:f3:08: 84:04:4a:64:07:87:f5:b0:c5:63:76:6f:ad:5f:b9:81:76:af: c7:c5:a4:8e:da:d9:c7:08:29:14:80:d1:23:38:97:4f:d3:33: ff:e0:03:a6:13:02:af:5a:87:60:5b:c9:44:ee:0a:dc:ca:f5: 65:d2:0e:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUONv8GMTVeTlfZRkqvVS79IR5nNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEwREFEMjQ1NzY2QUVCMTlCQjA0RjY4OEYwMDAyNTRF OUY0QkI4OTAeFw0yNjA5MjUyMDIwNTRaFw0yNjA5MjYyMjI0NTRaMDMxMTAvBgNV BAMTKEE0Q0RDRTkyRjU4QzZDMUE3QkRGODYwNzFFNUYwQzIyMjQ1NzRGNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaJqdGsglGtN2U5t/XsDLrwsgT WgQXnRWxkC+cT9UuPRmS9o5ar6TO3yk0T5ps68PqjPt4cI6eppzKUfxzlKeOCD3J lrv/uEYOoBAgNDvXnwAeKi11z+SRYATQw6vsfbmGL/ux0td2dBm9fCTZ2JzlORHq tumuHR8C0gPorCaH0kN2NLO1BDuuZ+1sD98WT+mygW0y3/iB+hvDZONaFUqyBhVC TrQ5HpxLW/vYwz3Z3gjplENofE886CAdNPoKVd+B2pKJXjO16V/9B2WNxvFvMDVH odK9/cGVqq7Q6+LfjYmsXDxtlo+lw5p1BRZThRiOLJQQI8QBK7eDmVMucjtRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpM3OkvWMbBp734YHHl8MIiRXT2swHwYDVR0j BBgwFoAUGg2tJFdmrrGbsE9ojwACVOn0u4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk4NDMyY2QtYTA0Ny00ODViLTgxNDMtNTlhMzUzMmMwN2I3LzAvMUEwREFEMjQ1 NzY2QUVCMTlCQjA0RjY4OEYwMDAyNTRFOUY0QkI4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTBEQUQyNDU3NjZBRUIxOUJCMDRGNjg4RjAwMDI1NEU5RjRC Qjg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk4NDMyY2QtYTA0Ny00ODViLTgx NDMtNTlhMzUzMmMwN2I3LzAvMUEwREFEMjQ1NzY2QUVCMTlCQjA0RjY4OEYwMDAy NTRFOUY0QkI4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACH2BrMUVbc5xc3HeMpXjzfxt2abaHboYeJP houdDtizYcYFjSyL85WrMfdtsBbN6rAjdvKw0/qCRECjg0HTnu4O0UbR/w9DKtsZ SCG0MxtNsnWaXmhFlf1UzoQ5UnzWEguhLLfUsHTXT47lHDJy55muzhq+X0aKCWIT 3CgzX3HKjYv/8mHPsnrq2/EgZJOBZW/BWKfJj7k7yc3X2SNZRGAevrBZl/KE9sbe l0SeZW1QspQQMb9IgM5b3Ht+yOJ4tuPY//LzCIQESmQHh/WwxWN2b61fuYF2r8fF pI7a2ccIKRSA0SM4l0/TM//gA6YTAq9ah2BbyUTuCtzK9WXSDsw= -----END CERTIFICATE-----Generated at Sat Sep 26 10:47:25 2026 by rpki-client