$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft File: 1F3B2D12BD297463BA7717F257A40F73DE290B89.mft (raw, json) Hash identifier: vMKStsEuXphZhFOqb82+NGgGQGdqTEqPqKCM10ZqB94= Subject key identifier: B9:A9:AD:67:5E:B8:90:1C:0B:09:52:6D:8A:26:E0:EB:5A:36:C8:8F Authority key identifier: 1F:3B:2D:12:BD:29:74:63:BA:77:17:F2:57:A4:0F:73:DE:29:0B:89 Certificate issuer: /CN=1F3B2D12BD297463BA7717F257A40F73DE290B89 Certificate serial: 417F00719D91856429620F885E57CEA51B2BB100 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 16:41:42 +0000 Manifest this update: Wed 23 Sep 2026 16:36:42 +0000 Manifest next update: Thu 24 Sep 2026 20:21:42 +0000 Files and hashes: 1: 1F3B2D12BD297463BA7717F257A40F73DE290B89.crl (hash: bzi0BzIkXziiimEmNEaxpzQgfkClMh0glvXH835GPag=) 2: 3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (hash: VTF9DKsDDs5XXBhLFlLnAOGE0dR7pXYnN3FimbyGZt4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.crl rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7f:00:71:9d:91:85:64:29:62:0f:88:5e:57:ce:a5:1b:2b:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F3B2D12BD297463BA7717F257A40F73DE290B89 Validity Not Before: Sep 23 16:36:42 2026 GMT Not After : Sep 24 20:21:42 2026 GMT Subject: CN=B9A9AD675EB8901C0B09526D8A26E0EB5A36C88F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cb:d4:b9:98:59:3a:ca:e4:e2:f1:b5:4f:f8: bd:be:73:71:25:46:25:12:32:93:d9:98:fd:64:22: 11:de:05:bd:96:9c:13:59:15:8b:7a:18:a2:8b:a5: e2:c2:e1:21:e3:29:c0:df:50:46:cd:17:29:0c:69: 6f:59:62:ed:32:21:28:17:30:2a:3a:1e:ef:7f:9c: d3:19:fc:c5:ee:db:f0:39:a2:5d:28:b0:2d:f4:b5: 1f:73:f3:e3:10:b4:7e:12:e2:ed:05:8d:0b:7a:b7: 3c:eb:60:08:07:c0:5c:63:1b:05:99:dc:6e:a3:1f: a4:28:12:d9:6f:85:f4:7c:a2:22:d6:f3:0a:6b:7e: e4:ee:91:54:00:67:04:78:ec:2b:f9:e9:e0:06:af: bd:33:95:59:b8:96:39:e3:87:87:f3:47:c4:f5:ee: 45:10:94:26:f8:95:ba:a7:94:62:af:ac:4b:4d:61: e6:9d:91:38:46:9f:68:4d:74:e0:e3:96:8a:b5:72: 89:0a:ee:c3:72:9e:8b:07:e8:af:16:99:69:ca:eb: 81:52:10:1a:e7:20:eb:c9:3a:02:2e:87:8e:3c:f8: 41:ab:bb:61:0f:8e:bc:c3:9e:29:90:80:15:40:a2: 01:5d:a7:79:95:62:24:f9:79:99:86:6c:4e:80:33: a9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A9:AD:67:5E:B8:90:1C:0B:09:52:6D:8A:26:E0:EB:5A:36:C8:8F X509v3 Authority Key Identifier: keyid:1F:3B:2D:12:BD:29:74:63:BA:77:17:F2:57:A4:0F:73:DE:29:0B:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:63:bc:5f:32:15:f2:50:ee:ea:ca:84:d9:e9:73:80:22:dd: 0f:55:59:fd:63:5c:7c:88:bb:d6:d4:fc:cd:e6:e1:02:05:48: 23:4b:ed:4b:30:d9:5f:cd:49:b1:75:dc:bf:28:00:03:f6:47: 8f:55:14:08:43:2e:c2:5e:89:17:85:ba:3c:f4:54:f1:59:2e: 69:7c:bb:50:c8:55:cd:71:1a:53:be:f3:ba:31:f4:ed:f0:24: 62:28:95:b3:d6:7e:e0:d7:92:d6:5c:99:6c:cc:3f:d2:3d:24: 58:ae:16:73:64:3d:cf:f3:58:cf:8f:f5:63:6d:f7:54:7f:8b: 1e:a2:c5:3b:4c:39:56:3e:c7:a7:dd:17:44:b5:37:30:99:f6: 45:a2:2c:b7:5b:c8:6d:3c:27:9d:e4:9e:05:d0:80:7c:ed:b9: dd:f1:e7:a0:d9:f4:3c:93:54:95:26:a4:7d:90:ab:1d:dd:0f: b6:87:12:e3:7e:e9:ec:86:ec:57:a5:45:76:ad:10:6c:7d:3d: da:82:4e:30:80:62:4d:b7:08:cf:08:41:47:f6:7c:56:68:fc: 39:46:6f:a1:fe:81:0f:68:72:a8:31:1b:c7:34:f3:b6:5c:b1: f1:c8:87:c2:8e:e6:84:13:d5:21:23:df:68:26:6b:b7:b4:a4: e0:2f:f9:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQX8AcZ2RhWQpYg+IXlfOpRsrsQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUYzQjJEMTJCRDI5NzQ2M0JBNzcxN0YyNTdBNDBGNzNE RTI5MEI4OTAeFw0yNjA5MjMxNjM2NDJaFw0yNjA5MjQyMDIxNDJaMDMxMTAvBgNV BAMTKEI5QTlBRDY3NUVCODkwMUMwQjA5NTI2RDhBMjZFMEVCNUEzNkM4OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/y9S5mFk6yuTi8bVP+L2+c3El RiUSMpPZmP1kIhHeBb2WnBNZFYt6GKKLpeLC4SHjKcDfUEbNFykMaW9ZYu0yISgX MCo6Hu9/nNMZ/MXu2/A5ol0osC30tR9z8+MQtH4S4u0FjQt6tzzrYAgHwFxjGwWZ 3G6jH6QoEtlvhfR8oiLW8wprfuTukVQAZwR47Cv56eAGr70zlVm4ljnjh4fzR8T1 7kUQlCb4lbqnlGKvrEtNYeadkThGn2hNdODjloq1cokK7sNynosH6K8WmWnK64FS EBrnIOvJOgIuh448+EGru2EPjrzDnimQgBVAogFdp3mVYiT5eZmGbE6AM6nTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuamtZ164kBwLCVJtiibg61o2yI8wHwYDVR0j BBgwFoAUHzstEr0pdGO6dxfyV6QPc94pC4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUyY2FjY2YtMzI3ZS00MmJkLTliMzEtMGE4NzNkMmU2NjkyLzAvMUYzQjJEMTJC RDI5NzQ2M0JBNzcxN0YyNTdBNDBGNzNERTI5MEI4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRjNCMkQxMkJEMjk3NDYzQkE3NzE3RjI1N0E0MEY3M0RFMjkw Qjg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUyY2FjY2YtMzI3ZS00MmJkLTli MzEtMGE4NzNkMmU2NjkyLzAvMUYzQjJEMTJCRDI5NzQ2M0JBNzcxN0YyNTdBNDBG NzNERTI5MEI4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANdjvF8yFfJQ7urKhNnpc4Ai3Q9VWf1jXHyI u9bU/M3m4QIFSCNL7Usw2V/NSbF13L8oAAP2R49VFAhDLsJeiReFujz0VPFZLml8 u1DIVc1xGlO+87ox9O3wJGIolbPWfuDXktZcmWzMP9I9JFiuFnNkPc/zWM+P9WNt 91R/ix6ixTtMOVY+x6fdF0S1NzCZ9kWiLLdbyG08J53kngXQgHztud3x56DZ9DyT VJUmpH2Qqx3dD7aHEuN+6eyG7FelRXatEGx9PdqCTjCAYk23CM8IQUf2fFZo/DlG b6H+gQ9ocqgxG8c087ZcsfHIh8KO5oQT1SEj32gma7e0pOAv+es= -----END CERTIFICATE-----Generated at Thu Sep 24 12:26:54 2026 by rpki-client