$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft File: 1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft (raw, json) Hash identifier: ekzf1IJUPj5kaXr7mJvXYGcfa9lOg44E2ZyJOJVoaz0= Subject key identifier: EE:77:A8:64:32:5E:3D:D1:9A:22:14:73:DD:6D:9C:A4:15:B2:75:AD Authority key identifier: 1C:F2:17:AA:EB:C8:A5:B8:BA:FA:D3:F7:EF:49:BE:BC:61:FB:E3:46 Certificate issuer: /CN=1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346 Certificate serial: 0FD44D88646C841A8F35E5F0C8E5FFEF319BE5A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 14:44:21 +0000 Manifest this update: Wed 23 Sep 2026 14:39:21 +0000 Manifest next update: Thu 24 Sep 2026 16:45:21 +0000 Files and hashes: 1: 3130332e3231312e3130362e302f32342d3234203d3e20313530393938.roa (hash: 8wIJWteGAIk9T9oN6S4OkGcsq4cI3A7o+2OUPgwfN0k=) 2: 3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa (hash: abHJVxNnwaoboRz133X3G8MnlftrvDuOlkNRl1NWN8Q=) 3: 1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl (hash: FB4J3uUhLKzhcp2rLN3vNqieY1Hz5JERBS0NfP43GCM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d4:4d:88:64:6c:84:1a:8f:35:e5:f0:c8:e5:ff:ef:31:9b:e5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346 Validity Not Before: Sep 23 14:39:21 2026 GMT Not After : Sep 24 16:45:21 2026 GMT Subject: CN=EE77A864325E3DD19A221473DD6D9CA415B275AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1e:cc:c0:a8:41:64:fb:e1:78:6a:05:6e:f3: 6e:2d:6c:3c:b5:c9:09:17:36:f9:1c:c8:d2:d6:d5: 2d:8d:21:96:37:b1:c7:2f:28:ce:25:7a:a9:4f:fc: 2c:45:ab:cb:4b:19:e5:69:1f:c8:92:fb:ac:27:70: a1:40:ad:70:0d:04:ce:7d:dd:74:9f:64:58:5d:0c: f2:d5:4a:21:2a:be:25:3d:d8:33:13:f2:b9:12:af: c0:1b:bf:5d:51:85:9a:36:aa:d9:61:a7:f5:a8:01: c9:c9:db:8e:16:c6:cb:a6:8d:e3:f1:f2:68:23:1c: 4f:5b:a1:2e:42:ee:f7:89:65:5b:78:73:f8:f1:9c: a5:bc:99:03:94:29:25:4e:e7:ff:1d:a7:4a:e8:1a: dc:c5:d6:f6:9e:c8:35:ac:70:6e:f4:7c:c6:86:e3: 0d:a8:ce:4d:53:ea:14:9f:95:9c:51:31:e4:10:21: fe:1a:e1:65:23:e3:33:97:1e:fe:59:a1:4d:09:7c: 95:34:48:24:ce:a4:97:9f:f6:8e:3b:07:4b:d0:24: b9:d4:15:2a:8e:f2:18:0d:df:bf:1f:3e:4e:29:da: 24:fb:1f:f5:07:04:85:6e:7b:b5:f9:68:f2:29:25: eb:21:d7:48:63:57:f2:b6:23:44:da:36:f3:23:db: 2e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:77:A8:64:32:5E:3D:D1:9A:22:14:73:DD:6D:9C:A4:15:B2:75:AD X509v3 Authority Key Identifier: keyid:1C:F2:17:AA:EB:C8:A5:B8:BA:FA:D3:F7:EF:49:BE:BC:61:FB:E3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:61:cb:da:aa:d9:8c:90:e0:05:34:50:68:be:ec:4a:fe:36: 35:f3:03:64:e4:16:5c:10:bf:1b:ae:89:7f:ee:5b:d4:1b:1d: 68:3a:ea:9b:67:66:6e:a3:28:94:d7:c3:fe:f4:f6:c5:b8:3a: 22:9a:ef:1e:56:05:7a:d4:75:32:b4:dd:49:56:95:d0:3e:0a: ac:88:72:2f:79:fd:56:98:a9:53:73:6e:bc:36:9e:ba:e8:13: 1a:29:94:22:7e:8b:c4:59:22:81:24:d0:c0:3b:66:43:9f:a8: 6e:5d:9e:4e:8f:62:a5:60:97:55:e9:7d:da:19:a8:78:68:84: 44:33:fd:15:d9:cb:62:36:88:da:1a:fe:12:46:d3:7b:9b:fd: 98:a2:1d:af:28:0b:0f:2c:cc:8d:8e:8c:07:76:d0:15:28:88: 66:e1:83:fd:4f:78:62:35:f2:30:15:cc:7f:97:97:89:30:fb: e5:0d:da:d3:66:f3:a3:bf:08:6d:82:03:b7:50:d6:cf:4c:07: b9:4b:ab:0c:bf:89:c1:f8:72:91:ee:b5:d5:da:c2:27:32:e3: 8d:d7:ee:14:b3:c2:75:cb:9e:51:e0:5d:6f:15:8a:22:20:4b: 9f:c3:ac:9d:52:ee:77:e0:fb:35:a0:2b:d5:3f:9e:a0:70:87: f5:5b:95:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9RNiGRshBqPNeXwyOX/7zGb5aIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMjE3QUFFQkM4QTVCOEJBRkFEM0Y3RUY0OUJFQkM2 MUZCRTM0NjAeFw0yNjA5MjMxNDM5MjFaFw0yNjA5MjQxNjQ1MjFaMDMxMTAvBgNV BAMTKEVFNzdBODY0MzI1RTNERDE5QTIyMTQ3M0RENkQ5Q0E0MTVCMjc1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTHszAqEFk++F4agVu824tbDy1 yQkXNvkcyNLW1S2NIZY3sccvKM4leqlP/CxFq8tLGeVpH8iS+6wncKFArXANBM59 3XSfZFhdDPLVSiEqviU92DMT8rkSr8Abv11RhZo2qtlhp/WoAcnJ244WxsumjePx 8mgjHE9boS5C7veJZVt4c/jxnKW8mQOUKSVO5/8dp0roGtzF1vaeyDWscG70fMaG 4w2ozk1T6hSflZxRMeQQIf4a4WUj4zOXHv5ZoU0JfJU0SCTOpJef9o47B0vQJLnU FSqO8hgN378fPk4p2iT7H/UHBIVue7X5aPIpJesh10hjV/K2I0TaNvMj2y6dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7neoZDJePdGaIhRz3W2cpBWyda0wHwYDVR0j BBgwFoAUHPIXquvIpbi6+tP370m+vGH740YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg3OGMwNjItYjA5Mi00MDI1LTliNjgtYmZlYjliNjVhNWEwLzAvMUNGMjE3QUFF QkM4QTVCOEJBRkFEM0Y3RUY0OUJFQkM2MUZCRTM0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQ0YyMTdBQUVCQzhBNUI4QkFGQUQzRjdFRjQ5QkVCQzYxRkJF MzQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg3OGMwNjItYjA5Mi00MDI1LTli NjgtYmZlYjliNjVhNWEwLzAvMUNGMjE3QUFFQkM4QTVCOEJBRkFEM0Y3RUY0OUJF QkM2MUZCRTM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9hy9qq2YyQ4AU0UGi+7Er+NjXzA2TkFlwQ vxuuiX/uW9QbHWg66ptnZm6jKJTXw/709sW4OiKa7x5WBXrUdTK03UlWldA+CqyI ci95/VaYqVNzbrw2nrroExoplCJ+i8RZIoEk0MA7ZkOfqG5dnk6PYqVgl1XpfdoZ qHhohEQz/RXZy2I2iNoa/hJG03ub/ZiiHa8oCw8szI2OjAd20BUoiGbhg/1PeGI1 8jAVzH+Xl4kw++UN2tNm86O/CG2CA7dQ1s9MB7lLqwy/icH4cpHutdXawicy443X 7hSzwnXLnlHgXW8ViiIgS5/DrJ1S7nfg+zWgK9U/nqBwh/Vbldk= -----END CERTIFICATE-----Generated at Thu Sep 24 06:02:51 2026 by rpki-client