$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft File: 1675ADC47F4873145B24769B8134062EEB020A6A.mft (raw, json) Hash identifier: y05Ucu++CZeslCnDloj9pnlBXzOaGaq4Ap2LM1MtTZ4= Subject key identifier: DC:51:81:40:8C:C1:42:22:4A:7F:52:FE:68:65:59:52:44:5F:4C:A1 Authority key identifier: 16:75:AD:C4:7F:48:73:14:5B:24:76:9B:81:34:06:2E:EB:02:0A:6A Certificate issuer: /CN=1675ADC47F4873145B24769B8134062EEB020A6A Certificate serial: 25EC4C00B0640229E8B09970FAA598587482D4A6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1675ADC47F4873145B24769B8134062EEB020A6A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 14:44:20 +0000 Manifest this update: Wed 23 Sep 2026 14:39:20 +0000 Manifest next update: Thu 24 Sep 2026 18:21:20 +0000 Files and hashes: 1: 1675ADC47F4873145B24769B8134062EEB020A6A.crl (hash: WIsSEIC7muO0Mig2hCtYu9XMbOLgrePIwvIwvfBFpSM=) 2: 3135372e31302e3137392e302f32342d3234203d3e20313532333436.roa (hash: /DV6+SaBovRK3v8Zh1bjyOMwbspI86vj5IjrMCFPeu0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.crl rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1675ADC47F4873145B24769B8134062EEB020A6A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ec:4c:00:b0:64:02:29:e8:b0:99:70:fa:a5:98:58:74:82:d4:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1675ADC47F4873145B24769B8134062EEB020A6A Validity Not Before: Sep 23 14:39:20 2026 GMT Not After : Sep 24 18:21:20 2026 GMT Subject: CN=DC5181408CC142224A7F52FE68655952445F4CA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:19:97:92:a9:c0:e9:bc:23:54:c3:eb:d3:26: 94:58:8c:ba:bd:90:de:1f:36:0d:e7:b2:ae:e1:17: ec:50:1c:fa:ad:a6:6d:67:b3:b4:23:be:10:ff:ca: 28:e2:29:f4:2d:82:a9:70:c7:89:16:05:eb:9c:67: b0:74:83:3f:aa:81:89:a8:f8:52:c8:32:6f:55:05: 34:5b:9a:d3:ca:02:34:6c:82:c0:a6:bb:1a:9e:1e: 8b:cb:9f:85:2c:e9:9d:b7:2a:df:40:72:63:5b:2f: fc:d7:ff:b1:e2:8e:5f:ec:ea:7c:db:9e:23:b7:fa: 2f:a6:a3:d9:56:61:59:5f:4a:89:9e:6a:a2:d8:44: c7:7b:34:99:85:6a:89:bb:d1:ee:5d:f0:ea:6d:b6: d5:7e:06:45:24:c2:52:8a:71:75:86:15:01:6f:e3: 3f:03:e6:2f:f6:45:b7:57:14:25:8b:24:60:fd:2e: 7e:d4:2b:4c:28:13:06:24:e1:4a:c3:19:9e:fd:ee: e9:91:50:59:c4:b6:70:ed:c7:f0:a7:14:a4:d1:69: 4f:24:57:71:b8:a3:f7:6f:ad:64:d9:bb:c6:e3:5a: 5a:38:fe:9f:ef:62:5a:ba:55:2e:6d:c9:e7:17:15: 4a:18:0c:d5:c4:cf:c6:bc:9d:9a:14:85:38:62:03: 98:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:51:81:40:8C:C1:42:22:4A:7F:52:FE:68:65:59:52:44:5F:4C:A1 X509v3 Authority Key Identifier: keyid:16:75:AD:C4:7F:48:73:14:5B:24:76:9B:81:34:06:2E:EB:02:0A:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1675ADC47F4873145B24769B8134062EEB020A6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c6:fd:1c:78:94:b1:e8:64:2f:44:4f:45:04:6a:23:c0:74: 97:86:2a:68:c4:5c:6e:ae:27:c1:d5:a3:8a:f1:47:b7:f8:3c: d1:12:70:ac:ce:98:02:f3:76:36:d3:b2:f3:9b:d1:f4:76:d2: 5c:fb:4b:15:8c:0c:39:8b:05:18:1f:a9:69:88:6b:c6:25:11: 36:41:bb:23:4e:8e:7f:fc:fd:db:12:c5:32:9b:ce:76:c0:ee: 80:9a:33:fb:a5:9b:53:c7:56:c6:0c:8a:a3:eb:6c:95:f7:23: 6e:aa:7a:e1:0c:7e:c4:60:e5:6a:f7:a1:de:30:6c:43:1b:73: 6b:7f:21:b7:88:65:20:ca:0a:c5:99:d7:05:91:e1:49:11:08: 73:e1:f8:3e:02:04:a7:03:b6:ab:b1:15:39:0f:7d:1b:fa:c1: 24:e8:d1:be:24:ee:3b:c6:71:b0:15:e0:b7:1d:98:b9:2a:63: 65:b0:3b:5b:24:b9:c2:fd:7c:85:a8:37:c1:e7:92:c7:7d:d7: e0:32:b1:fe:cb:5a:96:51:fd:ca:49:e6:10:33:4f:56:d8:0b: 91:2f:62:83:72:34:a3:9f:3a:73:26:0c:f5:69:84:56:ca:a3: aa:45:3d:ed:b9:f6:73:fd:58:19:fa:8b:1b:7e:d0:d4:3d:8d: 7b:3f:8b:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJexMALBkAinosJlw+qWYWHSC1KYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3NUFEQzQ3RjQ4NzMxNDVCMjQ3NjlCODEzNDA2MkVF QjAyMEE2QTAeFw0yNjA5MjMxNDM5MjBaFw0yNjA5MjQxODIxMjBaMDMxMTAvBgNV BAMTKERDNTE4MTQwOENDMTQyMjI0QTdGNTJGRTY4NjU1OTUyNDQ1RjRDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqGZeSqcDpvCNUw+vTJpRYjLq9 kN4fNg3nsq7hF+xQHPqtpm1ns7QjvhD/yijiKfQtgqlwx4kWBeucZ7B0gz+qgYmo +FLIMm9VBTRbmtPKAjRsgsCmuxqeHovLn4Us6Z23Kt9AcmNbL/zX/7Hijl/s6nzb niO3+i+mo9lWYVlfSomeaqLYRMd7NJmFaom70e5d8OptttV+BkUkwlKKcXWGFQFv 4z8D5i/2RbdXFCWLJGD9Ln7UK0woEwYk4UrDGZ797umRUFnEtnDtx/CnFKTRaU8k V3G4o/dvrWTZu8bjWlo4/p/vYlq6VS5tyecXFUoYDNXEz8a8nZoUhThiA5ihAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3FGBQIzBQiJKf1L+aGVZUkRfTKEwHwYDVR0j BBgwFoAUFnWtxH9IcxRbJHabgTQGLusCCmowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YThkYzEzZmYtNWIxMC00NGE2LWI2ZjMtOGYwMzVlNTg5N2Q4LzAvMTY3NUFEQzQ3 RjQ4NzMxNDVCMjQ3NjlCODEzNDA2MkVFQjAyMEE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xNjc1QURDNDdGNDg3MzE0NUIyNDc2OUI4MTM0MDYyRUVCMDIw QTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYThkYzEzZmYtNWIxMC00NGE2LWI2 ZjMtOGYwMzVlNTg5N2Q4LzAvMTY3NUFEQzQ3RjQ4NzMxNDVCMjQ3NjlCODEzNDA2 MkVFQjAyMEE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/G/Rx4lLHoZC9ET0UEaiPAdJeGKmjEXG6u J8HVo4rxR7f4PNEScKzOmALzdjbTsvOb0fR20lz7SxWMDDmLBRgfqWmIa8YlETZB uyNOjn/8/dsSxTKbznbA7oCaM/ulm1PHVsYMiqPrbJX3I26qeuEMfsRg5Wr3od4w bEMbc2t/IbeIZSDKCsWZ1wWR4UkRCHPh+D4CBKcDtquxFTkPfRv6wSTo0b4k7jvG cbAV4LcdmLkqY2WwO1skucL9fIWoN8Hnksd91+Aysf7LWpZR/cpJ5hAzT1bYC5Ev YoNyNKOfOnMmDPVphFbKo6pFPe259nP9WBn6ixt+0NQ9jXs/iyI= -----END CERTIFICATE-----Generated at Thu Sep 24 11:28:20 2026 by rpki-client