$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft File: 1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft (raw, json) Hash identifier: Sb0bznixN5WxqvbWN4MixC2Jeg11D9nsJpj0IRjgYs0= Subject key identifier: 2E:AB:C1:65:3F:57:55:54:E0:DA:46:3D:77:6C:3F:0A:08:70:B9:11 Authority key identifier: 1E:03:01:E0:EA:0A:06:DC:84:35:E4:3B:CC:69:77:EF:3B:D4:AF:1A Certificate issuer: /CN=1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A Certificate serial: 271FA35EDACB9DEAE61E2465A516BB2CE55F9B1E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 18:13:10 +0000 Manifest this update: Thu 24 Sep 2026 18:08:10 +0000 Manifest next update: Fri 25 Sep 2026 20:04:10 +0000 Files and hashes: 1: 3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa (hash: ilMWkREaaRUsVGA1yBY9I9uXOlfT5ODPbD+SLMsp1gg=) 2: 3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa (hash: 10z6uPoT7+KF3jmKNjwiPYU/fWtSzXtmxjuZX3KE6+w=) 3: 1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl (hash: 4UYgCyhUqkPzqBenPD5BXtVQFxpOJ2Hp8hBAFWPgJV4=) 4: 3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa (hash: +vANdbTWMrufItFa0nCpqJPgPphPTUGA/kS3/GJ4B1E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:1f:a3:5e:da:cb:9d:ea:e6:1e:24:65:a5:16:bb:2c:e5:5f:9b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A Validity Not Before: Sep 24 18:08:10 2026 GMT Not After : Sep 25 20:04:10 2026 GMT Subject: CN=2EABC1653F575554E0DA463D776C3F0A0870B911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ad:c1:12:13:f6:7f:2f:d4:21:23:a1:c8:9b: 44:b0:6b:09:e2:b0:bd:5e:13:85:d2:58:73:ef:49: 9c:a1:8f:c6:de:a0:e6:c9:cd:07:35:3b:b1:f8:6c: a0:dd:47:a9:c9:f4:74:26:2a:03:45:37:97:81:1a: 9c:4f:a4:2f:14:fa:41:40:0f:99:57:cb:19:30:5e: 62:90:64:6c:aa:8d:cf:ed:94:da:4a:9a:05:25:bb: 1c:2a:bd:93:df:b6:4a:2f:a5:0a:df:38:16:3d:87: c0:48:b6:f9:62:6c:db:fc:a2:0e:56:41:9f:b5:1c: 89:37:b4:da:61:8f:02:f3:5d:a5:fd:5e:80:28:ed: b0:d1:b2:b2:58:35:2f:e1:0a:6e:f2:88:14:35:3f: 63:ec:da:40:ff:43:94:df:c3:6d:40:91:21:66:5e: 7b:77:bf:be:ad:d6:5d:4e:2f:b0:68:61:cb:fa:c1: 52:d9:c0:4c:c9:c8:0a:a4:1a:99:aa:f7:ed:18:e4: cf:2f:8b:3a:c9:a0:a7:6b:06:68:23:8a:85:88:7e: 15:56:29:b8:ec:77:a5:e8:cb:50:2a:c7:1f:e5:b7: 2a:e8:91:d5:7d:6b:56:a4:86:6b:e5:f7:b2:d5:f0: b7:22:e9:10:a9:7a:f2:94:b1:3d:f0:0a:42:3e:b0: a1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AB:C1:65:3F:57:55:54:E0:DA:46:3D:77:6C:3F:0A:08:70:B9:11 X509v3 Authority Key Identifier: keyid:1E:03:01:E0:EA:0A:06:DC:84:35:E4:3B:CC:69:77:EF:3B:D4:AF:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:77:c1:d6:67:b9:8c:c6:9e:f4:d1:ad:8a:e8:f6:41:11:03: 61:45:bf:08:85:9a:7f:35:c1:a0:e7:8e:eb:7a:a6:c7:ab:b5: 89:47:9f:de:93:52:a0:2a:97:1e:dd:86:cf:66:87:58:65:cc: 55:1e:f9:9a:a8:00:2c:07:d1:ef:67:c6:89:f2:46:82:70:13: d3:fc:c5:58:ba:a7:48:4f:aa:fb:de:8d:ec:49:4f:5a:02:f3: 7c:40:2d:a2:8a:2f:28:f0:ee:fd:a2:30:e3:33:da:d0:98:a6: 0a:d7:55:86:e5:02:6a:2a:e1:f5:c8:3b:7b:af:30:2a:3c:1e: f7:fe:45:60:cf:c8:9f:4c:ce:f1:31:47:ea:6a:1b:fe:1c:2a: 92:87:a6:62:bd:d6:77:d9:74:9e:61:b7:a8:c9:e9:f4:c1:f9: 88:d3:1d:f4:98:08:f3:ba:3e:12:ca:e4:31:2a:0a:6b:1b:70: 82:c6:93:26:e9:9b:e9:4b:f0:c2:67:d3:f2:87:fb:37:d9:05: 0f:e1:27:6e:fe:9e:2e:fd:4e:97:b6:e1:35:5b:4c:87:96:87: 82:b9:a6:dc:40:92:45:c8:67:f1:62:8a:4a:51:24:50:9a:11: 1e:ce:c6:82:94:61:73:0d:2f:fb:b8:23:66:87:e6:57:fd:f1: 03:e2:54:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJx+jXtrLnermHiRlpRa7LOVfmx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwMzAxRTBFQTBBMDZEQzg0MzVFNDNCQ0M2OTc3RUYz QkQ0QUYxQTAeFw0yNjA5MjQxODA4MTBaFw0yNjA5MjUyMDA0MTBaMDMxMTAvBgNV BAMTKDJFQUJDMTY1M0Y1NzU1NTRFMERBNDYzRDc3NkMzRjBBMDg3MEI5MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXrcESE/Z/L9QhI6HIm0Swawni sL1eE4XSWHPvSZyhj8beoObJzQc1O7H4bKDdR6nJ9HQmKgNFN5eBGpxPpC8U+kFA D5lXyxkwXmKQZGyqjc/tlNpKmgUluxwqvZPftkovpQrfOBY9h8BItvlibNv8og5W QZ+1HIk3tNphjwLzXaX9XoAo7bDRsrJYNS/hCm7yiBQ1P2Ps2kD/Q5Tfw21AkSFm Xnt3v76t1l1OL7BoYcv6wVLZwEzJyAqkGpmq9+0Y5M8vizrJoKdrBmgjioWIfhVW Kbjsd6Xoy1Aqxx/ltyrokdV9a1akhmvl97LV8Lci6RCpevKUsT3wCkI+sKGLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULqvBZT9XVVTg2kY9d2w/CghwuREwHwYDVR0j BBgwFoAUHgMB4OoKBtyENeQ7zGl37zvUrxowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWMzMmVlZTEtMTBmNy00NTdkLWE4YzUtNWY3Zjc0MWE2M2RhLzAvMUUwMzAxRTBF QTBBMDZEQzg0MzVFNDNCQ0M2OTc3RUYzQkQ0QUYxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRTAzMDFFMEVBMEEwNkRDODQzNUU0M0JDQzY5NzdFRjNCRDRB RjFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWMzMmVlZTEtMTBmNy00NTdkLWE4 YzUtNWY3Zjc0MWE2M2RhLzAvMUUwMzAxRTBFQTBBMDZEQzg0MzVFNDNCQ0M2OTc3 RUYzQkQ0QUYxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAER3wdZnuYzGnvTRrYro9kERA2FFvwiFmn81 waDnjut6psertYlHn96TUqAqlx7dhs9mh1hlzFUe+ZqoACwH0e9nxonyRoJwE9P8 xVi6p0hPqvvejexJT1oC83xALaKKLyjw7v2iMOMz2tCYpgrXVYblAmoq4fXIO3uv MCo8Hvf+RWDPyJ9MzvExR+pqG/4cKpKHpmK91nfZdJ5ht6jJ6fTB+YjTHfSYCPO6 PhLK5DEqCmsbcILGkybpm+lL8MJn0/KH+zfZBQ/hJ27+ni79Tpe24TVbTIeWh4K5 ptxAkkXIZ/FiikpRJFCaER7OxoKUYXMNL/u4I2aH5lf98QPiVGc= -----END CERTIFICATE-----Generated at Fri Sep 25 03:35:26 2026 by rpki-client