$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft File: 1CCC9F903B0797259D4851831FDB74E850E28573.mft (raw, json) Hash identifier: 5n86JeZaYzPiX3gMum+sd5gqP/VI4snuzsT6CPDA5WQ= Subject key identifier: 09:7A:2F:4C:0C:57:AC:54:1D:01:5D:54:65:7A:5B:90:B1:EE:8C:E4 Authority key identifier: 1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73 Certificate issuer: /CN=1CCC9F903B0797259D4851831FDB74E850E28573 Certificate serial: 2F0E9A2E7346BD89549C4E644ED12CAFE066BCB9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft Manifest number: BF Signing time: Wed 23 Sep 2026 05:27:45 +0000 Manifest this update: Wed 23 Sep 2026 05:22:45 +0000 Manifest next update: Thu 24 Sep 2026 08:36:45 +0000 Files and hashes: 1: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: 1QSTMTha75VQUavzNrm00rtAo2y/e9vazzdx0pcZJXk=) 2: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: zB+Gp09Xv+ze/cWNBFwHk3DIfApc6pdj5NfB2Dg0qyE=) 3: 1CCC9F903B0797259D4851831FDB74E850E28573.crl (hash: WX0noLWVatnjYwS2yEGGGF3GWMao898W3PvatUj74xY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 06:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0e:9a:2e:73:46:bd:89:54:9c:4e:64:4e:d1:2c:af:e0:66:bc:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CCC9F903B0797259D4851831FDB74E850E28573 Validity Not Before: Sep 23 05:22:45 2026 GMT Not After : Sep 24 08:36:45 2026 GMT Subject: CN=097A2F4C0C57AC541D015D54657A5B90B1EE8CE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:75:73:58:79:c7:28:a9:34:b9:f0:18:8f:6c: 14:f1:cc:61:29:46:d4:41:ef:5d:b0:91:0f:df:b4: 3a:31:31:92:2e:5b:e4:16:02:58:45:f6:c4:16:56: 64:be:9d:8b:92:fe:49:bc:ee:8b:79:3b:03:22:f0: db:02:57:18:0f:4c:5c:bc:f8:d7:ad:6b:4b:a2:e7: 24:1c:c9:69:97:bf:27:62:68:c3:17:5a:19:af:6f: 0a:f2:7b:f3:dd:1a:27:1c:39:ef:4b:fe:e7:0b:8c: cb:d0:e7:f3:60:7c:8f:90:81:04:bd:81:80:9c:f6: 05:b8:d4:48:98:e5:55:31:81:9d:0d:57:68:3e:6b: 11:e8:1f:0e:90:1d:f5:f9:00:e6:c3:8e:4c:6a:40: f9:6e:2a:d0:98:a0:8f:79:f2:ca:0a:fc:c6:14:62: 10:4c:d2:91:d6:4e:5c:61:10:c1:67:31:66:b4:89: 64:4c:db:d3:58:3d:36:23:c9:e1:9f:c1:30:a9:ed: f5:24:66:88:1e:7a:d5:b3:f3:e1:c5:33:7e:09:56: 56:7d:ca:42:7d:90:7a:af:c2:8a:a5:bd:99:a1:00: 13:66:6f:5c:d8:23:a4:ae:e4:42:b9:24:4f:32:9e: 49:f3:d0:27:af:0b:6d:ae:5c:a3:d5:ac:9f:8a:b6: 7a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7A:2F:4C:0C:57:AC:54:1D:01:5D:54:65:7A:5B:90:B1:EE:8C:E4 X509v3 Authority Key Identifier: keyid:1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:ec:69:09:36:cb:ca:a4:cf:e3:23:ca:b2:2d:d7:19:64:51: 68:43:c3:18:26:c0:6f:59:2f:74:46:ea:a3:8d:56:ff:c4:8e: ab:7c:33:6d:be:09:48:0c:2e:20:58:02:a3:9f:59:01:46:d9: 9a:e0:ab:c3:01:a0:35:cb:1a:74:cc:0d:e4:4c:46:e0:99:6b: 95:38:5c:30:6a:d6:7d:0f:07:0b:c2:81:25:19:23:e3:ba:7d: d0:73:53:64:6f:56:7a:e6:ce:f7:4a:5f:50:78:66:d9:33:bd: 4c:81:43:7f:80:34:d8:53:10:f8:c8:d8:28:21:48:88:69:5b: 93:d8:c2:25:2f:36:07:e8:87:a3:3d:d7:25:43:82:7c:27:e8: 8b:b3:f8:33:fd:2c:25:e3:22:60:ee:28:2e:24:e0:c0:e4:7e: 17:a3:dd:11:55:7b:d6:bf:55:f1:88:e3:ce:23:20:de:e4:b4: 79:df:15:5a:b6:cf:31:4a:ef:62:15:b5:fd:5a:c4:d4:2d:1e: d4:05:86:35:7a:9b:77:97:e5:92:a3:f3:eb:3a:14:5c:28:a8: 9d:a4:93:2f:c9:7e:04:88:82:f1:3c:ca:ef:b4:06:cb:9e:f8: c1:eb:b1:57:2b:75:cb:41:a8:09:e7:09:85:5f:5b:cd:8f:1a: 55:39:33:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULw6aLnNGvYlUnE5kTtEsr+BmvLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNDQzlGOTAzQjA3OTcyNTlENDg1MTgzMUZEQjc0RTg1 MEUyODU3MzAeFw0yNjA5MjMwNTIyNDVaFw0yNjA5MjQwODM2NDVaMDMxMTAvBgNV BAMTKDA5N0EyRjRDMEM1N0FDNTQxRDAxNUQ1NDY1N0E1QjkwQjFFRThDRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+dXNYeccoqTS58BiPbBTxzGEp RtRB712wkQ/ftDoxMZIuW+QWAlhF9sQWVmS+nYuS/km87ot5OwMi8NsCVxgPTFy8 +Neta0ui5yQcyWmXvydiaMMXWhmvbwrye/PdGiccOe9L/ucLjMvQ5/NgfI+QgQS9 gYCc9gW41EiY5VUxgZ0NV2g+axHoHw6QHfX5AObDjkxqQPluKtCYoI958soK/MYU YhBM0pHWTlxhEMFnMWa0iWRM29NYPTYjyeGfwTCp7fUkZogeetWz8+HFM34JVlZ9 ykJ9kHqvwoqlvZmhABNmb1zYI6Su5EK5JE8ynknz0CevC22uXKPVrJ+KtnpdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCXovTAxXrFQdAV1UZXpbkLHujOQwHwYDVR0j BBgwFoAUHMyfkDsHlyWdSFGDH9t06FDihXMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVhMjZhMTAtNThlOC00M2M3LTk0N2UtNzIyMTczZDY2NjE0LzAvMUNDQzlGOTAz QjA3OTcyNTlENDg1MTgzMUZEQjc0RTg1MEUyODU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQ0NDOUY5MDNCMDc5NzI1OUQ0ODUxODMxRkRCNzRFODUwRTI4 NTczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVhMjZhMTAtNThlOC00M2M3LTk0 N2UtNzIyMTczZDY2NjE0LzAvMUNDQzlGOTAzQjA3OTcyNTlENDg1MTgzMUZEQjc0 RTg1MEUyODU3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPsaQk2y8qkz+MjyrIt1xlkUWhDwxgmwG9Z L3RG6qONVv/Ejqt8M22+CUgMLiBYAqOfWQFG2Zrgq8MBoDXLGnTMDeRMRuCZa5U4 XDBq1n0PBwvCgSUZI+O6fdBzU2RvVnrmzvdKX1B4ZtkzvUyBQ3+ANNhTEPjI2Cgh SIhpW5PYwiUvNgfoh6M91yVDgnwn6Iuz+DP9LCXjImDuKC4k4MDkfhej3RFVe9a/ VfGI484jIN7ktHnfFVq2zzFK72IVtf1axNQtHtQFhjV6m3eX5ZKj8+s6FFwoqJ2k ky/JfgSIgvE8yu+0Bsue+MHrsVcrdctBqAnnCYVfW82PGlU5M3A= -----END CERTIFICATE-----Generated at Wed Sep 23 14:33:54 2026 by rpki-client