$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft File: 1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft (raw, json) Hash identifier: o9Qsk4ks5AWc2UTStYOaK2/j2PjokQFvYzvuGdLg3d0= Subject key identifier: 35:41:08:BA:CD:E5:94:69:40:1A:D2:19:B0:EA:76:67:82:87:FF:61 Authority key identifier: 18:90:22:4B:AC:CE:8C:55:1C:12:7A:7F:40:52:EC:E0:A6:8B:C6:AC Certificate issuer: /CN=1890224BACCE8C551C127A7F4052ECE0A68BC6AC Certificate serial: 011D7EAD8D8D81E70B0D0DDD4E102A63A9BF2B8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 02:23:35 +0000 Manifest this update: Thu 24 Sep 2026 02:18:35 +0000 Manifest next update: Fri 25 Sep 2026 04:40:35 +0000 Files and hashes: 1: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: vrdxMLho5nkxNsVzaZL33riDh9yKFKVbCWaknvqb6JM=) 2: 1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl (hash: 2lNsEg5Y1cJ/Dt9oO7AfgnDvxradP9zxJQb1mzjYeS4=) 3: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: XT0qu0X/ewJ1G8Ps14eM7XvkOXUBLJSpuICPqH+2rFs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1d:7e:ad:8d:8d:81:e7:0b:0d:0d:dd:4e:10:2a:63:a9:bf:2b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1890224BACCE8C551C127A7F4052ECE0A68BC6AC Validity Not Before: Sep 24 02:18:35 2026 GMT Not After : Sep 25 04:40:35 2026 GMT Subject: CN=354108BACDE59469401AD219B0EA76678287FF61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:46:53:93:2f:69:b9:75:97:f9:22:01:66: b2:2e:42:63:43:0a:b7:9b:01:53:22:e1:b3:05:89: fb:ec:bf:50:dd:13:ae:14:ac:4f:dc:53:49:0a:22: 6c:34:66:cb:80:bf:d0:aa:61:6f:03:84:3d:ec:7e: c2:9e:ed:2e:08:ab:02:a6:da:61:48:b7:dd:22:89: 74:a1:e2:fe:48:09:d3:11:7e:87:5c:1d:2a:e3:f8: b3:78:b9:6c:0f:9e:a1:83:d4:48:45:f1:68:2d:02: e9:7f:8f:27:54:3b:63:1f:b4:22:1e:68:f9:84:5b: 1f:e8:c6:e0:9d:db:21:5e:9b:97:40:01:28:ca:3f: 08:d9:ec:06:0f:68:89:89:61:5f:c1:58:07:08:6b: e8:4f:b0:2f:06:f1:f2:4f:e4:06:5e:ba:33:40:10: 75:45:99:cc:bc:32:e4:f0:0a:1e:32:a0:a2:bf:67: 40:70:f6:36:a5:89:fe:5e:d9:c2:09:e5:3f:74:82: 13:ca:c1:94:97:4e:91:80:21:22:cb:ad:25:a5:e4: 88:b1:55:fb:4c:2e:6e:91:1e:df:75:0a:45:6d:97: d8:7a:58:f5:bd:45:d3:1c:9f:9b:1a:c2:ae:ed:0c: 25:9b:48:9e:06:28:35:82:f6:73:5b:f9:2c:26:f6: b1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:41:08:BA:CD:E5:94:69:40:1A:D2:19:B0:EA:76:67:82:87:FF:61 X509v3 Authority Key Identifier: keyid:18:90:22:4B:AC:CE:8C:55:1C:12:7A:7F:40:52:EC:E0:A6:8B:C6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:02:43:fc:a0:10:59:01:a6:12:07:48:e1:f9:3e:34:f6:cb: 4f:44:70:1c:40:48:80:a6:a8:5b:ca:dc:fb:71:92:a6:53:dc: c7:cc:61:80:84:20:77:37:e4:46:0b:7a:b7:c7:c0:1a:05:ca: 33:53:25:84:16:9f:92:06:a2:14:3f:66:76:09:a7:a9:82:da: d5:c1:ca:96:2c:17:6e:05:ce:8d:18:6f:b4:c9:e1:83:cd:29: 02:c3:af:91:13:14:8a:52:1b:7e:c2:5c:46:97:ef:20:a2:85: 90:3a:f7:7c:f3:1e:a5:42:ba:a7:b0:e2:86:9a:98:de:b5:70: d0:e8:95:ff:04:00:d9:5c:53:6d:6a:52:2c:89:85:d7:78:e9: cc:2e:00:8a:50:ce:ee:2d:60:3f:a1:fc:3c:a4:62:63:3b:c3: e1:f7:cb:fd:71:ed:83:b5:ae:30:87:95:c1:5f:4c:4c:45:cf: b7:de:20:bf:5c:43:0d:90:f6:24:dc:0b:94:83:d9:df:bc:1b: 68:f8:08:ca:f1:b3:ac:f6:9d:43:20:a5:87:23:13:b2:fb:6f: 94:9b:93:38:46:e4:2e:fa:56:99:85:97:8f:7b:ff:fe:84:a8: f8:af:85:0b:c3:f8:99:d9:2f:2f:c3:c2:85:14:52:05:ee:0f: 81:40:e5:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAR1+rY2NgecLDQ3dThAqY6m/K4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg5MDIyNEJBQ0NFOEM1NTFDMTI3QTdGNDA1MkVDRTBB NjhCQzZBQzAeFw0yNjA5MjQwMjE4MzVaFw0yNjA5MjUwNDQwMzVaMDMxMTAvBgNV BAMTKDM1NDEwOEJBQ0RFNTk0Njk0MDFBRDIxOUIwRUE3NjY3ODI4N0ZGNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtYEZTky9puXWX+SIBZrIuQmND CrebAVMi4bMFifvsv1DdE64UrE/cU0kKImw0ZsuAv9CqYW8DhD3sfsKe7S4IqwKm 2mFIt90iiXSh4v5ICdMRfodcHSrj+LN4uWwPnqGD1EhF8WgtAul/jydUO2MftCIe aPmEWx/oxuCd2yFem5dAASjKPwjZ7AYPaImJYV/BWAcIa+hPsC8G8fJP5AZeujNA EHVFmcy8MuTwCh4yoKK/Z0Bw9jalif5e2cIJ5T90ghPKwZSXTpGAISLLrSWl5Iix VftMLm6RHt91CkVtl9h6WPW9RdMcn5sawq7tDCWbSJ4GKDWC9nNb+Swm9rHfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNUEIus3llGlAGtIZsOp2Z4KH/2EwHwYDVR0j BBgwFoAUGJAiS6zOjFUcEnp/QFLs4KaLxqwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg1M2FmZGQtMmUwOS00NzczLThiZTQtNmZkMGVlOTBiMDQwLzAvMTg5MDIyNEJB Q0NFOEM1NTFDMTI3QTdGNDA1MkVDRTBBNjhCQzZBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xODkwMjI0QkFDQ0U4QzU1MUMxMjdBN0Y0MDUyRUNFMEE2OEJD NkFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvMTg5MDIyNEJBQ0NFOEM1NTFDMTI3QTdGNDA1MkVD RTBBNjhCQzZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcCQ/ygEFkBphIHSOH5PjT2y09EcBxASICm qFvK3PtxkqZT3MfMYYCEIHc35EYLerfHwBoFyjNTJYQWn5IGohQ/ZnYJp6mC2tXB ypYsF24Fzo0Yb7TJ4YPNKQLDr5ETFIpSG37CXEaX7yCihZA693zzHqVCuqew4oaa mN61cNDolf8EANlcU21qUiyJhdd46cwuAIpQzu4tYD+h/DykYmM7w+H3y/1x7YO1 rjCHlcFfTExFz7feIL9cQw2Q9iTcC5SD2d+8G2j4CMrxs6z2nUMgpYcjE7L7b5Sb kzhG5C76VpmFl497//6EqPivhQvD+JnZLy/DwoUUUgXuD4FA5Sk= -----END CERTIFICATE-----Generated at Thu Sep 24 20:08:33 2026 by rpki-client