$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft File: 1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft (raw, json) Hash identifier: k9JCqeeiVblkhHPomyz2p6Omo8iYVdc12u1Zu8CBmtc= Subject key identifier: A4:D4:4F:86:CD:78:A1:6E:70:B6:0A:35:5A:80:FF:7F:36:2D:A4:73 Authority key identifier: 1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF Certificate issuer: /CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF Certificate serial: 5DA1C43E684CCF2ABFFAE7B9463633B6989BB1C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft Manifest number: BF Signing time: Wed 23 Sep 2026 12:00:54 +0000 Manifest this update: Wed 23 Sep 2026 11:55:54 +0000 Manifest next update: Thu 24 Sep 2026 13:51:54 +0000 Files and hashes: 1: 3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa (hash: Je18gPRqgq+WsGNVuHao3MPV58XjK3X72Kp18GA2rlA=) 2: 3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa (hash: G3yTjAsTBJcMcArecaYX/yOP7athsjKmul3O/4eoKrU=) 3: 1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl (hash: +afRPbWEwzwps0wq0hUQ4CozAsWawV07bxSpWxyrRIg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a1:c4:3e:68:4c:cf:2a:bf:fa:e7:b9:46:36:33:b6:98:9b:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF Validity Not Before: Sep 23 11:55:54 2026 GMT Not After : Sep 24 13:51:54 2026 GMT Subject: CN=A4D44F86CD78A16E70B60A355A80FF7F362DA473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c2:36:da:5f:58:31:82:17:ce:f1:89:4b:bb: 5b:8b:31:46:f6:6b:f3:a8:d8:1e:f5:de:08:c9:72: 0d:39:a4:44:1f:b6:64:e8:bc:5d:7f:56:88:0d:7f: c2:46:6b:7b:84:33:02:d8:80:de:e2:d1:ba:88:9c: 1a:ed:50:84:22:1e:5e:ef:63:fc:3b:21:77:71:fa: 2e:0b:63:f9:b6:e2:bc:c3:b0:80:2b:34:eb:73:bd: e1:e1:fe:91:6c:f9:44:ac:30:eb:df:ae:2b:97:8f: 36:ef:5e:cc:19:f8:19:f1:7b:21:d9:82:ff:b9:d3: d1:bd:f7:10:8e:45:bd:8d:9f:1d:f4:54:ce:59:05: 8c:c3:bf:2c:6b:99:6e:b4:5e:f3:8c:21:01:cb:1b: f9:48:53:0e:f2:2b:5a:da:08:a0:1f:3a:61:0b:3f: 1f:ad:42:b3:de:03:b6:39:df:05:7c:92:6a:7f:1f: fc:e5:a7:a7:a5:a4:ab:cb:80:63:c3:87:54:aa:7c: 67:db:60:18:a7:c1:9e:01:61:53:04:b4:25:15:2e: 5a:1a:d6:af:c5:35:5e:d6:a7:c5:c9:4c:6a:0e:53: 8c:f2:8b:25:75:3d:23:6e:39:c8:c7:f2:04:1a:f4: 0d:f2:4c:96:6f:4f:55:51:4c:d6:c8:b3:13:7c:93: a0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D4:4F:86:CD:78:A1:6E:70:B6:0A:35:5A:80:FF:7F:36:2D:A4:73 X509v3 Authority Key Identifier: keyid:1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ef:b1:6b:cd:8a:e8:88:64:40:10:10:8e:f1:28:e4:ee:5d: 17:7d:f3:e3:7b:f7:ac:33:07:ae:76:5b:60:d1:03:65:55:94: 44:5d:66:c5:3a:68:b0:53:eb:60:7f:75:1d:fc:07:f2:5b:91: a0:72:24:42:c2:d9:a4:d0:04:5f:af:41:91:1b:d9:14:82:49: aa:e4:e5:e8:68:ba:7f:b5:82:62:a9:b5:e5:28:52:18:bd:c0: d7:20:f1:2d:04:ec:17:1a:db:0f:63:a2:6d:67:20:1d:fe:94: cf:0d:fd:fd:87:6c:e8:21:f0:65:dd:f4:a7:88:9f:aa:ed:d9: d9:8a:0e:2b:56:d2:c3:ec:04:93:e5:ba:6f:27:be:73:c1:5b: 20:20:52:81:71:0c:30:7d:a9:35:c4:b2:3d:32:99:62:0b:65: 2c:ef:9d:50:8e:bd:15:10:da:a8:91:31:20:46:63:69:c3:cf: 1b:2f:79:7f:50:0c:63:8f:5c:a2:6f:b2:4f:df:35:81:9f:ca: cf:fa:2b:bc:f1:26:48:cd:c4:ab:06:be:10:c3:a3:68:78:28: 13:6b:f1:68:d9:37:5d:e5:84:51:1c:3a:20:e6:22:73:a8:fe: 28:9d:84:05:dd:50:65:85:0b:2f:e0:5d:c0:97:ba:5b:fe:16: 5b:11:e7:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXaHEPmhMzyq/+ue5RjYztpibscAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEyOTAyQ0ExNDBFNTlBMkFFMzVGRjMyQjRGNkQxMjBB MDM3NDFERjAeFw0yNjA5MjMxMTU1NTRaFw0yNjA5MjQxMzUxNTRaMDMxMTAvBgNV BAMTKEE0RDQ0Rjg2Q0Q3OEExNkU3MEI2MEEzNTVBODBGRjdGMzYyREE0NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgwjbaX1gxghfO8YlLu1uLMUb2 a/Oo2B713gjJcg05pEQftmTovF1/VogNf8JGa3uEMwLYgN7i0bqInBrtUIQiHl7v Y/w7IXdx+i4LY/m24rzDsIArNOtzveHh/pFs+USsMOvfriuXjzbvXswZ+BnxeyHZ gv+509G99xCORb2Nnx30VM5ZBYzDvyxrmW60XvOMIQHLG/lIUw7yK1raCKAfOmEL Px+tQrPeA7Y53wV8kmp/H/zlp6elpKvLgGPDh1SqfGfbYBinwZ4BYVMEtCUVLloa 1q/FNV7Wp8XJTGoOU4zyiyV1PSNuOcjH8gQa9A3yTJZvT1VRTNbIsxN8k6CDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpNRPhs14oW5wtgo1WoD/fzYtpHMwHwYDVR0j BBgwFoAUGikCyhQOWaKuNf8ytPbRIKA3Qd8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzVlMzFlY2YtNTJhNC00Njc3LTkxMDMtNWYzN2E0MDkxZDc1LzAvMUEyOTAyQ0Ex NDBFNTlBMkFFMzVGRjMyQjRGNkQxMjBBMDM3NDFERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTI5MDJDQTE0MEU1OUEyQUUzNUZGMzJCNEY2RDEyMEEwMzc0 MURGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzVlMzFlY2YtNTJhNC00Njc3LTkx MDMtNWYzN2E0MDkxZDc1LzAvMUEyOTAyQ0ExNDBFNTlBMkFFMzVGRjMyQjRGNkQx MjBBMDM3NDFERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjvsWvNiuiIZEAQEI7xKOTuXRd98+N796wz B652W2DRA2VVlERdZsU6aLBT62B/dR38B/JbkaByJELC2aTQBF+vQZEb2RSCSark 5ehoun+1gmKpteUoUhi9wNcg8S0E7Bca2w9jom1nIB3+lM8N/f2HbOgh8GXd9KeI n6rt2dmKDitW0sPsBJPlum8nvnPBWyAgUoFxDDB9qTXEsj0ymWILZSzvnVCOvRUQ 2qiRMSBGY2nDzxsveX9QDGOPXKJvsk/fNYGfys/6K7zxJkjNxKsGvhDDo2h4KBNr 8WjZN13lhFEcOiDmInOo/iidhAXdUGWFCy/gXcCXulv+FlsR52c= -----END CERTIFICATE-----Generated at Thu Sep 24 00:08:57 2026 by rpki-client