$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft File: 1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft (raw, json) Hash identifier: 8fEJxX4Tf6ZunnnX3tnh8TvuYvSrLvxV6jFLOpfz8G8= Subject key identifier: F9:D8:CF:A5:10:41:3F:4D:80:EA:8A:5D:DE:5C:1E:E2:DB:43:45:41 Authority key identifier: 1B:22:82:4E:2A:25:6E:41:3E:67:9D:EC:54:1F:E8:2D:C0:BA:D8:A0 Certificate issuer: /CN=1B22824E2A256E413E679DEC541FE82DC0BAD8A0 Certificate serial: 4A9F54051048D67A17EC5C50901A7BB83BF7A04D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 19:45:21 +0000 Manifest this update: Wed 23 Sep 2026 19:40:21 +0000 Manifest next update: Thu 24 Sep 2026 22:57:21 +0000 Files and hashes: 1: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: uWBx9zBBtj0stXgPd31iD2z2lhamwuv83R9Ofcw0CoU=) 2: 1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl (hash: Y9NA1757Aij95gcMJIS1q8lbOtSzj1wmAo++YVK9tSQ=) 3: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: 3BHAnWW4TLEpO1A4dud6ZoedASP5ZMDsQskvXQSf2zg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9f:54:05:10:48:d6:7a:17:ec:5c:50:90:1a:7b:b8:3b:f7:a0:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B22824E2A256E413E679DEC541FE82DC0BAD8A0 Validity Not Before: Sep 23 19:40:21 2026 GMT Not After : Sep 24 22:57:21 2026 GMT Subject: CN=F9D8CFA510413F4D80EA8A5DDE5C1EE2DB434541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:29:19:e0:74:ff:96:d6:03:17:46:9b:48: 4f:d4:29:19:eb:63:ff:fc:a2:63:bf:36:bb:df:ab: c9:bd:84:6b:f1:4e:c6:a9:17:0a:51:7a:01:ac:32: e9:3d:cd:68:e3:31:4b:d4:81:3b:6b:83:97:90:b7: bf:74:77:7e:30:61:e0:fb:76:c7:01:02:97:02:81: 0a:67:95:03:e0:83:16:04:5a:3a:c3:84:ea:8b:f0: 14:68:03:88:4e:95:f0:43:85:c4:d7:57:8b:06:80: 99:09:ba:1d:8e:34:60:d5:23:4c:e7:05:65:e3:7d: 24:92:5b:e2:cd:12:f7:de:5c:6f:b4:1b:bd:6c:3e: 19:4d:dd:a5:53:78:f9:12:7f:31:4a:5e:b6:e7:c6: da:0c:a5:99:b9:bd:05:d4:67:e5:d9:47:ed:83:a9: f8:87:7a:f8:d8:87:66:ff:37:c5:1d:89:0c:c8:7d: 5f:0f:1b:8f:be:e6:0a:97:ae:3d:de:7d:35:55:f2: 05:cd:5c:b7:e5:b7:e6:90:a9:34:8f:17:0b:31:cc: 4f:f4:65:7f:3c:05:b3:bc:27:96:ad:fd:03:71:af: 01:54:9a:90:56:60:57:90:c9:d3:53:5d:f7:b4:53: 4b:7a:db:06:2f:53:cb:3e:6e:ae:ac:f1:60:fc:6a: d0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D8:CF:A5:10:41:3F:4D:80:EA:8A:5D:DE:5C:1E:E2:DB:43:45:41 X509v3 Authority Key Identifier: keyid:1B:22:82:4E:2A:25:6E:41:3E:67:9D:EC:54:1F:E8:2D:C0:BA:D8:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:1f:3b:04:45:76:eb:58:be:e2:26:45:79:e9:9c:2a:85:ef: 40:20:8d:84:57:20:f2:f6:9b:4d:8c:e2:30:9f:80:8a:e1:0b: b6:f8:aa:b2:34:2a:55:4c:82:7c:61:a7:91:a8:c8:cc:04:17: fc:e8:c7:bf:ae:a0:c9:f7:2f:8b:28:23:7a:96:fa:2b:c6:0b: ec:be:b9:c8:e5:c9:64:63:49:25:28:5e:10:6d:0d:8f:d7:f2: 8f:42:79:a1:c1:40:1a:ff:1d:41:2e:6a:40:f2:91:95:08:d9: d4:59:95:45:da:05:ba:92:00:35:36:cd:7e:dd:d0:5c:8c:d0: ce:d9:bb:f6:e3:0e:bc:45:c1:a4:29:73:ae:39:47:e6:51:81: 42:f2:bf:55:ee:1f:1f:12:55:3e:2b:e1:3e:8a:3a:a3:68:90: 82:1b:a2:00:b0:02:b0:b2:0d:c9:f0:13:54:67:4e:42:2b:8b: 86:0b:ae:8d:d4:15:43:bd:b0:8c:35:18:52:a3:62:a4:ac:4e: 0d:34:aa:d3:0c:14:60:74:1c:e7:37:a8:d5:38:6b:1d:e3:46: 52:1d:8a:f2:f8:8d:c4:95:b6:b1:f8:25:2f:b3:64:16:de:16: db:c4:e3:70:7b:4d:73:10:b9:7a:6e:25:b3:a8:c8:9d:81:3b: 0e:a4:bb:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSp9UBRBI1noX7FxQkBp7uDv3oE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyMjgyNEUyQTI1NkU0MTNFNjc5REVDNTQxRkU4MkRD MEJBRDhBMDAeFw0yNjA5MjMxOTQwMjFaFw0yNjA5MjQyMjU3MjFaMDMxMTAvBgNV BAMTKEY5RDhDRkE1MTA0MTNGNEQ4MEVBOEE1RERFNUMxRUUyREI0MzQ1NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5OCkZ4HT/ltYDF0abSE/UKRnr Y//8omO/Nrvfq8m9hGvxTsapFwpRegGsMuk9zWjjMUvUgTtrg5eQt790d34wYeD7 dscBApcCgQpnlQPggxYEWjrDhOqL8BRoA4hOlfBDhcTXV4sGgJkJuh2ONGDVI0zn BWXjfSSSW+LNEvfeXG+0G71sPhlN3aVTePkSfzFKXrbnxtoMpZm5vQXUZ+XZR+2D qfiHevjYh2b/N8UdiQzIfV8PG4++5gqXrj3efTVV8gXNXLflt+aQqTSPFwsxzE/0 ZX88BbO8J5at/QNxrwFUmpBWYFeQydNTXfe0U0t62wYvU8s+bq6s8WD8atCPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+djPpRBBP02A6opd3lwe4ttDRUEwHwYDVR0j BBgwFoAUGyKCTiolbkE+Z53sVB/oLcC62KAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg2ZmYyNjQtZmYyNS00ZmU2LTg2ZWYtZDg0YjdkMjg4MzU0LzAvMUIyMjgyNEUy QTI1NkU0MTNFNjc5REVDNTQxRkU4MkRDMEJBRDhBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjIyODI0RTJBMjU2RTQxM0U2NzlERUM1NDFGRTgyREMwQkFE OEEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvMUIyMjgyNEUyQTI1NkU0MTNFNjc5REVDNTQxRkU4 MkRDMEJBRDhBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUfOwRFdutYvuImRXnpnCqF70AgjYRXIPL2 m02M4jCfgIrhC7b4qrI0KlVMgnxhp5GoyMwEF/zox7+uoMn3L4soI3qW+ivGC+y+ ucjlyWRjSSUoXhBtDY/X8o9CeaHBQBr/HUEuakDykZUI2dRZlUXaBbqSADU2zX7d 0FyM0M7Zu/bjDrxFwaQpc645R+ZRgULyv1XuHx8SVT4r4T6KOqNokIIbogCwArCy DcnwE1RnTkIri4YLro3UFUO9sIw1GFKjYqSsTg00qtMMFGB0HOc3qNU4ax3jRlId ivL4jcSVtrH4JS+zZBbeFtvE43B7TXMQuXpuJbOoyJ2BOw6ku40= -----END CERTIFICATE-----Generated at Thu Sep 24 03:51:41 2026 by rpki-client