$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft File: 1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft (raw, json) Hash identifier: GoNVY5f5+4sv5lMFQib3EZ6SSF0F49p/MR6fZ9DtqYU= Subject key identifier: 40:A1:24:59:9B:DD:0C:43:44:A5:FD:67:FF:C8:C8:D9:64:FA:95:D7 Authority key identifier: 1A:84:6D:C7:EE:A8:A9:0C:9D:5E:86:7F:6C:C5:2E:B5:A5:F5:1E:CA Certificate issuer: /CN=1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA Certificate serial: 6C00275652954D20F05E458AD93D86AA317FFADD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 11:14:59 +0000 Manifest this update: Wed 23 Sep 2026 11:09:59 +0000 Manifest next update: Thu 24 Sep 2026 15:06:59 +0000 Files and hashes: 1: 1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl (hash: LhjCvIqpc2rqbj9v9ZpZLdgVPhrXFDRi3UroVOloH8o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:00:27:56:52:95:4d:20:f0:5e:45:8a:d9:3d:86:aa:31:7f:fa:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA Validity Not Before: Sep 23 11:09:59 2026 GMT Not After : Sep 24 15:06:59 2026 GMT Subject: CN=40A124599BDD0C4344A5FD67FFC8C8D964FA95D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:65:e4:ca:01:e6:30:22:d6:82:c6:55:1f:47: c9:7a:83:9e:6f:93:7b:61:11:70:43:83:b4:35:fd: a6:5d:d7:1c:aa:10:f9:56:0a:d3:26:5b:1d:7b:75: f6:30:63:ab:d2:34:1a:5d:93:c0:9e:3d:f8:0e:85: b7:d9:bf:bc:d3:04:2f:63:f6:1a:30:47:6f:e5:da: 11:a3:4a:69:fb:f8:6c:e0:72:e6:43:df:74:b7:4b: b6:d4:f1:a7:a3:e6:55:e6:11:f8:3d:59:e3:5e:c6: 87:4c:9b:14:4b:dc:fb:be:7c:e1:b7:80:7c:db:5f: 1a:32:c7:5d:cd:d8:81:8f:e1:9e:e7:34:4d:b1:5b: 2a:2c:29:5e:c8:c5:2b:56:6d:06:92:f3:f4:7b:3d: 1f:41:c1:0f:ee:3b:d3:84:e7:59:69:24:75:aa:f3: 40:bb:98:54:60:73:d8:4e:2f:21:c5:8c:60:c7:cb: 45:1e:27:4b:bd:9f:64:e9:8a:e3:83:04:6e:de:c5: 72:6c:b1:9e:43:69:ac:21:3a:0d:06:1a:a3:0d:72: b7:49:42:74:e5:f6:65:52:cb:38:a0:41:99:49:b6: 6f:8d:a0:ca:24:96:4d:ae:87:31:1a:77:6e:90:52: 9a:31:ee:16:23:74:7d:4d:31:da:1e:d4:54:99:87: ac:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A1:24:59:9B:DD:0C:43:44:A5:FD:67:FF:C8:C8:D9:64:FA:95:D7 X509v3 Authority Key Identifier: keyid:1A:84:6D:C7:EE:A8:A9:0C:9D:5E:86:7F:6C:C5:2E:B5:A5:F5:1E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:71:3e:9d:b6:64:d0:e8:91:8c:ed:b7:ee:1e:8e:5c:3f:10: d4:06:61:59:f1:c7:f0:18:e6:f8:04:fe:bf:e7:58:82:b1:0d: ef:f5:e2:38:c9:8d:b5:c4:69:b3:59:8c:df:a8:da:01:4d:98: 98:b3:1d:44:02:f1:5e:f5:4d:8e:97:89:39:a5:6e:76:c8:4c: 37:db:a4:70:6e:d8:ad:48:ba:33:3c:cd:ce:21:00:67:f7:a3: 19:48:7e:29:87:34:81:e2:9c:a2:c6:e5:8b:f0:a1:8d:17:ea: 50:87:3a:29:ba:27:7d:c3:c3:a1:37:c6:b1:9c:13:07:c8:5b: a8:2a:bb:2d:b4:7a:3b:92:ef:aa:4c:0e:ad:ae:01:54:fa:70: 63:4b:67:b4:7c:b1:05:2d:d2:1a:89:9d:76:25:08:34:ee:a5: 72:cb:b8:93:8c:40:5a:e2:fb:b6:62:2f:83:ce:92:19:27:37: fd:23:76:e3:25:7b:25:80:a8:ac:53:4a:a7:72:9a:07:23:89: 59:31:c2:6a:64:36:16:5d:7b:a0:bf:e4:76:6a:7a:09:37:62: 26:e1:28:52:af:45:db:32:36:4f:fc:cf:12:29:14:fb:e5:31: 2c:6a:26:79:33:23:3f:3f:48:58:5b:b1:37:20:39:97:f9:7c: c3:0f:56:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbAAnVlKVTSDwXkWK2T2GqjF/+t0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4NDZEQzdFRUE4QTkwQzlENUU4NjdGNkNDNTJFQjVB NUY1MUVDQTAeFw0yNjA5MjMxMTA5NTlaFw0yNjA5MjQxNTA2NTlaMDMxMTAvBgNV BAMTKDQwQTEyNDU5OUJERDBDNDM0NEE1RkQ2N0ZGQzhDOEQ5NjRGQTk1RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkZeTKAeYwItaCxlUfR8l6g55v k3thEXBDg7Q1/aZd1xyqEPlWCtMmWx17dfYwY6vSNBpdk8CePfgOhbfZv7zTBC9j 9howR2/l2hGjSmn7+GzgcuZD33S3S7bU8aej5lXmEfg9WeNexodMmxRL3Pu+fOG3 gHzbXxoyx13N2IGP4Z7nNE2xWyosKV7IxStWbQaS8/R7PR9BwQ/uO9OE51lpJHWq 80C7mFRgc9hOLyHFjGDHy0UeJ0u9n2TpiuODBG7exXJssZ5DaawhOg0GGqMNcrdJ QnTl9mVSyzigQZlJtm+NoMoklk2uhzEad26QUpox7hYjdH1NMdoe1FSZh6wFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQKEkWZvdDENEpf1n/8jI2WT6ldcwHwYDVR0j BBgwFoAUGoRtx+6oqQydXoZ/bMUutaX1HsowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk2NWRkMzktNDhkMC00NTc4LThmZTUtNjZkOTUzMzg0ZTUwLzAvMUE4NDZEQzdF RUE4QTkwQzlENUU4NjdGNkNDNTJFQjVBNUY1MUVDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTg0NkRDN0VFQThBOTBDOUQ1RTg2N0Y2Q0M1MkVCNUE1RjUx RUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvMUE4NDZEQzdFRUE4QTkwQzlENUU4NjdGNkNDNTJF QjVBNUY1MUVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVxPp22ZNDokYztt+4ejlw/ENQGYVnxx/AY 5vgE/r/nWIKxDe/14jjJjbXEabNZjN+o2gFNmJizHUQC8V71TY6XiTmlbnbITDfb pHBu2K1IujM8zc4hAGf3oxlIfimHNIHinKLG5YvwoY0X6lCHOim6J33Dw6E3xrGc EwfIW6gquy20ejuS76pMDq2uAVT6cGNLZ7R8sQUt0hqJnXYlCDTupXLLuJOMQFri +7ZiL4POkhknN/0jduMleyWAqKxTSqdymgcjiVkxwmpkNhZde6C/5HZqegk3Yibh KFKvRdsyNk/8zxIpFPvlMSxqJnkzIz8/SFhbsTcgOZf5fMMPVnQ= -----END CERTIFICATE-----Generated at Thu Sep 24 07:06:05 2026 by rpki-client