$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft File: 1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft (raw, json) Hash identifier: HTIxysc4Y/hdWXajA2XcyyjrAHOxwqGA9kVc4q3NXGs= Subject key identifier: D0:2D:03:11:8D:F4:FF:5B:72:10:FF:F8:CA:BE:CD:88:CB:02:A8:FF Authority key identifier: 1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9 Certificate issuer: /CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9 Certificate serial: 38CB4B2D547BEB6FEC920E1BA41445605A183790 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 00:10:53 +0000 Manifest this update: Thu 24 Sep 2026 00:05:53 +0000 Manifest next update: Fri 25 Sep 2026 02:48:53 +0000 Files and hashes: 1: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: Yhy0kPLYMQCNyqChEExantmOWkrvJQT2nQi7dTwL98I=) 2: 1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl (hash: /gkN0hX41WJSmHgpEffqd/4a8Nt2qpOf3pKKhLpND0U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:cb:4b:2d:54:7b:eb:6f:ec:92:0e:1b:a4:14:45:60:5a:18:37:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9 Validity Not Before: Sep 24 00:05:53 2026 GMT Not After : Sep 25 02:48:53 2026 GMT Subject: CN=D02D03118DF4FF5B7210FFF8CABECD88CB02A8FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:84:fe:e7:f8:7e:3e:a4:48:c0:7a:7a:fd:97: 57:87:cb:a7:f1:3e:86:8d:10:80:71:b8:10:d9:9f: d4:90:40:f6:e5:66:b2:f2:35:7e:d5:44:e1:5f:0f: 13:eb:48:08:42:b8:61:ef:a9:41:dd:fc:90:4f:2e: 98:03:df:98:9c:3f:2a:ac:76:5a:f5:50:1e:45:df: 58:f9:b1:35:f0:a1:86:ae:a0:b2:f0:d1:6b:6e:a4: 0f:ef:39:30:04:c1:ef:b8:15:94:2d:df:cb:41:36: aa:c2:e9:1e:c9:60:a2:e2:a7:f6:d6:1b:70:7a:19: 56:eb:ca:34:d2:8e:06:0f:ab:04:90:c4:6f:ca:ff: 48:aa:c2:74:5e:28:be:9a:b2:b0:b3:5b:5c:5a:61: ee:45:44:ef:61:a5:fb:9a:39:19:5e:57:35:f6:5c: 3e:96:fe:65:54:92:bf:4b:9c:42:bf:49:0a:e2:1e: 3f:a0:2a:12:12:b0:00:3b:95:cd:cc:2c:3a:7e:44: 3d:52:d0:b5:1f:59:93:dc:7a:22:d2:72:58:26:a9: bf:2c:40:29:6d:ef:93:1d:57:64:8c:0e:d3:33:34: 02:9b:f1:31:c5:68:d9:37:3a:02:9d:ba:17:28:77: 25:04:f5:7c:6c:74:5d:ef:da:5b:2d:ab:08:65:cf: 12:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2D:03:11:8D:F4:FF:5B:72:10:FF:F8:CA:BE:CD:88:CB:02:A8:FF X509v3 Authority Key Identifier: keyid:1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:88:eb:35:0f:36:35:e4:6d:c7:86:7a:b7:c7:8a:a9:be:45: a8:ca:44:b1:ff:3a:d8:b5:7c:7e:51:0c:05:4c:a5:4a:28:af: 20:f0:06:70:13:f3:bb:2d:63:52:fe:2f:a9:60:df:dd:a1:0e: 59:91:1c:ed:0d:69:26:a9:bc:8f:a6:19:13:94:60:70:12:0f: aa:ae:7e:04:a3:ed:ae:ac:3c:89:76:e9:a2:61:a5:77:3a:3a: a5:29:eb:61:d2:0b:17:e8:8c:91:b9:19:2c:a2:38:94:9d:c9: 81:05:0f:ac:68:60:04:7c:61:1b:65:83:f5:1a:52:08:9c:a0: 22:f1:1b:a2:e2:84:86:59:90:1e:65:04:51:91:8a:e2:6c:c5: 40:df:c7:85:19:6d:cf:94:61:89:19:df:7c:bd:3d:f7:5c:d7: c6:06:68:db:a4:9e:6b:07:1d:07:1d:eb:49:0e:12:3e:31:68: 12:eb:97:74:9a:f8:15:1b:3e:3d:dd:55:90:28:f0:ac:07:21: b0:2a:0c:02:18:4a:db:16:22:a7:0a:ce:76:1d:a7:f1:9b:ac: 21:13:40:c8:e3:d2:40:b6:b3:89:bc:5e:29:e2:4c:ee:07:77: 1f:69:13:0b:98:e3:a7:52:81:2e:fe:33:a6:ab:cb:ed:24:ba: 47:ce:8f:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOMtLLVR762/skg4bpBRFYFoYN5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGOUY4MjVGQ0UzMUMyN0QxNkUwMkZFNTQ0NDczMEJB MzlGQ0ZGOTAeFw0yNjA5MjQwMDA1NTNaFw0yNjA5MjUwMjQ4NTNaMDMxMTAvBgNV BAMTKEQwMkQwMzExOERGNEZGNUI3MjEwRkZGOENBQkVDRDg4Q0IwMkE4RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhhP7n+H4+pEjAenr9l1eHy6fx PoaNEIBxuBDZn9SQQPblZrLyNX7VROFfDxPrSAhCuGHvqUHd/JBPLpgD35icPyqs dlr1UB5F31j5sTXwoYauoLLw0WtupA/vOTAEwe+4FZQt38tBNqrC6R7JYKLip/bW G3B6GVbryjTSjgYPqwSQxG/K/0iqwnReKL6asrCzW1xaYe5FRO9hpfuaORleVzX2 XD6W/mVUkr9LnEK/SQriHj+gKhISsAA7lc3MLDp+RD1S0LUfWZPceiLSclgmqb8s QClt75MdV2SMDtMzNAKb8THFaNk3OgKduhcodyUE9XxsdF3v2lstqwhlzxKBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0C0DEY30/1tyEP/4yr7NiMsCqP8wHwYDVR0j BBgwFoAUHPn4JfzjHCfRbgL+VERzC6Ofz/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk5ODE5NWYtMTRiYi00MWZkLWI2ZWQtN2E5NjdjOGU0M2RmLzAvMUNGOUY4MjVG Q0UzMUMyN0QxNkUwMkZFNTQ0NDczMEJBMzlGQ0ZGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQ0Y5RjgyNUZDRTMxQzI3RDE2RTAyRkU1NDQ0NzMwQkEzOUZD RkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk5ODE5NWYtMTRiYi00MWZkLWI2 ZWQtN2E5NjdjOGU0M2RmLzAvMUNGOUY4MjVGQ0UzMUMyN0QxNkUwMkZFNTQ0NDcz MEJBMzlGQ0ZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKI6zUPNjXkbceGerfHiqm+RajKRLH/Oti1 fH5RDAVMpUooryDwBnAT87stY1L+L6lg392hDlmRHO0NaSapvI+mGROUYHASD6qu fgSj7a6sPIl26aJhpXc6OqUp62HSCxfojJG5GSyiOJSdyYEFD6xoYAR8YRtlg/Ua UgicoCLxG6LihIZZkB5lBFGRiuJsxUDfx4UZbc+UYYkZ33y9Pfdc18YGaNuknmsH HQcd60kOEj4xaBLrl3Sa+BUbPj3dVZAo8KwHIbAqDAIYStsWIqcKznYdp/GbrCET QMjj0kC2s4m8XiniTO4Hdx9pEwuY46dSgS7+M6ary+0kukfOj4E= -----END CERTIFICATE-----Generated at Thu Sep 24 08:29:01 2026 by rpki-client