$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft File: 1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft (raw, json) Hash identifier: dVbHIFw+ZjOKU6my9ny+h8y1PvfNBbrLC/n3ZLDIbYs= Subject key identifier: 02:5A:45:B0:4C:5D:17:B1:BB:30:12:5D:FB:3F:A8:A2:99:8C:48:11 Authority key identifier: 1D:64:3B:1C:6E:62:9D:F0:42:A8:F3:A5:5F:9B:99:90:45:E5:B2:0E Certificate issuer: /CN=1D643B1C6E629DF042A8F3A55F9B999045E5B20E Certificate serial: 40DAEFEFD48C250AAF8E22798BAB3C438EAEFB91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 09:42:39 +0000 Manifest this update: Thu 24 Sep 2026 09:37:39 +0000 Manifest next update: Fri 25 Sep 2026 13:23:39 +0000 Files and hashes: 1: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: 1n9SNDjrvcks0gDiRfW+y5COwfj6j7g0N+zUW08aQJo=) 2: 1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl (hash: f9ctt/k2w7gVvFneH7wZ7LKCFfB+fIvDmhbaBcOKmQM=) 3: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: nZbaKSWu9s5rV55piHeXvkmOotMmTZ35vGIFuNTZyR0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:da:ef:ef:d4:8c:25:0a:af:8e:22:79:8b:ab:3c:43:8e:ae:fb:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D643B1C6E629DF042A8F3A55F9B999045E5B20E Validity Not Before: Sep 24 09:37:39 2026 GMT Not After : Sep 25 13:23:39 2026 GMT Subject: CN=025A45B04C5D17B1BB30125DFB3FA8A2998C4811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:11:a5:f1:78:e3:3a:de:de:d9:eb:63:c8:18: c2:18:b6:86:31:37:6d:7a:ea:84:e2:ee:c5:c9:6a: 0a:5e:4a:d5:8a:88:11:0f:f1:29:d0:ab:98:1e:cf: 31:8a:1b:d4:e7:3d:71:ca:e9:59:7d:3d:65:64:8b: 1e:1a:76:d4:64:13:6d:5f:4c:b4:48:42:22:41:e5: 36:d9:4c:ee:bb:11:36:36:08:dc:53:06:0b:59:80: 85:02:f6:d7:c2:04:3c:40:4c:d1:fa:42:ad:b9:e6: e0:10:87:bc:b9:88:84:b0:db:a0:e1:e4:da:aa:6c: 0b:4a:ba:26:6e:81:3d:fe:40:7a:a1:5b:6c:56:0c: a1:aa:61:97:1c:6e:cb:84:53:34:b7:9e:aa:dc:2c: 58:c6:b0:c6:ea:47:b5:f8:cb:e5:0c:a6:e4:f8:01: af:83:e0:ba:7c:b0:4c:d1:e1:d0:1a:41:9e:78:a1: 87:84:d5:57:1d:91:26:15:03:7b:99:54:5b:19:be: 5e:d0:81:4d:30:24:3e:6f:6a:cc:78:c0:42:8c:c3: da:ef:4c:d0:53:4e:08:ac:63:51:33:db:2b:30:37: 38:39:65:5a:c1:8d:74:f3:8d:fd:7e:00:8a:b3:cb: 2c:02:e6:6e:35:e9:15:16:8f:fc:9e:6b:41:be:73: 9f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5A:45:B0:4C:5D:17:B1:BB:30:12:5D:FB:3F:A8:A2:99:8C:48:11 X509v3 Authority Key Identifier: keyid:1D:64:3B:1C:6E:62:9D:F0:42:A8:F3:A5:5F:9B:99:90:45:E5:B2:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:66:26:33:54:04:0f:2c:b0:12:cd:1b:8e:66:94:c2:ca:4e: 13:58:f1:9e:7b:93:27:85:bd:d2:0c:01:17:98:dd:f1:e6:e4: f2:42:dc:c8:27:96:48:21:1a:f9:9b:b3:17:06:19:94:be:89: df:24:f3:a0:54:43:85:10:d5:de:88:eb:1b:41:ec:92:92:c4: 84:9c:57:c5:61:54:27:06:7f:68:18:f9:de:b6:a3:10:06:66: 57:e8:f8:ef:c8:0a:86:59:96:9b:c6:5a:b2:5b:a7:2e:a0:1c: 27:d5:d6:f8:87:54:57:03:f0:7a:f0:fe:df:e9:a0:86:d9:ce: 5e:85:cb:3b:89:da:b4:67:4d:c5:ce:a4:8d:62:49:e0:4d:2e: 8e:36:d9:91:45:ca:eb:26:d6:cd:a8:b6:b5:26:78:1f:cf:d9: e1:d4:4c:c3:b1:29:e1:79:8d:8e:f0:7f:79:ee:c1:d1:b4:30: ff:5e:99:61:7e:dc:76:63:12:74:5c:b2:35:91:56:a1:2d:8d: 8f:8c:dc:1d:ea:78:2f:35:83:bf:72:c9:36:88:48:e0:89:1b: 98:73:aa:ea:80:31:97:cd:b2:59:13:a6:1f:ad:b8:20:57:e4: 3f:23:d7:c6:bc:6c:3e:1c:29:61:93:17:9a:cb:17:cb:86:ab: ec:3c:15:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQNrv79SMJQqvjiJ5i6s8Q46u+5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2NDNCMUM2RTYyOURGMDQyQThGM0E1NUY5Qjk5OTA0 NUU1QjIwRTAeFw0yNjA5MjQwOTM3MzlaFw0yNjA5MjUxMzIzMzlaMDMxMTAvBgNV BAMTKDAyNUE0NUIwNEM1RDE3QjFCQjMwMTI1REZCM0ZBOEEyOTk4QzQ4MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOEaXxeOM63t7Z62PIGMIYtoYx N2166oTi7sXJagpeStWKiBEP8SnQq5gezzGKG9TnPXHK6Vl9PWVkix4adtRkE21f TLRIQiJB5TbZTO67ETY2CNxTBgtZgIUC9tfCBDxATNH6Qq255uAQh7y5iISw26Dh 5NqqbAtKuiZugT3+QHqhW2xWDKGqYZccbsuEUzS3nqrcLFjGsMbqR7X4y+UMpuT4 Aa+D4Lp8sEzR4dAaQZ54oYeE1VcdkSYVA3uZVFsZvl7QgU0wJD5vasx4wEKMw9rv TNBTTgisY1Ez2yswNzg5ZVrBjXTzjf1+AIqzyywC5m416RUWj/yea0G+c5/ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAlpFsExdF7G7MBJd+z+oopmMSBEwHwYDVR0j BBgwFoAUHWQ7HG5infBCqPOlX5uZkEXlsg4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2EwYjRmMTUtNzcyMC00ZjJhLTgzNDMtOGUzN2ZhZTg3YTU0LzAvMUQ2NDNCMUM2 RTYyOURGMDQyQThGM0E1NUY5Qjk5OTA0NUU1QjIwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDY0M0IxQzZFNjI5REYwNDJBOEYzQTU1RjlCOTk5MDQ1RTVC MjBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2EwYjRmMTUtNzcyMC00ZjJhLTgz NDMtOGUzN2ZhZTg3YTU0LzAvMUQ2NDNCMUM2RTYyOURGMDQyQThGM0E1NUY5Qjk5 OTA0NUU1QjIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFmJjNUBA8ssBLNG45mlMLKThNY8Z57kyeF vdIMAReY3fHm5PJC3MgnlkghGvmbsxcGGZS+id8k86BUQ4UQ1d6I6xtB7JKSxISc V8VhVCcGf2gY+d62oxAGZlfo+O/ICoZZlpvGWrJbpy6gHCfV1viHVFcD8Hrw/t/p oIbZzl6FyzuJ2rRnTcXOpI1iSeBNLo422ZFFyusm1s2otrUmeB/P2eHUTMOxKeF5 jY7wf3nuwdG0MP9emWF+3HZjEnRcsjWRVqEtjY+M3B3qeC81g79yyTaISOCJG5hz quqAMZfNslkTph+tuCBX5D8j18a8bD4cKWGTF5rLF8uGq+w8FXY= -----END CERTIFICATE-----Generated at Thu Sep 24 12:41:17 2026 by rpki-client