$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft File: A1E11F793F01828AF09B99BCD923D78E53C244F8.mft (raw, json) Hash identifier: 62pPiXbantbAro0TEDpC0koyWSqoSECM7zAK3IQtFN8= Subject key identifier: 17:9B:8D:69:BA:E5:AB:BD:E5:45:FF:E5:0D:10:71:7A:AB:60:07:49 Authority key identifier: A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8 Certificate issuer: /CN=A1E11F793F01828AF09B99BCD923D78E53C244F8 Certificate serial: 54E94B1B5B30CB4D96B9F0397B094AD5271D8F04 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 11:25:13 +0000 Manifest this update: Wed 23 Sep 2026 11:20:13 +0000 Manifest next update: Thu 24 Sep 2026 11:31:13 +0000 Files and hashes: 1: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: UROVvNQkBLkgNHOadPoNQ+qS5gW9uF+lG16ZZ4rQo7Y=) 2: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: aoz9FF3zaBxJcTS/CNaTKvg2hS72RZ/WIHtE0qTjGI0=) 3: A1E11F793F01828AF09B99BCD923D78E53C244F8.crl (hash: Xb9J2u1h29ZIwnz16Lf0RHsZ+GwdM6pfpyS3kBTTbC4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e9:4b:1b:5b:30:cb:4d:96:b9:f0:39:7b:09:4a:d5:27:1d:8f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1E11F793F01828AF09B99BCD923D78E53C244F8 Validity Not Before: Sep 23 11:20:13 2026 GMT Not After : Sep 24 11:31:13 2026 GMT Subject: CN=179B8D69BAE5ABBDE545FFE50D10717AAB600749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:46:f6:82:8b:08:fe:2b:b3:c1:32:85:b8:94: 7a:61:16:73:c2:98:e5:9b:96:80:e9:8a:40:01:3b: 13:24:3d:fe:72:dd:28:7e:bd:0c:b7:d9:49:31:7f: 7d:c7:3d:11:b6:1c:7e:51:87:83:21:37:62:f6:44: c8:48:bc:ed:7f:87:c8:fb:be:65:e9:dd:81:73:50: 99:b1:7f:f1:3c:1f:44:4a:10:70:37:96:25:80:89: dc:b4:ef:c4:3d:df:6d:35:a9:5d:91:93:40:4c:7b: e5:ff:c3:a9:a4:dc:ec:f4:cf:3a:d1:67:85:8b:11: 17:79:9d:88:3f:e4:e4:1f:32:f7:bf:ef:ce:fa:a4: 7e:6d:82:bb:62:f2:d7:fe:ab:3c:38:1d:5c:5c:64: d0:ee:69:fe:b8:2e:ef:9a:7d:4a:af:e2:ed:d2:ed: 4e:6b:39:4b:8f:ac:2e:c3:34:34:f0:3c:cc:26:34: 24:41:85:a0:59:31:22:8f:e4:4c:04:68:e9:4f:63: d3:0a:4c:48:07:1d:87:53:ba:3e:c3:d8:c5:65:02: 1e:09:1c:36:27:95:d9:fe:a9:95:a8:fc:d2:4c:9f: f4:97:5d:6b:17:b8:b6:e9:b0:a4:cc:2f:73:45:8f: c2:7a:ce:fd:6e:22:0d:de:da:b5:46:5e:af:a2:86: e9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9B:8D:69:BA:E5:AB:BD:E5:45:FF:E5:0D:10:71:7A:AB:60:07:49 X509v3 Authority Key Identifier: keyid:A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:76:c6:d4:04:9f:ff:78:08:ce:e6:52:a5:09:b0:a6:34:73: f3:93:a0:0b:fb:c9:b4:91:42:b1:2b:53:f9:96:aa:ea:62:e3: 08:62:8e:7a:51:e3:47:dd:a7:c3:25:73:27:e7:1c:87:a1:04: 4a:0e:62:a3:71:81:fc:cb:5e:9c:9a:49:22:e2:39:4a:cd:c6: f2:62:fc:08:94:d2:3e:f1:e3:78:17:19:99:4e:26:d3:63:8a: e6:51:51:25:d9:db:17:c6:a0:f2:3a:ea:fa:03:3e:9b:70:7c: 70:17:60:77:6d:6c:b9:0e:6a:49:37:e9:ce:7c:5e:23:b6:88: a4:3e:9a:06:66:a6:ec:d4:41:95:1c:ad:af:82:e2:80:ff:24: 09:4c:31:12:bb:21:92:1c:3b:20:59:23:07:87:eb:5f:37:8b: c5:17:e6:8b:68:20:41:a8:fb:cd:7e:49:3c:27:a8:9f:2d:94: fd:56:2d:72:4f:0c:04:be:04:1d:dd:31:2f:b7:c7:a0:67:ef: 0b:dd:6c:f1:f9:9f:c6:e5:e2:f5:40:1d:29:64:e9:be:a4:58: fe:4a:0d:ed:54:76:01:c3:82:af:22:70:99:7c:56:09:91:d3: 1b:9c:87:94:22:df:c9:12:07:c0:48:76:75:e9:bd:37:5f:87: 88:03:fd:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVOlLG1swy02WufA5ewlK1ScdjwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFMTFGNzkzRjAxODI4QUYwOUI5OUJDRDkyM0Q3OEU1 M0MyNDRGODAeFw0yNjA5MjMxMTIwMTNaFw0yNjA5MjQxMTMxMTNaMDMxMTAvBgNV BAMTKDE3OUI4RDY5QkFFNUFCQkRFNTQ1RkZFNTBEMTA3MTdBQUI2MDA3NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZRvaCiwj+K7PBMoW4lHphFnPC mOWbloDpikABOxMkPf5y3Sh+vQy32Ukxf33HPRG2HH5Rh4MhN2L2RMhIvO1/h8j7 vmXp3YFzUJmxf/E8H0RKEHA3liWAidy078Q93201qV2Rk0BMe+X/w6mk3Oz0zzrR Z4WLERd5nYg/5OQfMve/7876pH5tgrti8tf+qzw4HVxcZNDuaf64Lu+afUqv4u3S 7U5rOUuPrC7DNDTwPMwmNCRBhaBZMSKP5EwEaOlPY9MKTEgHHYdTuj7D2MVlAh4J HDYnldn+qZWo/NJMn/SXXWsXuLbpsKTML3NFj8J6zv1uIg3e2rVGXq+ihumRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF5uNabrlq73lRf/lDRBxeqtgB0kwHwYDVR0j BBgwFoAUoeEfeT8Bgorwm5m82SPXjlPCRPgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2YwYmExZTctZDE0Mi00N2NkLThkOGYtMmEzNzJiOTIyMjIzLzAvQTFFMTFGNzkz RjAxODI4QUYwOUI5OUJDRDkyM0Q3OEU1M0MyNDRGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUUxMUY3OTNGMDE4MjhBRjA5Qjk5QkNEOTIzRDc4RTUzQzI0 NEY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvQTFFMTFGNzkzRjAxODI4QUYwOUI5OUJDRDkyM0Q3 OEU1M0MyNDRGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEV2xtQEn/94CM7mUqUJsKY0c/OToAv7ybSR QrErU/mWqupi4whijnpR40fdp8MlcyfnHIehBEoOYqNxgfzLXpyaSSLiOUrNxvJi /AiU0j7x43gXGZlOJtNjiuZRUSXZ2xfGoPI66voDPptwfHAXYHdtbLkOakk36c58 XiO2iKQ+mgZmpuzUQZUcra+C4oD/JAlMMRK7IZIcOyBZIweH6183i8UX5otoIEGo +81+STwnqJ8tlP1WLXJPDAS+BB3dMS+3x6Bn7wvdbPH5n8bl4vVAHSlk6b6kWP5K De1UdgHDgq8icJl8VgmR0xuch5Qi38kSB8BIdnXpvTdfh4gD/SU= -----END CERTIFICATE-----Generated at Wed Sep 23 21:57:37 2026 by rpki-client