$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft File: 1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft (raw, json) Hash identifier: kzHr2ZoaqYvP3CiaTdUcbmD1EXjmC9QEZGy0p2MwwSE= Subject key identifier: 6F:DE:2D:B0:05:6A:AC:E1:C7:6D:F7:DC:87:0D:50:D4:4F:24:31:EA Authority key identifier: 1E:A6:10:CF:AD:D7:27:AD:AA:74:FA:9B:FE:8D:DF:AF:27:30:24:67 Certificate issuer: /CN=1EA610CFADD727ADAA74FA9BFE8DDFAF27302467 Certificate serial: 0C3FF90EFE9F423484D8259CDDAC2CE023350CFD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 17:53:03 +0000 Manifest this update: Wed 23 Sep 2026 17:48:03 +0000 Manifest next update: Thu 24 Sep 2026 21:15:03 +0000 Files and hashes: 1: 1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl (hash: iON5mlqc+OVFfLGtdqd7mE20nD6sGxX3Y5MBbIIzcJM=) 2: 323030313a6466313a396634303a3a2f34382d3438203d3e20313439373034.roa (hash: +7gxgZA4R6XZfqKIvJi9Q/LxoHJw6/TCBpYF4xmvuqk=) 3: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: ZsJ/jB1I6GIvE0h8Rn6eqplhxHo0cL9KOhuXdGF4spA=) 4: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: IOAwzQ73Cr2im/VcFN1TaAQYk3NUUawiD2oAPVCKSrc=) 5: 3130332e3138362e35382e302f32332d3234203d3e20313439373034.roa (hash: iLoKSE1pdd15H1Hz5134mXWItT5DvP5967h6GjP5mKY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:15:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:3f:f9:0e:fe:9f:42:34:84:d8:25:9c:dd:ac:2c:e0:23:35:0c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EA610CFADD727ADAA74FA9BFE8DDFAF27302467 Validity Not Before: Sep 23 17:48:03 2026 GMT Not After : Sep 24 21:15:03 2026 GMT Subject: CN=6FDE2DB0056AACE1C76DF7DC870D50D44F2431EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9f:c7:f9:b2:98:d4:d1:9e:16:b2:b5:ff:a7: ca:c0:00:06:ae:66:bf:6c:d7:8b:89:25:48:6f:61: 3f:ac:5e:4b:ad:e0:7f:9a:f3:9b:b2:27:46:00:e4: 68:db:d1:b1:a2:af:fe:51:3b:78:88:cf:ef:57:23: 8b:fe:26:70:42:dd:77:d3:be:b0:21:e6:ab:96:41: 40:e4:42:a2:37:b5:bc:9a:68:a6:c3:0e:15:68:2e: a3:8e:fc:67:d9:7b:3b:48:52:56:46:3c:b0:07:74: 84:41:56:87:97:07:38:81:33:d9:4c:28:4b:a4:9c: 62:70:b5:3e:a8:02:83:03:67:af:8d:c4:16:f0:52: 11:03:58:6f:a8:e1:1a:ff:45:01:68:ed:06:d2:c3: 9c:a4:3e:50:c3:6c:65:04:2f:d0:fc:b3:31:4d:92: b7:b0:26:e6:0f:fd:6d:59:ee:61:63:40:d4:c4:9b: 4f:e9:b0:f8:51:83:a3:0b:f9:63:0c:12:87:0d:fc: cb:41:c7:68:2a:ed:8b:ab:f2:ec:14:34:0e:31:c6: 59:c9:ec:55:25:50:ea:7e:0c:0e:1f:c3:b3:34:01: e7:88:59:49:be:92:ad:9d:d2:5e:17:0a:c9:18:a3: 07:9e:da:8c:b0:0e:3c:bf:b2:42:2a:86:22:0f:9d: a3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DE:2D:B0:05:6A:AC:E1:C7:6D:F7:DC:87:0D:50:D4:4F:24:31:EA X509v3 Authority Key Identifier: keyid:1E:A6:10:CF:AD:D7:27:AD:AA:74:FA:9B:FE:8D:DF:AF:27:30:24:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f4:c9:52:83:dd:d0:3a:b5:17:db:8a:87:2e:37:8f:4e:51: ba:8c:e8:ee:69:2a:bf:0a:2c:d1:66:30:7a:e1:09:ab:f1:88: 9c:9f:3d:55:1c:e8:10:15:d3:40:c8:c6:51:35:5f:54:a3:79: 12:32:8c:9a:d0:79:b6:09:62:6b:d8:a2:21:71:2f:88:23:88: 4b:c7:6e:b1:44:cc:2c:f4:4d:df:74:cc:fb:d7:0e:b2:9a:89: a4:4b:66:ea:65:2d:e0:2b:dc:44:e9:0d:b0:1c:3e:89:9d:06: 15:b5:3f:6f:dd:dd:5b:fa:4d:8f:29:77:d1:71:fe:c8:fa:00: 35:a0:74:0a:1d:0a:95:02:f0:0d:cd:30:5e:0a:5f:af:41:24: 8a:80:bc:71:dc:df:c0:b1:61:06:d3:b2:4a:77:2c:b3:5d:1f: 8d:c4:5d:b0:40:df:62:c0:5a:2d:d8:d2:d7:d7:89:ed:9b:18: 5d:5d:8f:39:dc:a6:f8:7a:50:33:76:16:1d:d2:07:cc:90:1e: 75:c7:64:09:5d:ee:ea:64:35:48:6f:6e:ae:47:77:45:49:7a: 3f:73:31:e7:4f:90:5c:64:34:11:15:2a:32:37:9e:74:b0:e5: bd:96:93:8e:e2:12:cb:76:75:ee:5f:9a:01:41:0e:86:a0:61: e4:93:ae:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDD/5Dv6fQjSE2CWc3aws4CM1DP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBNjEwQ0ZBREQ3MjdBREFBNzRGQTlCRkU4RERGQUYy NzMwMjQ2NzAeFw0yNjA5MjMxNzQ4MDNaFw0yNjA5MjQyMTE1MDNaMDMxMTAvBgNV BAMTKDZGREUyREIwMDU2QUFDRTFDNzZERjdEQzg3MEQ1MEQ0NEYyNDMxRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVn8f5spjU0Z4WsrX/p8rAAAau Zr9s14uJJUhvYT+sXkut4H+a85uyJ0YA5Gjb0bGir/5RO3iIz+9XI4v+JnBC3XfT vrAh5quWQUDkQqI3tbyaaKbDDhVoLqOO/GfZeztIUlZGPLAHdIRBVoeXBziBM9lM KEuknGJwtT6oAoMDZ6+NxBbwUhEDWG+o4Rr/RQFo7QbSw5ykPlDDbGUEL9D8szFN krewJuYP/W1Z7mFjQNTEm0/psPhRg6ML+WMMEocN/MtBx2gq7Yur8uwUNA4xxlnJ 7FUlUOp+DA4fw7M0AeeIWUm+kq2d0l4XCskYowee2oywDjy/skIqhiIPnaOtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb94tsAVqrOHHbffchw1Q1E8kMeowHwYDVR0j BBgwFoAUHqYQz63XJ62qdPqb/o3frycwJGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDEwZWRkY2QtN2QzOC00NzY1LWFhMjYtN2U0NTc2NzA0MjNjLzAvMUVBNjEwQ0ZB REQ3MjdBREFBNzRGQTlCRkU4RERGQUYyNzMwMjQ2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUE2MTBDRkFERDcyN0FEQUE3NEZBOUJGRThEREZBRjI3MzAy NDY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvMUVBNjEwQ0ZBREQ3MjdBREFBNzRGQTlCRkU4RERG QUYyNzMwMjQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAr0yVKD3dA6tRfbiocuN49OUbqM6O5pKr8K LNFmMHrhCavxiJyfPVUc6BAV00DIxlE1X1SjeRIyjJrQebYJYmvYoiFxL4gjiEvH brFEzCz0Td90zPvXDrKaiaRLZuplLeAr3ETpDbAcPomdBhW1P2/d3Vv6TY8pd9Fx /sj6ADWgdAodCpUC8A3NMF4KX69BJIqAvHHc38CxYQbTskp3LLNdH43EXbBA32LA Wi3Y0tfXie2bGF1djzncpvh6UDN2Fh3SB8yQHnXHZAld7upkNUhvbq5Hd0VJej9z MedPkFxkNBEVKjI3nnSw5b2Wk47iEst2de5fmgFBDoagYeSTrnE= -----END CERTIFICATE-----Generated at Thu Sep 24 13:22:42 2026 by rpki-client