$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft File: 01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft (raw, json) Hash identifier: 75AmQ3omJS97jgCMcju4mYFyo5Af+ycQwwIH3gM0+WU= Subject key identifier: 37:11:86:E7:B0:44:B1:36:CD:B6:12:64:C1:D8:F9:E4:16:A2:61:A6 Authority key identifier: 01:F3:FD:C8:60:81:CF:E1:B3:4E:89:CC:89:FD:13:E3:FC:55:20:A0 Certificate issuer: /CN=01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0 Certificate serial: 3B082D49A86B472DA73B212EBB6C7457FC37CB91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 14:23:54 +0000 Manifest this update: Wed 23 Sep 2026 14:18:54 +0000 Manifest next update: Thu 24 Sep 2026 16:33:54 +0000 Files and hashes: 1: 3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa (hash: ySzed5uDLDabSH9SesSAtowh1c9UjHu8DGpoOUcm2mA=) 2: 01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.crl (hash: hfUCOur9kkDJbLClV4ei7f4WhnRd0kPiH97xwaCsklM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.crl rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:08:2d:49:a8:6b:47:2d:a7:3b:21:2e:bb:6c:74:57:fc:37:cb:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0 Validity Not Before: Sep 23 14:18:54 2026 GMT Not After : Sep 24 16:33:54 2026 GMT Subject: CN=371186E7B044B136CDB61264C1D8F9E416A261A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b0:e0:47:a9:dd:6f:81:95:14:26:71:b0:7c: e7:27:44:f5:b7:da:ab:4c:63:c9:cb:01:97:37:6b: 35:3c:f0:10:d5:d9:b3:ad:5a:95:d3:35:76:62:5a: 5d:71:b1:a8:1c:1b:4f:d5:c1:85:50:cb:cc:56:83: b4:71:6f:9d:e5:54:e3:50:5c:a1:66:b5:96:45:9d: 14:05:11:bf:16:c5:38:49:58:1c:ce:ec:81:2b:47: c0:27:96:51:e8:3d:73:01:bf:39:25:f6:56:31:48: 61:db:61:d7:0b:18:bd:6b:7d:20:00:9a:bc:ec:c3: 83:4e:4c:53:fb:0a:2c:70:cd:03:9a:37:c7:8d:76: 40:0d:e9:7e:3f:1a:6c:6e:65:ef:5e:bf:0c:6f:51: 00:c4:8d:59:bf:e0:69:76:b4:16:46:90:04:bc:a5: 24:51:0d:c6:28:96:35:40:5d:c4:ca:6f:1f:99:ca: 56:ab:1e:79:0a:a5:b3:ba:32:37:2f:9f:1a:4e:bf: 09:00:51:30:ea:04:39:cc:16:0f:57:5b:1a:e2:94: cf:c2:0e:9e:1f:0a:55:ce:ee:95:40:b2:bb:47:95: 84:17:86:1a:17:80:50:a3:db:98:b7:31:95:b7:8b: 76:b0:b9:4a:ce:86:b9:50:d8:f5:df:da:90:8c:ba: 43:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:11:86:E7:B0:44:B1:36:CD:B6:12:64:C1:D8:F9:E4:16:A2:61:A6 X509v3 Authority Key Identifier: keyid:01:F3:FD:C8:60:81:CF:E1:B3:4E:89:CC:89:FD:13:E3:FC:55:20:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:23:1d:a7:e3:90:58:d1:c0:b5:ce:16:ed:9d:cd:ea:ff:93: 61:c7:5b:0b:79:8b:c0:4f:a6:74:05:b4:f6:d0:2c:f3:b7:b7: 32:33:c1:93:29:b9:40:ec:d2:f9:88:7f:e8:7c:1a:b5:c5:b9: 25:97:02:dd:58:37:60:f1:26:ed:cb:ec:65:a4:c3:5b:ce:89: 23:ed:15:da:fe:0f:7b:d9:f4:dc:52:88:e0:1b:e4:7a:b7:fa: aa:b0:58:65:ee:f9:9a:2e:4a:8d:17:66:64:99:7c:19:34:3b: 85:c4:1b:fa:9a:5f:45:d7:48:cb:e0:5f:2b:4e:28:e4:f4:e0: 2e:a2:39:fd:d4:62:40:39:bb:da:80:13:6a:bf:38:b3:e2:87: b3:ee:0e:9e:47:bc:05:5f:cc:11:bb:ac:d7:7e:c9:2d:c4:94: ed:a7:f0:fe:9b:42:72:e9:e0:04:b4:8b:50:cf:91:67:74:12: 5e:08:4b:14:1c:1a:72:a6:8e:bd:3d:3a:36:40:73:e1:49:d1: e2:f3:f9:da:7d:c5:87:61:7e:55:5c:71:0b:04:8c:d9:b8:62: a9:70:90:fb:87:e4:7a:8f:c7:c6:78:96:b7:dd:9e:07:5d:00: 8a:3e:06:03:79:c5:1e:2e:dd:cc:7f:11:7e:67:19:bf:27:bc: e1:dd:06:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOwgtSahrRy2nOyEuu2x0V/w3y5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGM0ZEQzg2MDgxQ0ZFMUIzNEU4OUNDODlGRDEzRTNG QzU1MjBBMDAeFw0yNjA5MjMxNDE4NTRaFw0yNjA5MjQxNjMzNTRaMDMxMTAvBgNV BAMTKDM3MTE4NkU3QjA0NEIxMzZDREI2MTI2NEMxRDhGOUU0MTZBMjYxQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCosOBHqd1vgZUUJnGwfOcnRPW3 2qtMY8nLAZc3azU88BDV2bOtWpXTNXZiWl1xsagcG0/VwYVQy8xWg7Rxb53lVONQ XKFmtZZFnRQFEb8WxThJWBzO7IErR8AnllHoPXMBvzkl9lYxSGHbYdcLGL1rfSAA mrzsw4NOTFP7CixwzQOaN8eNdkAN6X4/GmxuZe9evwxvUQDEjVm/4Gl2tBZGkAS8 pSRRDcYoljVAXcTKbx+ZylarHnkKpbO6MjcvnxpOvwkAUTDqBDnMFg9XWxrilM/C Dp4fClXO7pVAsrtHlYQXhhoXgFCj25i3MZW3i3awuUrOhrlQ2PXf2pCMukO/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNxGG57BEsTbNthJkwdj55BaiYaYwHwYDVR0j BBgwFoAUAfP9yGCBz+GzTonMif0T4/xVIKAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc5ODA5MWUtYzFhZS00MDQ5LTk2ZDItYzRjZTM3ZmRjMzViLzAvMDFGM0ZEQzg2 MDgxQ0ZFMUIzNEU4OUNDODlGRDEzRTNGQzU1MjBBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMUYzRkRDODYwODFDRkUxQjM0RTg5Q0M4OUZEMTNFM0ZDNTUy MEEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc5ODA5MWUtYzFhZS00MDQ5LTk2 ZDItYzRjZTM3ZmRjMzViLzAvMDFGM0ZEQzg2MDgxQ0ZFMUIzNEU4OUNDODlGRDEz RTNGQzU1MjBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsjHafjkFjRwLXOFu2dzer/k2HHWwt5i8BP pnQFtPbQLPO3tzIzwZMpuUDs0vmIf+h8GrXFuSWXAt1YN2DxJu3L7GWkw1vOiSPt Fdr+D3vZ9NxSiOAb5Hq3+qqwWGXu+ZouSo0XZmSZfBk0O4XEG/qaX0XXSMvgXytO KOT04C6iOf3UYkA5u9qAE2q/OLPih7PuDp5HvAVfzBG7rNd+yS3ElO2n8P6bQnLp 4AS0i1DPkWd0El4ISxQcGnKmjr09OjZAc+FJ0eLz+dp9xYdhflVccQsEjNm4Yqlw kPuH5HqPx8Z4lrfdngddAIo+BgN5xR4u3cx/EX5nGb8nvOHdBjU= -----END CERTIFICATE-----Generated at Wed Sep 23 20:17:28 2026 by rpki-client