$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/C1A495959252724BB02157535868476E3695F743.mft File: C1A495959252724BB02157535868476E3695F743.mft (raw, json) Hash identifier: 4N7iSCSCZJLT4z9xKVSXduQ8sJfDDWiXvaiM5tsvB5k= Subject key identifier: 43:19:C0:28:62:65:54:2B:49:E9:DD:72:0C:DD:73:B0:1C:EC:15:DC Authority key identifier: C1:A4:95:95:92:52:72:4B:B0:21:57:53:58:68:47:6E:36:95:F7:43 Certificate issuer: /CN=C1A495959252724BB02157535868476E3695F743 Certificate serial: 0C1B957C7CF766BDADB118A0E52683F2803EC673 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A495959252724BB02157535868476E3695F743.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/C1A495959252724BB02157535868476E3695F743.mft Manifest number: D7 Signing time: Sat 10 Oct 2026 03:41:41 +0000 Manifest this update: Sat 10 Oct 2026 03:36:41 +0000 Manifest next update: Sun 11 Oct 2026 05:29:41 +0000 Files and hashes: 1: C1A495959252724BB02157535868476E3695F743.crl (hash: nM3hL7ZFDD1+KnmuxYy0woQLFb+LLfxu7byVPPdXOJM=) 2: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: 3gMFcIdzZIFz/pQC+A0nSpKVaEMc4MfPXuLkcguXqvc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/C1A495959252724BB02157535868476E3695F743.crl rsync://rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/C1A495959252724BB02157535868476E3695F743.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A495959252724BB02157535868476E3695F743.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 04:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:1b:95:7c:7c:f7:66:bd:ad:b1:18:a0:e5:26:83:f2:80:3e:c6:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1A495959252724BB02157535868476E3695F743 Validity Not Before: Oct 10 03:36:41 2026 GMT Not After : Oct 11 05:29:41 2026 GMT Subject: CN=4319C0286265542B49E9DD720CDD73B01CEC15DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c7:ec:92:19:f5:de:50:b2:e3:4e:70:cd:e0: b6:85:c5:ea:13:78:66:4d:8c:b1:49:aa:d9:95:2b: 2f:f2:70:13:1b:f9:a5:61:5c:82:f6:3a:b0:08:44: 6d:28:ba:92:aa:ab:df:09:45:45:d9:4d:83:ff:ea: 0a:a0:4b:a1:35:80:2c:05:85:93:46:d1:87:9f:64: 72:89:e6:7f:fd:af:e5:6d:75:87:28:2e:cf:75:37: 13:b1:9b:ee:6d:39:b7:bc:e0:57:6a:04:42:30:f4: e7:d5:ee:6a:d5:bb:3e:ec:0e:01:b2:38:df:71:8d: bd:31:7a:2a:ca:fd:4b:ff:bb:cc:5e:e4:cb:44:3a: ac:ab:1e:93:2a:6d:4c:4e:f1:fd:60:93:2e:14:ff: 0e:3b:24:c4:76:54:0c:7b:87:42:a2:8b:a9:ed:1d: 0b:d9:e0:b1:ff:4a:d6:2e:61:c8:89:41:7e:30:d0: a6:b4:11:0c:48:d6:3a:b5:27:06:ef:54:fe:df:e9: 7a:12:c0:20:46:7a:9b:3f:75:2a:22:06:46:2f:95: c8:90:93:d2:82:7a:08:ad:0f:d3:df:4d:7d:6d:bb: 9d:32:3a:ac:e9:eb:d2:69:bd:a9:d9:63:1c:25:39: 38:fb:2f:85:cb:19:57:7f:6a:c8:9d:f6:1c:ad:73: 21:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:19:C0:28:62:65:54:2B:49:E9:DD:72:0C:DD:73:B0:1C:EC:15:DC X509v3 Authority Key Identifier: keyid:C1:A4:95:95:92:52:72:4B:B0:21:57:53:58:68:47:6E:36:95:F7:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/C1A495959252724BB02157535868476E3695F743.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A495959252724BB02157535868476E3695F743.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/C1A495959252724BB02157535868476E3695F743.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:74:76:5a:c9:a7:fa:d2:77:fa:77:20:73:75:8d:cd:2d:3b: 60:cc:55:2a:c5:c6:5e:d1:df:43:59:f8:93:a3:ac:26:b5:2d: ac:0c:e5:22:e6:ee:16:0b:66:35:ad:79:41:d0:43:5b:d4:95: 91:6d:3e:1d:df:39:9e:f9:69:38:91:ff:e8:68:1f:95:57:98: c3:f4:34:a8:d2:b7:66:59:2c:cf:86:6d:95:1e:1a:40:1a:8c: 3a:5f:db:c9:e5:80:a4:db:12:20:a8:dd:ed:3d:21:50:d2:c7: 9a:a6:14:37:60:e3:98:43:fd:ac:d9:05:6f:6b:51:2b:0f:52: e3:62:d8:4b:90:a8:eb:1f:0b:f2:00:65:1b:a7:63:e6:03:21: 0b:28:3e:ca:bf:18:cc:9f:5b:87:5c:bc:c2:1f:e3:78:61:5e: 47:ea:f8:c0:3a:a9:4a:7f:b5:7f:c3:72:86:b1:d0:92:63:09: 1d:95:33:b8:ef:e2:c2:2c:66:22:42:6d:69:26:d6:05:0a:37: 40:a3:31:de:7b:5c:2c:c7:7e:d1:5e:06:43:87:fb:72:67:03: 99:82:85:cd:c8:ed:10:e3:8f:ca:7f:44:8f:e0:91:bf:d1:68: 14:71:bf:99:bd:ab:b9:e9:07:2c:b1:3a:17:e3:49:22:48:18: 87:c8:a8:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDBuVfHz3Zr2tsRig5SaD8oA+xnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFBNDk1OTU5MjUyNzI0QkIwMjE1NzUzNTg2ODQ3NkUz Njk1Rjc0MzAeFw0yNjEwMTAwMzM2NDFaFw0yNjEwMTEwNTI5NDFaMDMxMTAvBgNV BAMTKDQzMTlDMDI4NjI2NTU0MkI0OUU5REQ3MjBDREQ3M0IwMUNFQzE1REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4x+ySGfXeULLjTnDN4LaFxeoT eGZNjLFJqtmVKy/ycBMb+aVhXIL2OrAIRG0oupKqq98JRUXZTYP/6gqgS6E1gCwF hZNG0YefZHKJ5n/9r+VtdYcoLs91NxOxm+5tObe84FdqBEIw9OfV7mrVuz7sDgGy ON9xjb0xeirK/Uv/u8xe5MtEOqyrHpMqbUxO8f1gky4U/w47JMR2VAx7h0Kii6nt HQvZ4LH/StYuYciJQX4w0Ka0EQxI1jq1JwbvVP7f6XoSwCBGeps/dSoiBkYvlciQ k9KCegitD9PfTX1tu50yOqzp69JpvanZYxwlOTj7L4XLGVd/asid9hytcyGBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQxnAKGJlVCtJ6d1yDN1zsBzsFdwwHwYDVR0j BBgwFoAUwaSVlZJSckuwIVdTWGhHbjaV90MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjU0ZGRjNjUtNjFjMS00OWUxLWE4OTUtM2MwM2Y1ODdhMjdiLzAvQzFBNDk1OTU5 MjUyNzI0QkIwMjE1NzUzNTg2ODQ3NkUzNjk1Rjc0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMUE0OTU5NTkyNTI3MjRCQjAyMTU3NTM1ODY4NDc2RTM2OTVG NzQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvQzFBNDk1OTU5MjUyNzI0QkIwMjE1NzUzNTg2ODQ3 NkUzNjk1Rjc0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGx0dlrJp/rSd/p3IHN1jc0tO2DMVSrFxl7R 30NZ+JOjrCa1LawM5SLm7hYLZjWteUHQQ1vUlZFtPh3fOZ75aTiR/+hoH5VXmMP0 NKjSt2ZZLM+GbZUeGkAajDpf28nlgKTbEiCo3e09IVDSx5qmFDdg45hD/azZBW9r USsPUuNi2EuQqOsfC/IAZRunY+YDIQsoPsq/GMyfW4dcvMIf43hhXkfq+MA6qUp/ tX/Dcoax0JJjCR2VM7jv4sIsZiJCbWkm1gUKN0CjMd57XCzHftFeBkOH+3JnA5mC hc3I7RDjj8p/RI/gkb/RaBRxv5m9q7npByyxOhfjSSJIGIfIqLA= -----END CERTIFICATE-----Generated at Sat Oct 10 13:41:54 2026 by rpki-client