$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft File: C1B31DA38AE18C533BF3125B438DFED7920609DE.mft (raw, json) Hash identifier: GnfpeSSkxhbZchaJK2v0H4/iaTQ+wAsYmZx0azT9pRo= Subject key identifier: 41:18:A1:B4:5B:47:6B:DE:13:5B:CA:05:D3:C6:81:E0:30:57:13:98 Authority key identifier: C1:B3:1D:A3:8A:E1:8C:53:3B:F3:12:5B:43:8D:FE:D7:92:06:09:DE Certificate issuer: /CN=C1B31DA38AE18C533BF3125B438DFED7920609DE Certificate serial: 1F17AB763F2ACC7220A8E3CA66A810A0BEC2FE05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 14:03:30 +0000 Manifest this update: Wed 23 Sep 2026 13:58:30 +0000 Manifest next update: Thu 24 Sep 2026 16:12:30 +0000 Files and hashes: 1: C1B31DA38AE18C533BF3125B438DFED7920609DE.crl (hash: hsUHWcCOFg45kxCJcHqznnVRqEUOy2lSFHLmRccTwxc=) 2: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: Oz+MvkXknVOx+2kg9rHiPY0cXl051S4cpZ1FOmSXXT0=) 3: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: YH3SdRSTcCFOkX/dwCqwGV47PfPn0krgPX18UqIdlBw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.crl rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:17:ab:76:3f:2a:cc:72:20:a8:e3:ca:66:a8:10:a0:be:c2:fe:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1B31DA38AE18C533BF3125B438DFED7920609DE Validity Not Before: Sep 23 13:58:30 2026 GMT Not After : Sep 24 16:12:30 2026 GMT Subject: CN=4118A1B45B476BDE135BCA05D3C681E030571398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:09:97:34:98:58:27:e8:34:3e:30:9e:11:2f: de:4a:6e:d7:54:22:3b:9c:ef:5a:8b:98:0a:00:09: b9:8f:f7:d7:48:a7:6b:71:08:f2:7c:64:be:1b:f0: d6:5f:05:d5:8c:4d:26:c7:f6:b2:27:e1:8f:3f:61: ed:97:77:7d:09:08:26:8d:2e:1d:28:71:07:a6:53: df:76:e6:ea:00:46:38:87:7e:30:c2:8b:ba:4e:4a: 71:f3:18:b2:80:d4:b1:d0:b3:6a:37:38:ae:ab:39: d7:81:6e:ef:67:7f:f7:ff:aa:bd:15:8b:9e:85:83: f1:4f:39:21:6c:14:87:40:d3:c0:8a:03:f8:4e:7d: da:2f:ab:62:d8:69:28:d3:46:fd:41:e2:39:97:a1: ab:9d:65:c8:74:45:ab:ab:0c:84:a8:3d:51:84:b2: d3:dc:68:b8:f9:46:cd:30:38:f3:30:f4:5c:40:89: c3:1b:e3:79:d2:fc:65:52:65:c5:8b:e2:e6:1d:5b: cf:85:b6:06:0a:2d:00:e6:46:56:66:e6:08:d3:00: a5:8e:03:83:b7:23:9a:73:09:46:65:62:45:8b:6d: 4a:59:42:4f:2a:ee:2f:52:87:85:62:d5:3f:aa:62: 74:a8:9c:38:1a:8e:d3:d4:24:dc:45:ec:fd:30:7a: 42:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:18:A1:B4:5B:47:6B:DE:13:5B:CA:05:D3:C6:81:E0:30:57:13:98 X509v3 Authority Key Identifier: keyid:C1:B3:1D:A3:8A:E1:8C:53:3B:F3:12:5B:43:8D:FE:D7:92:06:09:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:2e:9f:5e:57:bd:13:58:28:d5:99:2b:9c:28:73:0f:7b:b3: 72:1b:69:a6:01:f0:f2:ad:25:fc:78:33:a0:2e:04:5c:95:ef: 1e:4b:d3:c8:2d:93:68:95:31:8e:94:fc:e8:84:76:b7:60:ba: 95:96:57:a1:c6:8c:de:80:46:46:8c:f9:54:e2:09:8c:e6:fe: 52:0e:cc:86:b1:b9:48:66:7e:42:8b:78:ca:54:28:87:44:c2: 23:4f:98:fd:74:16:d6:e6:6d:f5:7d:65:39:d0:6d:15:8c:f5: e6:5d:81:52:57:7e:90:39:25:d7:8a:35:67:2c:0d:e0:22:dc: e8:37:43:dd:f8:53:a8:62:52:ae:db:c9:87:c9:d7:ed:5f:2c: 14:37:d4:b8:eb:21:d2:a4:dd:e0:b1:cb:55:a8:dd:a0:b0:27: 47:b0:b6:4d:22:88:fd:01:f3:9b:f8:ee:01:79:80:0e:6c:b6: 42:82:6f:5d:7d:2a:23:06:a6:44:0f:90:57:28:39:d8:a5:5a: ee:fa:15:98:73:77:62:e5:1b:5e:bc:06:49:a7:f7:7c:6d:d0: 60:36:90:8c:68:9e:d6:fc:9b:88:1e:52:0f:96:2c:30:bc:f3: 2d:0b:cb:dc:10:dc:86:72:e6:df:b5:a5:b0:af:e1:0c:c1:8b: 43:de:5e:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHxerdj8qzHIgqOPKZqgQoL7C/gUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFCMzFEQTM4QUUxOEM1MzNCRjMxMjVCNDM4REZFRDc5 MjA2MDlERTAeFw0yNjA5MjMxMzU4MzBaFw0yNjA5MjQxNjEyMzBaMDMxMTAvBgNV BAMTKDQxMThBMUI0NUI0NzZCREUxMzVCQ0EwNUQzQzY4MUUwMzA1NzEzOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKCZc0mFgn6DQ+MJ4RL95KbtdU Ijuc71qLmAoACbmP99dIp2txCPJ8ZL4b8NZfBdWMTSbH9rIn4Y8/Ye2Xd30JCCaN Lh0ocQemU9925uoARjiHfjDCi7pOSnHzGLKA1LHQs2o3OK6rOdeBbu9nf/f/qr0V i56Fg/FPOSFsFIdA08CKA/hOfdovq2LYaSjTRv1B4jmXoaudZch0RaurDISoPVGE stPcaLj5Rs0wOPMw9FxAicMb43nS/GVSZcWL4uYdW8+FtgYKLQDmRlZm5gjTAKWO A4O3I5pzCUZlYkWLbUpZQk8q7i9Sh4Vi1T+qYnSonDgajtPUJNxF7P0wekKbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQRihtFtHa94TW8oF08aB4DBXE5gwHwYDVR0j BBgwFoAUwbMdo4rhjFM78xJbQ43+15IGCd4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjdhMTEwZTgtYjhjMi00Mjc3LWJlYjMtOTJhYTViMzY5MGYwLzAvQzFCMzFEQTM4 QUUxOEM1MzNCRjMxMjVCNDM4REZFRDc5MjA2MDlERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMUIzMURBMzhBRTE4QzUzM0JGMzEyNUI0MzhERkVENzkyMDYw OURFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvQzFCMzFEQTM4QUUxOEM1MzNCRjMxMjVCNDM4REZF RDc5MjA2MDlERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkun15XvRNYKNWZK5wocw97s3IbaaYB8PKt Jfx4M6AuBFyV7x5L08gtk2iVMY6U/OiEdrdgupWWV6HGjN6ARkaM+VTiCYzm/lIO zIaxuUhmfkKLeMpUKIdEwiNPmP10FtbmbfV9ZTnQbRWM9eZdgVJXfpA5JdeKNWcs DeAi3Og3Q934U6hiUq7byYfJ1+1fLBQ31LjrIdKk3eCxy1Wo3aCwJ0ewtk0iiP0B 85v47gF5gA5stkKCb119KiMGpkQPkFcoOdilWu76FZhzd2LlG168Bkmn93xt0GA2 kIxontb8m4geUg+WLDC88y0Ly9wQ3IZy5t+1pbCv4QzBi0PeXsA= -----END CERTIFICATE-----Generated at Wed Sep 23 21:57:06 2026 by rpki-client