$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft File: 1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft (raw, json) Hash identifier: qyYmGAR40pBrcEXbFlnhUzFYBAIBs2cMOA+ediDJp6s= Subject key identifier: 3A:81:63:2C:1D:19:9F:2D:03:8B:F8:2D:74:EB:32:79:6F:10:FE:00 Authority key identifier: 1C:64:A5:D7:8F:86:E2:7A:0F:CF:C0:B1:E2:60:6E:2A:96:1F:72:05 Certificate issuer: /CN=1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205 Certificate serial: 0E2EB3CFF79F9FF90FF76D658509A5D636208476 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft Manifest number: BF Signing time: Tue 22 Sep 2026 07:51:21 +0000 Manifest this update: Tue 22 Sep 2026 07:46:21 +0000 Manifest next update: Wed 23 Sep 2026 07:58:21 +0000 Files and hashes: 1: 1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl (hash: bIdor7t4vC7odemZgYtqzlAJ8asEyGzY4ri+D8v3ycU=) 2: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: sefAns8WGP+QODtyZI5xSMBLlCAhkEsg1IdG1oXtiJc=) 3: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: krKKJL8xoxgN2wyxvjJrqrqA9vT6YHk/PFCm7/PP3c4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 07:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:2e:b3:cf:f7:9f:9f:f9:0f:f7:6d:65:85:09:a5:d6:36:20:84:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205 Validity Not Before: Sep 22 07:46:21 2026 GMT Not After : Sep 23 07:58:21 2026 GMT Subject: CN=3A81632C1D199F2D038BF82D74EB32796F10FE00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4e:da:e7:36:5d:23:e3:4e:7b:c7:35:10:7c: 64:ce:ea:6e:bf:59:d1:a5:b7:b3:1d:ff:09:75:d6: 31:29:54:a1:43:eb:d8:e1:84:ae:3e:9b:16:18:b6: de:ce:35:64:a1:2c:ea:f8:3a:6c:73:6f:1f:05:8a: a8:9a:e4:5e:7a:14:af:3c:8e:49:61:0c:06:52:d1: a5:7f:f2:b7:80:e1:54:bc:fc:99:ad:da:5f:e4:44: 53:9b:cf:30:95:4f:1b:9d:02:b1:ff:34:15:83:08: 1b:c2:51:01:3c:05:57:3f:c7:49:4d:0d:9a:87:e1: 0e:87:07:f0:28:eb:de:6d:00:fe:ca:da:6a:1c:39: 67:a7:0e:e1:e1:36:cc:a6:70:55:0f:b4:f0:ed:9a: 5d:9f:b8:9e:d3:5c:f9:b5:45:64:35:7e:74:0e:90: ea:40:ab:d8:25:73:2a:a4:dc:48:35:f5:0e:3c:df: 98:d3:82:41:11:91:fa:d8:7b:9b:4a:50:2d:9a:f6: 83:0d:e9:9d:69:0a:8b:09:c0:b9:36:5f:ea:c3:31: ba:85:91:6b:99:cc:5a:e5:cd:5f:d5:42:0d:29:52: 31:a4:a8:18:bc:80:fa:88:54:c3:eb:2a:e6:94:68: f2:4d:aa:de:28:a2:1a:dc:16:99:fd:44:b4:68:5b: cf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:81:63:2C:1D:19:9F:2D:03:8B:F8:2D:74:EB:32:79:6F:10:FE:00 X509v3 Authority Key Identifier: keyid:1C:64:A5:D7:8F:86:E2:7A:0F:CF:C0:B1:E2:60:6E:2A:96:1F:72:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:1d:68:25:51:87:8c:ce:9f:bd:e8:a9:65:3b:97:7a:92:63: 20:54:8a:9f:23:bd:7e:6b:15:ad:b1:67:61:38:50:18:84:ee: bb:b1:62:57:42:c7:74:09:e9:86:4d:e1:fa:f2:05:7d:b9:bd: da:1e:8f:1a:f5:1f:9f:85:0c:ba:9b:b4:db:ef:80:e8:20:99: b1:9e:3d:9b:09:1d:30:e0:0b:7e:99:b5:0d:4b:d6:d6:d9:c3: 89:ca:fd:7e:c6:b2:0c:9f:bc:c2:03:ed:83:88:13:04:97:fa: 44:ad:5b:0e:25:e1:3a:35:4e:b8:20:09:b0:ec:16:2b:a6:41: 01:1d:5e:09:49:7a:b3:59:74:be:14:4f:a8:5e:e2:b6:9c:21: 76:40:68:d3:fd:9b:7c:a6:be:3f:19:72:e4:09:aa:b6:d3:b9: 7a:be:3d:92:5b:f7:51:13:f4:8d:37:34:f5:d9:ee:19:dc:eb: ed:c3:77:56:b8:87:9b:65:0b:bf:64:78:03:f1:5b:f9:e4:90: c7:2c:7f:4d:da:15:4d:40:93:57:3f:b6:cf:69:71:6c:49:63: bb:15:bf:6c:01:df:d0:b0:53:9f:a7:75:a4:de:a9:b0:d2:50: 08:3d:6c:5f:fe:fd:ac:82:8e:20:4e:8b:de:43:7c:03:24:72: 89:5c:c8:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDi6zz/efn/kP921lhQml1jYghHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM2NEE1RDc4Rjg2RTI3QTBGQ0ZDMEIxRTI2MDZFMkE5 NjFGNzIwNTAeFw0yNjA5MjIwNzQ2MjFaFw0yNjA5MjMwNzU4MjFaMDMxMTAvBgNV BAMTKDNBODE2MzJDMUQxOTlGMkQwMzhCRjgyRDc0RUIzMjc5NkYxMEZFMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2TtrnNl0j4057xzUQfGTO6m6/ WdGlt7Md/wl11jEpVKFD69jhhK4+mxYYtt7ONWShLOr4Omxzbx8Fiqia5F56FK88 jklhDAZS0aV/8reA4VS8/Jmt2l/kRFObzzCVTxudArH/NBWDCBvCUQE8BVc/x0lN DZqH4Q6HB/Ao695tAP7K2mocOWenDuHhNsymcFUPtPDtml2fuJ7TXPm1RWQ1fnQO kOpAq9glcyqk3Eg19Q4835jTgkERkfrYe5tKUC2a9oMN6Z1pCosJwLk2X+rDMbqF kWuZzFrlzV/VQg0pUjGkqBi8gPqIVMPrKuaUaPJNqt4oohrcFpn9RLRoW8+NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOoFjLB0Zny0Di/gtdOsyeW8Q/gAwHwYDVR0j BBgwFoAUHGSl14+G4noPz8Cx4mBuKpYfcgUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdkZWRlZDEtZDE0ZS00MTIzLWI1YzktYzkzYTU5OTdmYzMwLzAvMUM2NEE1RDc4 Rjg2RTI3QTBGQ0ZDMEIxRTI2MDZFMkE5NjFGNzIwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQzY0QTVENzhGODZFMjdBMEZDRkMwQjFFMjYwNkUyQTk2MUY3 MjA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvMUM2NEE1RDc4Rjg2RTI3QTBGQ0ZDMEIxRTI2MDZF MkE5NjFGNzIwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALgdaCVRh4zOn73oqWU7l3qSYyBUip8jvX5r Fa2xZ2E4UBiE7ruxYldCx3QJ6YZN4fryBX25vdoejxr1H5+FDLqbtNvvgOggmbGe PZsJHTDgC36ZtQ1L1tbZw4nK/X7GsgyfvMID7YOIEwSX+kStWw4l4To1TrggCbDs FiumQQEdXglJerNZdL4UT6he4racIXZAaNP9m3ymvj8ZcuQJqrbTuXq+PZJb91ET 9I03NPXZ7hnc6+3Dd1a4h5tlC79keAPxW/nkkMcsf03aFU1Ak1c/ts9pcWxJY7sV v2wB39CwU5+ndaTeqbDSUAg9bF/+/ayCjiBOi95DfAMkcolcyIA= -----END CERTIFICATE-----Generated at Wed Sep 23 00:43:55 2026 by rpki-client