$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft File: 1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft (raw, json) Hash identifier: RjFU+k4UEssGFUIVEo7twLKX61U2Ac8jxiZtmIFTogk= Subject key identifier: AE:0F:FF:BB:B3:AF:CF:5D:EA:08:D2:A5:3C:B1:8E:D1:78:02:AA:75 Authority key identifier: 1E:40:4A:F6:CF:F0:85:E2:0B:EE:4C:7B:E2:A5:F2:BF:28:0F:3B:A8 Certificate issuer: /CN=1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8 Certificate serial: 20FDA78F3EDFA29453F255EAE41F5E06692EF766 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft Manifest number: BD Signing time: Mon 21 Sep 2026 23:10:24 +0000 Manifest this update: Mon 21 Sep 2026 23:05:24 +0000 Manifest next update: Wed 23 Sep 2026 02:02:24 +0000 Files and hashes: 1: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (hash: qUv8iwGfDUNsSHoYpr8OtHbSrHxY05J4t5ZSAS55J1w=) 2: 1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl (hash: UILQZuFxXTjjgWezBTA7zGJjUk3zEJItdriwjeocwbY=) 3: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (hash: YqAlX6I3eetKbPgn7q5+SNbPjP9RfqZzOtFwmWR8tB8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:fd:a7:8f:3e:df:a2:94:53:f2:55:ea:e4:1f:5e:06:69:2e:f7:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8 Validity Not Before: Sep 21 23:05:24 2026 GMT Not After : Sep 23 02:02:24 2026 GMT Subject: CN=AE0FFFBBB3AFCF5DEA08D2A53CB18ED17802AA75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:91:72:b4:48:a8:d3:c9:3e:d6:bf:ac:7e:d3: 71:6c:3b:ac:c3:f5:51:17:ea:e2:91:44:34:f5:b9: 0c:90:f0:3a:7b:77:11:86:ef:e7:80:11:b4:10:1f: d3:b0:95:e7:57:c9:bc:7f:2c:77:56:4c:1a:52:7f: ae:1a:53:9e:4d:11:3a:04:d3:ac:64:7d:5f:3a:d5: 94:52:f9:fe:6d:28:31:39:d3:d5:50:3b:5c:7e:fc: ab:7a:89:0d:b2:76:05:2d:e4:9e:5d:4e:b2:f1:0c: 6e:95:2b:68:81:f9:b0:e6:ba:49:98:78:dd:74:d7: 64:82:93:59:f5:25:ab:47:79:cf:4e:69:d7:dc:f1: 98:4e:a0:e1:e8:6e:95:d9:5a:89:a8:4d:5e:81:90: 40:78:d0:5a:6c:b4:3b:fb:6a:b0:e3:56:96:0a:3c: fc:88:bd:13:64:0a:a2:46:1d:f7:ce:0b:04:d2:f3: 32:13:e2:5a:33:b0:20:68:a9:94:7f:9b:df:6e:cb: 14:7b:5d:fb:3e:08:d0:4f:b7:3e:14:8b:3d:1e:de: 97:66:ee:77:de:1a:02:d5:71:84:22:ed:bd:76:78: 50:57:92:ae:d0:b7:f6:9c:d4:7f:e8:80:35:5a:0d: bd:23:1a:b7:38:f7:70:37:65:53:49:cf:e9:cb:f5: 07:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0F:FF:BB:B3:AF:CF:5D:EA:08:D2:A5:3C:B1:8E:D1:78:02:AA:75 X509v3 Authority Key Identifier: keyid:1E:40:4A:F6:CF:F0:85:E2:0B:EE:4C:7B:E2:A5:F2:BF:28:0F:3B:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:06:0a:50:8b:e5:42:3b:f3:0e:33:6d:c5:56:86:a7:66:37: 85:d9:c8:01:38:f5:35:2b:71:e1:f8:ce:70:db:74:de:0d:c5: 76:bb:4d:67:b3:14:f7:e9:af:43:44:a3:43:ae:57:b5:8a:bd: 26:99:4f:45:21:ac:f2:6e:7b:cf:6c:cf:bd:51:a1:7d:a7:75: b0:4b:c0:5a:05:61:99:c3:57:ee:de:36:a2:50:e5:f1:82:98: 4e:83:76:24:dd:a9:77:da:f2:04:84:f1:eb:74:35:4d:b3:5c: 5d:39:60:ff:cb:cb:d3:3d:4d:68:9a:c1:06:8d:94:83:d4:c8: 38:d7:01:c0:82:db:9e:13:15:52:24:fe:f7:11:07:c2:96:8d: 20:fd:92:22:3e:6c:0a:3f:a7:44:9d:02:cc:51:48:80:fa:c1: 1a:bf:86:6b:2f:bc:5b:6b:ec:89:b5:3a:a6:2c:be:5d:fe:66: 8f:73:80:5c:fc:98:75:c9:07:d0:83:6d:f8:5b:52:8b:ad:d4: 54:ea:7d:7f:24:69:7f:bf:11:d5:18:37:32:37:d7:d4:46:9d: ee:3c:47:d1:d5:10:a9:cd:c2:fa:2e:0b:cf:6d:81:fd:22:1d: 2e:87:ec:98:a5:39:f3:a6:a0:80:51:0c:b4:78:f3:11:f6:fc: a8:7a:60:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIP2njz7fopRT8lXq5B9eBmku92YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU0MDRBRjZDRkYwODVFMjBCRUU0QzdCRTJBNUYyQkYy ODBGM0JBODAeFw0yNjA5MjEyMzA1MjRaFw0yNjA5MjMwMjAyMjRaMDMxMTAvBgNV BAMTKEFFMEZGRkJCQjNBRkNGNURFQTA4RDJBNTNDQjE4RUQxNzgwMkFBNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIkXK0SKjTyT7Wv6x+03FsO6zD 9VEX6uKRRDT1uQyQ8Dp7dxGG7+eAEbQQH9OwledXybx/LHdWTBpSf64aU55NEToE 06xkfV861ZRS+f5tKDE509VQO1x+/Kt6iQ2ydgUt5J5dTrLxDG6VK2iB+bDmukmY eN1012SCk1n1JatHec9Oadfc8ZhOoOHobpXZWomoTV6BkEB40FpstDv7arDjVpYK PPyIvRNkCqJGHffOCwTS8zIT4lozsCBoqZR/m99uyxR7Xfs+CNBPtz4Uiz0e3pdm 7nfeGgLVcYQi7b12eFBXkq7Qt/ac1H/ogDVaDb0jGrc493A3ZVNJz+nL9QchAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrg//u7Ovz13qCNKlPLGO0XgCqnUwHwYDVR0j BBgwFoAUHkBK9s/wheIL7kx74qXyvygPO6gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYwMDIyOGYtNmUyNS00Yzk2LTljZTUtMmQ1MDIyOWExZDE4LzAvMUU0MDRBRjZD RkYwODVFMjBCRUU0QzdCRTJBNUYyQkYyODBGM0JBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRTQwNEFGNkNGRjA4NUUyMEJFRTRDN0JFMkE1RjJCRjI4MEYz QkE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGYwMDIyOGYtNmUyNS00Yzk2LTlj ZTUtMmQ1MDIyOWExZDE4LzAvMUU0MDRBRjZDRkYwODVFMjBCRUU0QzdCRTJBNUYy QkYyODBGM0JBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwGClCL5UI78w4zbcVWhqdmN4XZyAE49TUr ceH4znDbdN4NxXa7TWezFPfpr0NEo0OuV7WKvSaZT0UhrPJue89sz71RoX2ndbBL wFoFYZnDV+7eNqJQ5fGCmE6DdiTdqXfa8gSE8et0NU2zXF05YP/Ly9M9TWiawQaN lIPUyDjXAcCC254TFVIk/vcRB8KWjSD9kiI+bAo/p0SdAsxRSID6wRq/hmsvvFtr 7Im1OqYsvl3+Zo9zgFz8mHXJB9CDbfhbUout1FTqfX8kaX+/EdUYNzI319RGne48 R9HVEKnNwvouC89tgf0iHS6H7JilOfOmoIBRDLR48xH2/Kh6YDY= -----END CERTIFICATE-----Generated at Tue Sep 22 05:47:51 2026 by rpki-client