$ rpki-client -vvvf rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft File: 1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft (raw, json) Hash identifier: yd4icRIL6lka0yM85pSYIknevRze/Q3WHRskhdJGkQg= Subject key identifier: EB:B2:C7:FE:6F:3B:0F:BD:59:41:FC:41:AE:7D:0A:01:30:F4:D5:9E Authority key identifier: 1C:4F:D4:27:31:A3:06:9E:B1:1E:BB:1A:1D:08:D6:E4:59:2C:9A:F0 Certificate issuer: /CN=1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0 Certificate serial: 31251422AA1D00F90B018BFB871F4F2D246BF54F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft Manifest number: BE Signing time: Sun 20 Sep 2026 19:46:18 +0000 Manifest this update: Sun 20 Sep 2026 19:41:18 +0000 Manifest next update: Mon 21 Sep 2026 21:15:18 +0000 Files and hashes: 1: 1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl (hash: voLNkEERk+UM3JuLn5zcsbYoXxMAiktMhCby5+cYcN0=) 2: 3130332e3137342e31382e302f32332d3234203d3e20313331313131.roa (hash: u/1jDxUqM/7ncceawRPeB2DW2rEBNRQs2Nl3FA3lKkg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:25:14:22:aa:1d:00:f9:0b:01:8b:fb:87:1f:4f:2d:24:6b:f5:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0 Validity Not Before: Sep 20 19:41:18 2026 GMT Not After : Sep 21 21:15:18 2026 GMT Subject: CN=EBB2C7FE6F3B0FBD5941FC41AE7D0A0130F4D59E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c2:65:af:91:63:8f:0a:65:b7:9f:22:1e:9d: 30:2b:02:29:a9:9f:8a:95:e4:7a:cd:a9:3d:38:cd: 26:b0:d3:16:58:08:bf:5c:d3:b1:d2:17:5b:0f:4f: 77:96:7e:18:0d:e7:52:c7:ae:52:ab:91:99:df:a3: 20:ae:b3:82:32:39:73:9b:30:13:4e:50:39:26:8d: f9:bd:55:a3:4d:21:47:7b:58:5b:68:35:7b:7d:c6: 3d:ce:3d:e8:81:16:92:8e:8b:96:5e:1e:fe:b5:bc: 98:3c:3c:da:a3:d8:0c:cd:d9:a7:e9:d8:11:10:75: 6b:07:0d:88:47:70:af:c5:13:ff:bc:61:23:92:0d: a1:18:4e:01:f9:d0:09:04:a8:10:48:a9:c1:06:2f: 43:a2:82:c5:ef:8c:b0:97:39:14:60:1a:a8:f9:c7: 9e:1d:56:6e:5a:49:f4:6c:1c:b4:f2:9f:a6:2a:47: fb:92:25:88:f6:3f:ee:79:95:8c:0f:03:79:90:5a: bc:84:de:3b:ce:e1:1a:7f:95:61:3d:44:90:af:90: b5:b0:dd:aa:d4:08:e5:5f:c2:bb:65:95:06:12:e1: 60:d3:bb:23:56:ed:88:f5:8d:ad:5e:34:59:72:c0: ae:5e:94:a1:a9:b3:b7:a3:e9:96:3e:fd:2c:10:8c: af:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B2:C7:FE:6F:3B:0F:BD:59:41:FC:41:AE:7D:0A:01:30:F4:D5:9E X509v3 Authority Key Identifier: keyid:1C:4F:D4:27:31:A3:06:9E:B1:1E:BB:1A:1D:08:D6:E4:59:2C:9A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:61:19:27:dc:c8:9b:06:ce:b4:ad:7b:bd:18:ab:09:f0:21: cc:ea:30:eb:5c:d7:13:53:ac:8b:d8:9d:ff:70:61:0f:9d:65: b2:39:00:1e:53:a1:cd:8f:c4:66:fe:be:f8:04:a6:fa:f3:f7: 5c:a5:5e:2f:6f:82:12:75:03:c6:a9:4a:53:c2:ca:23:ef:d7: f1:ff:14:ef:08:22:dd:14:ca:dc:41:eb:54:7c:42:6e:87:9d: a6:25:8b:9d:f2:75:85:68:17:12:37:90:cb:12:05:e6:66:c9: 25:22:20:c4:9a:9f:44:ec:5e:0b:4b:63:ac:89:71:a8:0f:f3: 65:c7:eb:29:ce:cc:87:51:91:53:2f:09:87:75:b4:96:f8:55: 05:59:11:13:8e:94:a0:ae:2b:3a:2a:68:d4:1d:ad:37:11:46: 1b:02:7e:4d:0e:8a:03:d4:3d:44:4a:da:f7:a4:86:72:45:fd: 0d:62:70:f1:05:3a:de:43:6b:a1:8d:49:5e:44:af:52:d4:db: 51:40:96:cb:92:e5:8e:55:5a:2d:d1:14:08:e7:52:d8:10:78: ee:4a:0c:29:bb:45:53:b5:78:ee:2d:1b:0d:be:7f:e7:3d:3d: ee:ca:0b:96:88:28:cc:ff:d1:66:ef:d7:cc:88:88:b3:18:30: 97:f5:d9:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMSUUIqodAPkLAYv7hx9PLSRr9U8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0RkQ0MjczMUEzMDY5RUIxMUVCQjFBMUQwOEQ2RTQ1 OTJDOUFGMDAeFw0yNjA5MjAxOTQxMThaFw0yNjA5MjEyMTE1MThaMDMxMTAvBgNV BAMTKEVCQjJDN0ZFNkYzQjBGQkQ1OTQxRkM0MUFFN0QwQTAxMzBGNEQ1OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgwmWvkWOPCmW3nyIenTArAimp n4qV5HrNqT04zSaw0xZYCL9c07HSF1sPT3eWfhgN51LHrlKrkZnfoyCus4IyOXOb MBNOUDkmjfm9VaNNIUd7WFtoNXt9xj3OPeiBFpKOi5ZeHv61vJg8PNqj2AzN2afp 2BEQdWsHDYhHcK/FE/+8YSOSDaEYTgH50AkEqBBIqcEGL0OigsXvjLCXORRgGqj5 x54dVm5aSfRsHLTyn6YqR/uSJYj2P+55lYwPA3mQWryE3jvO4Rp/lWE9RJCvkLWw 3arUCOVfwrtllQYS4WDTuyNW7Yj1ja1eNFlywK5elKGps7ej6ZY+/SwQjK9lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU67LH/m87D71ZQfxBrn0KATD01Z4wHwYDVR0j BBgwFoAUHE/UJzGjBp6xHrsaHQjW5FksmvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTAxZGJhZmMtYzBjYy00OTZhLWI1ZTAtNGY0OGJhOTQ2Y2QzLzAvMUM0RkQ0Mjcz MUEzMDY5RUIxMUVCQjFBMUQwOEQ2RTQ1OTJDOUFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQzRGRDQyNzMxQTMwNjlFQjExRUJCMUExRDA4RDZFNDU5MkM5 QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTAxZGJhZmMtYzBjYy00OTZhLWI1 ZTAtNGY0OGJhOTQ2Y2QzLzAvMUM0RkQ0MjczMUEzMDY5RUIxMUVCQjFBMUQwOEQ2 RTQ1OTJDOUFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFhGSfcyJsGzrSte70YqwnwIczqMOtc1xNT rIvYnf9wYQ+dZbI5AB5Toc2PxGb+vvgEpvrz91ylXi9vghJ1A8apSlPCyiPv1/H/ FO8IIt0UytxB61R8Qm6HnaYli53ydYVoFxI3kMsSBeZmySUiIMSan0TsXgtLY6yJ cagP82XH6ynOzIdRkVMvCYd1tJb4VQVZEROOlKCuKzoqaNQdrTcRRhsCfk0OigPU PURK2vekhnJF/Q1icPEFOt5Da6GNSV5Er1LU21FAlsuS5Y5VWi3RFAjnUtgQeO5K DCm7RVO1eO4tGw2+f+c9Pe7KC5aIKMz/0Wbv18yIiLMYMJf12To= -----END CERTIFICATE-----Generated at Sun Sep 20 23:32:03 2026 by rpki-client