$ rpki-client -vvvf rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft File: 1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft (raw, json) Hash identifier: slYeLfqizsKupoSsb6x6Gp94d+N7Qar6bEqD/675PaA= Subject key identifier: C6:8C:99:B4:B1:E5:2E:FE:9E:AD:92:6B:67:0F:9C:C9:59:99:66:17 Authority key identifier: 13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42 Certificate issuer: /CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342 Certificate serial: 60C4A37AD38685E0D5E3C2E33E63A3CDFC2B41B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 01:43:35 +0000 Manifest this update: Tue 22 Sep 2026 01:38:35 +0000 Manifest next update: Wed 23 Sep 2026 02:10:35 +0000 Files and hashes: 1: 1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl (hash: fQI6ztgrY+v+FhpAZ4sfvjmU6KenVH4goaMQ8vXP+qE=) 2: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: uVPktCZC8+f+6UT6i6M1uIRYRGCJQ3maVFAM7Hkvn3s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c4:a3:7a:d3:86:85:e0:d5:e3:c2:e3:3e:63:a3:cd:fc:2b:41:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342 Validity Not Before: Sep 22 01:38:35 2026 GMT Not After : Sep 23 02:10:35 2026 GMT Subject: CN=C68C99B4B1E52EFE9EAD926B670F9CC959996617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d7:52:a1:bf:78:94:33:4b:38:aa:e6:b3:38: 17:96:1b:0c:6d:82:6f:e1:6f:13:4c:cd:b9:45:0a: 8f:23:b4:43:73:55:ba:13:ce:04:a1:f2:c0:af:dc: 03:d4:b2:6f:61:24:a9:20:e3:4a:b7:f3:93:cf:6f: 0f:de:48:86:83:34:37:35:ce:54:b1:ce:f1:52:d8: 1e:e1:e7:8f:7f:c4:19:ef:56:4a:b7:ab:71:97:13: b8:e0:cd:6a:24:91:44:08:4a:ac:1e:a0:ea:bc:63: 64:d1:18:39:ee:4f:b8:97:55:fa:14:1d:b4:1f:3b: ab:18:18:8e:9d:28:f3:f9:cf:da:8f:86:59:2e:59: 14:6f:21:ab:86:70:76:ae:5e:1a:98:fd:32:2a:8d: 76:82:98:20:c7:48:4b:74:b2:b2:ad:ee:7b:b0:fa: b4:63:aa:22:fa:51:33:16:66:16:7d:0f:7e:86:b8: 3b:c7:21:db:5d:94:81:b2:a1:d0:7f:7c:b0:2a:5b: 99:d6:8d:3a:a1:0e:85:57:1f:b6:f5:f3:1b:9c:8e: d1:a9:71:16:d0:a9:a3:80:54:47:af:db:2d:51:0e: 6e:6c:c9:4b:55:d1:33:42:fa:57:49:e5:9e:78:b5: 0e:82:fc:f2:33:7b:c5:f8:5e:a8:0d:25:7c:dc:e1: 77:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8C:99:B4:B1:E5:2E:FE:9E:AD:92:6B:67:0F:9C:C9:59:99:66:17 X509v3 Authority Key Identifier: keyid:13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:fc:e7:77:08:d7:08:29:56:5e:c4:5c:a2:0f:a2:cb:d0:56: 7e:78:6f:5b:de:f4:b9:df:60:8d:4e:37:7e:8c:40:af:9c:0e: d3:80:59:2c:ab:90:8a:e1:9c:8a:54:d4:83:c6:66:73:ef:2c: 8c:26:fe:63:76:40:9f:04:54:8b:10:92:78:04:9a:f1:08:f8: fa:37:4f:68:01:cb:5a:57:10:2d:8f:f1:d5:00:c0:42:2a:7d: a5:fe:d5:68:2a:88:2f:69:21:eb:0d:59:a7:dc:c7:8c:cb:6c: 9b:dd:87:ff:f1:99:fc:5e:00:43:0e:a2:d7:0a:92:12:82:0e: ea:0b:c4:7b:23:45:e1:49:b9:98:10:10:0c:5d:4b:e4:39:f5: 0c:d3:58:1e:0d:fc:dd:84:b8:f4:2a:6b:7b:41:61:79:c6:82: 87:fa:11:e1:50:3f:de:b3:1e:9e:58:4b:d8:85:4c:89:61:80: aa:02:5e:c4:0c:92:ac:e6:17:59:85:30:63:e6:43:31:6b:61: 38:8d:c2:d1:2e:33:24:f8:2c:35:e5:e7:c2:cf:7b:bb:0d:9d: 2f:b4:e3:56:f3:b7:a9:8c:56:9f:39:b2:8b:f2:1b:aa:89:0c: 3d:81:07:e3:31:ca:21:f9:17:e0:fb:96:f4:ba:d1:42:44:c5: b6:9b:c0:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYMSjetOGheDV48LjPmOjzfwrQbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0NEI4MUI5NzBEM0Y5MENBMDlBODFGMkVBNzk2QjlE RDA5RDM0MjAeFw0yNjA5MjIwMTM4MzVaFw0yNjA5MjMwMjEwMzVaMDMxMTAvBgNV BAMTKEM2OEM5OUI0QjFFNTJFRkU5RUFEOTI2QjY3MEY5Q0M5NTk5OTY2MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm11Khv3iUM0s4quazOBeWGwxt gm/hbxNMzblFCo8jtENzVboTzgSh8sCv3APUsm9hJKkg40q385PPbw/eSIaDNDc1 zlSxzvFS2B7h549/xBnvVkq3q3GXE7jgzWokkUQISqweoOq8Y2TRGDnuT7iXVfoU HbQfO6sYGI6dKPP5z9qPhlkuWRRvIauGcHauXhqY/TIqjXaCmCDHSEt0srKt7nuw +rRjqiL6UTMWZhZ9D36GuDvHIdtdlIGyodB/fLAqW5nWjTqhDoVXH7b18xucjtGp cRbQqaOAVEev2y1RDm5syUtV0TNC+ldJ5Z54tQ6C/PIze8X4XqgNJXzc4XcBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxoyZtLHlLv6erZJrZw+cyVmZZhcwHwYDVR0j BBgwFoAUE0S4G5cNP5DKCagfLqeWud0J00IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTJhZWM3YzYtMmI4My00Y2YwLThjZDktNTM0Y2U3N2ZmNGIwLzAvMTM0NEI4MUI5 NzBEM0Y5MENBMDlBODFGMkVBNzk2QjlERDA5RDM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzQ0QjgxQjk3MEQzRjkwQ0EwOUE4MUYyRUE3OTZCOUREMDlE MzQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTJhZWM3YzYtMmI4My00Y2YwLThj ZDktNTM0Y2U3N2ZmNGIwLzAvMTM0NEI4MUI5NzBEM0Y5MENBMDlBODFGMkVBNzk2 QjlERDA5RDM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIP853cI1wgpVl7EXKIPosvQVn54b1ve9Lnf YI1ON36MQK+cDtOAWSyrkIrhnIpU1IPGZnPvLIwm/mN2QJ8EVIsQkngEmvEI+Po3 T2gBy1pXEC2P8dUAwEIqfaX+1WgqiC9pIesNWafcx4zLbJvdh//xmfxeAEMOotcK khKCDuoLxHsjReFJuZgQEAxdS+Q59QzTWB4N/N2EuPQqa3tBYXnGgof6EeFQP96z Hp5YS9iFTIlhgKoCXsQMkqzmF1mFMGPmQzFrYTiNwtEuMyT4LDXl58LPe7sNnS+0 41bzt6mMVp85sovyG6qJDD2BB+MxyiH5F+D7lvS60UJExbabwDk= -----END CERTIFICATE-----Generated at Tue Sep 22 08:46:37 2026 by rpki-client