$ rpki-client -vvvf rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft File: A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft (raw, json) Hash identifier: IECm++zd1Wr1KarRZZe/iPrB586KhidzxkXp9lac9pM= Subject key identifier: 1A:59:10:70:B0:1F:C5:C8:81:A4:22:2A:3D:CD:E3:DA:E0:18:13:75 Authority key identifier: A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50 Certificate issuer: /CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450 Certificate serial: 70F758585E430EA3F9225756C6043E6DB341C306 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:48:40 +0000 Manifest this update: Mon 21 Sep 2026 13:43:40 +0000 Manifest next update: Tue 22 Sep 2026 14:39:40 +0000 Files and hashes: 1: 3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa (hash: NdabufunGirMkyu0ATmpWQ6Rl+f746AXGi5jkT6y7RY=) 2: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: eZWOfDrRyxrGj36EawOrumVWs/n0x3oAEO6+YE8bAMk=) 3: 3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa (hash: d3fL4T6FzL/T0DkQ+Ng+5zSK+zJSGTl7uPkkzl2dqNM=) 4: A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl (hash: 0kSuFiFnE/6rRT9oWecawTIqHitaZgQgq51SME4/+/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 14:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f7:58:58:5e:43:0e:a3:f9:22:57:56:c6:04:3e:6d:b3:41:c3:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450 Validity Not Before: Sep 21 13:43:40 2026 GMT Not After : Sep 22 14:39:40 2026 GMT Subject: CN=1A591070B01FC5C881A4222A3DCDE3DAE0181375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e9:0e:9f:f9:37:e6:1f:ff:21:b5:b9:54:c2: 3b:88:2b:af:a2:2d:96:ad:0a:f8:b6:5b:60:f1:5e: cb:ba:a5:ff:82:51:16:d9:be:8f:b7:1a:9d:2a:eb: f8:4e:e1:17:13:67:5c:c4:31:d8:e1:ba:ef:d2:43: cf:6a:4b:c0:84:cb:d9:ce:a5:be:f0:26:d6:9c:04: 66:44:16:52:1a:34:e8:44:eb:f2:5b:ca:f4:4a:ba: d5:3e:dc:fe:02:b9:6c:b6:d0:1f:06:9f:0b:ce:83: 14:7a:f3:a8:ed:0a:8f:af:04:04:63:29:57:ec:93: 05:20:ce:9b:19:1f:cb:38:cc:d6:7f:86:eb:c3:b7: e6:e3:3d:af:c2:00:3c:53:ab:5b:ee:d2:c5:da:56: 97:24:22:26:29:02:71:59:f7:03:c5:2e:50:b0:ab: 2b:c7:88:ed:c8:89:d7:44:1e:42:53:91:d4:98:a4: 82:64:e9:6e:7c:f2:ba:f1:39:fb:61:ee:bb:27:dc: 90:87:e2:e2:8a:3d:76:7b:0b:eb:d0:ac:10:27:2b: ad:97:ba:9a:8b:bf:34:a1:25:2e:40:4c:bd:61:50: 30:dc:7d:17:00:a0:f9:5b:0c:17:89:ef:c5:d2:4f: 79:3f:3f:12:2d:3d:1d:71:44:5d:c7:53:83:ee:02: 00:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:59:10:70:B0:1F:C5:C8:81:A4:22:2A:3D:CD:E3:DA:E0:18:13:75 X509v3 Authority Key Identifier: keyid:A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a3:0d:28:01:ea:66:de:a7:91:4f:03:c6:fa:e4:73:46:bf: 8a:0c:11:af:9a:76:36:8d:9a:8a:cf:65:bf:0a:bd:0b:47:c3: 37:43:1e:79:a2:8d:92:78:48:b5:49:1b:39:1a:af:14:99:d9: 36:af:a8:1a:6f:1c:65:7c:e4:16:1b:29:24:0e:77:3f:e0:78: 21:70:4e:89:05:02:89:be:cd:14:eb:ca:16:ec:1f:f5:51:c7: bf:ca:7e:02:34:ab:35:ec:52:b7:6c:c2:6d:7a:58:ba:bd:d9: c1:b8:ed:67:e2:e1:5b:6a:35:5b:43:8b:70:02:43:a8:c6:d6: d0:e1:e9:92:df:67:f5:47:94:21:8b:00:92:83:19:a5:75:8d: f5:b8:6d:5b:f6:e1:bd:e5:fd:0f:4d:39:56:6d:e2:6f:cd:b9: 00:5b:0f:3a:d2:fb:4d:0c:5b:af:cb:e7:29:71:4a:aa:27:04: 33:db:d3:f3:4f:77:02:a0:b1:9b:82:06:a1:7b:a9:2e:3a:60: 84:32:58:6f:76:ed:17:c2:81:48:f0:23:1e:7d:c4:e5:1c:51: 66:39:d3:09:d7:81:a3:ba:94:74:b9:0c:cc:1d:45:5d:f2:b3: 18:c5:66:3f:a9:57:e0:08:2f:79:d4:9c:e3:fc:0b:1e:75:b2: ff:b8:a9:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcPdYWF5DDqP5IldWxgQ+bbNBwwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0MjdBMUY4QUNBNjBGOUFGN0Y4ODkyMEY4OUVFNTMz NTNGQTQ1MDAeFw0yNjA5MjExMzQzNDBaFw0yNjA5MjIxNDM5NDBaMDMxMTAvBgNV BAMTKDFBNTkxMDcwQjAxRkM1Qzg4MUE0MjIyQTNEQ0RFM0RBRTAxODEzNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY6Q6f+TfmH/8htblUwjuIK6+i LZatCvi2W2DxXsu6pf+CURbZvo+3Gp0q6/hO4RcTZ1zEMdjhuu/SQ89qS8CEy9nO pb7wJtacBGZEFlIaNOhE6/JbyvRKutU+3P4CuWy20B8GnwvOgxR686jtCo+vBARj KVfskwUgzpsZH8s4zNZ/huvDt+bjPa/CADxTq1vu0sXaVpckIiYpAnFZ9wPFLlCw qyvHiO3IiddEHkJTkdSYpIJk6W588rrxOfth7rsn3JCH4uKKPXZ7C+vQrBAnK62X upqLvzShJS5ATL1hUDDcfRcAoPlbDBeJ78XST3k/PxItPR1xRF3HU4PuAgA1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGlkQcLAfxciBpCIqPc3j2uAYE3UwHwYDVR0j BBgwFoAUoUJ6H4rKYPmvf4iSD4nuUzU/pFAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTY4Y2MwNTktNWU2Yy00NTAxLWI4OTQtMTRhODJkMThkMjFlLzAvQTE0MjdBMUY4 QUNBNjBGOUFGN0Y4ODkyMEY4OUVFNTMzNTNGQTQ1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTQyN0ExRjhBQ0E2MEY5QUY3Rjg4OTIwRjg5RUU1MzM1M0ZB NDUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQTE0MjdBMUY4QUNBNjBGOUFGN0Y4ODkyMEY4OUVF NTMzNTNGQTQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqjDSgB6mbep5FPA8b65HNGv4oMEa+adjaN morPZb8KvQtHwzdDHnmijZJ4SLVJGzkarxSZ2TavqBpvHGV85BYbKSQOdz/geCFw TokFAom+zRTryhbsH/VRx7/KfgI0qzXsUrdswm16WLq92cG47Wfi4VtqNVtDi3AC Q6jG1tDh6ZLfZ/VHlCGLAJKDGaV1jfW4bVv24b3l/Q9NOVZt4m/NuQBbDzrS+00M W6/L5ylxSqonBDPb0/NPdwKgsZuCBqF7qS46YIQyWG927RfCgUjwIx59xOUcUWY5 0wnXgaO6lHS5DMwdRV3ysxjFZj+pV+AIL3nUnOP8Cx51sv+4qeY= -----END CERTIFICATE-----Generated at Tue Sep 22 01:06:59 2026 by rpki-client