$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft File: 1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft (raw, json) Hash identifier: lGLjbLJZW/V4Z+7stX48AKPP1gPaRIZt3tAOn8sW8Z4= Subject key identifier: EF:42:20:CD:4E:4F:94:45:FE:A4:12:36:43:4F:3E:53:9F:3A:22:77 Authority key identifier: 1A:A6:24:32:41:4D:DF:35:84:FE:86:B5:C6:7F:B2:29:25:A9:D3:B3 Certificate issuer: /CN=1AA62432414DDF3584FE86B5C67FB22925A9D3B3 Certificate serial: 3B45430E53EA393DB94076BF8E10F06DD3A0C182 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft Manifest number: BE Signing time: Tue 22 Sep 2026 12:26:51 +0000 Manifest this update: Tue 22 Sep 2026 12:21:51 +0000 Manifest next update: Wed 23 Sep 2026 15:30:51 +0000 Files and hashes: 1: 3130332e35312e39382e302f32332d3233203d3e20313530343639.roa (hash: y3pv5F6oTlsmrZ6EnNXAjdzgbs9s6wBiVuWts/sp7e0=) 2: 3130332e35312e39382e302f32342d3234203d3e20313530343639.roa (hash: eiTM77LAawXXBM2P9HzaFup35pUjYK9bwPNmiTzjRYk=) 3: 1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl (hash: fe05xEs+luIHr0DQ6SRVHG5suCbHnrbf63V1PVzY/Co=) 4: 3130332e35312e39392e302f32342d3234203d3e20313530343639.roa (hash: KO5msUjW/HADSpbcbiZqt5Rho/bq6n0Bk1hJW/E0KBc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:45:43:0e:53:ea:39:3d:b9:40:76:bf:8e:10:f0:6d:d3:a0:c1:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AA62432414DDF3584FE86B5C67FB22925A9D3B3 Validity Not Before: Sep 22 12:21:51 2026 GMT Not After : Sep 23 15:30:51 2026 GMT Subject: CN=EF4220CD4E4F9445FEA41236434F3E539F3A2277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:97:9d:ea:15:a5:50:c1:dd:33:d8:bb:af:72: 63:d8:dc:7a:cf:e5:d8:1f:ca:17:f2:ce:70:c0:3c: ca:6b:ca:21:18:b5:4e:ce:50:85:a9:a3:ed:15:f2: 94:19:0d:fb:74:38:87:e2:1b:17:84:92:8f:52:5c: b3:29:75:ea:26:56:9f:34:62:cd:17:44:cd:ae:1d: f2:13:55:54:75:81:f6:78:92:a8:7e:f7:45:dd:a8: 4d:f9:a2:a6:05:c1:22:9e:50:ec:fa:fd:e4:3a:ef: 26:d2:d6:bf:5a:00:b1:5c:41:9f:22:00:3a:39:f1: 93:42:7c:fd:1a:8c:f9:fc:ba:95:ed:78:b9:2c:61: 04:aa:ec:e3:4f:26:12:84:3a:5e:94:a6:4a:12:4b: a7:1c:d2:1e:b0:e4:07:bb:54:36:b2:08:4a:62:d6: 54:bd:c6:93:d5:76:3e:e5:49:4a:24:5e:67:ea:2e: c7:c7:2f:83:98:64:dc:6f:74:ad:00:0e:2c:13:38: 83:4b:8a:e7:42:7d:d9:be:3e:df:a1:99:26:11:34: 70:0c:74:7a:fb:3e:e4:4e:e3:a8:04:4d:24:9b:23: 57:51:63:97:1b:f4:45:00:3d:c4:ae:90:41:66:6a: 62:e6:c2:4e:a2:69:e8:6e:d3:ab:1b:33:19:50:15: 5d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:42:20:CD:4E:4F:94:45:FE:A4:12:36:43:4F:3E:53:9F:3A:22:77 X509v3 Authority Key Identifier: keyid:1A:A6:24:32:41:4D:DF:35:84:FE:86:B5:C6:7F:B2:29:25:A9:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b6:67:2b:b2:93:1e:11:1c:4c:6a:60:6d:8a:a4:d4:c2:51: e2:fe:08:5f:5b:28:d6:30:7e:df:ab:1c:86:70:c6:3e:35:35: d6:cc:97:96:6f:7a:84:7d:18:a9:ba:fa:5c:6d:db:03:5a:8b: 0a:54:20:39:48:30:fd:2d:de:26:6c:2c:7f:6a:f7:ab:6d:35: 37:6b:32:cb:92:b1:cc:cb:ca:83:33:52:01:ca:0d:d3:59:7a: 55:38:c3:bc:36:54:7b:56:1a:63:e0:c8:5a:b2:76:1f:9c:28: d7:81:70:89:8c:6c:71:3b:d5:73:78:54:c3:eb:c6:7c:17:fa: cf:5e:32:da:7d:08:9b:01:54:1c:83:4d:38:80:d9:fe:1c:10: 09:26:1f:6e:b3:2a:2d:a0:fd:b2:c3:97:18:2e:00:b7:a3:10: 6c:df:00:f8:64:c4:6e:eb:24:07:d3:9c:77:2d:ab:3b:83:77: fa:99:d3:e1:5e:87:b2:99:5d:b7:47:a6:17:8d:1a:50:e1:e4: 59:ba:f4:81:13:6b:45:d9:bc:8e:62:78:97:e4:bf:4b:d0:91: b6:f4:96:5e:30:71:85:86:69:5e:73:33:9e:42:69:73:05:d1: f2:00:ef:b5:82:b1:5f:8e:04:e9:14:12:73:54:ea:70:8c:9a: 8a:0b:ba:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO0VDDlPqOT25QHa/jhDwbdOgwYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFBNjI0MzI0MTREREYzNTg0RkU4NkI1QzY3RkIyMjky NUE5RDNCMzAeFw0yNjA5MjIxMjIxNTFaFw0yNjA5MjMxNTMwNTFaMDMxMTAvBgNV BAMTKEVGNDIyMENENEU0Rjk0NDVGRUE0MTIzNjQzNEYzRTUzOUYzQTIyNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6l53qFaVQwd0z2LuvcmPY3HrP 5dgfyhfyznDAPMpryiEYtU7OUIWpo+0V8pQZDft0OIfiGxeEko9SXLMpdeomVp80 Ys0XRM2uHfITVVR1gfZ4kqh+90XdqE35oqYFwSKeUOz6/eQ67ybS1r9aALFcQZ8i ADo58ZNCfP0ajPn8upXteLksYQSq7ONPJhKEOl6UpkoSS6cc0h6w5Ae7VDayCEpi 1lS9xpPVdj7lSUokXmfqLsfHL4OYZNxvdK0ADiwTOINLiudCfdm+Pt+hmSYRNHAM dHr7PuRO46gETSSbI1dRY5cb9EUAPcSukEFmamLmwk6iaehu06sbMxlQFV2/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU70IgzU5PlEX+pBI2Q08+U586IncwHwYDVR0j BBgwFoAUGqYkMkFN3zWE/oa1xn+yKSWp07MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmYxM2E2ZWYtMzQzNC00NDAxLWIzZTEtNjUxNTMwNjZmYjNlLzAvMUFBNjI0MzI0 MTREREYzNTg0RkU4NkI1QzY3RkIyMjkyNUE5RDNCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQUE2MjQzMjQxNERERjM1ODRGRTg2QjVDNjdGQjIyOTI1QTlE M0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmYxM2E2ZWYtMzQzNC00NDAxLWIz ZTEtNjUxNTMwNjZmYjNlLzAvMUFBNjI0MzI0MTREREYzNTg0RkU4NkI1QzY3RkIy MjkyNUE5RDNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFW2Zyuykx4RHExqYG2KpNTCUeL+CF9bKNYw ft+rHIZwxj41NdbMl5ZveoR9GKm6+lxt2wNaiwpUIDlIMP0t3iZsLH9q96ttNTdr MsuSsczLyoMzUgHKDdNZelU4w7w2VHtWGmPgyFqydh+cKNeBcImMbHE71XN4VMPr xnwX+s9eMtp9CJsBVByDTTiA2f4cEAkmH26zKi2g/bLDlxguALejEGzfAPhkxG7r JAfTnHctqzuDd/qZ0+Feh7KZXbdHpheNGlDh5Fm69IETa0XZvI5ieJfkv0vQkbb0 ll4wcYWGaV5zM55CaXMF0fIA77WCsV+OBOkUEnNU6nCMmooLurM= -----END CERTIFICATE-----Generated at Tue Sep 22 21:21:25 2026 by rpki-client