$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft File: 1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft (raw, json) Hash identifier: sGm3AyY9KrUpgk56HFMH9hU/YJwFh+/G/kF2dLPtDQY= Subject key identifier: A5:A9:3D:42:0F:13:F0:4B:05:B6:B8:31:73:EC:46:EE:F4:6A:7B:0A Authority key identifier: 1D:2C:9E:44:E4:E5:E2:2E:88:CD:03:13:51:42:D1:76:83:A2:4E:7D Certificate issuer: /CN=1D2C9E44E4E5E22E88CD03135142D17683A24E7D Certificate serial: 66A4FB5695364A700D660448C07F6F525CEA64E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft Manifest number: BF Signing time: Mon 21 Sep 2026 23:10:23 +0000 Manifest this update: Mon 21 Sep 2026 23:05:23 +0000 Manifest next update: Wed 23 Sep 2026 00:59:23 +0000 Files and hashes: 1: 1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl (hash: BlIfK64A2xa708EVFRLCSujQbTJS0JJhuXs7vim1OBQ=) 2: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (hash: BX3zo4jm394L+4A0hATz0MD3kr1dhrVpAj21QCDfQYI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 00:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a4:fb:56:95:36:4a:70:0d:66:04:48:c0:7f:6f:52:5c:ea:64:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D2C9E44E4E5E22E88CD03135142D17683A24E7D Validity Not Before: Sep 21 23:05:23 2026 GMT Not After : Sep 23 00:59:23 2026 GMT Subject: CN=A5A93D420F13F04B05B6B83173EC46EEF46A7B0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9e:18:9e:83:3c:ae:32:ad:29:cf:f7:42:62: ca:e4:97:83:a4:5e:07:a2:e1:17:e0:ef:0c:ef:76: 55:ed:38:c7:35:cf:97:cf:06:8a:aa:3a:1f:d9:fc: a9:11:66:09:9d:88:78:4d:ef:19:b3:43:39:2c:24: a3:b1:a8:ed:20:12:66:d2:41:7d:e8:f9:7e:5b:a1: 36:f0:33:5e:49:d6:26:e8:c3:84:c3:7a:ec:b0:c5: 15:a1:19:06:5b:1c:00:f7:f7:d0:f3:c2:46:a4:48: f0:c5:a3:85:29:e1:bc:a5:91:dc:c5:d7:03:08:43: 84:02:d0:96:00:a0:46:a6:2d:b5:77:58:e1:89:13: c9:07:48:a3:7e:c0:79:dd:41:5a:93:2a:08:2c:91: 12:9b:c4:71:f2:bb:f6:48:43:74:8b:6e:8b:88:a4: a3:01:88:0a:88:41:80:b9:fa:fd:c3:14:c4:b9:00: 8c:4e:cb:f4:0c:f8:e4:df:b9:c3:0f:26:8b:25:ca: 78:ec:ec:9c:4b:58:60:4f:34:e6:fb:51:c5:23:6b: 82:c4:c3:67:da:e0:a9:49:95:11:a8:8d:c0:5d:9a: 3c:76:20:ee:4a:e5:98:8f:27:21:f3:34:c6:df:99: 0b:62:36:f9:fb:92:1b:af:77:f6:1d:c5:89:8a:b5: 6a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A9:3D:42:0F:13:F0:4B:05:B6:B8:31:73:EC:46:EE:F4:6A:7B:0A X509v3 Authority Key Identifier: keyid:1D:2C:9E:44:E4:E5:E2:2E:88:CD:03:13:51:42:D1:76:83:A2:4E:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:7e:2d:cc:ab:20:e3:f9:35:2b:8e:82:94:db:d8:34:29:1e: 82:c6:82:7b:8c:5e:86:24:19:eb:2e:9a:0a:a6:25:01:2d:44: ed:32:74:04:55:83:5b:ed:bf:a1:48:e4:83:76:bb:92:08:1f: 17:9e:fb:ac:06:2c:b6:20:d8:ab:c9:eb:35:c8:87:86:99:1a: 44:ff:2c:d6:15:7c:60:fc:4c:ea:e9:4f:56:51:a5:c8:51:23: e0:a7:46:17:1e:5f:f4:e8:6d:27:92:26:d5:92:41:34:c5:87: 15:9b:4d:a9:6f:bc:19:02:d8:77:19:84:2e:5d:ff:40:82:e9: 44:bd:dc:8c:9e:7e:b8:ec:3e:e4:a7:d0:04:d6:db:65:b7:6c: 86:4e:91:a4:9c:26:25:c1:12:23:77:5c:2b:68:66:76:a5:f1: 5b:b4:0e:d0:e1:ac:4b:9a:b5:c7:ba:d4:09:30:5b:cf:6e:2e: 95:01:e9:fe:43:2d:d6:01:59:65:29:72:30:a7:cc:a2:2a:c4: a4:dd:97:4e:5f:d4:1a:8a:66:32:08:c6:1e:c7:30:37:ae:74: ba:98:0b:63:d9:df:69:8f:5c:6e:e9:c6:58:a2:a5:9d:b0:58: 4f:27:a2:84:d4:5e:d7:cd:86:6b:f1:8a:03:3f:4f:77:38:e8: eb:3c:c0:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZqT7VpU2SnANZgRIwH9vUlzqZOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyQzlFNDRFNEU1RTIyRTg4Q0QwMzEzNTE0MkQxNzY4 M0EyNEU3RDAeFw0yNjA5MjEyMzA1MjNaFw0yNjA5MjMwMDU5MjNaMDMxMTAvBgNV BAMTKEE1QTkzRDQyMEYxM0YwNEIwNUI2QjgzMTczRUM0NkVFRjQ2QTdCMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDanhiegzyuMq0pz/dCYsrkl4Ok Xgei4Rfg7wzvdlXtOMc1z5fPBoqqOh/Z/KkRZgmdiHhN7xmzQzksJKOxqO0gEmbS QX3o+X5boTbwM15J1ibow4TDeuywxRWhGQZbHAD399DzwkakSPDFo4Up4bylkdzF 1wMIQ4QC0JYAoEamLbV3WOGJE8kHSKN+wHndQVqTKggskRKbxHHyu/ZIQ3SLbouI pKMBiAqIQYC5+v3DFMS5AIxOy/QM+OTfucMPJoslynjs7JxLWGBPNOb7UcUja4LE w2fa4KlJlRGojcBdmjx2IO5K5ZiPJyHzNMbfmQtiNvn7khuvd/YdxYmKtWo9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpak9Qg8T8EsFtrgxc+xG7vRqewowHwYDVR0j BBgwFoAUHSyeROTl4i6IzQMTUULRdoOiTn0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI4ODBkZGItM2Q5NC00ZTM0LTkyZGMtNGQ0NTM4YjkwNWEyLzAvMUQyQzlFNDRF NEU1RTIyRTg4Q0QwMzEzNTE0MkQxNzY4M0EyNEU3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDJDOUU0NEU0RTVFMjJFODhDRDAzMTM1MTQyRDE3NjgzQTI0 RTdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI4ODBkZGItM2Q5NC00ZTM0LTky ZGMtNGQ0NTM4YjkwNWEyLzAvMUQyQzlFNDRFNEU1RTIyRTg4Q0QwMzEzNTE0MkQx NzY4M0EyNEU3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGd+LcyrIOP5NSuOgpTb2DQpHoLGgnuMXoYk GesumgqmJQEtRO0ydARVg1vtv6FI5IN2u5IIHxee+6wGLLYg2KvJ6zXIh4aZGkT/ LNYVfGD8TOrpT1ZRpchRI+CnRhceX/TobSeSJtWSQTTFhxWbTalvvBkC2HcZhC5d /0CC6US93IyefrjsPuSn0ATW22W3bIZOkaScJiXBEiN3XCtoZnal8Vu0DtDhrEua tce61AkwW89uLpUB6f5DLdYBWWUpcjCnzKIqxKTdl05f1BqKZjIIxh7HMDeudLqY C2PZ32mPXG7pxliipZ2wWE8nooTUXtfNhmvxigM/T3c46Os8wLY= -----END CERTIFICATE-----Generated at Tue Sep 22 13:14:11 2026 by rpki-client