$ rpki-client -vvvf rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft File: 1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft (raw, json) Hash identifier: AS7KuwVeF4UYYZAPkx4EFc/BQbI9AWAGYv2lnHsY1/A= Subject key identifier: B9:40:6B:3F:B7:63:2F:04:F9:BC:F0:06:37:2F:AF:AD:B2:F0:C3:58 Authority key identifier: 1D:6D:FD:04:F8:DB:22:8D:A7:83:87:46:BB:66:5B:B2:CD:6F:B9:B9 Certificate issuer: /CN=1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9 Certificate serial: 4A3424848E73840FD0FBBE9CA61197948DE04A1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 02:23:14 +0000 Manifest this update: Fri 25 Sep 2026 02:18:14 +0000 Manifest next update: Sat 26 Sep 2026 05:35:14 +0000 Files and hashes: 1: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (hash: KV+jDI5u7NDFg1jUUu5ndk8c7SwXpZDQJflp05ARGsU=) 2: 1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl (hash: 59ePPVqroJ4KlpzSAKErpaezorY5zhbTEzd6YG/5/bQ=) 3: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: zhUAsPQU+LACnP7Ok3rWyU2O9s5oA5N+R3I26q0xz80=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 05:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:34:24:84:8e:73:84:0f:d0:fb:be:9c:a6:11:97:94:8d:e0:4a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9 Validity Not Before: Sep 25 02:18:14 2026 GMT Not After : Sep 26 05:35:14 2026 GMT Subject: CN=B9406B3FB7632F04F9BCF006372FAFADB2F0C358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:28:b6:33:11:40:20:9f:b1:3b:a9:bf:37:1c: 90:99:04:4a:e7:7d:39:d8:ea:7f:dc:e2:9c:4e:e7: 96:a4:8c:c5:cf:0b:78:f4:4a:02:55:58:85:68:49: 42:65:6e:db:f3:ad:27:ab:f1:11:2b:16:e5:0d:d1: 6f:f4:16:08:5a:ad:22:4f:1f:cd:ec:51:df:f2:e0: b6:69:44:f9:dd:8f:22:72:28:e1:d6:3e:aa:48:83: ae:dc:77:c5:67:89:46:ad:27:61:bd:5c:5c:c8:90: fa:94:5e:08:3e:48:ba:c0:fa:f0:27:be:ca:59:5e: e9:35:d6:a0:03:65:df:5a:a9:b3:d1:82:e6:f6:03: 04:f2:d4:ad:f3:e6:0f:58:0b:f4:8a:7f:16:fe:d8: ca:67:99:e9:ea:6d:d6:1a:88:6d:32:23:c4:f6:6f: 5c:3f:fe:76:18:b2:e8:80:66:20:a1:5b:81:7c:80: 3c:85:47:cf:04:ea:40:1c:26:11:7f:4c:89:f5:b8: be:52:79:66:18:33:fc:93:fa:b6:94:85:c5:2c:54: fb:bf:a8:c1:47:b9:37:39:6b:7c:fb:bd:3c:29:f6: 92:d9:4b:cb:59:f2:b5:0d:e9:ab:8b:d8:bf:54:b1: 79:0a:a8:9c:8c:4b:e4:d2:24:62:eb:41:30:ce:20: e7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:40:6B:3F:B7:63:2F:04:F9:BC:F0:06:37:2F:AF:AD:B2:F0:C3:58 X509v3 Authority Key Identifier: keyid:1D:6D:FD:04:F8:DB:22:8D:A7:83:87:46:BB:66:5B:B2:CD:6F:B9:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:af:e4:35:df:45:94:e1:22:c1:bf:ba:5c:76:c0:1c:9d:ff: 70:2a:ad:34:2f:81:69:9a:b4:6e:3b:96:b9:fd:24:83:f4:ac: 9f:7a:10:46:53:d7:45:4d:9f:0a:84:a8:c7:ea:02:e2:2c:16: ef:a2:9a:1f:5f:58:20:8a:e7:63:b7:14:25:bc:38:e2:2d:be: 51:47:4d:1e:19:d3:c5:4e:68:db:2b:37:d0:f2:f1:a7:f0:61: 12:29:bd:bf:da:46:07:d3:35:1b:0d:b4:4f:27:8e:76:10:29: f8:f8:ad:27:58:80:bf:9e:ec:b5:14:79:78:c4:22:d6:ca:8d: c9:a4:a1:bf:af:94:b9:58:d9:25:47:0d:5a:c4:9e:37:79:ef: 69:73:3e:e9:b0:05:ff:23:1e:3b:9b:e5:eb:d9:f6:0a:5f:be: a5:67:87:e3:13:51:a2:34:b9:f3:8f:4b:5e:b3:23:3c:5c:4b: 0d:9f:05:0c:19:f8:d1:73:a6:65:28:ba:16:79:63:4d:81:50: a5:4c:c8:21:47:05:29:93:a2:a5:da:0a:69:7a:0c:a6:16:d2: 46:f8:57:9f:c5:41:da:67:55:23:b8:63:77:3a:b8:76:0a:e7: f3:54:30:ab:e1:28:e0:39:17:10:56:b9:1d:1f:a9:6e:b9:94: a2:07:b7:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSjQkhI5zhA/Q+76cphGXlI3gShswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2REZEMDRGOERCMjI4REE3ODM4NzQ2QkI2NjVCQjJD RDZGQjlCOTAeFw0yNjA5MjUwMjE4MTRaFw0yNjA5MjYwNTM1MTRaMDMxMTAvBgNV BAMTKEI5NDA2QjNGQjc2MzJGMDRGOUJDRjAwNjM3MkZBRkFEQjJGMEMzNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2KLYzEUAgn7E7qb83HJCZBErn fTnY6n/c4pxO55akjMXPC3j0SgJVWIVoSUJlbtvzrSer8RErFuUN0W/0FgharSJP H83sUd/y4LZpRPndjyJyKOHWPqpIg67cd8VniUatJ2G9XFzIkPqUXgg+SLrA+vAn vspZXuk11qADZd9aqbPRgub2AwTy1K3z5g9YC/SKfxb+2MpnmenqbdYaiG0yI8T2 b1w//nYYsuiAZiChW4F8gDyFR88E6kAcJhF/TIn1uL5SeWYYM/yT+raUhcUsVPu/ qMFHuTc5a3z7vTwp9pLZS8tZ8rUN6auL2L9UsXkKqJyMS+TSJGLrQTDOIOfHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuUBrP7djLwT5vPAGNy+vrbLww1gwHwYDVR0j BBgwFoAUHW39BPjbIo2ng4dGu2Zbss1vubkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzk4ZWViMzgtNzc0Ni00ODk5LTlhMTAtNzk4MGY4YjkwNTMyLzAvMUQ2REZEMDRG OERCMjI4REE3ODM4NzQ2QkI2NjVCQjJDRDZGQjlCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDZERkQwNEY4REIyMjhEQTc4Mzg3NDZCQjY2NUJCMkNENkZC OUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh MTAtNzk4MGY4YjkwNTMyLzAvMUQ2REZEMDRGOERCMjI4REE3ODM4NzQ2QkI2NjVC QjJDRDZGQjlCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiv5DXfRZThIsG/ulx2wByd/3AqrTQvgWma tG47lrn9JIP0rJ96EEZT10VNnwqEqMfqAuIsFu+imh9fWCCK52O3FCW8OOItvlFH TR4Z08VOaNsrN9Dy8afwYRIpvb/aRgfTNRsNtE8njnYQKfj4rSdYgL+e7LUUeXjE ItbKjcmkob+vlLlY2SVHDVrEnjd572lzPumwBf8jHjub5evZ9gpfvqVnh+MTUaI0 ufOPS16zIzxcSw2fBQwZ+NFzpmUouhZ5Y02BUKVMyCFHBSmToqXaCml6DKYW0kb4 V5/FQdpnVSO4Y3c6uHYK5/NUMKvhKOA5FxBWuR0fqW65lKIHt5E= -----END CERTIFICATE-----Generated at Fri Sep 25 07:51:52 2026 by rpki-client