$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft File: 1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft (raw, json) Hash identifier: lFcqCzZGGkCLZsiHGhr2+KDvZKrYDVa35McJLLb+hLA= Subject key identifier: 7D:65:5A:B9:28:F4:2C:87:2F:86:B2:08:EC:67:BD:9A:FA:29:12:78 Authority key identifier: 1D:0A:68:20:2E:76:2C:42:0C:7F:38:AE:29:15:E4:E5:DC:42:12:3D Certificate issuer: /CN=1D0A68202E762C420C7F38AE2915E4E5DC42123D Certificate serial: 395364C1817F63F7AF9894AF2C3E376C8FA25069 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 09:17:08 +0000 Manifest this update: Fri 25 Sep 2026 09:12:08 +0000 Manifest next update: Sat 26 Sep 2026 12:16:08 +0000 Files and hashes: 1: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: HRWu5uWyYj+tP+jHdEqHR4i0tx4A8OiWh4bfexrm8jQ=) 2: 1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl (hash: /bQ5nenwB/BDGZHvy557+6lMeo9QojYtpKaST8IP2Z0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 12:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:53:64:c1:81:7f:63:f7:af:98:94:af:2c:3e:37:6c:8f:a2:50:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D0A68202E762C420C7F38AE2915E4E5DC42123D Validity Not Before: Sep 25 09:12:08 2026 GMT Not After : Sep 26 12:16:08 2026 GMT Subject: CN=7D655AB928F42C872F86B208EC67BD9AFA291278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c9:c7:66:0c:50:5f:57:6b:3a:fb:8c:83:74: 1d:52:78:e6:92:ee:c3:37:8e:6d:16:f8:fc:01:c3: c3:98:e5:59:b2:df:81:53:51:13:03:6f:5b:0e:51: d2:3d:fa:86:50:c6:d7:ff:61:35:0f:34:82:0f:00: 54:f7:2f:eb:82:90:8d:12:45:74:b2:1e:15:ad:6b: b1:db:29:fc:03:af:3b:c0:3d:d5:50:28:c5:1e:b1: b7:06:c6:7e:04:f7:18:69:44:d2:e6:f0:7b:7e:d5: 52:2a:69:00:f8:9f:81:b4:bb:ae:93:04:f7:ca:07: 9f:12:5c:8b:13:76:e8:f4:2b:f2:fb:5f:0e:ef:c7: f5:f7:b8:ee:a2:33:fb:a2:3a:16:08:65:6b:78:4e: 2f:f6:5d:11:36:47:14:70:72:b9:96:5d:d8:3d:6a: d0:a7:4d:fa:ec:6c:e4:74:0d:eb:bc:69:e4:60:dd: b1:29:df:4b:a5:8a:4d:57:3e:3f:79:2a:ae:4a:11: f3:e3:c0:6b:ce:75:fc:6f:a1:fd:2a:cb:e6:92:41: a8:64:5e:b5:7b:54:7e:d8:1e:ba:97:10:40:d6:d7: 97:93:d6:d0:b0:0e:20:d0:0a:ec:12:cd:0d:7a:cc: d3:31:e6:ec:ed:51:4b:99:1c:5a:e6:68:9e:e2:8b: a0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:65:5A:B9:28:F4:2C:87:2F:86:B2:08:EC:67:BD:9A:FA:29:12:78 X509v3 Authority Key Identifier: keyid:1D:0A:68:20:2E:76:2C:42:0C:7F:38:AE:29:15:E4:E5:DC:42:12:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2c:84:ec:31:be:d4:45:75:1d:06:0a:37:3d:b7:b9:63:5e: f2:71:09:80:d6:be:28:b2:a6:cd:90:fd:4e:10:12:b7:9a:61: e5:67:9d:02:ba:ce:26:d1:ab:80:b4:77:9c:bb:b1:3e:c3:cc: 45:b5:a8:ca:15:6e:6d:b7:87:f7:e5:be:1e:ff:d3:dc:5b:a8: 86:54:e9:95:53:52:15:8e:b0:c7:8d:1f:91:2d:e2:32:ed:22: 6b:f3:d4:a9:9c:f7:b4:00:6d:47:bb:33:2c:52:e3:d4:4e:e3: 6a:65:3c:61:58:d3:65:6d:c0:75:6f:99:9d:bb:9f:c2:38:98: 66:bc:ed:65:9b:f9:6d:c7:d2:0d:f4:12:bf:b2:06:b8:c8:94: 9e:3d:30:07:36:9c:8c:f6:8f:2e:20:8f:87:20:88:67:07:2d: 23:a1:f5:19:de:95:7e:79:38:8f:2a:f6:66:97:3d:8a:5e:94: fa:ea:26:47:b1:82:6a:34:0a:26:a7:ee:f6:7d:9a:c6:76:44: a6:c8:ab:0f:78:a4:bb:eb:8e:2f:53:6d:97:2a:14:fa:c0:4b: af:01:e2:06:3b:49:2e:06:0f:22:e6:36:a5:e3:2a:99:54:f0: 59:9f:ca:d9:89:a0:7f:78:30:c4:a1:e9:73:73:6e:4f:95:50: 71:9c:5b:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVNkwYF/Y/evmJSvLD43bI+iUGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwQTY4MjAyRTc2MkM0MjBDN0YzOEFFMjkxNUU0RTVE QzQyMTIzRDAeFw0yNjA5MjUwOTEyMDhaFw0yNjA5MjYxMjE2MDhaMDMxMTAvBgNV BAMTKDdENjU1QUI5MjhGNDJDODcyRjg2QjIwOEVDNjdCRDlBRkEyOTEyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgycdmDFBfV2s6+4yDdB1SeOaS 7sM3jm0W+PwBw8OY5Vmy34FTURMDb1sOUdI9+oZQxtf/YTUPNIIPAFT3L+uCkI0S RXSyHhWta7HbKfwDrzvAPdVQKMUesbcGxn4E9xhpRNLm8Ht+1VIqaQD4n4G0u66T BPfKB58SXIsTduj0K/L7Xw7vx/X3uO6iM/uiOhYIZWt4Ti/2XRE2RxRwcrmWXdg9 atCnTfrsbOR0Deu8aeRg3bEp30ulik1XPj95Kq5KEfPjwGvOdfxvof0qy+aSQahk XrV7VH7YHrqXEEDW15eT1tCwDiDQCuwSzQ16zNMx5uztUUuZHFrmaJ7ii6CrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfWVauSj0LIcvhrII7Ge9mvopEngwHwYDVR0j BBgwFoAUHQpoIC52LEIMfziuKRXk5dxCEj0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDIxMGVjMGYtMDQyMC00MDJmLTk1ZmUtN2IzM2U1MTEyYmMzLzAvMUQwQTY4MjAy RTc2MkM0MjBDN0YzOEFFMjkxNUU0RTVEQzQyMTIzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDBBNjgyMDJFNzYyQzQyMEM3RjM4QUUyOTE1RTRFNURDNDIx MjNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvMUQwQTY4MjAyRTc2MkM0MjBDN0YzOEFFMjkxNUU0 RTVEQzQyMTIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHsshOwxvtRFdR0GCjc9t7ljXvJxCYDWviiy ps2Q/U4QEreaYeVnnQK6zibRq4C0d5y7sT7DzEW1qMoVbm23h/flvh7/09xbqIZU 6ZVTUhWOsMeNH5Et4jLtImvz1Kmc97QAbUe7MyxS49RO42plPGFY02VtwHVvmZ27 n8I4mGa87WWb+W3H0g30Er+yBrjIlJ49MAc2nIz2jy4gj4cgiGcHLSOh9RnelX55 OI8q9maXPYpelPrqJkexgmo0Cian7vZ9msZ2RKbIqw94pLvrji9TbZcqFPrAS68B 4gY7SS4GDyLmNqXjKplU8FmfytmJoH94MMSh6XNzbk+VUHGcW0w= -----END CERTIFICATE-----Generated at Fri Sep 25 21:35:51 2026 by rpki-client