$ rpki-client -vvvf rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft File: 1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft (raw, json) Hash identifier: /U3bKNALeuC+7kmdxeJO/LU998EzBoJsph/ALzAwVCk= Subject key identifier: A7:3E:7C:5D:5A:E7:C0:8C:4A:32:6D:41:84:FE:29:A3:35:7B:E2:A7 Authority key identifier: 1D:84:43:F2:B1:B9:1B:F6:F0:27:8C:5B:3C:4B:C5:24:D8:58:15:08 Certificate issuer: /CN=1D8443F2B1B91BF6F0278C5B3C4BC524D8581508 Certificate serial: 8E4AC2AE44CAC7BEECB0589572C29FDBB364F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 10:14:11 +0000 Manifest this update: Tue 22 Sep 2026 10:09:11 +0000 Manifest next update: Wed 23 Sep 2026 11:41:11 +0000 Files and hashes: 1: 3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa (hash: EMakdzLLxip5MgFZZxs3v2CftrvckpQUzvKJTpU8Ns0=) 2: 3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa (hash: jtaA1SPrzDUYTBX5hLaOl8wHf9I6oDuHtGJ4XR8iaqY=) 3: 1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl (hash: kLdwrXcifKsFhEDWLqwX53Op12j/o3OCXRXGz+/0sDU=) 4: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (hash: qtpgdgclWZOTtoV+QMuAH0R7ZHXa3nSHqjG3rAHVlzk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 11:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8e:4a:c2:ae:44:ca:c7:be:ec:b0:58:95:72:c2:9f:db:b3:64:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8443F2B1B91BF6F0278C5B3C4BC524D8581508 Validity Not Before: Sep 22 10:09:11 2026 GMT Not After : Sep 23 11:41:11 2026 GMT Subject: CN=A73E7C5D5AE7C08C4A326D4184FE29A3357BE2A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:34:94:83:28:85:50:3e:11:2b:13:d6:71:4d: 78:cf:97:ae:98:4f:04:aa:96:43:11:5a:65:8d:64: 83:4c:25:d0:02:00:3f:34:4c:77:07:7e:6d:2e:6d: d8:85:fd:1b:c9:e1:56:1b:24:ca:2c:31:6e:20:05: 9a:44:5c:1e:c2:9b:72:6c:b4:b4:26:57:01:11:1b: de:4f:c8:fe:d7:e7:77:18:10:cd:e2:c0:f3:cd:0a: 48:51:33:de:91:6f:56:84:0e:43:67:c4:41:1d:51: 83:be:33:f7:a8:ca:fa:b0:83:03:4f:81:0c:dc:82: ea:a8:57:2b:eb:09:ee:9a:7f:5c:5f:ee:0a:35:be: 4f:63:52:0e:f3:7f:ce:83:aa:93:e4:37:1c:38:eb: 43:ae:5b:c8:60:6d:70:f3:ac:97:77:98:db:25:68: bf:63:06:09:3c:5f:4d:2d:0f:75:26:e6:32:5c:7d: dc:22:fa:fa:dd:9b:e8:66:b0:3e:18:5c:65:08:b2: 14:7a:c4:07:ca:ce:53:1d:58:f1:92:31:58:cc:4d: 61:f6:f4:b3:bb:b3:06:2e:3b:52:3e:1f:28:c1:3d: 91:75:61:5a:9e:50:ca:41:d6:48:d2:42:13:26:c8: 20:02:86:e0:85:96:65:ef:e9:90:4d:60:c6:0c:8b: 30:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3E:7C:5D:5A:E7:C0:8C:4A:32:6D:41:84:FE:29:A3:35:7B:E2:A7 X509v3 Authority Key Identifier: keyid:1D:84:43:F2:B1:B9:1B:F6:F0:27:8C:5B:3C:4B:C5:24:D8:58:15:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:dc:75:c7:94:8b:a5:fb:f5:b6:0e:31:d3:d8:09:9c:5f:62: 56:3f:83:d5:9f:b5:58:5c:c1:67:98:0b:a0:13:39:12:89:65: 69:17:89:1c:90:cc:ea:4d:82:3a:4e:96:45:19:dc:30:02:61: 49:b8:5d:5f:19:bd:a8:dd:06:9f:b7:61:78:4e:c1:9c:b4:44: 98:9f:c9:fc:7e:18:e3:5b:70:96:b9:fc:a5:6c:a9:52:f1:72: 00:16:3e:b7:5c:ea:09:6a:d8:84:cd:b9:48:11:ab:46:9e:a3: 38:3d:20:68:76:b1:84:8b:29:14:02:ff:18:97:f7:1a:da:af: 6e:3b:7b:50:48:8c:9a:47:b4:73:d0:c5:e2:1a:d0:83:4b:6b: 3f:c3:c8:6e:8e:aa:52:48:11:76:c5:71:b9:23:42:ff:df:c0: 3d:52:2e:7b:f7:f3:34:c2:25:57:08:e2:1a:aa:55:10:2d:cd: a4:ff:4b:3b:04:d1:fd:29:f4:34:22:6a:51:60:34:c6:22:a3: fc:f0:d2:ee:ec:d2:41:b3:fa:b1:e5:59:e2:75:e8:4a:11:22: e0:f0:fa:2d:90:a8:ad:4b:ae:6c:bd:ba:71:fb:64:18:b0:d5: 31:9a:e5:b8:32:37:a8:34:7e:c7:56:95:16:13:e1:89:b1:40: 4d:6d:5f:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAI5Kwq5Eyse+7LBYlXLCn9uzZPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4NDQzRjJCMUI5MUJGNkYwMjc4QzVCM0M0QkM1MjRE ODU4MTUwODAeFw0yNjA5MjIxMDA5MTFaFw0yNjA5MjMxMTQxMTFaMDMxMTAvBgNV BAMTKEE3M0U3QzVENUFFN0MwOEM0QTMyNkQ0MTg0RkUyOUEzMzU3QkUyQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9NJSDKIVQPhErE9ZxTXjPl66Y TwSqlkMRWmWNZINMJdACAD80THcHfm0ubdiF/RvJ4VYbJMosMW4gBZpEXB7Cm3Js tLQmVwERG95PyP7X53cYEM3iwPPNCkhRM96Rb1aEDkNnxEEdUYO+M/eoyvqwgwNP gQzcguqoVyvrCe6af1xf7go1vk9jUg7zf86DqpPkNxw460OuW8hgbXDzrJd3mNsl aL9jBgk8X00tD3Um5jJcfdwi+vrdm+hmsD4YXGUIshR6xAfKzlMdWPGSMVjMTWH2 9LO7swYuO1I+HyjBPZF1YVqeUMpB1kjSQhMmyCAChuCFlmXv6ZBNYMYMizAVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpz58XVrnwIxKMm1BhP4pozV74qcwHwYDVR0j BBgwFoAUHYRD8rG5G/bwJ4xbPEvFJNhYFQgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI3MTNhMzItZmFkYS00ODRlLWE2OGQtMGNhYzBmZmZhMzNjLzAvMUQ4NDQzRjJC MUI5MUJGNkYwMjc4QzVCM0M0QkM1MjREODU4MTUwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDg0NDNGMkIxQjkxQkY2RjAyNzhDNUIzQzRCQzUyNEQ4NTgx NTA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI3MTNhMzItZmFkYS00ODRlLWE2 OGQtMGNhYzBmZmZhMzNjLzAvMUQ4NDQzRjJCMUI5MUJGNkYwMjc4QzVCM0M0QkM1 MjREODU4MTUwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/cdceUi6X79bYOMdPYCZxfYlY/g9WftVhc wWeYC6ATORKJZWkXiRyQzOpNgjpOlkUZ3DACYUm4XV8ZvajdBp+3YXhOwZy0RJif yfx+GONbcJa5/KVsqVLxcgAWPrdc6glq2ITNuUgRq0aeozg9IGh2sYSLKRQC/xiX 9xrar247e1BIjJpHtHPQxeIa0INLaz/DyG6OqlJIEXbFcbkjQv/fwD1SLnv38zTC JVcI4hqqVRAtzaT/SzsE0f0p9DQialFgNMYio/zw0u7s0kGz+rHlWeJ16EoRIuDw +i2QqK1Lrmy9unH7ZBiw1TGa5bgyN6g0fsdWlRYT4YmxQE1tX3Y= -----END CERTIFICATE-----Generated at Wed Sep 23 02:32:32 2026 by rpki-client