$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft File: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft (raw, json) Hash identifier: cA6IM90qqMgis5+/jyvV3HJXLMxg0s32cLG8nVwSDEM= Subject key identifier: 7F:DA:9B:D8:3F:88:DE:FC:56:B5:47:8C:92:03:E0:35:49:38:C7:39 Authority key identifier: 1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 Certificate issuer: /CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Certificate serial: 0DFCC38F51B8DFA715925A815245BDE14C7507B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft Manifest number: BE Signing time: Mon 21 Sep 2026 00:16:49 +0000 Manifest this update: Mon 21 Sep 2026 00:11:49 +0000 Manifest next update: Tue 22 Sep 2026 00:41:49 +0000 Files and hashes: 1: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl (hash: rJ+66lDYt7BW2qV9T6MuqT/GUFrn+hu+afYcPIGnCtQ=) 2: AS24203.roa (hash: GC9KIMugoCl+PFxNhKrxUiJjAqMz/PW5WzhJj/Fex+w=) 3: AS17885.roa (hash: 3Nn5BIp9l2d6qwrPMnlXmVzjNdvVAOjZPjaxN/LFUNQ=) 4: AS139994.roa (hash: G9jUsHOqGF8GyMe4d4F0m9p9Wpq1ELwFCpA8Pkmrzks=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:fc:c3:8f:51:b8:df:a7:15:92:5a:81:52:45:bd:e1:4c:75:07:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Validity Not Before: Sep 21 00:11:49 2026 GMT Not After : Sep 22 00:41:49 2026 GMT Subject: CN=7FDA9BD83F88DEFC56B5478C9203E0354938C739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3a:b6:30:15:33:19:43:19:27:2e:5f:40:51: 5d:fd:21:e6:ed:2f:4e:36:4f:98:fa:be:29:fc:ac: 0e:90:49:65:6a:76:71:c5:33:d7:49:c9:d4:9f:c2: 81:48:af:dd:b2:55:f3:ed:00:8a:46:2d:46:37:9c: 54:2c:12:62:bc:9b:bc:91:33:44:1b:fe:5b:f4:3b: e1:e1:0c:61:d7:53:da:66:b7:33:f9:c3:43:e3:40: 18:55:20:f3:31:4e:73:62:4a:a3:f4:aa:f3:4c:4c: f0:31:8e:99:a8:b9:ac:a4:0c:e1:a9:19:32:c3:98: 3c:2c:d9:22:42:42:a4:db:e4:c7:c5:3b:26:34:2a: 66:c6:82:83:92:51:8a:b2:7f:9e:97:c9:f2:c5:49: 2b:bf:49:4d:41:e0:64:ae:33:de:15:bf:6d:00:d6: fb:a0:78:51:35:b5:3a:1a:38:58:dc:2e:ce:cc:4f: 25:1c:89:21:1d:4c:ae:34:37:cd:5f:66:7b:2c:38: c8:90:4d:17:b1:e9:4d:9e:2f:ea:56:2d:f6:1f:7c: f4:80:4c:70:11:a4:d4:52:a6:7f:b8:3c:db:36:d9: 4d:49:bc:59:fb:29:e0:17:c8:9d:95:73:96:7a:16: d9:bd:fc:23:ea:66:d7:64:9b:5e:28:d3:2e:25:5f: c9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DA:9B:D8:3F:88:DE:FC:56:B5:47:8C:92:03:E0:35:49:38:C7:39 X509v3 Authority Key Identifier: keyid:1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:e9:7c:8f:27:a5:2e:86:43:ff:7d:51:b6:81:7e:75:11:03: 7e:4c:40:75:a6:e1:f1:92:19:7e:a1:ea:57:5a:d5:ff:d9:b7: 40:96:88:9a:ec:b7:6c:8a:65:1a:12:56:84:b3:8e:93:4f:69: b2:11:45:99:fe:5b:10:ec:5e:79:ae:bd:28:18:83:9f:9c:24: 7c:74:52:89:ed:93:6c:37:16:9d:a7:e7:38:86:12:ba:3f:8b: 38:12:b9:f6:3e:ff:36:77:e8:3c:e5:aa:d7:1d:f0:cc:29:61: 47:7d:76:60:c9:7b:5a:48:ed:05:90:b2:b9:39:e3:b3:1e:45: 87:00:90:a6:f2:64:7f:9f:40:bb:0f:f8:52:1a:fb:07:8e:c0: ca:6a:4e:07:55:eb:32:32:c6:88:8c:0f:b0:58:5d:f6:94:07: 9c:7d:74:54:24:c8:67:5a:b8:a6:ad:76:10:1e:02:2f:e8:41: bb:df:22:c4:3b:24:68:b4:61:b1:6b:ed:5e:ff:15:30:f7:04: d6:b5:9d:f9:43:3f:c7:3e:6c:02:cb:c3:58:ed:1d:b3:65:c1: aa:6e:94:e2:89:d2:ec:85:28:03:c5:d4:38:c2:c3:bf:6f:ae: f0:38:a1:2b:49:b9:b0:3b:6e:68:67:ca:38:ec:0b:59:9f:00: f8:38:78:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDfzDj1G436cVklqBUkW94Ux1B7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4 RjlEMDA3MTAeFw0yNjA5MjEwMDExNDlaFw0yNjA5MjIwMDQxNDlaMDMxMTAvBgNV BAMTKDdGREE5QkQ4M0Y4OERFRkM1NkI1NDc4QzkyMDNFMDM1NDkzOEM3MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwOrYwFTMZQxknLl9AUV39Iebt L042T5j6vin8rA6QSWVqdnHFM9dJydSfwoFIr92yVfPtAIpGLUY3nFQsEmK8m7yR M0Qb/lv0O+HhDGHXU9pmtzP5w0PjQBhVIPMxTnNiSqP0qvNMTPAxjpmouaykDOGp GTLDmDws2SJCQqTb5MfFOyY0KmbGgoOSUYqyf56XyfLFSSu/SU1B4GSuM94Vv20A 1vugeFE1tToaOFjcLs7MTyUciSEdTK40N81fZnssOMiQTRex6U2eL+pWLfYffPSA THARpNRSpn+4PNs22U1JvFn7KeAXyJ2Vc5Z6Ftm9/CPqZtdkm14o0y4lX8kJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf9qb2D+I3vxWtUeMkgPgNUk4xzkwHwYDVR0j BBgwFoAUHgwK2ApkHiiC+QJVQfttrI+dAHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgw QTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4RjlEMDA3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRTBDMEFEODBBNjQxRTI4ODJGOTAyNTU0MUZCNkRBQzhGOUQw MDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZE QUM4RjlEMDA3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAODpfI8npS6GQ/99UbaBfnURA35MQHWm4fGS GX6h6lda1f/Zt0CWiJrst2yKZRoSVoSzjpNPabIRRZn+WxDsXnmuvSgYg5+cJHx0 Uontk2w3Fp2n5ziGEro/izgSufY+/zZ36Dzlqtcd8MwpYUd9dmDJe1pI7QWQsrk5 47MeRYcAkKbyZH+fQLsP+FIa+weOwMpqTgdV6zIyxoiMD7BYXfaUB5x9dFQkyGda uKatdhAeAi/oQbvfIsQ7JGi0YbFr7V7/FTD3BNa1nflDP8c+bALLw1jtHbNlwapu lOKJ0uyFKAPF1DjCw79vrvA4oStJubA7bmhnyjjsC1mfAPg4eGE= -----END CERTIFICATE-----Generated at Mon Sep 21 16:32:43 2026 by rpki-client