$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft File: 1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft (raw, json) Hash identifier: HP0nuBESuW3eb1Wn3BGNgOE9wNVcMU8Y5P0O5SeakUk= Subject key identifier: 08:E2:74:C6:DD:48:4C:DF:A8:F6:D9:46:A5:55:81:A6:16:28:1D:60 Authority key identifier: 1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92 Certificate issuer: /CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692 Certificate serial: 3332854545A9A380B7404B8511A0AD746EE9CA11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 14:09:05 +0000 Manifest this update: Mon 21 Sep 2026 14:04:05 +0000 Manifest next update: Tue 22 Sep 2026 16:28:05 +0000 Files and hashes: 1: 1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl (hash: vt4PpzOGPEwaE3ZP59mDTerHdJhyd2eDmd4wZsPSbbY=) 2: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: OElnQGjywIal+TKkNzEv0fSQqUAS10jHhU+dlj8V8js=) 3: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: Nk1xhHZXV5Jyg1FLRsoF8BjuMkVYDKCRPbEV62yPbSM=) 4: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: PTvRAn9wK3M28ze+u03Jb/fa1WyNAdR/8RUqE31KU0c=) 5: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: YBDSZRtlV3p/ZiGWn3MdsKVwu9Di7caAjGBDoupE+PI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 16:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:32:85:45:45:a9:a3:80:b7:40:4b:85:11:a0:ad:74:6e:e9:ca:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692 Validity Not Before: Sep 21 14:04:05 2026 GMT Not After : Sep 22 16:28:05 2026 GMT Subject: CN=08E274C6DD484CDFA8F6D946A55581A616281D60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fe:14:49:94:ee:a6:77:79:d6:b9:a8:ec:6f: 54:8f:f2:bb:63:a4:36:c1:d3:7f:de:ce:2a:66:47: 2d:8a:9c:52:44:50:9d:40:d2:e6:64:2a:ea:d1:37: 60:c7:f2:4b:13:96:b5:28:5f:81:b0:2c:98:22:4e: a6:70:5b:36:95:b1:48:75:2b:10:c3:64:3e:72:b8: 31:a0:4d:e5:76:fc:e9:ae:4e:db:02:3c:46:0c:eb: 83:df:6d:c1:01:30:19:f5:81:77:b8:f6:62:2a:b4: fe:52:b9:d7:57:7b:00:5e:b6:85:0f:57:9a:f1:97: af:05:30:02:48:51:92:9d:fb:08:a1:51:5b:86:9a: fa:58:b6:06:bf:e3:88:3d:ef:66:91:1a:eb:86:6d: 4f:c0:95:a6:2b:98:a5:e6:c6:51:be:a4:4c:61:fd: ae:34:19:ca:d0:f5:c6:20:39:64:fe:8f:31:9d:dd: a5:10:3b:df:ed:c1:34:15:12:cd:8e:0e:ec:b9:12: 5b:f6:3b:49:c8:d0:96:64:bc:cd:bf:69:82:41:15: fc:87:12:6a:f0:a2:c4:5d:5f:6f:93:b0:35:12:86: f3:b7:93:c4:d4:22:a8:3e:34:89:03:a5:77:4a:4d: 18:fb:3b:2c:1a:d3:f8:0a:ce:00:f3:c0:45:b9:9b: 07:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E2:74:C6:DD:48:4C:DF:A8:F6:D9:46:A5:55:81:A6:16:28:1D:60 X509v3 Authority Key Identifier: keyid:1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:3c:f5:b2:9d:5e:c3:e7:b1:84:ef:e2:9b:d2:64:f5:76:a5: 16:08:a3:1c:c0:3d:77:97:83:d9:8d:87:80:38:03:f1:22:ec: 80:b7:52:10:31:d2:59:ed:c9:97:21:2f:79:56:b7:e6:39:e3: 33:6d:7d:3d:96:3a:d4:67:4b:c4:5d:36:1b:35:9b:01:50:b7: 47:55:3a:68:ef:b4:89:30:68:c1:40:29:89:81:93:d4:81:af: 92:84:d1:f0:a7:b9:c3:58:f2:fa:a1:7a:90:b1:ff:ac:40:39: 89:1c:5b:ba:be:23:f7:47:4d:9b:59:7b:11:cd:5f:65:79:e8: 1b:be:42:1e:b6:ed:ab:b1:09:68:a5:42:f3:20:5c:a2:3f:22: 8e:5b:e1:e5:5c:54:9e:6c:6b:cc:fc:27:74:33:60:0d:4e:c2: 95:e9:4b:d9:f8:44:83:fd:a8:e7:e1:84:41:4c:95:c3:ce:d2: c2:49:43:cd:a6:25:eb:bf:02:4a:9d:81:ff:29:84:01:13:ce: 6b:d5:76:6a:f4:f6:d6:d4:df:30:76:76:52:7e:92:c6:4d:c6: ae:98:ec:86:8d:d9:30:eb:a5:e8:56:b1:fa:35:31:0b:41:ca: 23:42:04:cd:06:07:61:52:e2:82:12:e7:50:25:34:cf:41:b9: 0e:1f:36:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMzKFRUWpo4C3QEuFEaCtdG7pyhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBQTkzN0EyMzZENEFEQTM2RDlBQ0RGODhGM0IwN0Mx QUZGRTY5MjAeFw0yNjA5MjExNDA0MDVaFw0yNjA5MjIxNjI4MDVaMDMxMTAvBgNV BAMTKDA4RTI3NEM2REQ0ODRDREZBOEY2RDk0NkE1NTU4MUE2MTYyODFENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj/hRJlO6md3nWuajsb1SP8rtj pDbB03/ezipmRy2KnFJEUJ1A0uZkKurRN2DH8ksTlrUoX4GwLJgiTqZwWzaVsUh1 KxDDZD5yuDGgTeV2/OmuTtsCPEYM64PfbcEBMBn1gXe49mIqtP5SuddXewBetoUP V5rxl68FMAJIUZKd+wihUVuGmvpYtga/44g972aRGuuGbU/AlaYrmKXmxlG+pExh /a40GcrQ9cYgOWT+jzGd3aUQO9/twTQVEs2ODuy5Elv2O0nI0JZkvM2/aYJBFfyH EmrwosRdX2+TsDUShvO3k8TUIqg+NIkDpXdKTRj7Oywa0/gKzgDzwEW5mwc1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCOJ0xt1ITN+o9tlGpVWBphYoHWAwHwYDVR0j BBgwFoAUHqqTeiNtSto22azfiPOwfBr/5pIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY4ODUxZTUtZWU1Yi00MWUxLTlhYmMtNDQyNjUxZDI3Mjk0LzAvMUVBQTkzN0Ey MzZENEFEQTM2RDlBQ0RGODhGM0IwN0MxQUZGRTY5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUFBOTM3QTIzNkQ0QURBMzZEOUFDREY4OEYzQjA3QzFBRkZF NjkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvMUVBQTkzN0EyMzZENEFEQTM2RDlBQ0RGODhGM0Iw N0MxQUZGRTY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFA89bKdXsPnsYTv4pvSZPV2pRYIoxzAPXeX g9mNh4A4A/Ei7IC3UhAx0lntyZchL3lWt+Y54zNtfT2WOtRnS8RdNhs1mwFQt0dV OmjvtIkwaMFAKYmBk9SBr5KE0fCnucNY8vqhepCx/6xAOYkcW7q+I/dHTZtZexHN X2V56Bu+Qh627auxCWilQvMgXKI/Io5b4eVcVJ5sa8z8J3QzYA1OwpXpS9n4RIP9 qOfhhEFMlcPO0sJJQ82mJeu/Akqdgf8phAETzmvVdmr09tbU3zB2dlJ+ksZNxq6Y 7IaN2TDrpehWsfo1MQtByiNCBM0GB2FS4oIS51AlNM9BuQ4fNr0= -----END CERTIFICATE-----Generated at Tue Sep 22 07:10:06 2026 by rpki-client