$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft File: 1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft (raw, json) Hash identifier: dpQ/iMBOV6TPd6t2YQVWCPJJxzHfplQZ3XSLByTLdv8= Subject key identifier: 32:C5:F4:99:F2:CF:59:67:E2:F8:1B:4B:BF:49:B9:E5:8D:EC:CD:91 Authority key identifier: 1E:1A:C1:C9:B3:E6:7F:83:95:39:54:23:DA:2E:B2:6E:8E:69:1F:C1 Certificate issuer: /CN=1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1 Certificate serial: 40346106F0D6127E2B54CA1CB66A48FEA997672D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 14:18:03 +0000 Manifest this update: Fri 25 Sep 2026 14:13:03 +0000 Manifest next update: Sat 26 Sep 2026 14:52:03 +0000 Files and hashes: 1: 1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.crl (hash: DKGFq/gMsU8vH2CxyfUNnMuDcfP+YB0vAy+FaAppS/4=) 2: 3135372e36362e3234362e302f32332d3234203d3e20313532373630.roa (hash: m0f229ZhLX9SKvKbXbKHogZj70tOf+VKSr9KHdgMRls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.crl rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 14:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:34:61:06:f0:d6:12:7e:2b:54:ca:1c:b6:6a:48:fe:a9:97:67:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1 Validity Not Before: Sep 25 14:13:03 2026 GMT Not After : Sep 26 14:52:03 2026 GMT Subject: CN=32C5F499F2CF5967E2F81B4BBF49B9E58DECCD91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dc:15:48:43:8b:cf:4a:24:58:ec:89:a5:ed: e8:09:a0:d2:ad:a6:c0:ec:fc:23:4e:5c:09:11:87: e8:4d:b1:83:30:ee:2a:4a:18:92:91:f4:b3:71:75: ee:d2:7b:6f:f4:f4:9b:f4:23:e3:b7:49:9b:7a:18: 84:d5:38:bd:e8:19:39:98:d6:c1:1b:22:3a:3e:b8: b2:92:02:43:c0:17:79:a4:49:15:7b:8b:4d:f8:0f: db:9c:f7:ff:74:56:48:df:82:6a:0b:86:0b:99:7a: 3b:07:f4:66:6c:da:09:4b:44:3a:4c:51:66:1c:e2: b7:40:a9:69:56:64:c4:fb:e0:5f:4f:d7:23:79:5f: 11:51:24:0f:89:45:7c:e5:ff:cd:aa:d9:90:64:9d: d9:f8:a6:3e:2b:5e:67:31:a6:d9:88:d9:e5:98:e6: 6a:c0:f7:d2:5e:25:ef:e3:4c:b3:cb:3d:a0:ce:b6: e2:3f:00:21:a0:e5:6e:f7:2b:5f:ab:a4:1f:55:b1: 76:bb:e8:17:d2:3e:d9:74:a7:74:e9:93:be:91:7d: c5:ba:80:e1:7c:5c:5d:04:4b:6f:dc:cf:12:30:e4: 22:5e:79:6e:b8:64:cd:c4:8a:5e:71:09:e3:08:67: 90:1b:5f:50:cb:8d:4c:8b:c7:0f:05:a7:e2:7a:6f: ed:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C5:F4:99:F2:CF:59:67:E2:F8:1B:4B:BF:49:B9:E5:8D:EC:CD:91 X509v3 Authority Key Identifier: keyid:1E:1A:C1:C9:B3:E6:7F:83:95:39:54:23:DA:2E:B2:6E:8E:69:1F:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:07:d9:c6:4d:73:0c:37:ba:5d:8c:e4:15:0a:38:b9:18:90: 02:a8:d3:c6:3f:94:64:ec:4d:96:5b:7a:ec:18:24:5e:63:9c: 8f:f2:74:24:82:99:5a:2a:fb:1c:aa:f9:47:5e:39:80:b9:d2: 13:71:6c:42:84:b7:dd:9e:14:dc:43:d2:d0:a9:4c:c2:5d:12: 2c:63:97:4a:31:2d:42:5b:7b:62:00:d1:f5:37:06:e2:8d:6e: 19:b7:c3:c8:7a:e5:99:de:a1:d1:d1:f8:36:49:9f:df:79:6f: aa:83:8b:9b:e0:6e:56:7f:e8:e9:cc:79:20:c7:d4:20:e9:6f: 51:ba:ad:5a:96:73:7c:2a:bb:c7:a4:40:38:73:59:aa:93:44: c5:48:6f:1e:9c:c7:7b:63:43:67:11:89:97:f0:39:be:00:4f: af:ea:f5:2d:4d:9c:68:8d:d9:d2:db:9c:9a:f2:21:b1:7e:af: 1a:bb:13:bf:ab:b8:6d:02:48:58:f5:12:fe:b3:ea:09:ec:de: 01:cb:74:e4:ab:b9:ab:5b:4b:42:85:80:30:65:18:bc:46:76: a5:21:46:64:53:df:26:4b:46:8c:f6:d1:3b:9e:6d:3a:70:d7: dd:32:b9:77:d1:53:0e:eb:e4:a3:2a:2e:5d:7f:04:77:1e:80: 34:ad:97:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQDRhBvDWEn4rVMoctmpI/qmXZy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUxQUMxQzlCM0U2N0Y4Mzk1Mzk1NDIzREEyRUIyNkU4 RTY5MUZDMTAeFw0yNjA5MjUxNDEzMDNaFw0yNjA5MjYxNDUyMDNaMDMxMTAvBgNV BAMTKDMyQzVGNDk5RjJDRjU5NjdFMkY4MUI0QkJGNDlCOUU1OERFQ0NEOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83BVIQ4vPSiRY7Iml7egJoNKt psDs/CNOXAkRh+hNsYMw7ipKGJKR9LNxde7Se2/09Jv0I+O3SZt6GITVOL3oGTmY 1sEbIjo+uLKSAkPAF3mkSRV7i034D9uc9/90VkjfgmoLhguZejsH9GZs2glLRDpM UWYc4rdAqWlWZMT74F9P1yN5XxFRJA+JRXzl/82q2ZBkndn4pj4rXmcxptmI2eWY 5mrA99JeJe/jTLPLPaDOtuI/ACGg5W73K1+rpB9VsXa76BfSPtl0p3Tpk76RfcW6 gOF8XF0ES2/czxIw5CJeeW64ZM3Eil5xCeMIZ5AbX1DLjUyLxw8Fp+J6b+0zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMsX0mfLPWWfi+BtLv0m55Y3szZEwHwYDVR0j BBgwFoAUHhrBybPmf4OVOVQj2i6ybo5pH8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI3MmU1MjctNzI1Yi00OWUzLTg3NDMtYzc1M2RkMzM3OWUzLzAvMUUxQUMxQzlC M0U2N0Y4Mzk1Mzk1NDIzREEyRUIyNkU4RTY5MUZDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRTFBQzFDOUIzRTY3RjgzOTUzOTU0MjNEQTJFQjI2RThFNjkx RkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI3MmU1MjctNzI1Yi00OWUzLTg3 NDMtYzc1M2RkMzM3OWUzLzAvMUUxQUMxQzlCM0U2N0Y4Mzk1Mzk1NDIzREEyRUIy NkU4RTY5MUZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHoH2cZNcww3ul2M5BUKOLkYkAKo08Y/lGTs TZZbeuwYJF5jnI/ydCSCmVoq+xyq+UdeOYC50hNxbEKEt92eFNxD0tCpTMJdEixj l0oxLUJbe2IA0fU3BuKNbhm3w8h65ZneodHR+DZJn995b6qDi5vgblZ/6OnMeSDH 1CDpb1G6rVqWc3wqu8ekQDhzWaqTRMVIbx6cx3tjQ2cRiZfwOb4AT6/q9S1NnGiN 2dLbnJryIbF+rxq7E7+ruG0CSFj1Ev6z6gns3gHLdOSruatbS0KFgDBlGLxGdqUh RmRT3yZLRoz20TuebTpw190yuXfRUw7r5KMqLl1/BHcegDStl9c= -----END CERTIFICATE-----Generated at Sat Sep 26 06:28:08 2026 by rpki-client