$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft File: 1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft (raw, json) Hash identifier: 7DihLiMiLSf9R/TtIgclMdLH+A2LQfiWTZ23GtLnNYs= Subject key identifier: 08:BC:82:89:38:A2:F5:4F:09:0F:2C:7F:73:6C:25:EB:F0:0F:A1:E6 Authority key identifier: 11:33:57:82:21:40:7D:A4:E6:D6:E1:F7:DD:BD:40:2A:D1:71:42:D1 Certificate issuer: /CN=1133578221407DA4E6D6E1F7DDBD402AD17142D1 Certificate serial: 5E4C0E740A1A018BB02E29AF56D7A365C9E110AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft Manifest number: BC Signing time: Mon 21 Sep 2026 04:32:16 +0000 Manifest this update: Mon 21 Sep 2026 04:27:16 +0000 Manifest next update: Tue 22 Sep 2026 05:40:16 +0000 Files and hashes: 1: 1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl (hash: fE4tqCMDY4PB6thXinidoEbuSUIoT7CLEO/v4lSX6XY=) 2: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: Zk2C8S3MwM5h7vXomg1WGWoihsk+uAiRDgp6DvLkrYk=) 3: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: oHCuH/wfD5uofyH9qDQzuSNonMRnW2BjZEpAbHvRcj0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:4c:0e:74:0a:1a:01:8b:b0:2e:29:af:56:d7:a3:65:c9:e1:10:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133578221407DA4E6D6E1F7DDBD402AD17142D1 Validity Not Before: Sep 21 04:27:16 2026 GMT Not After : Sep 22 05:40:16 2026 GMT Subject: CN=08BC828938A2F54F090F2C7F736C25EBF00FA1E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4c:e7:02:d2:56:e2:f0:81:a2:aa:98:ff:e2: 28:ea:b3:12:9e:9d:57:6a:c2:95:b8:e1:8d:38:49: 4f:72:dd:05:3f:66:78:09:ee:b9:0d:3d:92:74:21: ca:cc:da:76:61:7e:6c:c3:7b:b1:59:ed:15:ba:e5: 24:43:38:9e:1c:da:ac:8e:86:6b:cf:48:2b:da:a6: 2c:90:ba:e7:46:21:f3:58:bc:fa:1b:c4:d8:e3:e4: aa:57:88:f8:32:7f:03:54:1b:0c:69:c2:74:38:88: 6e:71:0a:76:4d:57:80:d6:ad:97:72:0f:42:23:9f: 25:fa:9f:f6:62:81:57:67:44:39:4b:6e:62:6d:a1: 16:fd:4f:03:cb:61:06:ee:12:90:05:ee:86:74:ca: 07:37:47:2c:17:db:88:55:14:68:10:e1:c7:33:c8: 1b:fb:0b:a3:63:22:9e:bb:89:0d:ba:c7:d7:63:7e: 24:41:fd:ce:d0:99:5e:3d:e4:1a:43:89:01:fc:75: a3:13:16:64:8c:57:72:6d:cd:4b:ab:2c:f3:38:3c: 38:64:f8:73:be:5b:7b:8e:a7:43:f6:60:ba:1e:40: 32:e4:a2:c9:7f:5a:d8:ef:cb:97:a1:89:de:4e:b2: 12:cd:a2:3f:56:e4:cc:22:93:42:47:9d:90:be:ae: 4a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BC:82:89:38:A2:F5:4F:09:0F:2C:7F:73:6C:25:EB:F0:0F:A1:E6 X509v3 Authority Key Identifier: keyid:11:33:57:82:21:40:7D:A4:E6:D6:E1:F7:DD:BD:40:2A:D1:71:42:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:fe:c6:42:82:78:9c:fc:df:7c:c5:a8:ca:11:a9:1c:4f:ca: ec:cf:30:de:5f:bb:23:59:b5:bc:a0:9e:0b:05:a7:76:c2:5a: 52:bc:21:56:8b:61:6a:53:ef:da:e3:93:20:b5:da:d9:5b:e5: 34:85:e7:67:2b:2c:39:38:02:76:21:98:41:16:28:3d:df:fc: 89:9a:87:ec:62:77:20:90:93:3c:9f:24:07:75:5f:f5:91:c8: 9a:94:75:bd:b6:53:5d:6d:79:e7:b6:b7:7a:4f:a9:ee:7d:65: 5c:88:3a:12:14:59:0a:b6:7e:fb:40:3c:bb:2a:6e:47:6f:03: 0e:08:2b:a0:63:52:14:ba:33:ed:22:4b:69:44:b6:89:ce:a3: 79:53:27:22:22:7b:08:f0:6e:f8:0a:c5:92:d2:b2:e2:73:c8: 26:34:b6:d4:c1:2b:78:9f:6f:5a:87:41:60:de:5e:69:11:5c: 17:4c:52:b4:3c:83:d4:5c:be:ec:e6:47:0a:bf:54:c2:31:ab: 06:9a:ff:0e:26:bc:af:f1:c1:29:33:ba:6e:2b:af:e9:65:39: 7a:f8:62:16:05:0e:c6:79:9a:ef:15:7d:fc:68:ce:4f:2a:76: 5d:5c:40:0f:6f:8d:63:06:88:80:a4:4e:84:bc:a1:9e:5d:78: ad:3d:97:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXkwOdAoaAYuwLimvVtejZcnhEK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzU3ODIyMTQwN0RBNEU2RDZFMUY3RERCRDQwMkFE MTcxNDJEMTAeFw0yNjA5MjEwNDI3MTZaFw0yNjA5MjIwNTQwMTZaMDMxMTAvBgNV BAMTKDA4QkM4Mjg5MzhBMkY1NEYwOTBGMkM3RjczNkMyNUVCRjAwRkExRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsTOcC0lbi8IGiqpj/4ijqsxKe nVdqwpW44Y04SU9y3QU/ZngJ7rkNPZJ0IcrM2nZhfmzDe7FZ7RW65SRDOJ4c2qyO hmvPSCvapiyQuudGIfNYvPobxNjj5KpXiPgyfwNUGwxpwnQ4iG5xCnZNV4DWrZdy D0IjnyX6n/ZigVdnRDlLbmJtoRb9TwPLYQbuEpAF7oZ0ygc3RywX24hVFGgQ4ccz yBv7C6NjIp67iQ26x9djfiRB/c7QmV495BpDiQH8daMTFmSMV3JtzUurLPM4PDhk +HO+W3uOp0P2YLoeQDLkosl/Wtjvy5ehid5OshLNoj9W5Mwik0JHnZC+rkoVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCLyCiTii9U8JDyx/c2wl6/APoeYwHwYDVR0j BBgwFoAUETNXgiFAfaTm1uH33b1AKtFxQtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZjMWY1MWEtODY0NS00ZWIxLWEyZmYtZTI3YzI0YzhlMGM4LzAvMTEzMzU3ODIy MTQwN0RBNEU2RDZFMUY3RERCRDQwMkFEMTcxNDJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTMzNTc4MjIxNDA3REE0RTZENkUxRjdEREJENDAyQUQxNzE0 MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvMTEzMzU3ODIyMTQwN0RBNEU2RDZFMUY3RERCRDQw MkFEMTcxNDJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAn+xkKCeJz833zFqMoRqRxPyuzPMN5fuyNZ tbygngsFp3bCWlK8IVaLYWpT79rjkyC12tlb5TSF52crLDk4AnYhmEEWKD3f/Ima h+xidyCQkzyfJAd1X/WRyJqUdb22U11teee2t3pPqe59ZVyIOhIUWQq2fvtAPLsq bkdvAw4IK6BjUhS6M+0iS2lEtonOo3lTJyIiewjwbvgKxZLSsuJzyCY0ttTBK3if b1qHQWDeXmkRXBdMUrQ8g9RcvuzmRwq/VMIxqwaa/w4mvK/xwSkzum4rr+llOXr4 YhYFDsZ5mu8Vffxozk8qdl1cQA9vjWMGiICkToS8oZ5deK09l+E= -----END CERTIFICATE-----Generated at Mon Sep 21 16:35:39 2026 by rpki-client