$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft File: 13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft (raw, json) Hash identifier: Aeq8cKAAk9NSAj8hxvMu23pbPhwYQzLosBix1LuZlR4= Subject key identifier: C4:BD:17:AE:0D:9B:B4:D5:73:68:E7:2E:81:92:20:15:57:D5:9F:EF Authority key identifier: 13:C1:DB:8A:ED:E0:21:03:9F:FA:B8:4A:79:C8:E0:23:96:DE:5B:38 Certificate issuer: /CN=13C1DB8AEDE021039FFAB84A79C8E02396DE5B38 Certificate serial: 78F7FB18E2733207C15F991D52E1E611BA12D897 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 10:43:56 +0000 Manifest this update: Thu 24 Sep 2026 10:38:56 +0000 Manifest next update: Fri 25 Sep 2026 13:48:56 +0000 Files and hashes: 1: 3131332e3139322e302e302f32332d3233203d3e20313532303630.roa (hash: XU8Cud2VRf6M0JkESJsAHgOHQmX+Y9rjUkFbsFEd38g=) 2: 3131332e3139322e312e302f32342d3234203d3e20313532303630.roa (hash: jeO45G4cjQWLOJ3zrv9QzySKe/sGNsFGZNj2yoHSCWM=) 3: 3131332e3139322e302e302f32342d3234203d3e20313532303630.roa (hash: 0EkbgHKObrdTUBNawUOT3sTIwzdJX1zYj3Y5ETblK1o=) 4: 13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.crl (hash: 2OKwTK30Nv9OvCTChorH65ACjMBZiYeq4MpWSuSmyv8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.crl rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f7:fb:18:e2:73:32:07:c1:5f:99:1d:52:e1:e6:11:ba:12:d8:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13C1DB8AEDE021039FFAB84A79C8E02396DE5B38 Validity Not Before: Sep 24 10:38:56 2026 GMT Not After : Sep 25 13:48:56 2026 GMT Subject: CN=C4BD17AE0D9BB4D57368E72E8192201557D59FEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:32:76:76:4f:65:9b:5a:c8:98:09:b5:e8: 6b:bd:02:05:80:7e:2b:b2:b1:c8:c3:29:72:e0:91: 64:93:57:ad:65:db:75:59:58:49:6f:d7:c8:8a:04: d1:f2:99:c0:88:bf:8d:f8:eb:9e:1a:b5:9c:f6:22: 37:76:db:cd:b4:64:8c:29:fb:1f:68:8b:77:4e:24: 81:5d:5d:f1:53:67:f3:b8:ce:69:93:f7:be:ae:4f: 2d:c7:7f:89:05:3c:cf:c4:18:c9:d0:2d:dd:94:88: 99:99:95:a6:b1:78:cb:c1:eb:4a:bc:eb:bb:6f:d3: db:b6:c8:6d:4f:69:bd:a7:d7:75:6c:5f:f9:81:6d: b6:54:f7:41:b2:10:d8:71:7d:ab:73:71:bf:99:6c: 52:01:b2:60:b0:28:f0:37:bc:f0:27:cc:9f:11:f7: c0:ca:40:e2:9e:58:e8:79:ad:28:5f:c0:28:2e:aa: 94:cd:37:c6:6e:77:ee:56:f9:fe:dd:c6:d2:4a:77: 1c:28:c8:72:a5:dd:3f:03:be:1a:a5:2e:11:75:6c: 10:46:0c:fd:9a:03:6f:a9:68:23:bd:77:c1:3f:ad: 02:c3:cc:e0:a9:39:e9:a3:4d:72:03:c8:87:bc:3d: 62:85:22:f2:3b:3a:fc:05:ee:a0:16:96:14:de:1d: 0c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BD:17:AE:0D:9B:B4:D5:73:68:E7:2E:81:92:20:15:57:D5:9F:EF X509v3 Authority Key Identifier: keyid:13:C1:DB:8A:ED:E0:21:03:9F:FA:B8:4A:79:C8:E0:23:96:DE:5B:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:af:1c:29:36:5f:bf:21:ea:76:5b:aa:88:e6:6b:ff:7f:80: 09:2b:f3:58:df:0b:7c:04:c7:9c:19:8c:2e:5b:36:14:f4:3f: 57:ce:76:cc:1d:4a:fd:39:93:df:65:6c:7f:b3:60:76:9f:1c: 4b:b2:fd:f0:3c:be:01:c1:ce:90:ea:5f:15:e6:40:a9:fa:48: c2:3f:fd:76:44:bf:42:7b:d0:a6:a8:77:83:fc:e7:7f:20:d0: 9c:64:08:ce:38:c8:16:36:ad:76:95:87:f9:e7:b4:56:3b:0c: 49:6b:30:c3:04:d2:6f:29:bd:f5:16:de:db:d3:b1:1e:f9:15: ac:bf:33:80:73:90:e7:68:0d:ef:3e:37:54:50:50:62:c6:a2: a3:39:2c:bb:e1:cb:62:61:3e:fc:b3:a1:ec:3e:b6:77:6e:99: e6:9a:eb:7f:78:16:d3:bd:cf:a8:c4:0c:38:9c:6d:24:e6:b1: e9:0b:7d:eb:e1:0e:44:ee:19:f8:1e:24:df:f1:a8:e6:dc:12: 82:93:3a:5f:a7:69:03:16:e2:d2:75:8c:8b:09:a0:12:12:67: 77:0d:7b:44:b2:30:23:5d:76:da:38:96:06:da:33:7b:ce:d9: 0f:09:28:b8:c3:d5:03:25:cd:aa:8d:a7:0c:8b:6c:6b:26:74: 01:bf:4e:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUePf7GOJzMgfBX5kdUuHmEboS2JcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNDMURCOEFFREUwMjEwMzlGRkFCODRBNzlDOEUwMjM5 NkRFNUIzODAeFw0yNjA5MjQxMDM4NTZaFw0yNjA5MjUxMzQ4NTZaMDMxMTAvBgNV BAMTKEM0QkQxN0FFMEQ5QkI0RDU3MzY4RTcyRTgxOTIyMDE1NTdENTlGRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqjDJ2dk9lm1rImAm16Gu9AgWA fiuyscjDKXLgkWSTV61l23VZWElv18iKBNHymcCIv434654atZz2Ijd22820ZIwp +x9oi3dOJIFdXfFTZ/O4zmmT976uTy3Hf4kFPM/EGMnQLd2UiJmZlaaxeMvB60q8 67tv09u2yG1Pab2n13VsX/mBbbZU90GyENhxfatzcb+ZbFIBsmCwKPA3vPAnzJ8R 98DKQOKeWOh5rShfwCguqpTNN8Zud+5W+f7dxtJKdxwoyHKl3T8DvhqlLhF1bBBG DP2aA2+paCO9d8E/rQLDzOCpOemjTXIDyIe8PWKFIvI7OvwF7qAWlhTeHQz3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxL0Xrg2btNVzaOcugZIgFVfVn+8wHwYDVR0j BBgwFoAUE8Hbiu3gIQOf+rhKecjgI5beWzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzMyOGI0NzYtNjIyNC00ZTAxLWIxODYtODBiY2VjOWJjMGUzLzAvMTNDMURCOEFF REUwMjEwMzlGRkFCODRBNzlDOEUwMjM5NkRFNUIzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xM0MxREI4QUVERTAyMTAzOUZGQUI4NEE3OUM4RTAyMzk2REU1 QjM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzMyOGI0NzYtNjIyNC00ZTAxLWIx ODYtODBiY2VjOWJjMGUzLzAvMTNDMURCOEFFREUwMjEwMzlGRkFCODRBNzlDOEUw MjM5NkRFNUIzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOvHCk2X78h6nZbqojma/9/gAkr81jfC3wE x5wZjC5bNhT0P1fOdswdSv05k99lbH+zYHafHEuy/fA8vgHBzpDqXxXmQKn6SMI/ /XZEv0J70Kaod4P8538g0JxkCM44yBY2rXaVh/nntFY7DElrMMME0m8pvfUW3tvT sR75Fay/M4BzkOdoDe8+N1RQUGLGoqM5LLvhy2JhPvyzoew+tndumeaa6394FtO9 z6jEDDicbSTmsekLfevhDkTuGfgeJN/xqObcEoKTOl+naQMW4tJ1jIsJoBISZ3cN e0SyMCNddto4lgbaM3vO2Q8JKLjD1QMlzaqNpwyLbGsmdAG/Tjw= -----END CERTIFICATE-----Generated at Thu Sep 24 22:34:43 2026 by rpki-client