$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft File: C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft (raw, json) Hash identifier: mI7uK+8/6fWkbbLkmBj0xO2cswCsFEFZH6O19/7EobU= Subject key identifier: FB:F7:1F:0B:CE:B2:95:3F:56:F2:2A:88:E8:8C:FD:E2:E0:34:86:A0 Authority key identifier: C1:D5:CA:CB:28:69:A4:50:74:AA:2E:EF:0A:AF:44:0A:04:3D:57:8A Certificate issuer: /CN=C1D5CACB2869A45074AA2EEF0AAF440A043D578A Certificate serial: 5AEB4EA76447C0344581E8FF284E7DEEC891D2FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft Manifest number: BE Signing time: Mon 21 Sep 2026 01:43:37 +0000 Manifest this update: Mon 21 Sep 2026 01:38:37 +0000 Manifest next update: Tue 22 Sep 2026 03:57:37 +0000 Files and hashes: 1: C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl (hash: xnH7TCkJawXswk3ZKFbmEI6yfdT1LrLm7xqIMh2U9yU=) 2: 3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa (hash: e/a2UZPUi40DIwFDiEkD+J2tqAc+iu6pnL0srTkWawk=) 3: 3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa (hash: /H7mHY2xJ6jF9zjh/SzqcS82iVWznIKFIdaRtKBLuXI=) 4: 3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa (hash: LmAAYXQDd7PTPcaMEiTttR5qd67toE25WQOCNYRTLdg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:eb:4e:a7:64:47:c0:34:45:81:e8:ff:28:4e:7d:ee:c8:91:d2:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1D5CACB2869A45074AA2EEF0AAF440A043D578A Validity Not Before: Sep 21 01:38:37 2026 GMT Not After : Sep 22 03:57:37 2026 GMT Subject: CN=FBF71F0BCEB2953F56F22A88E88CFDE2E03486A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:81:84:c2:ac:c5:1c:b6:18:fc:b9:eb:da:e0: 14:c1:b1:2b:bc:96:ff:d2:f6:b9:fb:bb:a7:a3:6e: 20:6c:e4:6e:7e:65:cf:2c:85:35:27:5c:cb:11:4a: b6:ca:43:59:5d:e8:8e:d5:4b:16:e6:48:aa:a3:b2: 0b:72:34:70:1f:35:a6:91:ed:78:d0:65:76:32:46: 1d:c2:dd:3d:be:c3:17:a1:f5:3d:57:09:11:03:51: b0:c3:b0:00:56:5e:08:64:f1:08:6c:d6:59:5a:36: 3a:f4:11:86:8e:e5:04:3a:f7:43:fd:c5:a4:a4:31: 52:5c:12:0c:22:ff:c6:e0:07:ee:1a:4b:6e:86:74: 17:55:33:65:f1:30:1b:da:08:32:1e:26:78:2d:2d: 9a:ff:71:15:62:de:57:2f:16:51:61:74:8c:ab:48: 77:e6:46:8d:0b:3e:44:9e:e1:40:bd:19:fb:a3:f8: 2c:27:f6:84:3d:dc:e3:04:59:0e:e5:10:76:b4:9a: 5f:51:f1:5a:8f:11:9b:57:7d:e4:94:32:91:ce:47: fa:c7:4d:de:8f:22:d9:b3:cb:19:4d:84:9a:98:6e: a7:90:40:61:4f:00:14:a7:33:6f:0a:b2:96:3f:2b: c4:50:e2:d3:fd:31:00:b3:a0:f1:6f:07:e2:4b:a1: 22:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F7:1F:0B:CE:B2:95:3F:56:F2:2A:88:E8:8C:FD:E2:E0:34:86:A0 X509v3 Authority Key Identifier: keyid:C1:D5:CA:CB:28:69:A4:50:74:AA:2E:EF:0A:AF:44:0A:04:3D:57:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:23:60:01:8d:82:6b:91:07:5a:43:2a:28:e2:bf:ab:8e:b6: 19:fa:a1:3c:fb:d7:c6:c2:b2:72:c7:c9:65:46:cc:52:4a:e1: fe:e7:3c:34:99:c9:6d:9c:24:cd:40:04:3e:70:45:f2:15:6d: 38:86:19:36:8f:4a:c1:61:e9:f1:17:9e:eb:ba:05:5a:ea:03: 3f:89:c8:4b:e8:ef:35:5f:4a:1d:e1:be:8a:10:c7:6d:20:3f: c7:18:12:58:9b:3b:f9:54:4c:0d:ea:65:cd:21:20:8b:65:ed: cc:d1:50:f8:dc:6f:c9:bb:c6:7a:28:dc:0e:86:da:8c:87:df: 0a:83:88:ea:7f:ba:40:a4:24:8d:22:fc:93:82:f3:13:a8:96: 68:ac:9b:6b:a6:3f:93:fa:f9:c6:8e:f2:6c:50:82:15:2d:74: 9e:28:6b:77:4f:02:e7:da:44:c3:e2:04:03:6f:7c:f1:af:fd: bc:73:1a:6e:aa:dd:37:80:06:af:ad:31:fa:5d:93:bf:77:69: 10:e1:82:ce:16:1e:5e:03:5f:88:09:d6:52:4d:02:bb:f5:42: 03:19:b2:71:ec:c7:93:97:af:b6:48:b1:bf:da:6b:1a:c7:69: 40:d9:ab:c2:0a:6e:05:e8:d2:5a:65:fa:db:df:f2:39:9e:db: 2a:e6:4a:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWutOp2RHwDRFgej/KE597siR0v8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFENUNBQ0IyODY5QTQ1MDc0QUEyRUVGMEFBRjQ0MEEw NDNENTc4QTAeFw0yNjA5MjEwMTM4MzdaFw0yNjA5MjIwMzU3MzdaMDMxMTAvBgNV BAMTKEZCRjcxRjBCQ0VCMjk1M0Y1NkYyMkE4OEU4OENGREUyRTAzNDg2QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdgYTCrMUcthj8ueva4BTBsSu8 lv/S9rn7u6ejbiBs5G5+Zc8shTUnXMsRSrbKQ1ld6I7VSxbmSKqjsgtyNHAfNaaR 7XjQZXYyRh3C3T2+wxeh9T1XCREDUbDDsABWXghk8Qhs1llaNjr0EYaO5QQ690P9 xaSkMVJcEgwi/8bgB+4aS26GdBdVM2XxMBvaCDIeJngtLZr/cRVi3lcvFlFhdIyr SHfmRo0LPkSe4UC9Gfuj+Cwn9oQ93OMEWQ7lEHa0ml9R8VqPEZtXfeSUMpHOR/rH Td6PItmzyxlNhJqYbqeQQGFPABSnM28KspY/K8RQ4tP9MQCzoPFvB+JLoSJLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+/cfC86ylT9W8iqI6Iz94uA0hqAwHwYDVR0j BBgwFoAUwdXKyyhppFB0qi7vCq9ECgQ9V4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmNzUwODgtMDg4ZS00MWMwLWJmY2UtZWRjNjliZWFmZDRhLzAvQzFENUNBQ0Iy ODY5QTQ1MDc0QUEyRUVGMEFBRjQ0MEEwNDNENTc4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMUQ1Q0FDQjI4NjlBNDUwNzRBQTJFRUYwQUFGNDQwQTA0M0Q1 NzhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNmNzUwODgtMDg4ZS00MWMwLWJm Y2UtZWRjNjliZWFmZDRhLzAvQzFENUNBQ0IyODY5QTQ1MDc0QUEyRUVGMEFBRjQ0 MEEwNDNENTc4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYjYAGNgmuRB1pDKijiv6uOthn6oTz718bC snLHyWVGzFJK4f7nPDSZyW2cJM1ABD5wRfIVbTiGGTaPSsFh6fEXnuu6BVrqAz+J yEvo7zVfSh3hvooQx20gP8cYElibO/lUTA3qZc0hIItl7czRUPjcb8m7xnoo3A6G 2oyH3wqDiOp/ukCkJI0i/JOC8xOolmism2umP5P6+caO8mxQghUtdJ4oa3dPAufa RMPiBANvfPGv/bxzGm6q3TeABq+tMfpdk793aRDhgs4WHl4DX4gJ1lJNArv1QgMZ snHsx5OXr7ZIsb/aaxrHaUDZq8IKbgXo0lpl+tvf8jme2yrmSuo= -----END CERTIFICATE-----Generated at Mon Sep 21 06:22:46 2026 by rpki-client